last executing test programs: 11.910331687s ago: executing program 3 (id=779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsmount(0xffffffffffffffff, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2c311e2cb86c82d4873c6af6ddc7bde3c511a1315e4f85948a98ae388123b56361ed3cc4c3e5523eb70372d9fb8f341b24358d32f2fdd32382b9d53229b6d19d04b3461e6fbdbf7e44bb5"]) 11.598567866s ago: executing program 2 (id=782): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) 10.108799799s ago: executing program 4 (id=787): socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x8000000001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0300ffff0000", 0x6}]) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x101, 0x2, 0x2, 0x8, 0xfca7}}, 0x11c) 9.928817295s ago: executing program 2 (id=789): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0x101, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xf8df803362adb335}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 9.898890094s ago: executing program 3 (id=790): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, 0xffffffffffffffff, 0x0, 0x2c8, 0x0, 0x2, 0x4096b, 0x200000000000, 0xffffffffffffff7b}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x10000, 0x40}]}) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) 8.604214222s ago: executing program 3 (id=793): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sndseq(r0, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) 7.056607202s ago: executing program 3 (id=794): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x101042, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0xb1, 0xff, 0x0, 0x5}, 0xe) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @remote, 0x6}, 0x1c) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) r7 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0xf5e4ed90c64530d6, r8, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x3, [{0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2c01}}]}) 6.998945734s ago: executing program 0 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x1fa3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd21, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0xffe0, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xa, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004094}, 0x4000000) 6.817950846s ago: executing program 2 (id=796): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054000) 4.508973754s ago: executing program 1 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) 4.475486913s ago: executing program 4 (id=798): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x97b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) 4.408493942s ago: executing program 0 (id=799): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x2000004) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0) 4.340382276s ago: executing program 1 (id=800): syz_io_uring_setup(0x50cf, &(0x7f0000000000)={0x0, 0xfffffffc, 0x40000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) 4.26253993s ago: executing program 1 (id=801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3.746847868s ago: executing program 3 (id=802): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 3.532421281s ago: executing program 4 (id=803): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, 0xffffffffffffffff, 0x0, 0x2c8, 0x0, 0x2, 0x4096b, 0x200000000000, 0xffffffffffffff7b}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x10000, 0x40}]}) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) 3.352983921s ago: executing program 1 (id=804): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$sndseq(r0, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) 3.203577746s ago: executing program 2 (id=805): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3ff, &(0x7f0000000500)) init_module(0x0, 0x78, 0x0) 2.35708672s ago: executing program 4 (id=806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) 2.35630493s ago: executing program 1 (id=807): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0)={0x3, 0x2000}, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00') preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000002380)=""/169, 0xa9}], 0x1, 0x0, 0x0) 2.250571094s ago: executing program 3 (id=808): socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x8000000001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0300ffff0000", 0x6}]) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x0, 0x101, 0x2, 0x2, 0x8, 0xfca7}}, 0x11c) 2.107299938s ago: executing program 4 (id=809): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.062559526s ago: executing program 2 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) 1.335349846s ago: executing program 0 (id=811): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000018c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) 1.32027738s ago: executing program 4 (id=812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(r0, 0x1) syz_80211_inject_frame(0x0, 0x0, 0x1c1) syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000040)='./file1\x00', 0x3810084, &(0x7f00000001c0)=ANY=[@ANYBLOB="76657273696f6e5f757067726164653d636f6d70617469626c652c62747265655f6e6f64655f6d656d5f7074725f6f63746105977f45696d697a6174696f6e2c6e6f7265636f766572792c6163002c6669785f6572726f72733d7965732c6261636b67726f756e645f636f6d7072653221f36249616e3d6c7a342c61636c2c646973636172", @ANYRESHEX, @ANYRESOCT=r0], 0x1, 0x594f, &(0x7f0000009680)="$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") 1.264316386s ago: executing program 2 (id=813): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x97b}, &(0x7f0000ffe000), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xa0031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) 1.243308683s ago: executing program 0 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.045887614s ago: executing program 1 (id=815): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x4, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x24054000) 312.660414ms ago: executing program 0 (id=816): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x20000800) 0s ago: executing program 0 (id=817): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, 0xffffffffffffffff, 0x0, 0x2c8, 0x0, 0x2, 0x4096b, 0x200000000000, 0xffffffffffffff7b}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000180)={0x18, 0x0, 0x1, 0x0, &(0x7f0000000100)=[{0x10000, 0x40}]}) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. [ 36.750175][ T6505] cgroup: Unknown subsys name 'net' [ 36.841287][ T6505] cgroup: Unknown subsys name 'cpuset' [ 36.845006][ T6505] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 37.093861][ T6505] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.653335][ T6527] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.654361][ T6527] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.654621][ T6527] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.654859][ T6527] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.656094][ T6527] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 38.656512][ T6528] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.657218][ T6531] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.657637][ T6531] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.658360][ T6531] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.658910][ T6531] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.659988][ T6519] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.660342][ T6519] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.661010][ T6519] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.661472][ T6519] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 38.662466][ T6519] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.662667][ T6519] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 38.666545][ T6528] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.667151][ T6528] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 38.667318][ T6528] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.668185][ T6528] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.669296][ T6528] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.670615][ T6528] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 38.680383][ T6528] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 38.680575][ T6528] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 38.684492][ T6528] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 38.992943][ T6516] chnl_net:caif_netlink_parms(): no params data found [ 39.024779][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 39.112139][ T6517] chnl_net:caif_netlink_parms(): no params data found [ 39.148947][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.149081][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.149232][ T6516] bridge_slave_0: entered allmulticast mode [ 39.150177][ T6516] bridge_slave_0: entered promiscuous mode [ 39.188053][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.188160][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.188294][ T6516] bridge_slave_1: entered allmulticast mode [ 39.189829][ T6516] bridge_slave_1: entered promiscuous mode [ 39.204997][ T6518] chnl_net:caif_netlink_parms(): no params data found [ 39.223679][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.238593][ T6515] chnl_net:caif_netlink_parms(): no params data found [ 39.255673][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.268813][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.268909][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.269026][ T6526] bridge_slave_0: entered allmulticast mode [ 39.269925][ T6526] bridge_slave_0: entered promiscuous mode [ 39.299065][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.301109][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.303223][ T6526] bridge_slave_1: entered allmulticast mode [ 39.304079][ T6526] bridge_slave_1: entered promiscuous mode [ 39.318795][ T6517] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.320942][ T6517] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.323247][ T6517] bridge_slave_0: entered allmulticast mode [ 39.324737][ T6517] bridge_slave_0: entered promiscuous mode [ 39.326075][ T6517] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.326121][ T6517] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.326244][ T6517] bridge_slave_1: entered allmulticast mode [ 39.327135][ T6517] bridge_slave_1: entered promiscuous mode [ 39.366253][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.369067][ T6516] team0: Port device team_slave_0 added [ 39.399262][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.407086][ T6516] team0: Port device team_slave_1 added [ 39.424562][ T6517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.427334][ T6518] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.427431][ T6518] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.427549][ T6518] bridge_slave_0: entered allmulticast mode [ 39.428435][ T6518] bridge_slave_0: entered promiscuous mode [ 39.434796][ T6518] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.434847][ T6518] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.434948][ T6518] bridge_slave_1: entered allmulticast mode [ 39.435779][ T6518] bridge_slave_1: entered promiscuous mode [ 39.453944][ T6526] team0: Port device team_slave_0 added [ 39.470057][ T6517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.477336][ T6526] team0: Port device team_slave_1 added [ 39.485139][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.487194][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.488755][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.520837][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.520888][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.520928][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.539447][ T6518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.546567][ T6515] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.549045][ T6515] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.551283][ T6515] bridge_slave_0: entered allmulticast mode [ 39.553985][ T6515] bridge_slave_0: entered promiscuous mode [ 39.556899][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.556956][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.556992][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.558130][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.558155][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.558201][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.597608][ T6518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.615664][ T6517] team0: Port device team_slave_0 added [ 39.615986][ T6515] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.616031][ T6515] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.617030][ T6515] bridge_slave_1: entered allmulticast mode [ 39.617878][ T6515] bridge_slave_1: entered promiscuous mode [ 39.635473][ T6526] hsr_slave_0: entered promiscuous mode [ 39.638073][ T6526] hsr_slave_1: entered promiscuous mode [ 39.643353][ T6516] hsr_slave_0: entered promiscuous mode [ 39.643901][ T6516] hsr_slave_1: entered promiscuous mode [ 39.644247][ T6516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.644313][ T6516] Cannot create hsr debugfs directory [ 39.656291][ T6517] team0: Port device team_slave_1 added [ 39.658161][ T6518] team0: Port device team_slave_0 added [ 39.661756][ T6515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.681997][ T6518] team0: Port device team_slave_1 added [ 39.690125][ T6515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.727281][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.729442][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.729510][ T6518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.730276][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.730300][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.730331][ T6517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.731984][ T6518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.732011][ T6518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.732047][ T6518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.755976][ T6515] team0: Port device team_slave_0 added [ 39.771973][ T6517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.772019][ T6517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.772062][ T6517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.782308][ T6515] team0: Port device team_slave_1 added [ 39.832077][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.833476][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.833519][ T6515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.834666][ T6515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.834691][ T6515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.834726][ T6515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.867549][ T6517] hsr_slave_0: entered promiscuous mode [ 39.869395][ T6517] hsr_slave_1: entered promiscuous mode [ 39.869806][ T6517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.869837][ T6517] Cannot create hsr debugfs directory [ 39.899832][ T6518] hsr_slave_0: entered promiscuous mode [ 39.902141][ T6518] hsr_slave_1: entered promiscuous mode [ 39.903934][ T6518] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.904227][ T6518] Cannot create hsr debugfs directory [ 39.945261][ T6515] hsr_slave_0: entered promiscuous mode [ 39.945807][ T6515] hsr_slave_1: entered promiscuous mode [ 39.946125][ T6515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.946154][ T6515] Cannot create hsr debugfs directory [ 40.146920][ T6516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.151200][ T6516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.175984][ T6516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.181678][ T6516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.233696][ T6526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.238228][ T6526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.249532][ T6526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.255474][ T6526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.303742][ T6517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.326920][ T6517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.332173][ T6517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.346705][ T6517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.389618][ T6515] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.406111][ T6515] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.409982][ T6515] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.421914][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.425689][ T6516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.426548][ T6515] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.446749][ T6516] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.461425][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.463562][ T6518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.472921][ T6518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.477086][ T6518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.481695][ T6518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.486230][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.486437][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.507773][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.507856][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.509086][ T4114] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.509133][ T4114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.536901][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.536999][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.655995][ T6515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.661984][ T6517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.695882][ T6515] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.699409][ T6525] Bluetooth: hci2: command tx timeout [ 40.701182][ T6528] Bluetooth: hci3: command tx timeout [ 40.704702][ T4114] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.704775][ T4114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.716292][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.716369][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.727286][ T6516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.744869][ T6517] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.764265][ T6518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.773246][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.773324][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.779129][ T6525] Bluetooth: hci1: command tx timeout [ 40.779319][ T6525] Bluetooth: hci0: command tx timeout [ 40.782494][ T6528] Bluetooth: hci4: command tx timeout [ 40.798351][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.802196][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.802282][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.826650][ T6517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.828782][ T6517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.858367][ T6518] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.885403][ T1642] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.885483][ T1642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.886479][ T1642] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.886536][ T1642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.912213][ T6516] veth0_vlan: entered promiscuous mode [ 40.941728][ T6526] veth0_vlan: entered promiscuous mode [ 40.944878][ T6526] veth1_vlan: entered promiscuous mode [ 40.962626][ T6516] veth1_vlan: entered promiscuous mode [ 40.997504][ T6515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.015156][ T6517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.095039][ T6515] veth0_vlan: entered promiscuous mode [ 41.097716][ T6516] veth0_macvtap: entered promiscuous mode [ 41.104812][ T6516] veth1_macvtap: entered promiscuous mode [ 41.119776][ T6515] veth1_vlan: entered promiscuous mode [ 41.145318][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.151680][ T6516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.155308][ T6516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.157902][ T6516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.158623][ T6516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.158657][ T6516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.172815][ T6518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.199238][ T6518] veth0_vlan: entered promiscuous mode [ 41.200341][ T6515] veth0_macvtap: entered promiscuous mode [ 41.201970][ T6526] veth0_macvtap: entered promiscuous mode [ 41.203870][ T6526] veth1_macvtap: entered promiscuous mode [ 41.234665][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.235123][ T6515] veth1_macvtap: entered promiscuous mode [ 41.245948][ T6518] veth1_vlan: entered promiscuous mode [ 41.272340][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.277420][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.285043][ T6515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.304697][ T6526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.304777][ T6526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.305138][ T6526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.305170][ T6526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.314941][ T6515] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.315004][ T6515] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.315035][ T6515] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.315065][ T6515] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.332390][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.332473][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.358893][ T6517] veth0_vlan: entered promiscuous mode [ 41.371240][ T6517] veth1_vlan: entered promiscuous mode [ 41.377431][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.377493][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.399452][ T6518] veth0_macvtap: entered promiscuous mode [ 41.423929][ T6518] veth1_macvtap: entered promiscuous mode [ 41.452805][ T6517] veth0_macvtap: entered promiscuous mode [ 41.468395][ T6517] veth1_macvtap: entered promiscuous mode [ 41.481156][ T4114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.483551][ T4114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.495111][ T6516] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.500073][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.504836][ T6517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.542490][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.544434][ T6518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.545949][ T6518] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.545990][ T6518] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.546020][ T6518] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.546050][ T6518] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.563047][ T6517] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.565709][ T6517] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.568340][ T6517] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.570113][ T6517] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.597632][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.602591][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.626545][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.626606][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.740099][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.740169][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.760054][ T4114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.760127][ T4114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.809658][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.809722][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.869005][ T4114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.869060][ T4114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.910952][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.911016][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.992875][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.993280][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.944779][ T6528] Bluetooth: hci3: command tx timeout [ 42.945067][ T6528] Bluetooth: hci2: command tx timeout [ 42.945682][ T6528] Bluetooth: hci4: command tx timeout [ 42.946006][ T6528] Bluetooth: hci0: command tx timeout [ 42.946345][ T6528] Bluetooth: hci1: command tx timeout [ 43.115160][ T6594] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 43.670267][ T6594] usb 1-1: Using ep0 maxpacket: 8 [ 43.965430][ T6594] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 43.965517][ T6594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.965563][ T6594] usb 1-1: Product: syz [ 43.965591][ T6594] usb 1-1: Manufacturer: syz [ 43.965618][ T6594] usb 1-1: SerialNumber: syz [ 43.978403][ T6594] usb 1-1: config 0 descriptor?? [ 44.001785][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.004590][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.141392][ T6671] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16'. [ 44.221715][ T6594] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 44.376686][ T6678] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19'. [ 44.731721][ T6594] gspca_sunplus: reg_w_riv err -110 [ 44.744343][ T6594] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 45.019043][ T6528] Bluetooth: hci0: command tx timeout [ 45.019120][ T6528] Bluetooth: hci4: command tx timeout [ 45.019154][ T6528] Bluetooth: hci2: command tx timeout [ 45.019186][ T6528] Bluetooth: hci3: command tx timeout [ 45.019373][ T6530] Bluetooth: hci1: command tx timeout [ 45.255534][ T6688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 46.080332][ T6268] usb 1-1: USB disconnect, device number 2 [ 46.221764][ T6699] netlink: 'syz.2.24': attribute type 1 has an invalid length. [ 46.314903][ T6704] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 46.508387][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 47.118597][ T6530] Bluetooth: hci1: command tx timeout [ 47.118674][ T6530] Bluetooth: hci3: command tx timeout [ 47.118727][ T6530] Bluetooth: hci2: command tx timeout [ 47.118767][ T6530] Bluetooth: hci4: command tx timeout [ 47.118808][ T6530] Bluetooth: hci0: command tx timeout [ 47.190833][ T6711] netlink: 56 bytes leftover after parsing attributes in process `syz.4.28'. [ 47.396603][ T6718] netlink: 44 bytes leftover after parsing attributes in process `syz.4.30'. [ 47.762765][ T6731] process 'syz.1.34' launched './file2' with NULL argv: empty string added [ 48.705585][ T6268] IPVS: starting estimator thread 0... [ 48.806002][ T6742] IPVS: using max 34 ests per chain, 81600 per kthread [ 48.840728][ T6747] netlink: 56 bytes leftover after parsing attributes in process `syz.1.39'. [ 49.909558][ T6751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.41'. [ 50.458709][ T6771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.459034][ T6771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.945425][ T6778] 9pnet_virtio: no channels available for device syz [ 51.836802][ T6788] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.981580][ T6791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'. [ 52.725722][ T6796] netlink: 56 bytes leftover after parsing attributes in process `syz.0.51'. [ 52.841679][ T6799] netlink: 44 bytes leftover after parsing attributes in process `syz.0.54'. [ 52.885703][ T6801] Bluetooth: MGMT ver 1.23 [ 53.848618][ T6819] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET) [ 54.873812][ T6829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 54.934365][ T6834] netlink: 'syz.4.64': attribute type 1 has an invalid length. [ 55.125580][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.125902][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.169530][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.169850][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.354822][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 55.393792][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.68'. [ 55.527889][ T6840] @: renamed from vlan0 (while UP) [ 55.706265][ T6853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.70'. [ 56.652170][ T6867] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 56.816719][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.825275][ T6871] bond0: (slave rose0): Enslaving as an active interface with an up link [ 56.924427][ T6877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 57.820581][ T6890] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 58.065297][ T6882] netlink: 'syz.4.80': attribute type 2 has an invalid length. [ 58.071329][ T6892] @: renamed from vlan0 (while UP) [ 