last executing test programs: 26m46.377506201s ago: executing program 32 (id=3): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) open(&(0x7f0000000280)='./file0\x00', 0x2a000, 0x32) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x420, 0x0, 0x330, 0x260, 0x190, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x15c}}, 0x10) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0xa8c40) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000180)={0x1, @pix={0x1, 0x4982, 0x56595559, 0x0, 0xffff, 0x3, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000bc0)="18693418ffc53411f397e9e485c5909910d80b53437b0c937704406fcef9ae2497063aa68d367a46461c92c1a29ad612996313803dae33a5c9bbad6c78ad62113a4f6dd637861b7512d3b30d2b4049772b611d1db5ab29cc436e490e190fc866dbf8bf8d9d7996eef3fb4b4ea22fb4fd0d57546f8945e44eebe9bae5db4a95cdfa4fbed32ed041cfe99eb48a3170d36856fb1b3701f6be7a51bc32b5ab62b1c104ccfe954b8bbc917414531d2e2a142918801fcd5c9d11feecc8c7e40afb88d977", 0xc1}], 0x1) 26m41.962561441s ago: executing program 33 (id=7): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000440)=""/162, 0xa2}], 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x0, 0x1e4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26m37.917191023s ago: executing program 34 (id=9): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 26m37.439402736s ago: executing program 35 (id=10): socket$kcm(0x10, 0x2, 0x0) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0xfffffffff000, 0x3, &(0x7f0000ffc000/0x4000)=nil) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x100, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x90) fchdir(r3) open(&(0x7f0000000100)='./bus\x00', 0x1031c2, 0x20) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000"], 0x0) mlock(&(0x7f0000c82000/0x4000)=nil, 0x4000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62abc3f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_clone3(0x0, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @multicast}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r7}, 0x38) syz_usb_control_io$sierra_net(r4, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000340)=ANY=[], &(0x7f00000002c0)={0x0, 0x0, 0xc2, &(0x7f0000000700)=ANY=[], 0x3, [{0x50, &(0x7f0000000700)=ANY=[]}, {0x0, 0x0}, {0x0, 0x0}]}) 22m24.052858897s ago: executing program 36 (id=88): socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r2 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x714000, 0x1000, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 17m26.364906692s ago: executing program 37 (id=243): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) unshare(0x6020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 11m47.491325615s ago: executing program 2 (id=410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x24040884) 11m46.918983583s ago: executing program 2 (id=411): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a8"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 11m46.278652401s ago: executing program 2 (id=412): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xfffffe1a, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, &(0x7f0000000100)) 11m42.888032045s ago: executing program 2 (id=414): socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$video(0x0, 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 11m30.791515006s ago: executing program 2 (id=418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000000)="f058050000007f8e", 0x8}], 0x2}, 0x5) 11m28.999317173s ago: executing program 2 (id=420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x80000, 0xfffffffb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="726177004000000000000000000000000000000000000000000000000000200002002b05065ea79bed2ccaa948000000000000000000000000000000000000000000000000000000000000000b0000009baab968fd5fe872fb000000790533484a0d853673067dbbaa4ae4221bc1d4a8d9d83b40720c1f7b71a2e952b10b0fdac86ec4f859d774d800ff60a613bb74cc38d3ea981f4936a431fc5a27c163f2fd745885e84d825d6d6a4adc5f9916bb633b060d19b7e2e3f9ebe5fb9ed453b3df"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0x1100, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x40, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0xfffffffffffffffc, 0x8, 0x800000000000000}}, [@algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}]}, 0x1100}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000001, 0x0, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r6 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r6, &(0x7f00000003c0)=""/159, 0x9f, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$tipc(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) 11m11.643926917s ago: executing program 38 (id=420): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x80000, 0xfffffffb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="726177004000000000000000000000000000000000000000000000000000200002002b05065ea79bed2ccaa948000000000000000000000000000000000000000000000000000000000000000b0000009baab968fd5fe872fb000000790533484a0d853673067dbbaa4ae4221bc1d4a8d9d83b40720c1f7b71a2e952b10b0fdac86ec4f859d774d800ff60a613bb74cc38d3ea981f4936a431fc5a27c163f2fd745885e84d825d6d6a4adc5f9916bb633b060d19b7e2e3f9ebe5fb9ed453b3df"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)=@updpolicy={0x1100, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@local, 0x40, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0xfffffffffffffffc, 0x8, 0x800000000000000}}, [@algo_comp={0x1048, 0x3, {{'deflate\x00'}, 0x8000, "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"}}]}, 0x1100}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x10000001, 0x0, 0x32315559, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r6 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pread64(r6, &(0x7f00000003c0)=""/159, 0x9f, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) bind$tipc(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) 10m23.773324686s ago: executing program 5 (id=13): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) open(&(0x7f0000000280)='./file0\x00', 0x2a000, 0x32) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0xb56e2e3f2d9728b3, 0x8, 0x8001, 0x0, 0x9, 0x100000003, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f80)=@mangle={'mangle\x00', 0x2, 0x6, 0x5c0, 0x420, 0x0, 0x330, 0x260, 0x190, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0xff000000, 0xffffffff, 0xff000000, 0xffffff00], [], 0x0, 0x886}}, @common=@inet=@dccp={{0x30}, {[0x4e21, 0x4e24], [0x4e23, 0x4e24], 0xd, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'sit0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@empty, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x50, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x15c}}, 0x10) r3 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0xa8c40) ioctl$VIDIOC_S_FMT(r3, 0xc0d05640, &(0x7f0000000180)={0x1, @pix={0x1, 0x4982, 0x56595559, 0x0, 0xffff, 0x3, 0x3, 0xfeedcafe, 0x0, 0x0, 0x0, 0x5}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000bc0)="18693418ffc53411f397e9e485c5909910d80b53437b0c937704406fcef9ae2497063aa68d367a46461c92c1a29ad612996313803dae33a5c9bbad6c78ad62113a4f6dd637861b7512d3b30d2b4049772b611d1db5ab29cc436e490e190fc866dbf8bf8d9d7996eef3fb4b4ea22fb4fd0d57546f8945e44eebe9bae5db4a95cdfa4fbed32ed041cfe99eb48a3170d36856fb1b3701f6be7a51bc32b5ab62b1c104ccfe954b8bbc917414531d2e2a142918801fcd5c9d11feecc8c7e40afb88d977", 0xc1}], 0x1) 10m12.408279459s ago: executing program 9 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10m10.602731671s ago: executing program 5 (id=449): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd", @ANYRES32=0x0, @ANYBLOB="08b0010006820000400012800b0001006272696467650000300002800c002200000000040000000005002400010000000600080088a8"], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 10m8.707404535s ago: executing program 5 (id=451): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r0, &(0x7f00000012c0), 0x0) 10m7.34040196s ago: executing program 5 (id=453): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 10m3.178764794s ago: executing program 5 (id=455): socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$video(0x0, 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 10m1.282997791s ago: executing program 39 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9m58.598743775s ago: executing program 8 (id=459): ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) 9m57.079955868s ago: executing program 40 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c) r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 9m57.041979142s ago: executing program 8 (id=462): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m54.903055648s ago: executing program 8 (id=464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800"], 0x9c}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 9m51.145251951s ago: executing program 8 (id=465): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket(0xa, 0x5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r5}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) r8 = syz_pidfd_open(r0, 0x0) setns(r8, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) 9m47.337374496s ago: executing program 41 (id=455): socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$video(0x0, 0x3, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) 9m43.984414697s ago: executing program 8 (id=467): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000180)) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r1 = inotify_init() syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x2010, r0, 0xffff9000) 9m41.651332902s ago: executing program 8 (id=468): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 9m25.80879321s ago: executing program 42 (id=468): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 8m0.415227304s ago: executing program 1 (id=512): socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_audit(0x10, 0x3, 0x9) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x6d}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r2, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 7m54.374380822s ago: executing program 0 (id=514): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 7m49.382375393s ago: executing program 0 (id=517): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x6, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x5, 0x5, 0x0, {0x5, 0x0, 0x48b, 0x7, 0x400000000000027, 0xd, 0xfff7ffff, 0x6, 0x4101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 7m48.70626909s ago: executing program 1 (id=518): socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/206, &(0x7f0000000080)=0xce) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000140)}}], 0x1, 0x24044015) 7m48.102603774s ago: executing program 0 (id=520): epoll_create1(0x0) socket$kcm(0x10, 0x2, 0x0) add_key(&(0x7f0000000440)='dns_resolver\x00', 0x0, &(0x7f00000004c0)="a079394a04954e2d1523cd274d954f18a7b1235d2023e670955c12e7265fa97c2cfb7ba5f67d4a0f06d00c089c2dbb7034ddf203c4f50b4d19d6ab0b49d345571461f3c9bc2be016252397574e61cd9b5fc6337f92b077112e9d69d5f0d761e584bd5f7a22aa334740193d174c89a6670c1c0a98533ebffcb043f72e876d30dc59", 0x81, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500000601003c0012800b000100697036746e6c00002c000280140003000000000000000000000000000000003f14000200ff"], 0x5c}, 0x1, 0x0, 0x0, 0x4040880}, 0x24000000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000002cc0)=ANY=[], 0x40}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001280)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004600000076000000db98000000000000b5080000000000008500000007000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m44.789574977s ago: executing program 0 (id=522): r0 = gettid() r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) read$FUSE(r1, &(0x7f0000001b40)={0x2020}, 0x205c) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000240)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x37, 0x1, 0x70bd25, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x151f80, 0x1ef) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c380)={0x2020}, 0x2020) 7m44.588985325s ago: executing program 1 (id=523): r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m43.819919061s ago: executing program 1 (id=525): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c00000010004b0429bd7000faffffff7a000000", @ANYRES32=0x0, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 7m42.950902849s ago: executing program 0 (id=526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) r0 = socket(0xa, 0x5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r6}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r9 = syz_pidfd_open(r1, 0x0) setns(r9, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) 7m42.864995125s ago: executing program 1 (id=527): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0) unshare(0x6020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x20040800) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_open_dev$vim2m(0x0, 0x3, 0x2) syz_open_procfs(0x0, 0x0) 7m41.18850213s ago: executing program 1 (id=529): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0x0, 0x48850, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) 7m39.681275544s ago: executing program 0 (id=530): r0 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0x0, 0x0, 0x8000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="0180c200000201805900000088fb"], 0x0) 7m30.684583055s ago: executing program 6 (id=533): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000001480)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r1, 0x12) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x77}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) 7m25.542898874s ago: executing program 43 (id=529): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xf8) sendto$unix(r2, 0x0, 0x0, 0x48850, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r5, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) 7m24.036987602s ago: executing program 44 (id=530): r0 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0x0, 0x0, 0x8000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="0180c200000201805900000088fb"], 0x0) 7m18.517240056s ago: executing program 6 (id=549): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0xb, 0x3) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 7m11.704738383s ago: executing program 6 (id=557): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000001480)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r1, 0x12) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x77}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) 7m3.053803117s ago: executing program 6 (id=563): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x0, 0x5, 0x2, "b5eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) 6m58.541727655s ago: executing program 6 (id=565): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34414e40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r4, &(0x7f00000004c0), 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000100)='%pB \x00'}, 0x20) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e000000050000000f0000000400000000100000", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYRES32=r6, @ANYBLOB="0300000002000000030000000f00"/24], 0x50) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 6m56.717034832s ago: executing program 3 (id=566): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)={0x0, 0x5, 0x1, "b5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 6m54.026855272s ago: executing program 3 (id=567): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb628678", 0x1e) 6m53.058369339s ago: executing program 3 (id=568): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x471}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 6m51.797746776s ago: executing program 3 (id=569): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x200000, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x6, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb09e3c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x100000000, {0x5, 0x5, 0x0, {0x5, 0x0, 0x48b, 0x7, 0x400000000000027, 0xd, 0xfff7ffff, 0x6, 0x4101, 0x4000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 6m51.249586456s ago: executing program 3 (id=570): syz_emit_ethernet(0x2ce, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140), 0x0) 6m50.596066726s ago: executing program 3 (id=571): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000001480)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r1, 