58.811586][ T6913] netlink: 'syz.1.88': attribute type 1 has an invalid length. [ 61.470730][ T6955] @: renamed from vlan0 (while UP) [ 62.186419][ T6967] netlink: 84 bytes leftover after parsing attributes in process `syz.3.102'. [ 62.612352][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.103'. [ 63.140000][ T1814] cfg80211: failed to load regulatory.db [ 64.318918][ T6995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 64.685925][ T7011] binder: 7001:7011 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 64.874280][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.874540][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.470919][ T7014] netlink: 84 bytes leftover after parsing attributes in process `syz.2.114'. [ 66.520938][ T7029] Process accounting resumed [ 66.575090][ T7026] vlan2: entered allmulticast mode [ 66.590327][ T7026] bond0: entered allmulticast mode [ 66.590393][ T7026] bond_slave_0: entered allmulticast mode [ 66.590425][ T7026] bond_slave_1: entered allmulticast mode [ 66.605164][ T7026] bridge0: port 3(vlan2) entered blocking state [ 66.605299][ T7026] bridge0: port 3(vlan2) entered disabled state [ 66.611288][ T7026] vlan2: entered promiscuous mode [ 66.623252][ T7026] bond0: entered promiscuous mode [ 66.623313][ T7026] bond_slave_0: entered promiscuous mode [ 66.623454][ T7026] bond_slave_1: entered promiscuous mode [ 66.630918][ T7026] bridge0: port 3(vlan2) entered blocking state [ 66.631131][ T7026] bridge0: port 3(vlan2) entered forwarding state [ 67.803869][ T7054] netlink: 84 bytes leftover after parsing attributes in process `syz.0.126'. [ 68.016784][ T7058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 70.329231][ T7078] batadv1: entered promiscuous mode [ 72.649167][ T7101] netlink: 84 bytes leftover after parsing attributes in process `syz.1.141'. [ 72.861832][ T7116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.147'. [ 72.913384][ T7121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 74.031878][ T7143] netlink: 84 bytes leftover after parsing attributes in process `syz.4.155'. [ 76.067265][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 76.152638][ T7170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 77.544341][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 77.547947][ T7210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.179'. [ 77.754487][ T7211] misc userio: Invalid payload size [ 78.052229][ T7232] netlink: 'syz.4.187': attribute type 2 has an invalid length. [ 78.498372][ T7249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 79.181170][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 79.239480][ T7260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.196'. [ 79.272965][ T7262] netlink: 'syz.3.200': attribute type 2 has an invalid length. [ 80.941049][ T7300] misc userio: Invalid payload size [ 81.600120][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 81.654959][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.217'. [ 82.856638][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 93.830108][ T7369] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.009052][ T7376] Zero length message leads to an empty skb [ 94.262236][ T7380] misc userio: Invalid payload size [ 96.447636][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.447955][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.469754][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.470062][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.504637][ T7421] netlink: 84 bytes leftover after parsing attributes in process `syz.2.246'. [ 98.414221][ T7460] netlink: 84 bytes leftover after parsing attributes in process `syz.3.261'. [ 98.717938][ T7469] tmpfs: Unknown parameter '' [ 99.674289][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 99.749118][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.269'. [ 99.835691][ T7486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.836007][ T7486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.956263][ T7489] netlink: 84 bytes leftover after parsing attributes in process `syz.0.272'. [ 101.009926][ T7514] tmpfs: Unknown parameter '' [ 101.097385][ T7519] netlink: 84 bytes leftover after parsing attributes in process `syz.1.283'. [ 101.434724][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.442294][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.031576][ T6525] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 102.051749][ T7543] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 102.069697][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.4.292'. [ 102.886103][ T7550] netlink: 84 bytes leftover after parsing attributes in process `syz.4.294'. [ 103.706894][ T7576] tmpfs: Unknown parameter '' [ 103.732963][ T7575] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 104.486103][ T7575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.633953][ T7579] veth3: entered promiscuous mode [ 104.640703][ T7579] bond1: (slave veth3): Enslaving as an active interface with a down link [ 106.623877][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 106.640379][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 107.521420][ T7629] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 107.527101][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.0.319'. [ 108.798602][ T6525] Bluetooth: hci5: command 0x1003 tx timeout [ 108.798772][ T6530] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 110.037857][ T7664] tmpfs: Unknown parameter 'mpol' [ 110.595652][ T7674] netlink: 'syz.1.331': attribute type 1 has an invalid length. [ 110.613215][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.331'. [ 113.291750][ T7692] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 113.291858][ T7692] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 113.471714][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 113.472644][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.340'. [ 113.603773][ T7704] xt_nat: multiple ranges no longer supported [ 114.506981][ T7713] tmpfs: Unknown parameter 'mpol' [ 115.220495][ T6525] Bluetooth: hci5: command 0x1003 tx timeout [ 115.238912][ T6530] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 115.694128][ T7733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.351'. [ 119.268448][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 119.303647][ T7778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.365'. [ 119.597514][ T7788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.369'. [ 121.018600][ T6525] Bluetooth: hci5: command 0x1003 tx timeout [ 121.020740][ T6530] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 121.964872][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.381'. [ 121.989252][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 122.034729][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.378'. [ 126.392027][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.392113][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.158679][ T6525] Bluetooth: hci5: command 0x1003 tx timeout [ 127.222409][ T6530] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 127.459313][ T7893] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 129.508629][ T6530] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.275305][ T7937] netlink: 16 bytes leftover after parsing attributes in process `syz.2.417'. [ 131.544899][ T7943] netlink: 44 bytes leftover after parsing attributes in process `syz.0.420'. [ 131.843164][ T7949] vlan2: entered allmulticast mode [ 131.843237][ T7949] bond0: entered allmulticast mode [ 131.843259][ T7949] bond_slave_0: entered allmulticast mode [ 131.843283][ T7949] bond_slave_1: entered allmulticast mode [ 131.847162][ T7951] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 131.909871][ T7955] binder: 7953:7955 ioctl 4018620d 0 returned -22 [ 131.910193][ T7955] binder: 7953:7955 Acquire 1 refcount change on invalid ref 0 ret -22 [ 131.910407][ T7955] binder: 7953:7955 Acquire 1 refcount change on invalid ref 0 ret -22 [ 132.548889][ T6530] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 133.052460][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.429'. [ 133.352552][ T7979] netlink: 44 bytes leftover after parsing attributes in process `syz.3.432'. [ 135.267141][ T6530] Bluetooth: hci5: command 0x1003 tx timeout [ 135.270456][ T6525] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.804296][ T8001] netlink: 'syz.3.439': attribute type 1 has an invalid length. [ 135.868826][ T8001] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 135.882028][ T8001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.439'. [ 135.887736][ T8001] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 136.011307][ T8001] bond1 (unregistering): Released all slaves [ 136.514684][ T6680] Bluetooth: Error in BCSP hdr checksum [ 136.898371][ T8012] netlink: 44 bytes leftover after parsing attributes in process `syz.0.444'. [ 138.255820][ T6528] Bluetooth: hci5: command 0x1003 tx timeout [ 138.338754][ T6525] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 140.212994][ T8059] binder: 8058:8059 ioctl c0306201 0 returned -14 [ 142.218713][ T6525] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 150.285354][ T8232] bridge2: entered allmulticast mode [ 151.646476][ T8258] misc userio: Invalid payload size [ 154.387892][ T8301] misc userio: Invalid payload size [ 154.770264][ T8309] binder: 8308:8309 ioctl c0306201 0 returned -14 [ 155.143885][ T8317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.543'. [ 156.289626][ T8336] netlink: 'syz.2.550': attribute type 1 has an invalid length. [ 156.348388][ T8336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.550'. [ 156.506838][ T8340] misc userio: Invalid payload size [ 157.155342][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 159.117626][ T8386] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 159.126734][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.4.564'. [ 159.455016][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.566'. [ 159.813106][ T8394] misc userio: Invalid payload size [ 161.018565][ T6525] Bluetooth: hci5: command 0x1003 tx timeout [ 161.018658][ T6528] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 161.821885][ T8417] netlink: 'syz.3.575': attribute type 1 has an invalid length. [ 161.823491][ T8417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.575'. [ 164.300832][ T6519] Bluetooth: hci2: command 0x0406 tx timeout [ 164.300958][ T6519] Bluetooth: hci0: command 0x0406 tx timeout [ 164.301014][ T6519] Bluetooth: hci3: command 0x0406 tx timeout [ 164.301190][ T6519] Bluetooth: hci1: command 0x0406 tx timeout [ 164.476152][ T8452] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 164.477784][ T8452] netlink: 28 bytes leftover after parsing attributes in process `syz.4.586'. [ 164.819106][ T4068] Bluetooth: Error in BCSP hdr checksum [ 166.669999][ T6084] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 167.094768][ T8486] misc userio: Invalid payload size [ 167.185709][ T8491] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 167.189954][ T8491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.599'. [ 167.262892][ T6530] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 169.558730][ T8528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.611'. [ 170.708017][ T8547] misc userio: Invalid payload size [ 171.338896][ T8560] xt_nat: multiple ranges no longer supported [ 173.700775][ T8594] xt_nat: multiple ranges no longer supported [ 175.480141][ T8624] bridge4: entered allmulticast mode [ 175.481511][ T8623] bridge4: left allmulticast mode [ 175.613745][ T8620] misc userio: Invalid payload size [ 176.394589][ T6525] Bluetooth: hci5: command 0x1003 tx timeout [ 176.396702][ T6530] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 176.733090][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.647'. [ 176.815930][ T8653] bridge4: entered allmulticast mode [ 176.818246][ T8652] bridge4: left allmulticast mode [ 177.388779][ T8664] xt_nat: multiple ranges no longer supported [ 177.844072][ T8676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.656'. [ 177.898242][ T8668] misc userio: Invalid payload size [ 178.495627][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.658'. [ 179.687470][ T8710] netlink: 8 bytes leftover after parsing attributes in process `syz.3.667'. [ 179.823949][ T8712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.669'. [ 181.750730][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.678'. [ 185.746700][ T8816] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 185.746763][ T8816] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 187.740920][ T2407] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.741085][ T2407] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.589305][ T8962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.596243][ T8962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.238602][ T6530] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 199.055271][ T9043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.059316][ T9043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.882093][ T6084] Bluetooth: hci4: command 0x0406 tx timeout [ 201.537192][ T9072] netlink: 'syz.4.766': attribute type 2 has an invalid length. [ 203.392897][ T6530] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.580822][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.582329][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.895514][ T9118] netlink: 'syz.1.778': attribute type 2 has an invalid length. [ 205.305630][ T9128] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 205.305694][ T9128] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 206.446032][ T9142] netlink: 4 bytes leftover after parsing attributes in process `syz.4.786'. [ 206.451497][ T9142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.786'. [ 206.769234][ T9151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.769855][ T9151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.064808][ T9155] binder: 9145:9155 tried to acquire reference to desc 0, got 1 instead [ 207.066242][ T9155] binder: 9145:9155 got reply transaction with bad transaction stack, transaction 39 has target 9145:0 [ 207.066324][ T9155] binder: 9145:9155 transaction reply to 0:0 failed 44/29201/-71, code 0 size 0-0 line 3068 [ 207.727710][ T6594] binder: send failed reply for transaction 39 to 9145:9155 [ 207.728120][ T6594] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.794478][ T6530] Bluetooth: hci5: command 0x1003 tx timeout [ 209.800502][ T6525] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 212.177161][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 212.192650][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.797'. [ 213.165466][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.169863][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.211722][ T41] Bluetooth: Error in BCSP hdr checksum [ 215.274825][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 215.275730][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 215.730499][ T9231] loop4: detected capacity change from 0 to 32768 [ 215.843676][ T9231] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,norecovery,nojournal_transaction_names [ 215.843676][ T9231] allowing incompatible features above 0.0: (unknown version) [ 215.843676][ T9231] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 215.855927][ T9231] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 215.861647][ T9231] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 215.949305][ T9231] bcachefs (loop4): Version upgrade required: [ 215.949305][ T9231] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 215.949305][ T9231] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 215.949305][ T9231] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 216.125448][ T9231] bcachefs (loop4): btree node read error at btree extents level 0/0 [ 216.128392][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0 [ 216.133020][ T9231] loop4 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 216.136544][ T9231] loop4 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 216.136584][ T9231] repair success (rewriting node) [ 216.150897][ T9231] bcachefs (loop4): btree node read error at btree inodes level 0/0 [ 216.157435][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 216.157477][ T9231] loop4 node offset 0/24 bset u64s 0: invalid bkey format: field 3 too large: 0 + 1099511627776 > 4294967295 [ 216.157496][ T9231] u64s 3 fields 64:0, 64:0, 32:0, 0:1099511627776, 0:0, 0:0 [ 216.157512][ T9231] flagging btree inodes lost data [ 216.157527][ T9231] running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0) [ 216.157543][ T9231] ret btree_node_read_validate_error [ 216.175934][ T9231] bcachefs (loop4): error reading btree root btree=inodes level=0: btree_node_read_error, fixing [ 216.180790][ T9231] bcachefs (loop4): btree node read error at btree dirents level 0/0 [ 216.184242][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0 [ 216.188168][ T9231] loop4 node offset 0/24: incorrect min_key: got 0:16384:0 should be POS_MIN [ 216.191118][ T9231] flagging btree dirents lost data [ 216.192748][ T9231] ret btree_node_read_validate_error [ 216.194529][ T9231] bcachefs (loop4): error reading btree root btree=dirents level=0: btree_node_read_error, fixing [ 216.241785][ T9231] bcachefs (loop4): btree node read error at btree xattrs level 0/0 [ 216.241840][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 1 ptr: 0:31:0 gen 0 [ 216.241880][ T9231] loop4 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 216.241892][ T9231] loop4 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 216.241904][ T9231] repair success (rewriting node) [ 216.249499][ T9231] bcachefs (loop4): invalid bkey in btree_node btree=alloc level=0: u64s 12 type alloc_v4 0:28:0 len 0 ver 0: [ 216.249525][ T9231] gen 0 oldest_gen 0 data_type btree [ 216.249535][ T9231] journal_seq_nonempty 6 [ 216.249556][ T9231] journal_seq_empty 0 [ 216.249568][ T9231] need_discard 1 [ 216.249577][ T9231] need_inc_gen 1 [ 216.249587][ T9231] dirty_sectors 0 [ 216.249596][ T9231] stripe_sectors 1769482 [ 216.249606][ T9231] cached_sectors 0 [ 216.249615][ T9231] stripe 0 [ 216.249624][ T9231] stripe_redundancy 0 [ 216.249633][ T9231] io_time[READ] 1 [ 216.249643][ T9231] io_time[WRITE] 768 [ 216.249652][ T9231] fragmentation 0 [ 216.249661][ T9231] bp_start 7 [ 216.249671][ T9231] [ 216.249679][ T9231] invalid data type (got 3 should be 9), deleting [ 216.249928][ T9231] bcachefs (loop4): btree node read error at btree alloc level 0/0 [ 216.249940][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0 [ 216.249952][ T9231] loop4 node offset 0/24 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 216.249964][ T9231] loop4 node offset 0/24 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/24 [ 216.295988][ T9231] node offset 8/24 bset u64s 375 bset byte offset 184: keys out of order: u64s 11 type alloc_v4 0:32:0 len 0 ver 0 > u64s 11 type alloc_v4 0:2:0 len 0 ver 0 [ 216.296012][ T9231] repair success (rewriting node) [ 216.334163][ T9231] bcachefs (loop4): btree node read error at btree subvolumes level 0/0 [ 216.334226][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0 [ 216.334255][ T9231] loop4 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 216.334268][ T9231] loop4 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 216.334280][ T9231] repair success (rewriting node) [ 216.336979][ T9231] bcachefs (loop4): btree node read error at btree snapshots level 0/0 [ 216.336996][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3000000 written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 216.337008][ T9231] loop4 node offset 0/16: got wrong btree node: got [ 216.337046][ T9231] btree=snapshots level=0 seq ebb8d5a9e3463bdb 1 [ 216.337057][ T9231] min: POS_MIN [ 216.337066][ T9231] max: SPOS_MAX [ 216.337075][ T9231] flagging btree snapshots lost data [ 216.337085][ T9231] running recovery pass reconstruct_snapshots (21), currently at recovery_pass_empty (0) [ 216.337096][ T9231] ret btree_node_read_validate_error [ 216.337277][ T9231] bcachefs (loop4): error reading btree root btree=snapshots level=0: btree_node_read_error, fixing [ 216.346814][ T9231] bcachefs (loop4): btree node read error at btree lru level 0/0 [ 216.346831][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0 [ 216.346843][ T9231] loop4 node offset 0/16 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 216.346855][ T9231] loop4 node offset 0/16 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/16 [ 216.346866][ T9231] repair success (rewriting node) [ 216.362813][ T9231] bcachefs (loop4): btree node read error at btree freespace level 0/0 [ 216.362831][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key 18374686479671623680:0:0 durability: 1 ptr: 0:29:0 gen 0 [ 216.362845][ T9231] loop4 node offset 0/32: incorrect min_key: got POS_MIN should be 18374686479671623680:0:0 [ 216.362856][ T9231] flagging btree freespace lost data [ 216.362866][ T9231] ret btree_node_read_validate_error [ 216.363009][ T9231] bcachefs (loop4): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 216.370967][ T9231] bcachefs (loop4): btree node read error at btree backpointers level 0/0 [ 216.370983][ T9231] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0 [ 216.370995][ T9231] loop4 node offset 0/24 bset u64s 0: first btree node bset has blacklisted journal seq (0) [ 216.371007][ T9231] loop4 node offset 0/24 bset u64s 0: found blacklisted bset (journal seq 0) in btree node at offset 0-8/24 [ 216.371019][ T9231] repair success (rewriting node) [ 