0x12) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x77}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) 6m50.532256857s ago: executing program 6 (id=572): r0 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0x0, 0x0, 0x8000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="0180c200000201805900000088fb"], 0x0) 6m35.160936084s ago: executing program 45 (id=571): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000001480)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r1, 0x12) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f00000000c0)={0x0, 0x77}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r2, 0x0) 6m34.732744646s ago: executing program 46 (id=572): r0 = add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0x0, 0x0, 0x8000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x14, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x30314442}) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8000, 0x0, 0x0, 0x0, 0x33, 0x40, 0x0, 0xe4}) syz_emit_ethernet(0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="0180c200000201805900000088fb"], 0x0) 2m43.889945847s ago: executing program 4 (id=677): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRES16, @ANYBLOB="010029bd7200000000", @ANYBLOB="10005a800c130000400017c6c3b0000000000000f392e5eabc984aa94b05f432d0245c89a4e83c795d1b6e213921e89ff0cb0ad3e8ac7b0618edfb6aa7ddd37c8d0ffc53635da8f3c04d2453a6a33797b83bca4adc066f673e45a4"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fcntl$setown(r3, 0x8, r2) 2m39.783156442s ago: executing program 4 (id=678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket(0xa, 0x5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) 2m36.972225713s ago: executing program 4 (id=679): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) 2m36.293161365s ago: executing program 4 (id=680): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r0 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 2m35.443070593s ago: executing program 4 (id=681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESDEC]) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x30000010}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r5 = add_key$user(&(0x7f0000000040), &(0x7f0000002840)={'syz', 0x2}, &(0x7f00000011c0)="f40f", 0x2, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001340)={r5, r4, r4}, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000001c0)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m26.24379426s ago: executing program 4 (id=683): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x0, 0x1e4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m10.205684557s ago: executing program 47 (id=683): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x0, 0x1e4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 13.347383247s ago: executing program 7 (id=738): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) 10.270852678s ago: executing program 7 (id=739): creat(0x0, 0xecf86c37d53049cc) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x471}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x3}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00008e5000/0x400000)=nil) 8.413468961s ago: executing program 7 (id=740): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000003c0)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) r2 = open(0x0, 0xc2802, 0x181) ftruncate(r2, 0x2008002) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, 0x0, 0x40) listen(0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x40) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) recvmmsg(r4, 0x0, 0x0, 0x40012100, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 7.075474522s ago: executing program 7 (id=741): openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32], 0x48) io_uring_enter(r0, 0x2219, 0x771e, 0x16, 0x0, 0x0) 6.638100693s ago: executing program 7 (id=742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket(0xa, 0x5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) r5 = syz_pidfd_open(r0, 0x0) setns(r5, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): ut [ 1583.201147][ T9964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1583.230299][ T9964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1583.298042][ T9964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1583.321960][ T9964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1583.356836][ T9964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1583.423120][T10731] team0 (unregistering): Port device team_slave_1 removed [ 1583.598392][T10731] team0 (unregistering): Port device team_slave_0 removed [ 1583.908311][T12373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1584.727913][T12300] chnl_net:caif_netlink_parms(): no params data found [ 1584.901401][T10275] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1584.915274][T10275] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1584.925400][T10275] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1584.949234][T10275] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1584.962994][T10275] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1585.441809][ T9964] Bluetooth: hci3: command tx timeout [ 1585.919930][T12284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.031085][T12284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1586.038921][T12284] bridge_slave_0: entered allmulticast mode [ 1586.104843][T12284] bridge_slave_0: entered promiscuous mode [ 1586.170971][T12284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.200875][T12284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.210007][T12284] bridge_slave_1: entered allmulticast mode [ 1586.262287][T12284] bridge_slave_1: entered promiscuous mode [ 1587.027479][T12284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.040692][ T9964] Bluetooth: hci6: command tx timeout [ 1587.270684][T12284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.490933][T10731] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.534149][ T9964] Bluetooth: hci3: command tx timeout [ 1587.966269][T10731] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.619896][T12284] team0: Port device team_slave_0 added [ 1588.678617][T12284] team0: Port device team_slave_1 added [ 1588.768385][T10731] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.969537][T12300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.991569][T12300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.013612][T12300] bridge_slave_0: entered allmulticast mode [ 1589.052347][T12300] bridge_slave_0: entered promiscuous mode [ 1589.085496][T12300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.116289][T12300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.124187][ T9964] Bluetooth: hci6: command tx timeout [ 1589.161286][T12300] bridge_slave_1: entered allmulticast mode [ 1589.191806][T12300] bridge_slave_1: entered promiscuous mode [ 1589.387106][T10731] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1589.603166][ T9964] Bluetooth: hci3: command tx timeout [ 1589.642040][T12284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.649221][T12284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.720675][T12284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.760084][T12284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.830891][T12284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.880957][T12284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1590.359640][T12300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.665676][T12300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1590.908010][T12284] hsr_slave_0: entered promiscuous mode [ 1590.946096][T12284] hsr_slave_1: entered promiscuous mode [ 1591.200961][ T9964] Bluetooth: hci6: command tx timeout [ 1591.582195][T12300] team0: Port device team_slave_0 added [ 1591.680968][ T9964] Bluetooth: hci3: command tx timeout [ 1591.838163][T12300] team0: Port device team_slave_1 added [ 1592.176586][T12300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1592.184346][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1592.217704][T12300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1592.389634][T12379] chnl_net:caif_netlink_parms(): no params data found [ 1592.420838][T12300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.428357][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1592.466851][T12300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1592.679400][T10731] bridge_slave_1: left allmulticast mode [ 1592.700632][T10731] bridge_slave_1: left promiscuous mode [ 1592.707309][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.737560][T10731] bridge_slave_0: left allmulticast mode [ 1592.748917][T10731] bridge_slave_0: left promiscuous mode [ 1592.755932][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.284924][ T9964] Bluetooth: hci6: command tx timeout [ 1593.330877][ T5833] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1593.465851][T10731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.492247][T10731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.508647][T10731] bond0 (unregistering): Released all slaves [ 1593.540758][ T5833] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1593.558819][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.585745][ T5833] usb 5-1: Product: syz [ 1593.590191][ T5833] usb 5-1: Manufacturer: syz [ 1593.610880][ T5833] usb 5-1: SerialNumber: syz [ 1593.623554][ T5833] usb 5-1: config 0 descriptor?? [ 1593.856552][T12363] chnl_net:caif_netlink_parms(): no params data found [ 1594.090205][ T5833] usb 5-1: Firmware version (0.0) predates our first public release. [ 1594.098740][ T5833] usb 5-1: Please update to version 0.2 or newer [ 1594.186374][T10731] hsr_slave_0: left promiscuous mode [ 1594.208108][T10731] hsr_slave_1: left promiscuous mode [ 1594.252670][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1594.287908][T10731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1594.304573][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1594.315190][ T5833] usb 5-1: Firmware: build [ 1594.324893][T10731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.366727][T10731] veth1_macvtap: left promiscuous mode [ 1594.373163][T10731] veth0_macvtap: left promiscuous mode [ 1594.379115][T10731] veth1_vlan: left promiscuous mode [ 1594.393170][T10731] veth0_vlan: left promiscuous mode [ 1596.289245][T10731] team0 (unregistering): Port device team_slave_1 removed [ 1596.421749][T10731] team0 (unregistering): Port device team_slave_0 removed [ 1599.558410][T12300] hsr_slave_0: entered promiscuous mode [ 1599.603133][T12300] hsr_slave_1: entered promiscuous mode [ 1599.632363][T12300] debugfs: 'hsr0' already exists in 'hsr' [ 1599.663718][T12300] Cannot create hsr debugfs directory [ 1599.831402][ T5833] usb 5-1: USB disconnect, device number 14 [ 1601.093802][T12379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.103999][T12379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.131493][T12379] bridge_slave_0: entered allmulticast mode [ 1601.155864][T12379] bridge_slave_0: entered promiscuous mode [ 1601.242950][T12363] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.271232][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.279680][T12363] bridge_slave_0: entered allmulticast mode [ 1601.333514][T12363] bridge_slave_0: entered promiscuous mode [ 1601.434623][T12379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.462886][T12379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.485174][T12379] bridge_slave_1: entered allmulticast mode [ 1601.504140][T12379] bridge_slave_1: entered promiscuous mode [ 1601.634580][T12363] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.661869][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.679825][T12363] bridge_slave_1: entered allmulticast mode [ 1601.718894][T12363] bridge_slave_1: entered promiscuous mode [ 1602.059733][T10731] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.317016][T12379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.360010][T10731] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1602.448235][T12363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1602.476685][T12363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1602.613907][T12379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1602.653308][T10731] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.113969][T10731] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1603.169101][T12363] team0: Port device team_slave_0 added [ 1603.193656][T12363] team0: Port device team_slave_1 added [ 1603.288467][T12379] team0: Port device team_slave_0 added [ 1603.449504][T12379] team0: Port device team_slave_1 added [ 1603.655780][T12379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.666973][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.695749][T12379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.715525][T12363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1603.729699][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.760066][T12363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1603.922909][T12379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1603.944032][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1603.972734][T12379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1604.044295][T12363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1604.073344][T12363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.150552][T12363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1604.273451][T12284] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1604.314646][T12284] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1604.937774][T12284] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1605.027486][T12284] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1605.288488][T12363] hsr_slave_0: entered promiscuous mode [ 1605.310061][T12363] hsr_slave_1: entered promiscuous mode [ 1605.327778][T12363] debugfs: 'hsr0' already exists in 'hsr' [ 1605.334695][T12363] Cannot create hsr debugfs directory [ 1605.490362][T12379] hsr_slave_0: entered promiscuous mode [ 1605.505366][T12379] hsr_slave_1: entered promiscuous mode [ 1605.523894][T12379] debugfs: 'hsr0' already exists in 'hsr' [ 1605.534971][T12379] Cannot create hsr debugfs directory [ 1605.674442][T10731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1606.921400][T12527] loop4: detected capacity change from 0 to 32768 [ 1606.940722][T12527] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.633 (12527) [ 1606.981932][T12527] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1606.996980][T12527] BTRFS info (device loop4): using sha256 checksum algorithm [ 1607.105123][T10731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1607.174354][T12527] BTRFS info (device loop4): enabling ssd optimizations [ 1607.181765][T12527] BTRFS info (device loop4): turning on async discard [ 1607.188881][T12527] BTRFS info (device loop4): enabling free space tree [ 1608.200181][ T29] audit: type=1800 audit(1775407764.227:101): pid=12556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.633" name="file2" dev="loop4" ino=261 res=0 errno=0 [ 1608.973231][T10731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1609.626799][T10731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.811743][T10270] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1611.599941][T12300] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1611.846105][T12300] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1612.133329][T12300] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1612.209724][T12300] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1612.517496][T10731] bridge_slave_1: left allmulticast mode [ 1612.535409][T10731] bridge_slave_1: left promiscuous mode [ 1612.562068][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.613075][T10731] bridge_slave_0: left allmulticast mode [ 1612.618991][T10731] bridge_slave_0: left promiscuous mode [ 1612.651582][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.713237][T10731] bridge_slave_1: left allmulticast mode [ 1612.719163][T10731] bridge_slave_1: left promiscuous mode [ 1612.770069][T10731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.811904][T10731] bridge_slave_0: left allmulticast mode [ 1612.822825][T10731] bridge_slave_0: left promiscuous mode [ 1612.846127][T10731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.163134][T10731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.205071][T10731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.240191][T10731] bond0 (unregistering): Released all slaves [ 1614.555871][T10731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.579983][T10731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.605693][T10731] bond0 (unregistering): Released all slaves [ 1615.045219][T10731] hsr_slave_0: left promiscuous mode [ 1615.063274][T10731] hsr_slave_1: left promiscuous mode [ 1615.076981][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.092364][T10731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.105949][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.114144][T10731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.153203][T10731] hsr_slave_0: left promiscuous mode [ 1615.168588][T10731] hsr_slave_1: left promiscuous mode [ 1615.179739][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.198683][T10731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.224216][T10731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.232080][T10731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.276504][T10731] veth1_macvtap: left promiscuous mode [ 1615.287196][T10731] veth0_macvtap: left promiscuous mode [ 1615.299843][T10731] veth1_vlan: left promiscuous mode [ 1615.306149][T10731] veth0_vlan: left promiscuous mode [ 1615.315560][T10731] veth1_macvtap: left promiscuous mode [ 1615.327245][T10731] veth0_macvtap: left promiscuous mode [ 1615.339412][T10731] veth1_vlan: left promiscuous mode [ 1615.350002][T10731] veth0_vlan: left promiscuous mode [ 1616.854995][T10731] team0 (unregistering): Port device team_slave_1 removed [ 1616.916273][T10731] team0 (unregistering): Port device team_slave_0 removed [ 1617.242685][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.249398][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.807522][T10731] team0 (unregistering): Port device team_slave_1 removed [ 1617.836421][T10731] team0 (unregistering): Port device team_slave_0 removed [ 1618.928595][T12284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1619.353929][T12284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1619.482278][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1619.489857][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1619.640152][T12363] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1619.799920][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.807461][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.918779][T12363] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1620.002363][T12363] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1620.053999][T12363] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1620.572299][T12379] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1620.612205][T12379] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1620.639079][T12379] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1620.697480][T12379] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1620.851417][T12300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1621.186213][T12300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1621.523537][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1621.531235][T10731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1621.700549][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1621.708104][T10731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1622.355322][T12300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1622.376836][T12300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1623.216792][T12649] loop4: detected capacity change from 0 to 40427 [ 1623.302483][T12649] F2FS-fs (loop4): invalid crc value [ 1623.616370][T12649] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1623.632082][T12649] F2FS-fs (loop4): Start checkpoint disabled! [ 1623.660027][T12649] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 1623.698815][T12649] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1623.967590][T12363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1624.182863][T12363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1625.578054][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.585767][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1626.553184][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.560892][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1626.978195][ T8287] kworker/u8:15: attempt to access beyond end of device [ 1626.978195][ T8287] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1627.003260][ T8287] CPU: 1 UID: 0 PID: 8287 Comm: kworker/u8:15 Tainted: G L syzkaller #0 PREEMPT(full) [ 1627.003474][ T8287] Tainted: [L]=SOFTLOCKUP [ 1627.003538][ T8287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1627.003685][ T8287] Workqueue: writeback wb_workfn (flush-7:4) [ 1627.004270][ T8287] Call Trace: [ 1627.004325][ T8287] [ 1627.004386][ T8287] __dump_stack+0x26/0x30 [ 1627.004665][ T8287] dump_stack_lvl+0x14c/0x1c0 [ 1627.004843][ T8287] dump_stack+0x1e/0x25 [ 1627.005003][ T8287] f2fs_handle_critical_error+0xa6f/0xc20 [ 1627.005451][ T8287] f2fs_stop_checkpoint+0x65/0x80 [ 1627.005643][ T8287] f2fs_write_end_io+0x12e6/0x2560 [ 1627.005905][ T8287] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1627.006084][ T8287] bio_endio+0x1006/0x1160 [ 1627.006464][ T8287] submit_bio_noacct+0x533/0x2960 [ 1627.006722][ T8287] submit_bio+0x57a/0x620 [ 1627.006903][ T8287] f2fs_submit_write_bio+0x115/0x350 [ 1627.007124][ T8287] __submit_merged_bio+0x16f/0x780 [ 1627.007346][ T8287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1627.007600][ T8287] __submit_merged_write_cond+0x4ba/0xae0 [ 1627.007846][ T8287] f2fs_write_data_pages+0x5073/0x5e10 [ 1627.008184][ T8287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1627.008355][ T8287] ? __update_load_avg_cfs_rq+0xe9/0x1060 [ 1627.008687][ T8287] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1627.008918][ T8287] ? kmsan_get_metadata+0xf1/0x160 [ 1627.009066][ T8287] ? kmsan_get_metadata+0xf1/0x160 [ 1627.009222][ T8287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1627.009383][ T8287] ? kmsan_get_metadata+0xf1/0x160 [ 1627.009547][ T8287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1627.009703][ T8287] ? kmsan_get_metadata+0xf1/0x160 [ 1627.009862][ T8287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1627.010025][ T8287] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1627.010204][ T8287] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1627.010373][ T8287] do_writepages+0x3f2/0x860 [ 1627.010611][ T8287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1627.010776][ T8287] ? writeback_sb_inodes+0x21/0x1d90 [ 1627.010978][ T8287] ? kmsan_get_metadata+0xf1/0x160 [ 1627.011144][ T8287] __writeback_single_inode+0x101/0x11c0 [ 1627.011405][ T8287] writeback_sb_inodes+0xb3b/0x1d90 [ 1627.011738][ T8287] ? kmsan_get_metadata+0xf1/0x160 [ 1627.011884][ T8287] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1627.012046][ T8287] wb_writeback+0x4f1/0xcd0 [ 1627.012277][ T8287] ? queue_io+0x431/0x800 [ 1627.012471][ T8287] wb_workfn+0x3b9/0x19b0 [ 1627.012649][ T8287] ? kmsan_get_metadata+0xf1/0x160 [ 1627.012826][ T8287] ? __pfx_wb_workfn+0x10/0x10 [ 1627.012998][ T8287] process_scheduled_works+0xb82/0x1e80 [ 1627.013372][ T8287] worker_thread+0xee4/0x1590 [ 1627.013583][ T8287] kthread+0x53f/0x600 [ 1627.013815][ T8287] ? __pfx_worker_thread+0x10/0x10 [ 1627.014003][ T8287] ? __pfx_kthread+0x10/0x10 [ 1627.014200][ T8287] ret_from_fork+0x20f/0x910 [ 1627.014453][ T8287] ? __switch_to+0x51c/0x750 [ 1627.014721][ T8287] ? __pfx_kthread+0x10/0x10 [ 1627.014914][ T8287] ret_from_fork_asm+0x1a/0x30 [ 1627.015176][ T8287] [ 1627.384896][ T8287] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1627.538264][T12379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1628.053197][T12284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.094536][T12379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1628.146853][T12300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.267934][T10732] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.275850][T10732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1628.409561][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.417318][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.121892][T12363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1631.053542][T12363] veth0_vlan: entered promiscuous mode [ 1631.387822][T12363] veth1_vlan: entered promiscuous mode [ 1631.776385][T12379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1632.381171][T12300] veth0_vlan: entered promiscuous mode [ 1632.582514][T10275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1632.596773][T12363] veth0_macvtap: entered promiscuous mode [ 1632.621012][T10275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1632.646289][T10275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1632.671529][T10275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1632.712146][T10275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1632.790083][T12300] veth1_vlan: entered promiscuous mode [ 1632.959282][T12363] veth1_macvtap: entered promiscuous mode [ 1633.446586][T12363] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1633.812053][T12363] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1634.289920][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.341089][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.350176][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.585326][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1634.716734][T10275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1634.731769][T10275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1634.752383][T10275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1634.773063][T10275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1634.786747][T10275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1634.802253][T10275] Bluetooth: hci0: command tx timeout [ 1636.880744][T12743] Bluetooth: hci2: command tx timeout [ 1636.886751][T12743] Bluetooth: hci0: command tx timeout [ 1637.567007][T12728] chnl_net:caif_netlink_parms(): no params data found [ 1638.773595][T12379] veth0_vlan: entered promiscuous mode [ 1638.964201][T12286] Bluetooth: hci0: command tx timeout [ 1638.969866][T12286] Bluetooth: hci2: command tx timeout [ 1639.544967][T12379] veth1_vlan: entered promiscuous mode [ 1639.591521][ T14] bridge_slave_1: left allmulticast mode [ 1639.597445][ T14] bridge_slave_1: left promiscuous mode [ 1639.669272][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.766258][ T14] bridge_slave_0: left allmulticast mode [ 1639.818766][ T14] bridge_slave_0: left promiscuous mode [ 1639.828801][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.778575][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1640.822415][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1640.861798][ T14] bond0 (unregistering): Released all slaves [ 1641.040786][T12286] Bluetooth: hci0: command tx timeout [ 1641.040869][T12743] Bluetooth: hci2: command tx timeout [ 1641.117152][T12740] chnl_net:caif_netlink_parms(): no params data found [ 1641.404745][ T14] hsr_slave_0: left promiscuous mode [ 1641.471055][ T14] hsr_slave_1: left promiscuous mode [ 1641.501457][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1641.530697][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1642.506226][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1642.614227][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1643.121980][T12743] Bluetooth: hci2: command tx timeout [ 1643.771150][T12728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.778845][T12728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.817378][T12286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1643.858348][T12286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1643.872094][T12286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1643.902930][T12728] bridge_slave_0: entered allmulticast mode [ 1643.932950][T12286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1643.953677][T12286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1643.995164][T12728] bridge_slave_0: entered promiscuous mode [ 1644.209398][T12728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.253933][T12728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.284460][T12728] bridge_slave_1: entered allmulticast mode [ 1644.351845][T12728] bridge_slave_1: entered promiscuous mode [ 1644.850158][T12728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.940236][T12728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1645.533460][T12286] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1645.569436][T12286] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1645.583858][T12286] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1645.601929][T12286] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1645.613268][T12728] team0: Port device team_slave_0 added [ 1645.614014][T12286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1645.776671][T12728] team0: Port device team_slave_1 added [ 1646.080871][T12743] Bluetooth: hci1: command tx timeout [ 1646.940192][T12832] loop4: detected capacity change from 0 to 32768 [ 1646.952443][T12832] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.648 (12832) [ 1646.982205][T12832] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1646.992814][T12832] BTRFS info (device loop4): using crc32c checksum algorithm [ 1647.000690][T12832] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1647.247261][T12832] BTRFS info (device loop4): rebuilding free space tree [ 1647.313610][T12832] BTRFS info (device loop4): disabling free space tree [ 1647.322331][T12832] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1647.332652][T12832] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1647.358350][T12832] BTRFS info (device loop4): enabling ssd optimizations [ 1647.366918][T12832] BTRFS info (device loop4): turning on async discard [ 1647.374170][T12832] BTRFS info (device loop4): enabling disk space caching [ 1647.381665][T12832] BTRFS info (device loop4): force clearing of disk cache [ 1647.389016][T12832] BTRFS info (device loop4): use zstd compression, level 3 [ 1647.681121][T12743] Bluetooth: hci5: command tx timeout [ 1648.170611][T12743] Bluetooth: hci1: command tx timeout [ 1649.115939][T12740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.148738][T12740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.219691][T12740] bridge_slave_0: entered allmulticast mode [ 1649.268787][T12740] bridge_slave_0: entered promiscuous mode [ 1649.349087][T12728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.358474][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.756087][T12728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.768651][T12743] Bluetooth: hci5: command tx timeout [ 1649.827291][T12740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.844046][T12740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.858698][T12740] bridge_slave_1: entered allmulticast mode [ 1649.876370][T12740] bridge_slave_1: entered promiscuous mode [ 1649.904458][T12728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.920702][T12728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.953716][T12728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1650.240897][T12743] Bluetooth: hci1: command tx timeout [ 1650.308225][T12740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1650.339533][T12740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1650.765841][T10270] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1651.014901][T12740] team0: Port device team_slave_0 added [ 1651.292910][T12740] team0: Port device team_slave_1 added [ 1651.678040][T12728] hsr_slave_0: entered promiscuous mode [ 1651.701270][T12728] hsr_slave_1: entered promiscuous mode [ 1651.811267][T12740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.825236][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.857774][T12740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.867394][T12743] Bluetooth: hci5: command tx timeout [ 1651.935568][T12740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.952476][T12740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1652.021479][T12740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1652.321094][T12743] Bluetooth: hci1: command tx timeout [ 1652.553066][ T14] bridge_slave_1: left allmulticast mode [ 1652.560284][ T14] bridge_slave_1: left promiscuous mode [ 1652.576351][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.608915][ T14] bridge_slave_0: left allmulticast mode [ 1652.615033][ T14] bridge_slave_0: left promiscuous mode [ 1652.641601][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1653.015980][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.032562][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.061543][ T14] bond0 (unregistering): Released all slaves [ 1653.460631][T12740] hsr_slave_0: entered promiscuous mode [ 1653.471975][T12740] hsr_slave_1: entered promiscuous mode [ 1653.483335][T12740] debugfs: 'hsr0' already exists in 'hsr' [ 1653.489228][T12740] Cannot create hsr debugfs directory [ 1653.625491][ T14] hsr_slave_0: left promiscuous mode [ 1653.634137][ T14] hsr_slave_1: left promiscuous mode [ 1653.645849][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.657370][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.678433][ T14] veth1_vlan: left promiscuous mode [ 1653.685936][ T14] veth0_vlan: left promiscuous mode [ 1653.931899][T12743] Bluetooth: hci5: command tx timeout [ 1654.172406][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1654.244829][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1654.629710][T12812] chnl_net:caif_netlink_parms(): no params data found [ 1655.154877][T12828] chnl_net:caif_netlink_parms(): no params data found [ 1655.766850][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.353667][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.392002][T12812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.409962][T12812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.435611][T12812] bridge_slave_0: entered allmulticast mode [ 1656.454141][T12812] bridge_slave_0: entered promiscuous mode [ 1656.596500][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.634055][T12812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.662185][T12812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.671419][T12812] bridge_slave_1: entered allmulticast mode [ 1656.685465][T12812] bridge_slave_1: entered promiscuous mode [ 1656.840609][T12828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.858805][T12828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.896501][T12828] bridge_slave_0: entered allmulticast mode [ 1656.907535][T12828] bridge_slave_0: entered promiscuous mode [ 1656.958195][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.084443][T12828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1657.099643][T12828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1657.119916][T12828] bridge_slave_1: entered allmulticast mode [ 1657.151105][T12828] bridge_slave_1: entered promiscuous mode [ 1657.387190][T12812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.504166][T12828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.539125][T12812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.684872][T12828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.877817][T12828] team0: Port device team_slave_0 added [ 1657.940147][T12812] team0: Port device team_slave_0 added [ 1658.057647][T12828] team0: Port device team_slave_1 added [ 1658.302329][T12812] team0: Port device team_slave_1 added [ 1658.480104][T12828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.488782][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.517073][T12828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.529411][T12728] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1658.755459][T12812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1658.789826][T12812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.827107][T12812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1658.843113][T12828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.850264][T12828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.890737][T12828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.937183][T12728] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1659.065667][T12812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1659.074095][T12812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1659.102231][T12812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1659.297159][T12728] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1659.516420][T12728] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1659.729001][T12828] hsr_slave_0: entered promiscuous mode [ 1659.741857][T12828] hsr_slave_1: entered promiscuous mode [ 1659.751972][T12828] debugfs: 'hsr0' already exists in 'hsr' [ 1659.757925][T12828] Cannot create hsr debugfs directory [ 1659.978349][T12812] hsr_slave_0: entered promiscuous mode [ 1660.008365][T12812] hsr_slave_1: entered promiscuous mode [ 1660.022703][T12812] debugfs: 'hsr0' already exists in 'hsr' [ 1660.028791][T12812] Cannot create hsr debugfs directory [ 1662.211379][T12740] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1662.289962][ T14] bridge_slave_1: left allmulticast mode [ 1662.297461][ T14] bridge_slave_1: left promiscuous mode [ 1662.305839][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.335498][ T14] bridge_slave_0: left allmulticast mode [ 1662.342272][ T14] bridge_slave_0: left promiscuous mode [ 1662.348955][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.385079][ T14] bridge_slave_1: left allmulticast mode [ 1662.397293][ T14] bridge_slave_1: left promiscuous mode [ 1662.409119][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.438248][ T14] bridge_slave_0: left allmulticast mode [ 1662.444640][ T14] bridge_slave_0: left promiscuous mode [ 1662.453509][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.119175][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.137187][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1663.158847][ T14] bond0 (unregistering): Released all slaves [ 1663.389735][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1663.409568][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1663.433281][ T14] bond0 (unregistering): Released all slaves [ 1663.495129][T12740] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1663.678153][T12740] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1663.704773][T12740] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1663.846940][ T14] hsr_slave_0: left promiscuous mode [ 1663.872809][ T14] hsr_slave_1: left promiscuous mode [ 1663.901776][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1663.909422][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1663.946193][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1663.958969][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1663.992202][ T14] hsr_slave_0: left promiscuous mode [ 1664.012322][ T14] hsr_slave_1: left promiscuous mode [ 1664.019838][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1664.037806][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.087894][ T14] veth1_macvtap: left promiscuous mode [ 1664.095290][ T14] veth0_macvtap: left promiscuous mode [ 1664.103128][ T14] veth1_vlan: left promiscuous mode [ 1664.108740][ T14] veth0_vlan: left promiscuous mode [ 1664.120148][ T14] veth1_vlan: left promiscuous mode [ 1664.126413][ T14] veth0_vlan: left promiscuous mode [ 1665.692906][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1665.754339][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1667.419099][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1667.542788][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1668.922241][T12728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1669.168289][T12728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1669.254704][T12828] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1669.316168][T12828] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1669.348171][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.355978][ T8287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1669.443252][T12828] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1669.609736][T12828] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1669.708625][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.716443][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1670.488310][T12828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.575391][T12828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.789203][T12828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1670.806277][T12828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1670.826961][T12930] loop4: detected capacity change from 0 to 32768 [ 1670.838847][T12930] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.670 (12930) [ 1670.859892][T12930] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1670.870544][T12930] BTRFS info (device loop4): using crc32c checksum algorithm [ 1670.878308][T12930] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1670.973794][T12740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1671.021657][T12930] BTRFS info (device loop4): rebuilding free space tree [ 1671.069943][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.077644][ T8287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1671.108101][T12930] BTRFS info (device loop4): disabling free space tree [ 1671.115771][T12930] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1671.126026][T12930] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1671.153039][T12930] BTRFS info (device loop4): enabling ssd optimizations [ 1671.160271][T12930] BTRFS info (device loop4): turning on async discard [ 1671.167719][T12930] BTRFS info (device loop4): enabling disk space caching [ 1671.175148][T12930] BTRFS info (device loop4): force clearing of disk cache [ 1671.182644][T12930] BTRFS info (device loop4): use zstd compression, level 3 [ 1671.187273][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.197647][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.611881][T12740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1673.805981][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.813673][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.391911][T12812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1674.428296][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.436138][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.487182][T12812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1674.499234][T10270] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1674.634314][T12812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1674.725590][T12812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1675.301866][T12828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.301037][T12728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1676.599038][T12812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.006112][T12812] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.132321][ T7735] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.139958][ T7735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.345220][T10732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.353112][T10732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1677.663265][T12740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.506456][T12828] veth0_vlan: entered promiscuous mode [ 1678.672185][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.678929][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.819989][T12828] veth1_vlan: entered promiscuous mode [ 1679.559015][T12728] veth0_vlan: entered promiscuous mode [ 1679.738682][T12828] veth0_macvtap: entered promiscuous mode [ 1679.809361][T12828] veth1_macvtap: entered promiscuous mode [ 1679.860007][T12728] veth1_vlan: entered promiscuous mode [ 1680.078040][T12828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1680.235188][T12828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1680.510934][ T7735] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.585017][T12728] veth0_macvtap: entered promiscuous mode [ 1680.623764][ T7735] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.648993][ T7735] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.701293][ T7735] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1680.774535][T12728] veth1_macvtap: entered promiscuous mode [ 1680.849466][T12740] veth0_vlan: entered promiscuous mode [ 1681.012412][T12812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1681.147863][T12728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.198608][T12728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.221573][T12740] veth1_vlan: entered promiscuous mode [ 1681.666716][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.809192][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.855711][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.302462][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1685.351537][T12740] veth0_macvtap: entered promiscuous mode [ 1685.394179][T12812] veth0_vlan: entered promiscuous mode [ 1685.500472][T12740] veth1_macvtap: entered promiscuous mode [ 1685.757231][T12812] veth1_vlan: entered promiscuous mode [ 1685.805574][T12740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1686.019022][T12740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1686.254921][ T165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.270734][ T165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.392137][ T165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1686.425907][ T165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1687.024216][T12812] veth0_macvtap: entered promiscuous mode [ 1687.262075][T12812] veth1_macvtap: entered promiscuous mode [ 1687.611224][T12812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.787404][T12812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.991419][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.032437][ T165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.085922][ T7736] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.199676][ T7736] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1690.834247][T13060] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1692.554796][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1692.620876][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1693.443747][ T7735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1693.530982][ T7735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1696.256715][T12286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1696.321508][T12286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1696.351306][T12286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1696.392088][T12286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1696.431479][T12286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1697.529346][ T9883] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1697.741607][ T9883] usb 8-1: Using ep0 maxpacket: 32 [ 1697.810924][ T9883] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1697.890714][ T9883] usb 8-1: config 0 has no interface number 0 [ 1697.971647][ T9883] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1698.017813][T12286] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1698.056317][T12286] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1698.071338][T12286] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1698.100719][T12286] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1698.121262][T12286] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1698.148201][ T9883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.258952][ T9883] usb 8-1: Product: syz [ 1698.300562][ T9883] usb 8-1: Manufacturer: syz [ 1698.305559][ T9883] usb 8-1: SerialNumber: syz [ 1698.489917][ T9883] usb 8-1: config 0 descriptor?? [ 1698.562836][T12286] Bluetooth: hci3: command tx timeout [ 1698.604111][ T9883] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1698.915618][ T9883] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1699.064012][ T9883] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1699.304361][ C1] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1699.313372][ T7446] usb 8-1: USB disconnect, device number 2 [ 1699.384531][ T7446] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1699.537646][ T7446] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1699.634096][ T7446] quatech2 8-1:0.51: device disconnected [ 1700.242415][T12286] Bluetooth: hci6: command tx timeout [ 1700.641901][T12286] Bluetooth: hci3: command tx timeout [ 1700.917766][ T14] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.130951][ T7987] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1701.229211][ T14] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.361283][ T7987] usb 8-1: Using ep0 maxpacket: 8 [ 1701.423162][ T7987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1701.511795][ T7987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1701.568550][ T7987] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1701.636036][ T7987] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14129, setting to 64 [ 1701.666842][ T14] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.716098][ T7987] usb 8-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1701.766620][ T7987] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.884699][ T7987] usb 8-1: config 0 descriptor?? [ 1702.341848][T12286] Bluetooth: hci6: command tx timeout [ 1702.379028][ T14] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.507586][ T7987] usb 8-1: USB disconnect, device number 3 [ 1702.721196][T12286] Bluetooth: hci3: command tx timeout [ 1703.678458][T13088] chnl_net:caif_netlink_parms(): no params data found [ 1704.050250][T13077] chnl_net:caif_netlink_parms(): no params data found [ 1704.309525][T13128] loop7: detected capacity change from 0 to 512 [ 1704.401307][T12286] Bluetooth: hci6: command tx timeout [ 1704.643153][T13128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1704.751591][T13128] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1704.860836][T12286] Bluetooth: hci3: command tx timeout [ 1705.468108][ T14] bridge_slave_1: left allmulticast mode [ 1705.475380][T12743] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1705.491397][T12743] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1705.531428][ T14] bridge_slave_1: left promiscuous mode [ 1705.538124][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.574891][T12743] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1705.611428][T12743] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1705.631549][T12743] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1705.709030][ T14] bridge_slave_0: left allmulticast mode [ 1705.730215][ T14] bridge_slave_0: left promiscuous mode [ 1705.737730][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.103114][T12828] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1706.483140][T12743] Bluetooth: hci6: command tx timeout [ 1707.627611][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1707.780962][T12743] Bluetooth: hci0: command tx timeout [ 1708.262323][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.618409][T13151] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1709.254992][ T14] bond0 (unregistering): Released all slaves [ 1710.211124][T12286] Bluetooth: hci0: command tx timeout [ 1712.242334][T12743] Bluetooth: hci0: command tx timeout [ 1714.321441][T12743] Bluetooth: hci0: command tx timeout [ 1714.769974][ T14] hsr_slave_0: left promiscuous mode [ 1714.840789][ T14] hsr_slave_1: left promiscuous mode [ 1714.849190][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1714.900731][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1714.969387][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1715.000557][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1715.131933][ T14] veth1_macvtap: left promiscuous mode [ 1715.137804][ T14] veth0_macvtap: left promiscuous mode [ 1715.162194][ T14] veth1_vlan: left promiscuous mode [ 1715.167825][ T14] veth0_vlan: left promiscuous mode [ 1715.876476][T12286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1715.892391][T12286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1715.904089][T12286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1715.929569][T12286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1715.943458][T12286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1717.198461][T13173] loop7: detected capacity change from 0 to 32768 [ 1717.210571][T13173] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.691 (13173) [ 1717.242674][T13173] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1717.253187][T13173] BTRFS info (device loop7): using crc32c checksum algorithm [ 1717.261146][T13173] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1717.561914][T13173] BTRFS info (device loop7): rebuilding free space tree [ 1717.608342][T13173] BTRFS info (device loop7): disabling free space tree [ 1717.616221][T13173] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1717.626389][T13173] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1717.668419][T13173] BTRFS info (device loop7): enabling ssd optimizations [ 1717.675896][T13173] BTRFS info (device loop7): turning on async discard [ 1717.690534][T13173] BTRFS info (device loop7): enabling disk space caching [ 1717.697826][T13173] BTRFS info (device loop7): force clearing of disk cache [ 1717.705672][T13173] BTRFS info (device loop7): use zstd compression, level 3 [ 1718.060791][T12286] Bluetooth: hci1: command tx timeout [ 1718.582732][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1718.889270][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1720.085994][T12286] Bluetooth: hci1: command tx timeout [ 1720.989311][T12828] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1721.050276][T13088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.090767][T13088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.098587][T13088] bridge_slave_0: entered allmulticast mode [ 1721.141183][T13088] bridge_slave_0: entered promiscuous mode [ 1721.380719][T13077] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.416231][T13077] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.431256][T13077] bridge_slave_0: entered allmulticast mode [ 1721.449451][T13077] bridge_slave_0: entered promiscuous mode [ 1721.529445][T13088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.551971][T13088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.559786][T13088] bridge_slave_1: entered allmulticast mode [ 1721.581211][T13088] bridge_slave_1: entered promiscuous mode [ 1721.621025][T13077] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.628730][T13077] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.643380][T13077] bridge_slave_1: entered allmulticast mode [ 1721.658335][T13077] bridge_slave_1: entered promiscuous mode [ 1722.101241][T13088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.143607][T13088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.165124][T12286] Bluetooth: hci1: command tx timeout [ 1722.296390][T13077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1722.507512][ T14] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.594231][T13077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1722.772676][T13088] team0: Port device team_slave_0 added [ 1722.819431][ T14] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.059702][T13088] team0: Port device team_slave_1 added [ 1723.107710][ T14] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.247735][T13077] team0: Port device team_slave_0 added [ 1723.435986][ T14] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.490191][T13077] team0: Port device team_slave_1 added [ 1723.802174][T13088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.809481][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.883134][T13088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.103425][T13088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.120013][T13219] loop7: detected capacity change from 0 to 512 [ 1724.128608][T13088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.158345][T13088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.242488][T12286] Bluetooth: hci1: command tx timeout [ 1724.290748][T13219] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1724.313935][T13077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1724.343536][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.372348][T13077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1724.382541][T13219] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1724.425434][T13077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1724.432717][T13077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1724.464898][T13077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.792658][T12828] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1725.781391][T13077] hsr_slave_0: entered promiscuous mode [ 1725.797424][T13077] hsr_slave_1: entered promiscuous mode [ 1725.846831][T13088] hsr_slave_0: entered promiscuous mode [ 1725.859387][T13088] hsr_slave_1: entered promiscuous mode [ 1725.905200][T13088] debugfs: 'hsr0' already exists in 'hsr' [ 1725.911424][T13088] Cannot create hsr debugfs directory [ 1725.928998][T13136] chnl_net:caif_netlink_parms(): no params data found [ 1727.427643][ T14] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.914753][ T14] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.251936][T13168] chnl_net:caif_netlink_parms(): no params data found [ 1728.423379][ T14] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.769349][ T14] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1730.086255][T13136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.101484][T13136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.136787][T13136] bridge_slave_0: entered allmulticast mode [ 1730.148694][T13136] bridge_slave_0: entered promiscuous mode [ 1730.331891][T13136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.358216][T13136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.388675][T13136] bridge_slave_1: entered allmulticast mode [ 1730.426758][T13136] bridge_slave_1: entered promiscuous mode [ 1730.777711][T13264] loop7: detected capacity change from 0 to 32768 [ 1730.789494][T13264] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.698 (13264) [ 1730.860617][T13264] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1730.871333][T13264] BTRFS info (device loop7): using crc32c checksum algorithm [ 1730.879025][T13264] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1730.906619][T13168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.916816][T13168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.938974][T13168] bridge_slave_0: entered allmulticast mode [ 1730.992444][T13264] BTRFS info (device loop7): rebuilding free space tree [ 1731.022978][T13168] bridge_slave_0: entered promiscuous mode [ 1731.029654][T13264] BTRFS info (device loop7): disabling free space tree [ 1731.037149][T13264] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1731.047471][T13264] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1731.072950][T13264] BTRFS info (device loop7): enabling ssd optimizations [ 1731.080210][T13264] BTRFS info (device loop7): turning on async discard [ 1731.087657][T13264] BTRFS info (device loop7): enabling disk space caching [ 1731.095081][T13264] BTRFS info (device loop7): force clearing of disk cache [ 1731.106191][T13264] BTRFS info (device loop7): use zstd compression, level 3 [ 1731.127781][T13168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.136544][T13168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.144849][T13168] bridge_slave_1: entered allmulticast mode [ 1731.155976][T13168] bridge_slave_1: entered promiscuous mode [ 1731.397423][ T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.584049][T13168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.648939][T13136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.677874][T13136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1731.720237][ T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.771663][T13168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.178948][ T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.304664][T13136] team0: Port device team_slave_0 added [ 1733.416881][T13168] team0: Port device team_slave_0 added [ 1733.511890][T13136] team0: Port device team_slave_1 added [ 1733.604249][ T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.732277][T13168] team0: Port device team_slave_1 added [ 1734.341028][T13168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.348228][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1734.398458][T13168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.416887][T13168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1734.424972][T13168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1734.452064][T13168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1734.470135][T13136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1734.477983][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1734.527677][T13136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1734.608840][T12828] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1734.670150][T13136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1734.678456][T13136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1734.756256][T13136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1735.468596][T13168] hsr_slave_0: entered promiscuous mode [ 1735.514974][T13168] hsr_slave_1: entered promiscuous mode [ 1735.544496][T13168] debugfs: 'hsr0' already exists in 'hsr' [ 1735.566108][T13168] Cannot create hsr debugfs directory [ 1735.668645][ T14] bridge_slave_1: left allmulticast mode [ 1735.691719][ T14] bridge_slave_1: left promiscuous mode [ 1735.714950][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.772554][ T14] bridge_slave_0: left allmulticast mode [ 1735.778463][ T14] bridge_slave_0: left promiscuous mode [ 1735.827733][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.083003][ T14] bridge_slave_1: left allmulticast mode [ 1736.089007][ T14] bridge_slave_1: left promiscuous mode [ 1736.159953][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.203257][ T14] bridge_slave_0: left allmulticast mode [ 1736.209179][ T14] bridge_slave_0: left promiscuous mode [ 1736.251448][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.294880][ T14] bridge_slave_1: left allmulticast mode [ 1736.314521][ T14] bridge_slave_1: left promiscuous mode [ 1736.361281][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.396647][ T14] bridge_slave_0: left allmulticast mode [ 1736.415971][ T14] bridge_slave_0: left promiscuous mode [ 1736.445776][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.185686][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.249223][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.276940][ T14] bond0 (unregistering): Released all slaves [ 1740.047947][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1740.130936][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.147483][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.156309][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.195863][ T14] bond0 (unregistering): Released all slaves [ 1740.613881][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1740.677050][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1740.749862][ T14] bond0 (unregistering): Released all slaves [ 1742.398786][T13136] hsr_slave_0: entered promiscuous mode [ 1742.412194][T13136] hsr_slave_1: entered promiscuous mode [ 1742.424426][T13136] debugfs: 'hsr0' already exists in 'hsr' [ 1742.434956][T13136] Cannot create hsr debugfs directory [ 1743.403763][ T14] hsr_slave_0: left promiscuous mode [ 1743.442714][ T14] hsr_slave_1: left promiscuous mode [ 1743.471249][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1743.478890][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.496838][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1743.505721][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1743.586553][ T14] hsr_slave_0: left promiscuous mode [ 1743.611269][ T14] hsr_slave_1: left promiscuous mode [ 1743.619594][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1743.647877][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.659985][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1743.669102][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1743.699547][ T14] hsr_slave_0: left promiscuous mode [ 1743.741080][ T14] hsr_slave_1: left promiscuous mode [ 1743.749213][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1743.783423][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.801048][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1743.808681][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1743.959154][ T14] veth1_macvtap: left promiscuous mode [ 1743.978271][ T14] veth0_macvtap: left promiscuous mode [ 1743.999675][ T14] veth1_vlan: left promiscuous mode [ 1744.008663][ T14] veth0_vlan: left promiscuous mode [ 1744.033279][ T14] veth1_macvtap: left promiscuous mode [ 1744.040833][ T14] veth0_macvtap: left promiscuous mode [ 1744.046790][ T14] veth1_vlan: left promiscuous mode [ 1744.052867][ T14] veth0_vlan: left promiscuous mode [ 1744.060878][ T14] veth1_macvtap: left promiscuous mode [ 1744.067166][ T14] veth0_macvtap: left promiscuous mode [ 1744.075123][ T14] veth1_vlan: left promiscuous mode [ 1744.083393][ T14] veth0_vlan: left promiscuous mode [ 1745.312662][T13354] loop7: detected capacity change from 0 to 32768 [ 1745.330954][T13354] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.705 (13354) [ 1745.380551][T13354] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1745.391145][T13354] BTRFS info (device loop7): using sha256 checksum algorithm [ 1745.498045][T13354] BTRFS info (device loop7): enabling ssd optimizations [ 1745.505390][T13354] BTRFS info (device loop7): turning on async discard [ 1745.512539][T13354] BTRFS info (device loop7): enabling free space tree [ 1746.484726][ T29] audit: type=1800 audit(1775407902.517:102): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.705" name="file2" dev="loop7" ino=261 res=0 errno=0 [ 1747.538188][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1747.588346][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1748.469181][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1748.604666][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1748.984472][T12828] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1749.637071][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1749.679330][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1750.654367][T13077] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1750.801574][T13077] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1750.886807][T13077] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1750.946163][T13077] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1751.377788][T13088] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1751.523641][T13088] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1751.575553][T13088] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1751.601453][ T7446] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1751.673284][T13088] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1751.770629][ T7446] usb 8-1: Using ep0 maxpacket: 32 [ 1751.795294][ T7446] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1751.828097][ T7446] usb 8-1: config 0 has no interface number 0 [ 1751.898167][ T7446] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1751.940863][ T7446] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.972266][ T7446] usb 8-1: Product: syz [ 1751.976713][ T7446] usb 8-1: Manufacturer: syz [ 1752.001284][ T7446] usb 8-1: SerialNumber: syz [ 1752.019447][ T7446] usb 8-1: config 0 descriptor?? [ 1752.066035][ T7446] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1752.285187][ T7446] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1752.367067][ T7446] usb 8-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1753.168257][ C0] usb 8-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1753.172889][ T5828] usb 8-1: USB disconnect, device number 4 [ 1753.252816][ T5828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1753.305142][T13077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1753.327392][ T5828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1753.347426][ T5828] quatech2 8-1:0.51: device disconnected [ 1753.565880][T13136] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1753.625395][T13136] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1753.689081][T13136] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1753.782708][T13136] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1754.835141][T13088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.039464][T13401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.708'. [ 1756.168802][T13168] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1756.980273][T13168] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1757.143715][T13168] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1757.364521][T13168] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1758.704120][T12743] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1758.731733][T12743] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1758.743764][T12743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1758.762590][T12743] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1758.775851][T12743] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1759.506467][T13136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1759.633350][ T9964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1759.715798][ T9964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1759.725990][ T9964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1759.744324][ T9964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1759.841883][ T9964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1760.332385][T13136] 8021q: adding VLAN 0 to HW filter on device team0 [ 1760.689127][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.696799][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.179751][T13417] bridge0: port 2(bridge_slave_1) entered blocking state [ 1761.187592][T13417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1761.610929][ T9964] Bluetooth: hci2: command tx timeout [ 1761.755829][ T147] bridge_slave_1: left allmulticast mode [ 1761.773894][ T147] bridge_slave_1: left promiscuous mode [ 1761.780970][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.849724][ T147] bridge_slave_0: left allmulticast mode [ 1761.874648][ T147] bridge_slave_0: left promiscuous mode [ 1761.882009][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.921038][ T9964] Bluetooth: hci3: command tx timeout [ 1762.392855][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1762.422273][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1762.439999][ T147] bond0 (unregistering): Released all slaves [ 1763.591837][ T147] hsr_slave_0: left promiscuous mode [ 1763.617102][ T147] hsr_slave_1: left promiscuous mode [ 1763.636110][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1763.659256][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1763.680711][ T9964] Bluetooth: hci2: command tx timeout [ 1764.012048][ T9964] Bluetooth: hci3: command tx timeout [ 1764.637406][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1764.749281][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1765.760813][T12743] Bluetooth: hci2: command tx timeout [ 1766.080758][T12743] Bluetooth: hci3: command tx timeout [ 1766.106968][T12286] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1766.124372][T12286] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1766.148531][T12286] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1766.178078][T12286] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1766.193374][T12286] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1767.241491][T13168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.380893][T13420] chnl_net:caif_netlink_parms(): no params data found [ 1767.680256][T10034] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1767.761615][T12286] Bluetooth: hci5: command 0x0406 tx timeout [ 1767.840648][ T9964] Bluetooth: hci2: command tx timeout [ 1767.853073][T10034] usb 8-1: Using ep0 maxpacket: 32 [ 1767.890267][T10034] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1767.899129][T10034] usb 8-1: config 0 has no interface number 0 [ 1767.947332][T10034] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1767.980520][T10034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1767.988969][T10034] usb 8-1: Product: syz [ 1768.020574][T10034] usb 8-1: Manufacturer: syz [ 1768.031597][T10034] usb 8-1: SerialNumber: syz [ 1768.063393][T10034] usb 8-1: config 0 descriptor?? [ 1768.138054][T10034] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1768.164489][ T9964] Bluetooth: hci3: command tx timeout [ 1768.173865][T13419] chnl_net:caif_netlink_parms(): no params data found [ 1768.323865][ T9964] Bluetooth: hci4: command tx timeout [ 1769.045666][T13168] 8021q: adding VLAN 0 to HW filter on device team0 [ 1769.456817][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.464514][T10731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.535195][T13420] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.548423][T13420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.562466][T13420] bridge_slave_0: entered allmulticast mode [ 1769.574111][T13420] bridge_slave_0: entered promiscuous mode [ 1769.760202][T13420] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.768088][T13420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.784411][T13420] bridge_slave_1: entered allmulticast mode [ 1769.796656][T13420] bridge_slave_1: entered promiscuous mode [ 1770.207488][T10732] bridge0: port 2(bridge_slave_1) entered blocking state [ 1770.215324][T10732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.400639][ T9964] Bluetooth: hci4: command tx timeout [ 1770.574868][T10034] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1770.591593][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1770.611606][T10034] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 1770.622206][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1770.630021][T13419] bridge_slave_0: entered allmulticast mode [ 1770.723987][T13419] bridge_slave_0: entered promiscuous mode [ 1770.733557][T10034] usb 8-1: USB disconnect, device number 5 [ 1770.799458][T13420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1771.653646][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.662105][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.669901][T13419] bridge_slave_1: entered allmulticast mode [ 1771.687674][T13419] bridge_slave_1: entered promiscuous mode [ 1771.758235][T13499] netlink: 8 bytes leftover after parsing attributes in process `syz.7.715'. [ 1771.893927][T13420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1772.280786][T13454] chnl_net:caif_netlink_parms(): no params data found [ 1772.398116][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1772.420115][ T147] bridge_slave_1: left allmulticast mode [ 1772.426436][ T147] bridge_slave_1: left promiscuous mode [ 1772.446971][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.467179][ T147] bridge_slave_0: left allmulticast mode [ 1772.473522][ T147] bridge_slave_0: left promiscuous mode [ 1772.480926][ T9964] Bluetooth: hci4: command tx timeout [ 1772.499263][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.213181][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1773.280871][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1773.328006][ T147] bond0 (unregistering): Released all slaves [ 1773.405832][T13420] team0: Port device team_slave_0 added [ 1773.659097][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1773.882135][T13420] team0: Port device team_slave_1 added [ 1774.236546][ T147] hsr_slave_0: left promiscuous mode [ 1774.261708][ T147] hsr_slave_1: left promiscuous mode [ 1774.281814][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.631307][ T9964] Bluetooth: hci4: command tx timeout [ 1775.260715][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1776.425282][T12286] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1776.444437][T12286] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1776.455110][T12286] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1776.473857][T12286] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1776.486125][T12286] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1776.971962][T13521] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1777.058472][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1777.096030][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1777.978405][T13419] team0: Port device team_slave_0 added [ 1778.016149][T13420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1778.050274][T13420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.080265][T13420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1778.236950][T13419] team0: Port device team_slave_1 added [ 1778.380241][T13420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1778.388738][T13420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.463817][T13420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1778.633874][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1778.641782][ T9964] Bluetooth: hci0: command tx timeout [ 1778.650138][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.690020][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1778.784616][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1778.797046][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1778.829426][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1779.785891][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1779.819126][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1779.859511][T13454] bridge_slave_0: entered allmulticast mode [ 1779.896495][T13454] bridge_slave_0: entered promiscuous mode [ 1780.175334][T13420] hsr_slave_0: entered promiscuous mode [ 1780.213832][T13420] hsr_slave_1: entered promiscuous mode [ 1780.259147][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.301121][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.308900][T13454] bridge_slave_1: entered allmulticast mode [ 1780.339470][T13454] bridge_slave_1: entered promiscuous mode [ 1780.493273][T13419] hsr_slave_0: entered promiscuous mode [ 1780.543202][T13419] hsr_slave_1: entered promiscuous mode [ 1780.566164][T13419] debugfs: 'hsr0' already exists in 'hsr' [ 1780.596452][T13419] Cannot create hsr debugfs directory [ 1780.721253][ T9964] Bluetooth: hci0: command tx timeout [ 1780.986192][T13454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1781.100116][T13454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1781.546906][T13454] team0: Port device team_slave_0 added [ 1781.690680][ T5828] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1781.723492][T13454] team0: Port device team_slave_1 added [ 1781.861222][ T5828] usb 8-1: Using ep0 maxpacket: 32 [ 1781.879989][ T5828] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1781.889256][ T5828] usb 8-1: config 0 has no interface number 0 [ 1781.914381][ T5828] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1781.930001][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.945427][ T5828] usb 8-1: Product: syz [ 1781.949872][ T5828] usb 8-1: Manufacturer: syz [ 1781.956395][ T5828] usb 8-1: SerialNumber: syz [ 1781.998403][ T5828] usb 8-1: config 0 descriptor?? [ 1782.079560][ T5828] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1782.354092][T13454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.369045][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.411085][T13454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.572583][T13454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.579821][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.606603][T13454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1782.626350][ T147] bridge_slave_1: left allmulticast mode [ 1782.633499][ T147] bridge_slave_1: left promiscuous mode [ 1782.640189][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1782.668326][ T147] bridge_slave_0: left allmulticast mode [ 1782.674477][ T147] bridge_slave_0: left promiscuous mode [ 1782.681437][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1782.803283][ T9964] Bluetooth: hci0: command tx timeout [ 1783.111991][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1783.147784][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1783.163295][ T147] bond0 (unregistering): Released all slaves [ 1783.382516][T13517] chnl_net:caif_netlink_parms(): no params data found [ 1783.501598][ T147] hsr_slave_0: left promiscuous mode [ 1783.513194][ T147] hsr_slave_1: left promiscuous mode [ 1783.533831][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1783.545236][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1784.029471][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1784.068714][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1784.513572][ T5828] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1784.544736][ T5828] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 1784.638332][ T5828] usb 8-1: USB disconnect, device number 6 [ 1784.882782][ T9964] Bluetooth: hci0: command tx timeout [ 1785.351963][T13454] hsr_slave_0: entered promiscuous mode [ 1785.367991][T13454] hsr_slave_1: entered promiscuous mode [ 1785.425370][T13454] debugfs: 'hsr0' already exists in 'hsr' [ 1785.445142][T13454] Cannot create hsr debugfs directory [ 1787.033113][T13517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.092065][T13517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.099900][T13517] bridge_slave_0: entered allmulticast mode [ 1787.227205][T13517] bridge_slave_0: entered promiscuous mode [ 1787.585566][T13517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.597870][T13517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.628355][T13517] bridge_slave_1: entered allmulticast mode [ 1787.644437][T13517] bridge_slave_1: entered promiscuous mode [ 1787.705655][T13419] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1787.980013][T13517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1788.066782][T13419] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1788.188984][T13517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1788.230578][T13419] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1788.486685][T13419] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1788.644208][T13517] team0: Port device team_slave_0 added [ 1788.783134][T13517] team0: Port device team_slave_1 added [ 1789.143589][T13517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1789.151619][T13517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.182054][T13517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1789.273712][T13517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1789.285906][T13517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1789.314146][T13517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1789.584102][ T147] bridge_slave_1: left allmulticast mode [ 1789.590022][ T147] bridge_slave_1: left promiscuous mode [ 1789.604897][ T147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.618680][ T147] bridge_slave_0: left allmulticast mode [ 1789.625245][ T147] bridge_slave_0: left promiscuous mode [ 1789.633004][ T147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.108736][ T147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1790.155967][ T147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.178236][ T147] bond0 (unregistering): Released all slaves [ 1790.265265][T13517] hsr_slave_0: entered promiscuous mode [ 1790.287602][T13517] hsr_slave_1: entered promiscuous mode [ 1790.303288][T13517] debugfs: 'hsr0' already exists in 'hsr' [ 1790.309252][T13517] Cannot create hsr debugfs directory [ 1790.453459][ T147] hsr_slave_0: left promiscuous mode [ 1790.472377][ T147] hsr_slave_1: left promiscuous mode [ 1790.480012][ T147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1790.505138][ T147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1791.274224][ T147] team0 (unregistering): Port device team_slave_1 removed [ 1791.338252][ T147] team0 (unregistering): Port device team_slave_0 removed [ 1791.505993][T13582] loop7: detected capacity change from 0 to 32768 [ 1791.520267][T13582] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.727 (13582) [ 1791.542570][T13582] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1791.553109][T13582] BTRFS info (device loop7): using crc32c checksum algorithm [ 1791.561024][T13582] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1791.758593][T13582] BTRFS info (device loop7): rebuilding free space tree [ 1791.801684][T13582] BTRFS info (device loop7): disabling free space tree [ 1791.809099][T13582] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1791.820574][T13582] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1791.862684][T13582] BTRFS info (device loop7): enabling ssd optimizations [ 1791.869924][T13582] BTRFS info (device loop7): turning on async discard [ 1791.877281][T13582] BTRFS info (device loop7): enabling disk space caching [ 1791.891117][T13582] BTRFS info (device loop7): force clearing of disk cache [ 1791.898614][T13582] BTRFS info (device loop7): use zstd compression, level 3 [ 1792.780966][T13420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1793.419382][T12828] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1793.592014][T13420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1793.824801][T13420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1793.940831][ T5828] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1793.952814][T13420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1794.120738][ T5828] usb 8-1: Using ep0 maxpacket: 32 [ 1794.183028][ T5828] usb 8-1: config 0 has an invalid interface number: 51 but max is 0 [ 1794.204168][ T5828] usb 8-1: config 0 has no interface number 0 [ 1794.230476][ T5828] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1794.250974][ T5828] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.259267][ T5828] usb 8-1: Product: syz [ 1794.277097][ T5828] usb 8-1: Manufacturer: syz [ 1794.291355][ T5828] usb 8-1: SerialNumber: syz [ 1794.312932][ T5828] usb 8-1: config 0 descriptor?? [ 1794.353408][ T5828] quatech2 8-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1795.089819][T13454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1795.152347][T13454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1795.229652][T13454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1795.302552][T13419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1795.349864][T13454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1795.934972][T13419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1796.087881][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.095580][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.199546][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.207271][T10731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.398035][T13517] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1796.479412][T13420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.508577][T13517] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1796.556770][T13517] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1796.639548][T13517] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1796.961274][ T5828] usb 8-1: qt2_attach - failed to power on unit: -71 [ 1796.969254][ T5828] quatech2 8-1:0.51: probe with driver quatech2 failed with error -71 [ 1797.083612][ T5828] usb 8-1: USB disconnect, device number 7 [ 1797.174226][T13420] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.044808][T13606] loop7: detected capacity change from 0 to 32768 [ 1798.059631][T13606] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.729 (13606) [ 1798.117991][T13606] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1798.134658][T13606] BTRFS info (device loop7): using crc32c checksum algorithm [ 1798.142776][T13606] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1798.264178][T13606] BTRFS info (device loop7): rebuilding free space tree [ 1798.337160][T13606] BTRFS info (device loop7): disabling free space tree [ 1798.345603][T13606] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1798.355765][T13606] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1798.372270][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.379836][ T8287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.398269][T13606] BTRFS info (device loop7): enabling ssd optimizations [ 1798.405732][T13606] BTRFS info (device loop7): turning on async discard [ 1798.412954][T13606] BTRFS info (device loop7): enabling disk space caching [ 1798.420231][T13606] BTRFS info (device loop7): force clearing of disk cache [ 1798.427745][T13606] BTRFS info (device loop7): use zstd compression, level 3 [ 1798.487636][ T7735] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.495444][ T7735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.572058][T13454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.600220][T13517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1800.105605][T13517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.235430][T13454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.474752][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.482561][ T8287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.706566][ T8287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.714318][ T8287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.978734][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.986556][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.167203][ T8287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.174916][ T8287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.564656][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.571547][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.884524][T12828] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1802.694868][T13419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1803.777226][T13420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.473039][T13517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.984275][T13454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1807.462958][T13454] veth0_vlan: entered promiscuous mode [ 1807.870994][T13658] loop7: detected capacity change from 0 to 32768 [ 1807.898692][T13658] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.731 (13658) [ 1807.933595][T13658] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1807.944184][T13658] BTRFS info (device loop7): using crc32c checksum algorithm [ 1807.952263][T13658] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1808.234880][T13658] BTRFS info (device loop7): rebuilding free space tree [ 1808.243457][T13454] veth1_vlan: entered promiscuous mode [ 1808.279043][T13658] BTRFS info (device loop7): disabling free space tree [ 1808.286622][T13658] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1808.296867][T13658] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1808.329587][T13658] BTRFS info (device loop7): enabling ssd optimizations [ 1808.337696][T13658] BTRFS info (device loop7): turning on async discard [ 1808.345005][T13658] BTRFS info (device loop7): enabling disk space caching [ 1808.352492][T13658] BTRFS info (device loop7): force clearing of disk cache [ 1808.359918][T13658] BTRFS info (device loop7): use zstd compression, level 3 [ 1808.832985][T13419] veth0_vlan: entered promiscuous mode [ 1809.246039][T13419] veth1_vlan: entered promiscuous mode [ 1809.949613][T13454] veth0_macvtap: entered promiscuous mode [ 1810.128200][T13420] veth0_vlan: entered promiscuous mode [ 1810.233719][T13454] veth1_macvtap: entered promiscuous mode [ 1810.662407][T13420] veth1_vlan: entered promiscuous mode [ 1811.026884][T13454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1811.319888][T13454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1811.352748][T13419] veth0_macvtap: entered promiscuous mode [ 1811.619544][T12828] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1811.651431][ T136] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.674830][ T136] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.726225][ T136] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1811.780440][T13419] veth1_macvtap: entered promiscuous mode [ 1811.876161][ T136] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.132519][T13517] veth0_vlan: entered promiscuous mode [ 1812.269406][T13419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1812.298403][T13420] veth0_macvtap: entered promiscuous mode [ 1812.393316][T13517] veth1_vlan: entered promiscuous mode [ 1812.461207][T13419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1812.504038][T13420] veth1_macvtap: entered promiscuous mode [ 1812.735180][ T136] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.791198][ T136] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.839235][ T136] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1812.875467][ T136] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.163302][T13420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1813.443278][T13420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.506099][T13517] veth0_macvtap: entered promiscuous mode [ 1813.710155][ T136] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.789085][T13517] veth1_macvtap: entered promiscuous mode [ 1813.873882][ T136] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.921229][ T136] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.007605][ T8287] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.456000][T13517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1814.702964][T13517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1814.979234][ T136] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.050670][ T136] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.059812][ T136] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.158276][ T136] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1816.601633][T11882] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1816.962200][T11882] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1817.010727][T11882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.070547][T11882] usb 8-1: Product: syz [ 1817.074996][T11882] usb 8-1: Manufacturer: syz [ 1817.079811][T11882] usb 8-1: SerialNumber: syz [ 1817.211976][T12286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1817.231974][T12286] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1817.241358][T12286] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1817.254508][T11882] usb 8-1: config 0 descriptor?? [ 1817.325198][T12286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1817.359378][T12286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1818.025229][T11882] usb 8-1: Firmware version (0.0) predates our first public release. [ 1818.072695][T11882] usb 8-1: Please update to version 0.2 or newer [ 1818.412170][T11882] usb 8-1: USB disconnect, device number 8 [ 1819.097745][ T9964] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1819.121924][ T9964] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1819.136556][ T9964] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1819.162641][ T9964] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1819.188365][ T9964] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1819.446394][T12286] Bluetooth: hci1: command tx timeout [ 1820.864865][ T8287] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1820.899881][T13752] loop7: detected capacity change from 0 to 40427 [ 1821.020977][T13752] F2FS-fs (loop7): invalid crc value [ 1821.288060][T12286] Bluetooth: hci6: command tx timeout [ 1821.362748][T13752] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1821.373284][T13752] F2FS-fs (loop7): Start checkpoint disabled! [ 1821.385093][T13752] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 1821.412213][T13752] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1821.530616][T12286] Bluetooth: hci1: command tx timeout [ 1821.575448][ T8287] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.135154][ T8287] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.713170][ T8287] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.360582][T12286] Bluetooth: hci6: command tx timeout [ 1823.604012][T12286] Bluetooth: hci1: command tx timeout [ 1824.642130][ T147] kworker/u8:7: attempt to access beyond end of device [ 1824.642130][ T147] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1824.678654][ T8287] bridge_slave_1: left allmulticast mode [ 1824.694917][ T147] CPU: 0 UID: 0 PID: 147 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 1824.695105][ T147] Tainted: [L]=SOFTLOCKUP [ 1824.695165][ T147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1824.695293][ T147] Workqueue: writeback wb_workfn (flush-7:7) [ 1824.695513][ T147] Call Trace: [ 1824.695573][ T147] [ 1824.695629][ T147] __dump_stack+0x26/0x30 [ 1824.695809][ T147] dump_stack_lvl+0x14c/0x1c0 [ 1824.695999][ T147] dump_stack+0x1e/0x25 [ 1824.696167][ T147] f2fs_handle_critical_error+0xa6f/0xc20 [ 1824.696447][ T147] f2fs_stop_checkpoint+0x65/0x80 [ 1824.696611][ T147] f2fs_write_end_io+0x12e6/0x2560 [ 1824.696849][ T147] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1824.697028][ T147] bio_endio+0x1006/0x1160 [ 1824.697218][ T147] submit_bio_noacct+0x533/0x2960 [ 1824.697462][ T147] submit_bio+0x57a/0x620 [ 1824.697653][ T147] f2fs_submit_write_bio+0x115/0x350 [ 1824.697885][ T147] __submit_merged_bio+0x16f/0x780 [ 1824.698111][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1824.698288][ T147] __submit_merged_write_cond+0x4ba/0xae0 [ 1824.698542][ T147] f2fs_write_data_pages+0x5073/0x5e10 [ 1824.698862][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1824.699044][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1824.699218][ T147] ? update_load_avg+0x14eb/0x25d0 [ 1824.699434][ T147] ? update_load_avg+0x14e0/0x25d0 [ 1824.699647][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1824.699798][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1824.699954][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1824.700107][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1824.700274][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1824.700417][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1824.700568][ T147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1824.700732][ T147] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1824.700899][ T147] do_writepages+0x3f2/0x860 [ 1824.701061][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1824.701230][ T147] ? writeback_sb_inodes+0x21/0x1d90 [ 1824.701417][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1824.701587][ T147] __writeback_single_inode+0x101/0x11c0 [ 1824.701825][ T147] writeback_sb_inodes+0xb3b/0x1d90 [ 1824.702144][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1824.702302][ T147] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1824.702471][ T147] wb_writeback+0x4f1/0xcd0 [ 1824.702694][ T147] ? queue_io+0x431/0x800 [ 1824.702895][ T147] wb_workfn+0x3b9/0x19b0 [ 1824.703075][ T147] ? kmsan_get_metadata+0xf1/0x160 [ 1824.703258][ T147] ? __pfx_wb_workfn+0x10/0x10 [ 1824.703430][ T147] process_scheduled_works+0xb82/0x1e80 [ 1824.703684][ T147] worker_thread+0xee4/0x1590 [ 1824.703899][ T147] kthread+0x53f/0x600 [ 1824.704083][ T147] ? __pfx_worker_thread+0x10/0x10 [ 1824.704272][ T147] ? __pfx_kthread+0x10/0x10 [ 1824.704451][ T147] ret_from_fork+0x20f/0x910 [ 1824.704617][ T147] ? __switch_to+0x51c/0x750 [ 1824.704818][ T147] ? __pfx_kthread+0x10/0x10 [ 1824.705007][ T147] ret_from_fork_asm+0x1a/0x30 [ 1824.705243][ T147] [ 1824.721090][ T8287] bridge_slave_1: left promiscuous mode [ 1824.847789][ T147] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1825.152538][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.173530][ T8287] bridge_slave_0: left allmulticast mode [ 1825.179430][ T8287] bridge_slave_0: left promiscuous mode [ 1825.191689][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1825.445077][T12286] Bluetooth: hci6: command tx timeout [ 1825.684919][T12286] Bluetooth: hci1: command tx timeout [ 1826.113488][ T8287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1826.163920][ T8287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1826.199344][ T8287] bond0 (unregistering): Released all slaves [ 1826.441096][ T8287] hsr_slave_0: left promiscuous mode [ 1826.501166][ T8287] hsr_slave_1: left promiscuous mode [ 1826.531248][ T8287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1826.540133][ T8287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1826.589898][ T8287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1826.620635][ T8287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1826.707135][ T8287] veth1_macvtap: left promiscuous mode [ 1826.720441][ T8287] veth0_macvtap: left promiscuous mode [ 1826.726414][ T8287] veth1_vlan: left promiscuous mode [ 1826.751194][ T8287] veth0_vlan: left promiscuous mode [ 1827.522645][T12286] Bluetooth: hci6: command tx timeout [ 1827.926284][ T9964] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1827.956558][ T9964] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1828.048766][ T9964] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1828.131388][ T9964] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1828.202350][ T9964] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1830.324525][ T9964] Bluetooth: hci2: command tx timeout [ 1831.782946][ T8287] team0 (unregistering): Port device team_slave_1 removed [ 1831.873867][ T8287] team0 (unregistering): Port device team_slave_0 removed [ 1832.572024][T13797] loop7: detected capacity change from 0 to 32768 [ 1832.586977][ T9964] Bluetooth: hci2: command tx timeout [ 1832.632883][T13797] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.738 (13797) [ 1832.664900][T13797] BTRFS info (device loop7): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1832.675539][T13797] BTRFS info (device loop7): using crc32c checksum algorithm [ 1832.686007][T13797] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 1832.809103][T13729] chnl_net:caif_netlink_parms(): no params data found [ 1833.019723][T13797] BTRFS info (device loop7): rebuilding free space tree [ 1833.095991][T13797] BTRFS info (device loop7): disabling free space tree [ 1833.106932][T13797] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1833.117077][T13797] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1833.195858][T13797] BTRFS info (device loop7): enabling ssd optimizations [ 1833.203286][T13797] BTRFS info (device loop7): turning on async discard [ 1833.210792][T13797] BTRFS info (device loop7): enabling disk space caching [ 1833.218084][T13797] BTRFS info (device loop7): force clearing of disk cache [ 1833.225651][T13797] BTRFS info (device loop7): use zstd compression, level 3 [ 1833.602731][T13743] chnl_net:caif_netlink_parms(): no params data found [ 1834.640744][ T9964] Bluetooth: hci2: command tx timeout [ 1834.746520][T12828] BTRFS info (device loop7): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1835.283740][ T8287] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.467703][ T8287] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.941653][ T8287] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.429345][ T8287] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.723480][ T9964] Bluetooth: hci2: command tx timeout [ 1836.782766][T13729] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.812783][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.856866][T13729] bridge_slave_0: entered allmulticast mode [ 1836.894253][T13729] bridge_slave_0: entered promiscuous mode [ 1837.117279][T12286] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1837.127349][T12286] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1837.138307][T12286] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1837.161600][T12286] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1837.176792][T12286] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1837.234564][T13729] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.319313][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.354408][T13729] bridge_slave_1: entered allmulticast mode [ 1837.435682][T13729] bridge_slave_1: entered promiscuous mode [ 1837.706239][T13743] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.741208][T13743] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.749144][T13743] bridge_slave_0: entered allmulticast mode [ 1837.794307][T13743] bridge_slave_0: entered promiscuous mode [ 1838.018918][T13743] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.052910][T13743] bridge0: port 2(bridge_slave_1) entered disabled state [ 1838.088997][T13743] bridge_slave_1: entered allmulticast mode [ 1838.124503][T13743] bridge_slave_1: entered promiscuous mode [ 1838.561901][T13729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1838.832449][T13729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.038385][T13743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1839.273809][T13743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.291594][T12286] Bluetooth: hci3: command tx timeout [ 1839.675031][T13729] team0: Port device team_slave_0 added [ 1839.683895][T13789] chnl_net:caif_netlink_parms(): no params data found [ 1839.815946][ T8287] bridge_slave_1: left allmulticast mode [ 1839.830566][ T8287] bridge_slave_1: left promiscuous mode [ 1839.837293][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.877160][ T8287] bridge_slave_0: left allmulticast mode [ 1839.883189][ T8287] bridge_slave_0: left promiscuous mode [ 1839.889857][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.461224][ T8287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1840.505467][ T8287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1840.528575][ T8287] bond0 (unregistering): Released all slaves [ 1840.599912][T13729] team0: Port device team_slave_1 added [ 1840.747839][ T8287] hsr_slave_0: left promiscuous mode [ 1840.756969][ T8287] hsr_slave_1: left promiscuous mode [ 1840.775186][ T8287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1840.785893][ T8287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1840.798901][ T8287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1840.808579][ T8287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1840.837634][ T8287] veth1_macvtap: left promiscuous mode [ 1840.846860][ T8287] veth0_macvtap: left promiscuous mode [ 1840.854773][ T8287] veth1_vlan: left promiscuous mode [ 1840.862436][ T8287] veth0_vlan: left promiscuous mode [ 1841.360822][T12286] Bluetooth: hci3: command tx timeout [ 1842.242971][ T8287] team0 (unregistering): Port device team_slave_1 removed [ 1842.277632][ T8287] team0 (unregistering): Port device team_slave_0 removed [ 1842.780782][T13743] team0: Port device team_slave_0 added [ 1843.017841][T13743] team0: Port device team_slave_1 added [ 1843.171717][T13729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1843.178913][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1843.238578][T13729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1843.257457][T13729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1843.264957][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1843.293636][T13729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1843.440981][T12286] Bluetooth: hci3: command tx timeout [ 1843.728644][T13743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1843.750646][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1843.819988][T13743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1843.892334][T13743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1843.899438][T13743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1843.953164][T13743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1844.156523][ T8287] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.350921][T13729] hsr_slave_0: entered promiscuous mode [ 1844.366711][T13729] hsr_slave_1: entered promiscuous mode [ 1844.430220][ T8287] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.639690][ T8287] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.779520][T13743] hsr_slave_0: entered promiscuous mode [ 1844.818707][T13743] hsr_slave_1: entered promiscuous mode [ 1844.846512][T13743] debugfs: 'hsr0' already exists in 'hsr' [ 1844.868394][T13743] Cannot create hsr debugfs directory [ 1844.887417][T13789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.933900][T13789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1844.953575][T13789] bridge_slave_0: entered allmulticast mode [ 1844.978182][T13789] bridge_slave_0: entered promiscuous mode [ 1845.004184][T13789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.017057][T13789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.026973][T13789] bridge_slave_1: entered allmulticast mode [ 1845.038722][T13789] bridge_slave_1: entered promiscuous mode [ 1845.094220][ C0] ===================================================== [ 1845.101631][ C0] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x362/0x18e0 [ 1845.110467][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1845.116916][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1845.124072][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1845.130270][ C0] sysvec_call_function_single+0x7c/0x90 [ 1845.136510][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1845.142686][ C0] finish_task_switch+0x11b/0x8b0 [ 1845.148048][ C0] __schedule+0x2607/0x8640 [ 1845.152712][ C0] schedule+0x17c/0x3c0 [ 1845.157028][ C0] worker_thread+0x12f0/0x1590 [ 1845.161995][ C0] kthread+0x53f/0x600 [ 1845.166257][ C0] ret_from_fork+0x20f/0x910 [ 1845.171055][ C0] ret_from_fork_asm+0x1a/0x30 [ 1845.176060][ C0] [ 1845.178498][ C0] Local variable mmap_event created at: [ 1845.184201][ C0] perf_event_mmap+0x47/0x2fe0 [ 1845.189262][ C0] mmap_region+0x4a79/0x6220 [ 1845.194154][ C0] [ 1845.196602][ C0] CPU: 0 UID: 0 PID: 152 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1845.207757][ C0] Tainted: [L]=SOFTLOCKUP [ 1845.212231][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1845.222442][ C0] Workqueue: 0x0 (events_unbound) [ 1845.227771][ C0] ===================================================== [ 1845.234804][ C0] Disabling lock debugging due to kernel taint [ 1845.241079][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1845.247736][ C0] CPU: 0 UID: 0 PID: 152 Comm: kworker/u8:8 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1845.258899][ C0] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1845.264562][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1845.274793][ C0] Workqueue: 0x0 (events_unbound) [ 1845.280145][ C0] Call Trace: [ 1845.283543][ C0] [ 1845.286499][ C0] __dump_stack+0x26/0x30 [ 1845.291024][ C0] dump_stack_lvl+0x50/0x1c0 [ 1845.295865][ C0] ? dump_stack+0x12/0x25 [ 1845.300393][ C0] dump_stack+0x1e/0x25 [ 1845.304745][ C0] vpanic+0x7b4/0x1430 [ 1845.309075][ C0] panic+0x15d/0x160 [ 1845.313227][ C0] kmsan_report+0x31a/0x320 [ 1845.317970][ C0] ? __msan_warning+0x1b/0x30 [ 1845.322866][ C0] ? __flush_smp_call_function_queue+0x362/0x18e0 [ 1845.329477][ C0] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1845.336807][ C0] ? __sysvec_call_function_single+0x4b/0x3e0 [ 1845.343091][ C0] ? sysvec_call_function_single+0x7c/0x90 [ 1845.349170][ C0] ? asm_sysvec_call_function_single+0x1f/0x30 [ 1845.355513][ C0] ? finish_task_switch+0x11b/0x8b0 [ 1845.360936][ C0] ? __schedule+0x2607/0x8640 [ 1845.365803][ C0] ? schedule+0x17c/0x3c0 [ 1845.370326][ C0] ? worker_thread+0x12f0/0x1590 [ 1845.375569][ C0] ? kthread+0x53f/0x600 [ 1845.380017][ C0] ? ret_from_fork+0x20f/0x910 [ 1845.384989][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1845.390175][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.395465][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.400754][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1845.407334][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1845.413630][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.418919][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1845.424929][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.430222][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1845.436794][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.442076][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1845.448076][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.453377][ C0] __msan_warning+0x1b/0x30 [ 1845.458087][ C0] __flush_smp_call_function_queue+0x362/0x18e0 [ 1845.464536][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1845.470573][ C0] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1845.477718][ C0] __sysvec_call_function_single+0x4b/0x3e0 [ 1845.483842][ C0] sysvec_call_function_single+0x7c/0x90 [ 1845.489706][ C0] [ 1845.492760][ C0] [ 1845.495810][ C0] asm_sysvec_call_function_single+0x1f/0x30 [ 1845.502002][ C0] RIP: 0010:finish_task_switch+0x11b/0x8b0 [ 1845.508084][ C0] Code: e8 0f 84 65 02 00 00 4d 85 ed 0f 85 6d 02 00 00 0f 1f 44 00 00 49 83 c7 48 4c 8b 6d c0 4c 89 ff e8 8a 53 5a 0f fb 48 8b 45 b8 <48> 8d 98 88 1b 00 00 41 be ff ff ff bf 44 23 b0 88 1b 00 00 48 89 [ 1845.527891][ C0] RSP: 0018:ffff888107e6ba60 EFLAGS: 00000282 [ 1845.534171][ C0] RAX: ffff888107e5c280 RBX: ffff88813fca3bd8 RCX: 0000000000000001 [ 1845.542296][ C0] RDX: 000000001584a028 RSI: 0000000000000001 RDI: ffffffff9584a028 [ 1845.550412][ C0] RBP: ffff888107e6bad0 R08: ffffea000000000f R09: 0000000000000000 [ 1845.558651][ C0] R10: ffff888237c90028 R11: 0000000000000000 R12: 0000000000000000 [ 1845.566802][ C0] R13: ffff888106508000 R14: 0000000000000000 R15: ffff88813fca3108 [ 1845.575023][ C0] __schedule+0x2607/0x8640 [ 1845.579758][ C0] ? pwq_dec_nr_in_flight+0x164f/0x1d00 [ 1845.585548][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1845.592135][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.597426][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1845.603426][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.608710][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.613994][ C0] ? kmsan_get_metadata+0xf1/0x160 [ 1845.619296][ C0] schedule+0x17c/0x3c0 [ 1845.623647][ C0] worker_thread+0x12f0/0x1590 [ 1845.628654][ C0] kthread+0x53f/0x600 [ 1845.632925][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1845.638298][ C0] ? __pfx_kthread+0x10/0x10 [ 1845.643111][ C0] ret_from_fork+0x20f/0x910 [ 1845.647895][ C0] ? __switch_to+0x51c/0x750 [ 1845.652706][ C0] ? __pfx_kthread+0x10/0x10 [ 1845.657503][ C0] ret_from_fork_asm+0x1a/0x30 [ 1845.662509][ C0] [ 1845.666264][ C0] Kernel Offset: disabled [ 1845.670932][ C0] Rebooting in 86400 seconds..