216.382312][ T9231] bcachefs (loop4): scan_for_btree_nodes... [ 216.500857][ T9231] bcachefs (loop4): btree node scan found 7 nodes after overwrites [ 216.501152][ T9231] done [ 216.501177][ T9231] bcachefs (loop4): check_topology... [ 216.501365][ T9231] bcachefs (loop4): btree root inodes unreadable, must recover from scan [ 216.501552][ T9231] bcachefs (loop4): bch2_get_scanned_nodes(): recovery btree=inodes level=0 POS_MIN - SPOS_MAX [ 216.501649][ T9231] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 216.507828][ T9231] bcachefs (loop4): empty interior btree node at btree=inodes level=1 [ 216.507852][ T9231] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 216.507934][ T9231] bcachefs (loop4): empty btree root inodes [ 216.507985][ T9231] bcachefs (loop4): btree root dirents unreadable, must recover from scan [ 216.508056][ T9231] bcachefs (loop4): bch2_get_scanned_nodes(): recovery btree=dirents level=0 POS_MIN - SPOS_MAX [ 216.508170][ T9231] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key 0:16384:0 durability: 1 ptr: 0:41:0 gen 0 [ 216.516888][ T9231] bcachefs (loop4): empty interior btree node at btree=dirents level=1 [ 216.516907][ T9231] u64s 5 type btree_ptr SPOS_MAX len 0 ver 0, fixing [ 216.516966][ T9231] bcachefs (loop4): empty btree root dirents [ 216.517022][ T9231] bcachefs (loop4): btree root snapshots unreadable, must recover from scan [ 216.517130][ T9231] bcachefs (loop4): bch2_get_scanned_nodes(): recovery btree=snapshots level=0 POS_MIN - SPOS_MAX [ 216.517216][ T9231] bcachefs (loop4): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 216.518557][ T9231] done [ 216.518586][ T9231] bcachefs (loop4): scan_for_btree_nodes... done [ 216.519047][ T9231] bcachefs (loop4): accounting_read... done [ 216.550101][ T9231] bcachefs (loop4): alloc_read... done [ 216.550414][ T9231] bcachefs (loop4): snapshots_read... done [ 216.550775][ T9231] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean [ 216.550952][ T9231] bcachefs (loop4): scanning for old btree nodes: min_version 0.24: unwritten_extents [ 216.550982][ T9231] bcachefs (loop4): going read-write [ 216.632030][ T6818] ------------[ cut here ]------------ [ 216.639824][ T6818] UBSAN: array-index-out-of-bounds in fs/bcachefs/sb-downgrade.c:276:4 [ 216.639890][ T6818] index 0 is out of range for type '__le16[] __counted_by(nr_errors)' (aka 'unsigned short[]') [ 216.639921][ T6818] CPU: 1 UID: 0 PID: 6818 Comm: kworker/u8:12 Not tainted 6.16.0-rc1-syzkaller-g39dfc971e42d #0 PREEMPT [ 216.639937][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.639945][ T6818] Workqueue: btree_update btree_interior_update_work [ 216.639961][ T6818] Call trace: [ 216.639965][ T6818] show_stack+0x2c/0x3c (C) [ 216.639983][ T6818] __dump_stack+0x30/0x40 [ 216.639997][ T6818] dump_stack_lvl+0xd8/0x12c [ 216.640010][ T6818] dump_stack+0x1c/0x28 [ 216.640023][ T6818] ubsan_epilogue+0x14/0x48 [ 216.640035][ T6818] __ubsan_handle_out_of_bounds+0xd0/0xfc [ 216.640050][ T6818] bch2_sb_downgrade_update+0x8e8/0xa70 [ 216.640062][ T6818] bch2_write_super+0xb1c/0x28dc [ 216.640073][ T6818] btree_interior_update_work+0x3a0/0x1d28 [ 216.640084][ T6818] process_one_work+0x7e8/0x155c [ 216.640099][ T6818] worker_thread+0x958/0xed8 [ 216.640112][ T6818] kthread+0x5fc/0x75c [ 216.640124][ T6818] ret_from_fork+0x10/0x20 [ 216.640245][ T6818] ---[ end trace ]--- [ 216.642926][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.642970][ T6818] u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing [ 216.730758][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.733085][ T6818] u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing [ 216.736089][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.738628][ T6818] u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing [ 216.741612][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.743941][ T6818] u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing [ 216.747504][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.750070][ T6818] u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing [ 216.758218][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.763823][ T6818] u64s 5 type deleted 0:33:0 len 0 ver 0, , continuing [ 216.767780][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.770256][ T6818] u64s 5 type deleted 0:35:0 len 0 ver 0, , continuing [ 216.773020][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.776483][ T6818] u64s 5 type deleted 0:36:0 len 0 ver 0, , continuing [ 216.783373][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.785747][ T6818] u64s 5 type deleted 0:38:0 len 0 ver 0, , continuing [ 216.789336][ T6818] bcachefs (loop4): bucket 0:32 gen 0 different types of data in same bucket: sb, btree [ 216.792378][ T6818] while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ebb8d5a9e3463bdb written 16 min_key POS_MIN durability: 1 ptr: 0:32:0 gen 0 [ 216.797393][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.799883][ T6818] u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing [ 216.802414][ T6818] bcachefs (loop4): bucket incorrectly unset in freespace btree [ 216.804843][ T6818] u64s 5 type deleted 0:41:0 len 0 ver 0, , continuing [ 216.807121][ T6818] Ratelimiting new instances of previous error [ 216.816980][ T9231] bcachefs (loop4): scanning for old btree nodes done [ 216.817221][ T9231] bcachefs (loop4): going read-only [ 216.817347][ T9231] bcachefs (loop4): finished waiting for writes to stop [ 216.817530][ T9231] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11 [ 216.827084][ T9231] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11 [ 216.831079][ T9231] bcachefs (loop4): unclean shutdown complete, journal seq 12 [ 216.831959][ T9231] bcachefs (loop4): done going read-only, filesystem not clean [ 216.831985][ T9231] bcachefs (loop4): done starting filesystem [ 216.838157][ T9231] bcachefs (loop4): __bch2_inode_peek(): error looking up inum 1:4096: ENOENT_inode [ 216.841534][ T9231] bcachefs (loop4): bch2_fs_get_tree(): error mounting: error getting root inode ENOENT_inode [ 216.841625][ T9231] bcachefs (loop4): shutting down [ 216.876436][ T9231] bcachefs (loop4): shutdown complete [ 216.938574][ T6525] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 216.948622][ T6594] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 217.108605][ T6594] usb 1-1: Using ep0 maxpacket: 32 [ 217.113389][ T6594] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.113447][ T6594] usb 1-1: config 0 has no interface number 0 [ 217.115876][ T6594] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.115912][ T6594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.115936][ T6594] usb 1-1: Product: syz [ 217.115958][ T6594] usb 1-1: Manufacturer: syz [ 217.115979][ T6594] usb 1-1: SerialNumber: syz [ 217.120058][ T6594] usb 1-1: config 0 descriptor?? [ 217.137954][ T6594] smsc95xx v2.0.0 [ 217.466318][ T6594] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 217.466656][ T6594] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 217.474694][ T6594] usb 1-1: USB disconnect, device number 3 [ 218.022342][ T9231] bcachefs: bch2_fs_get_tree() error: ENOENT_inode [ 218.088319][ T9230] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium