last executing test programs: 7m33.890847173s ago: executing program 1 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00', @ANYRESOCT], 0x44}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m31.436542123s ago: executing program 32 (id=148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00', @ANYRESOCT], 0x44}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m59.095755479s ago: executing program 33 (id=231): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x2, 0x43, 0xf2, 0xffffff7f}]}) 6m39.255230075s ago: executing program 34 (id=285): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0x3) close(0x4) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 4m7.157016722s ago: executing program 3 (id=902): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) unlink(&(0x7f0000000240)='./file1\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0x100010}]}, &(0x7f0000000240)=0x10) 4m6.320293287s ago: executing program 3 (id=907): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000001c0)={@empty, @broadcast}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x734a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfff7fffc}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x110) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x200008, &(0x7f0000000240)) fstat(0xffffffffffffffff, 0x0) open(0x0, 0x2a4c0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) 4m5.888234493s ago: executing program 6 (id=911): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}, 0x41) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) close(r0) 4m3.89987909s ago: executing program 3 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="040300000a0a0103"], 0x304}, 0x1, 0x0, 0x0, 0x800}, 0x48804) 4m3.3481998s ago: executing program 7 (id=915): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$UHID_INPUT2(r0, &(0x7f00000006c0), 0x6) 4m3.309693071s ago: executing program 6 (id=916): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f00000003c0)='./file1\x00', 0x40c812, &(0x7f0000000140)=ANY=[], 0x1, 0x5aa3, &(0x7f0000012f40)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xa8b6, 0x400, 0x1, 0x40000338}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4m3.210274292s ago: executing program 3 (id=917): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000100), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x20000080ffff, 0x100000}}, 0x40) 4m2.783748603s ago: executing program 7 (id=919): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x20108c2, &(0x7f0000000400)=ANY=[@ANYBLOB='usrquota,iocharset=cp949,discard,integrity,quota,uid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYBLOB=',fsname=]}@}X}[-)+,fsname=obj_role,subj_user=,subj_role=*,fowner>', @ANYRESDEC, @ANYRES16], 0xff, 0x6178, &(0x7f000000c680)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000480)=ANY=[], 0xfe37, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) exit(0x8) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) 3m58.147992486s ago: executing program 6 (id=927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="040300000a0a0103"], 0x304}, 0x1, 0x0, 0x0, 0x800}, 0x48804) 3m57.244850169s ago: executing program 6 (id=929): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 3m57.144320772s ago: executing program 7 (id=930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0x65, 0x0, 0x1, 0x32, 0x0, @local, @rand_addr=0x64010102}}}}}}, 0x26) 3m56.416081355s ago: executing program 6 (id=933): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x80002, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000100)='./file1\x00', 0x1210010, &(0x7f00000004c0)=ANY=[@ANYBLOB='quiet,umask=00000000000000000100501,iocharset=cp857,codepage=maccenteuro,quiet,gid=', @ANYRESHEX=0x0, @ANYBLOB="0000000000000007001300", @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x7, 0x318, &(0x7f0000000800)="$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") r4 = openat(r0, &(0x7f00000002c0)='./file1\x00', 0x0, 0x10) getdents64(r4, &(0x7f0000000080)=""/104, 0x68) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x0) write$sequencer(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x9) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRES64=r0], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x147182, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1feb010029000000000000000000000000000000000000000000cfa3b0313c59a654f83b3332d48412ec3fb80c3f2517461d606541c6cbc5a0d5d127"], 0x0, 0x1a}, 0x28) setitimer(0x1, &(0x7f0000000000)={{}, {0x20000000000000}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) 3m56.054105474s ago: executing program 7 (id=934): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x7ffff004) 3m52.507951648s ago: executing program 6 (id=937): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m51.789071712s ago: executing program 7 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000001480)=ANY=[@ANYBLOB="040300000a0a0103"], 0x304}, 0x1, 0x0, 0x0, 0x800}, 0x48804) 3m50.897833099s ago: executing program 7 (id=942): mlockall(0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2, 0x1dd}, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x8010) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x400}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x25, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m46.359864052s ago: executing program 35 (id=917): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) socket$packet(0x11, 0x3, 0x300) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000100), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x20000080ffff, 0x100000}}, 0x40) 3m42.518668732s ago: executing program 5 (id=956): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 3m41.247694076s ago: executing program 5 (id=958): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0000001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x36) 3m39.426832932s ago: executing program 5 (id=961): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 3m38.666221514s ago: executing program 5 (id=963): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x25, 0x3, 0x8) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x8, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x3, 0x14a}}) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 3m37.957029189s ago: executing program 5 (id=964): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fsetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) 3m37.452542683s ago: executing program 5 (id=966): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x24, r4, 0x5, 0x0, 0x40000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x8010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = io_uring_setup(0x669, &(0x7f0000000400)={0x0, 0x0, 0x400}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x0, r9}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r9, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3m37.283836192s ago: executing program 36 (id=937): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m34.550513743s ago: executing program 37 (id=942): mlockall(0x7) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2, 0x1dd}, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x8010) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x400}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x25, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m21.247323081s ago: executing program 38 (id=966): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340), &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x24, r4, 0x5, 0x0, 0x40000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x8010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = io_uring_setup(0x669, &(0x7f0000000400)={0x0, 0x0, 0x400}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r7) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = eventfd(0x401) ioctl$VHOST_SET_LOG_FD(r8, 0x4004af07, &(0x7f0000000240)=r9) ioctl$VHOST_SET_VRING_KICK(r8, 0x4008af20, &(0x7f0000000040)={0x0, r9}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000000)=0x20000) write$eventfd(r9, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1m52.143570047s ago: executing program 1 (id=969): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001300)=r2, 0x4) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036", 0x5}], 0x1}, 0x0) 1m50.876321084s ago: executing program 1 (id=1056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}}, 0x4000000) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x2c, 0x4, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4000) 1m49.971296189s ago: executing program 1 (id=1057): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x410, &(0x7f0000000040)=ANY=[], 0x11, 0x489, &(0x7f0000000a40)="$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") setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) 1m48.732811949s ago: executing program 1 (id=1060): socket$kcm(0x2, 0xa, 0x2) r0 = syz_open_procfs(0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000180)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@map_off}, {@overriderock}, {@unhide}, {@check_strict}, {}, {@block={'block', 0x3d, 0x400}}, {@nojoliet}, {@unhide}, {@check_relaxed}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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") open(&(0x7f00000000c0)='./file1\x00', 0xa400, 0x102) preadv(r0, 0x0, 0x0, 0x33, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) 1m47.456232036s ago: executing program 1 (id=1064): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="8f9f0200000000f761000700000004000180"], 0x18}}, 0x2000c090) 1m29.493104381s ago: executing program 39 (id=1064): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="8f9f0200000000f761000700000004000180"], 0x18}}, 0x2000c090) 47.532475277s ago: executing program 4 (id=1176): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@broadcast, @in=@remote, 0xfffd, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 46.686026263s ago: executing program 4 (id=1178): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 45.770252701s ago: executing program 4 (id=1182): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)="b8c21042", 0x4}], 0x1}, 0xc080) r0 = socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, 0x0}, 0x0) 44.526221766s ago: executing program 4 (id=1184): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000200)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@umask={'umask', 0x3d, 0x9}}, {@namecase}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5275}}, {@errors_remount}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x40002, 0x0) 42.541336246s ago: executing program 4 (id=1188): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 40.611883258s ago: executing program 4 (id=1194): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 37.575715303s ago: executing program 40 (id=1194): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 35.438363877s ago: executing program 8 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$audio(0xffffffffffffff9c, 0x0, 0xa0100, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014}) r5 = getpid() r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r4}) 32.796641246s ago: executing program 8 (id=1209): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in=@broadcast, @in=@remote, 0xfffd, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x3}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) 32.162871693s ago: executing program 8 (id=1212): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 31.405317572s ago: executing program 8 (id=1215): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0xff, 0x5fc4, &(0x7f0000006400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x47) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 27.093683595s ago: executing program 8 (id=1227): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)) write$cgroup_subtree(r0, 0x0, 0x0) 26.341448201s ago: executing program 8 (id=1230): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000180)) 19.148274608s ago: executing program 9 (id=1251): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000780)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)="ba", 0x1}], 0x1}, 0x400c000) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 18.364016356s ago: executing program 9 (id=1255): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) close_range(r0, 0xffffffffffffffff, 0x0) 17.564128584s ago: executing program 9 (id=1258): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r0, 0x4, r2}, 0x10) 16.762554029s ago: executing program 9 (id=1260): syz_open_dev$ttys(0xc, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xe79b04dd2a128718, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_emit_ethernet(0x18, &(0x7f0000000440)={@local, @remote, @void, {@llc={0x4, {@llc={0xaa, 0xd4, 'C', "1839b3fd4aabb4"}}}}}, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.783991543s ago: executing program 41 (id=1230): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000180)) 8.507254396s ago: executing program 2 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', 0x0, 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="006bcf05da69e0d7be3cb58e25651745ec8b15c9a5dc8c6c77975e6cfcc14b9bf8fbcb22f7894c497af0b7b4b26c42c3179e6d2ff5b5e2"], 0x1, 0x29b, &(0x7f0000000340)="$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") 7.377081964s ago: executing program 0 (id=1282): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) preadv(r2, &(0x7f00000015c0), 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.13918325s ago: executing program 2 (id=1283): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53c", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x10000) 6.568317993s ago: executing program 9 (id=1284): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x20008000) r1 = socket(0x11, 0x80a, 0x0) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4040004) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xb8) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000"], 0x118}}, 0x0) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) close(r0) 6.415554379s ago: executing program 0 (id=1285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000008c0)={&(0x7f0000000780)=@un=@abs={0x0, 0x0, 0x4e23}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000800)="baa3", 0x2}], 0x1}, 0x400c000) sendmsg$kcm(r1, 0x0, 0x0) 5.838360037s ago: executing program 2 (id=1286): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x14, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd}, @alu={0x7, 0x0, 0xd, 0x9, 0x4, 0x4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x40e00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0xffffffff, 0x1}, 0x10, 0x26ce2, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900), 0x10, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) socket$alg(0x26, 0x5, 0x0) socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) getpid() sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 4.03484781s ago: executing program 0 (id=1287): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x6, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x200c, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x78, 0x0, 0x7, {0xfffffffffffffffe, 0x1, 0x0, {0x3, 0x69ec2dea, 0x8, 0x201, 0x6dc6, 0x7651, 0xa442, 0x7, 0xe000, 0x601d824b499141fd, 0xcd35, 0xee01, 0xffffffffffffffff, 0x5, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x100) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000006080)={0x2020}, 0x2020) 2.340293781s ago: executing program 2 (id=1288): fstat(0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, &(0x7f00000000c0), 0x4) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)='=', 0x1}], 0x1}, 0x41) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) close(r0) 2.113661183s ago: executing program 3 (id=1197): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000002fc0)={0x2020}, 0x2020) 1.870413117s ago: executing program 0 (id=1289): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d6d616363656c7469632c71756965742c636f6465706167653d6d6163696e7569742c6469725f756d61736b3d30303030303030303030303030303030303030323030312c63726561746f723decf3ae122c00b9f0cf13144d95ad6fb52973147357153a250e5a9573d6335708978eca6178d431e94849beb47b385a257a6042"], 0x1, 0x314, &(0x7f00000004c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 1.565325798s ago: executing program 2 (id=1290): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@assoc={0x18, 0x117, 0x4, 0xc730}], 0x18}], 0x1, 0x40800) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.135891032s ago: executing program 0 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x88000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="006bcf05da69e0d7be3cb58e25651745ec8b15c9a5dc8c6c77975e6cfcc14b9bf8fbcb22f7894c497af0b7b4b26c42c3179e6d2ff5b5e2"], 0x1, 0x29b, &(0x7f0000000340)="$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") 1.02812334s ago: executing program 9 (id=1292): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) lgetxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14008f3db2f058230d51152e209555daf91e0000"], 0x14}}, 0x0) listen(r0, 0x367) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0xfb, 0x6a8, &(0x7f0000001dc0)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, 0x0, 0x800) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 730.976018ms ago: executing program 2 (id=1293): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x501a, 0x3, 0x3}, 0x18, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 652.509268ms ago: executing program 3 (id=1294): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53c", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x10000) 0s ago: executing program 0 (id=1295): openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000000)={0x1f, 0xf8, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) kernel console output (not intermixed with test programs): y_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 305.937980][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 306.070253][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 307.454746][ T6509] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.577113][ T6509] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 307.671670][ T6509] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 307.778032][ T6509] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.531273][ T5814] Bluetooth: hci4: command 0x0405 tx timeout [ 308.538244][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 308.544440][ T5814] Bluetooth: hci3: command 0x0406 tx timeout [ 311.992846][ T6657] loop0: detected capacity change from 0 to 512 [ 312.362810][ T6657] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.199: casefold flag without casefold feature [ 312.478164][ T6667] netlink: 72 bytes leftover after parsing attributes in process `syz.4.201'. [ 312.533223][ T6657] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.199: couldn't read orphan inode 15 (err -117) [ 312.618386][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 312.690961][ T6657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.997795][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.202'. [ 314.239640][ T6655] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.334153][ T6509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.544678][ T6509] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.682205][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.689794][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.712721][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.720327][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.699097][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 316.917930][ T11] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.928932][ T11] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.040218][ T11] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 317.049912][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 317.058338][ T11] usb 3-1: SerialNumber: syz [ 317.383318][ T11] usb 3-1: 0:2 : does not exist [ 317.427737][ T11] usb 3-1: unit 1 not found! [ 317.542055][ T6509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.814664][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 317.824288][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.212'. [ 318.062748][ T6713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 318.206962][ T11] usb 3-1: USB disconnect, device number 3 [ 318.251185][ T6013] udevd[6013]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.320072][ T6714] loop4: detected capacity change from 0 to 1024 [ 319.158853][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 321.148068][ T6743] loop4: detected capacity change from 0 to 2048 [ 321.316469][ T6743] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 321.439743][ T6751] netlink: 'syz.0.223': attribute type 1 has an invalid length. [ 321.575064][ T6751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 321.853413][ T6509] veth0_vlan: entered promiscuous mode [ 321.910122][ T6750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.928238][ T6509] veth1_vlan: entered promiscuous mode [ 322.115933][ T6763] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 322.172641][ T5821] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 322.247922][ T6509] veth0_macvtap: entered promiscuous mode [ 322.260954][ T5821] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 322.299991][ T6509] veth1_macvtap: entered promiscuous mode [ 322.438852][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.550399][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.698301][ T1121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.749200][ T1121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.862472][ T5090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.006701][ T1121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.114518][ T5090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.202080][ T1121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.285685][ T5090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.490507][ T5090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.137570][ T5090] bridge_slave_1: left allmulticast mode [ 324.143432][ T5090] bridge_slave_1: left promiscuous mode [ 324.151732][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.236004][ T5090] bridge_slave_0: left allmulticast mode [ 324.243514][ T5090] bridge_slave_0: left promiscuous mode [ 324.250302][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.928498][ T5090] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.971292][ T5090] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.986722][ T5090] bond0 (unregistering): Released all slaves [ 325.753564][ T5090] hsr_slave_0: left promiscuous mode [ 325.776589][ T5090] hsr_slave_1: left promiscuous mode [ 325.784503][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.794396][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.834151][ T5090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.842083][ T5090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.931941][ T5090] veth1_macvtap: left promiscuous mode [ 325.939864][ T5090] veth0_macvtap: left promiscuous mode [ 326.671416][ T5090] team0 (unregistering): Port device team_slave_1 removed [ 326.746837][ T5090] team0 (unregistering): Port device team_slave_0 removed [ 327.146771][ T11] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 327.331099][ T11] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 327.340957][ T11] usb 3-1: config 179 has no interface number 0 [ 327.347793][ T11] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 327.359488][ T11] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 327.370089][ T11] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 327.381753][ T11] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 327.393508][ T11] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 327.411604][ T11] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 327.423108][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.594262][ T6789] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 327.689874][ T11] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 327.727320][ T5814] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.737657][ T11] xpad 3-1:179.65: probe with driver xpad failed with error -90 [ 327.757008][ T5814] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.768396][ T5814] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.830763][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.857341][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.967238][ T5937] usb 3-1: USB disconnect, device number 4 [ 328.259150][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 328.401574][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 328.505384][ T6811] netlink: 'syz.0.239': attribute type 1 has an invalid length. [ 328.597246][ T6811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 328.683852][ T6809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.333709][ T6822] loop2: detected capacity change from 0 to 2048 [ 329.581431][ T6822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.595075][ T6822] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.607561][ T6799] chnl_net:caif_netlink_parms(): no params data found [ 329.697368][ T6822] EXT4-fs error (device loop2): ext4_lookup:1787: inode #14: comm syz.2.241: invalid fast symlink length 39 [ 329.747986][ T6830] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 329.817649][ T6822] EXT4-fs (loop2): Remounting filesystem read-only [ 329.957726][ T5814] Bluetooth: hci4: command tx timeout [ 330.139232][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.336630][ T5937] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 331.408263][ T6799] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.416060][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.424152][ T6799] bridge_slave_0: entered allmulticast mode [ 331.433787][ T6799] bridge_slave_0: entered promiscuous mode [ 331.505449][ T6799] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.514729][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.522571][ T6799] bridge_slave_1: entered allmulticast mode [ 331.532130][ T6799] bridge_slave_1: entered promiscuous mode [ 331.606846][ T5937] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 331.615245][ T5937] usb 4-1: config 0 has no interface number 0 [ 331.621715][ T5937] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 331.724140][ T5937] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 331.733628][ T5937] usb 4-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 331.742093][ T5937] usb 4-1: Manufacturer: syz [ 331.827907][ T5937] usb 4-1: config 0 descriptor?? [ 331.860957][ T5937] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input6 [ 331.903080][ T6799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.932324][ T1331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.941259][ T1331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.059709][ T5814] Bluetooth: hci4: command tx timeout [ 332.133324][ T5937] usb 4-1: USB disconnect, device number 2 [ 332.227983][ T6799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.649309][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.658777][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.698808][ T6799] team0: Port device team_slave_0 added [ 332.749250][ T6799] team0: Port device team_slave_1 added [ 332.893719][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.901016][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.927465][ T6799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.154308][ T6799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.161769][ T6799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.188389][ T6799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.197489][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 333.275853][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 333.333476][ T6869] loop5: detected capacity change from 0 to 128 [ 333.903088][ T6799] hsr_slave_0: entered promiscuous mode [ 333.913439][ T6799] hsr_slave_1: entered promiscuous mode [ 334.014359][ T1331] kworker/u8:10: attempt to access beyond end of device [ 334.014359][ T1331] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 334.028645][ T1331] kworker/u8:10: attempt to access beyond end of device [ 334.028645][ T1331] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 334.042754][ T1331] kworker/u8:10: attempt to access beyond end of device [ 334.042754][ T1331] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 334.056964][ T1331] kworker/u8:10: attempt to access beyond end of device [ 334.056964][ T1331] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 334.076034][ T1331] kworker/u8:10: attempt to access beyond end of device [ 334.076034][ T1331] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 334.091152][ T1331] kworker/u8:10: attempt to access beyond end of device [ 334.091152][ T1331] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 334.149570][ T6876] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 334.197278][ T5814] Bluetooth: hci4: command tx timeout [ 334.255561][ T1331] kworker/u8:10: attempt to access beyond end of device [ 334.255561][ T1331] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 334.428320][ T6876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.486127][ T6879] vlan0: entered allmulticast mode [ 334.491839][ T6879] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 334.515802][ T6879] bond1: (slave vlan0): making interface the new active one [ 334.532634][ T6879] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 334.725349][ T6875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.400867][ T6896] binder: 6894:6896 ioctl c018620c 200000000040 returned -22 [ 335.661285][ T6799] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 335.702094][ T6799] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 335.740960][ T6799] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 335.798489][ T6799] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 336.277853][ T5814] Bluetooth: hci4: command tx timeout [ 336.356470][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.365844][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.376933][ T6911] bridge0: entered allmulticast mode [ 336.641249][ T6911] bridge_slave_1: left allmulticast mode [ 336.649855][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.671289][ T6915] loop2: detected capacity change from 0 to 128 [ 336.717277][ T6911] bridge_slave_0: left allmulticast mode [ 336.728723][ T6911] bridge_slave_0: left promiscuous mode [ 336.735368][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.397836][ T6799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.499530][ T1328] kworker/u8:9: attempt to access beyond end of device [ 337.499530][ T1328] loop2: rw=1, sector=145, nr_sectors = 8 limit=128 [ 337.513615][ T1328] kworker/u8:9: attempt to access beyond end of device [ 337.513615][ T1328] loop2: rw=1, sector=161, nr_sectors = 8 limit=128 [ 337.527627][ T1328] kworker/u8:9: attempt to access beyond end of device [ 337.527627][ T1328] loop2: rw=1, sector=177, nr_sectors = 8 limit=128 [ 337.618969][ T6799] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.682412][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.690119][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.779463][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.787198][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.608076][ T6935] netlink: 'syz.5.267': attribute type 1 has an invalid length. [ 338.727211][ T6935] vlan2: entered allmulticast mode [ 338.732556][ T6935] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 339.147256][ T6933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.204467][ T6944] syzkaller0: entered promiscuous mode [ 339.210391][ T6944] syzkaller0: entered allmulticast mode [ 340.681518][ T6799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.319457][ T6971] loop2: detected capacity change from 0 to 512 [ 341.457153][ T6971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856c098, mo2=0002] [ 341.465824][ T6971] System zones: 1-12 [ 341.512483][ T6971] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.277: corrupted in-inode xattr: invalid ea_ino [ 341.613384][ T6971] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.277: couldn't read orphan inode 15 (err -117) [ 341.693362][ T6971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.096113][ T5806] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 342.214548][ T5806] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 342.321130][ T5806] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 342.599440][ T6990] netlink: 'syz.0.283': attribute type 1 has an invalid length. [ 342.773510][ T6990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 342.951561][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.000420][ T5806] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.002300][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.165802][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.354937][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.528134][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.899994][ T6799] veth0_vlan: entered promiscuous mode [ 344.004229][ T6799] veth1_vlan: entered promiscuous mode [ 344.142515][ T1142] bridge_slave_1: left allmulticast mode [ 344.148858][ T1142] bridge_slave_1: left promiscuous mode [ 344.155371][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.192852][ T1142] bridge_slave_0: left allmulticast mode [ 344.208227][ T1142] bridge_slave_0: left promiscuous mode [ 344.214880][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.699362][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.765673][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.789988][ T1142] bond0 (unregistering): Released all slaves [ 344.958081][ T6799] veth0_macvtap: entered promiscuous mode [ 345.035358][ T6799] veth1_macvtap: entered promiscuous mode [ 345.434366][ T1142] hsr_slave_0: left promiscuous mode [ 345.459541][ T1142] hsr_slave_1: left promiscuous mode [ 345.467695][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.475454][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.510750][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.519522][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.597875][ T1142] veth1_macvtap: left promiscuous mode [ 345.603595][ T1142] veth0_macvtap: left promiscuous mode [ 345.609810][ T1142] veth1_vlan: left promiscuous mode [ 345.615337][ T1142] veth0_vlan: left promiscuous mode [ 346.323030][ T7009] loop5: detected capacity change from 0 to 128 [ 346.701288][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 346.798462][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 347.110102][ T1312] bio_check_eod: 4 callbacks suppressed [ 347.110176][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.110176][ T1312] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 347.130243][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.130243][ T1312] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 347.144237][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.144237][ T1312] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 347.158178][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.158178][ T1312] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 347.175153][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.175153][ T1312] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 347.189961][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.189961][ T1312] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 347.203971][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.203971][ T1312] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 347.218058][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.218058][ T1312] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 347.232527][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.232527][ T1312] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 347.246637][ T1312] kworker/u8:8: attempt to access beyond end of device [ 347.246637][ T1312] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 347.332034][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.341774][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.451967][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.461618][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.518229][ T5811] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.549756][ T6799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.554236][ T5811] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.647025][ T5811] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.662933][ T5811] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.918477][ T7023] binder: 7020:7023 ioctl c0306201 200000000080 returned -14 [ 348.222656][ T5090] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.286649][ T5090] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.336874][ T5090] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.345876][ T5090] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.543588][ T7033] netlink: 'syz.5.295': attribute type 1 has an invalid length. [ 348.633814][ T7033] vlan2: entered allmulticast mode [ 348.879234][ T7030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.590028][ T7018] chnl_net:caif_netlink_parms(): no params data found [ 349.729543][ T5814] Bluetooth: hci1: command tx timeout [ 350.975877][ T7066] loop5: detected capacity change from 0 to 128 [ 351.132599][ T7066] vfat: Bad value for 'time_offset' [ 351.558077][ T7066] sit0: entered promiscuous mode [ 351.582614][ T7066] netlink: 'syz.5.300': attribute type 1 has an invalid length. [ 351.590745][ T7066] netlink: 1 bytes leftover after parsing attributes in process `syz.5.300'. [ 351.608496][ T7018] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.616010][ T7018] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.624875][ T7018] bridge_slave_0: entered allmulticast mode [ 351.634484][ T7018] bridge_slave_0: entered promiscuous mode [ 351.705579][ T7018] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.715265][ T7018] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.723173][ T7018] bridge_slave_1: entered allmulticast mode [ 351.732702][ T7018] bridge_slave_1: entered promiscuous mode [ 351.801254][ T5814] Bluetooth: hci1: command tx timeout [ 352.344074][ T7018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.449410][ T7018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.954643][ T7018] team0: Port device team_slave_0 added [ 353.028888][ T7093] netlink: 'syz.5.306': attribute type 1 has an invalid length. [ 353.130506][ T7018] team0: Port device team_slave_1 added [ 353.190009][ T7092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.918538][ T5814] Bluetooth: hci1: command tx timeout [ 353.979041][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.986490][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.013142][ T7018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.212263][ T5814] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 354.220907][ T5814] Bluetooth: hci2: Injecting HCI hardware error event [ 354.230456][ T5814] Bluetooth: hci2: hardware error 0x00 [ 354.381417][ T7018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.388805][ T7018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.415094][ T7018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.305538][ T7103] loop5: detected capacity change from 0 to 512 [ 355.508404][ T7103] EXT4-fs: Ignoring removed mblk_io_submit option [ 355.558458][ T7103] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 355.587436][ T7103] EXT4-fs (loop5): orphan cleanup on readonly fs [ 355.593996][ T7103] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 355.611378][ T7103] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.308: attempt to clear invalid blocks 2 len 1 [ 355.643930][ T7018] hsr_slave_0: entered promiscuous mode [ 355.656574][ T7018] hsr_slave_1: entered promiscuous mode [ 355.662366][ T7103] EXT4-fs (loop5): Remounting filesystem read-only [ 355.670366][ T7018] debugfs: 'hsr0' already exists in 'hsr' [ 355.670451][ T7018] Cannot create hsr debugfs directory [ 355.748365][ T7103] EXT4-fs (loop5): 1 truncate cleaned up [ 355.784672][ T7103] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 355.956687][ T5811] Bluetooth: hci1: command tx timeout [ 356.356824][ T5814] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 356.703506][ T7118] EXT4-fs (loop5): Quota file not on filesystem root. Journaled quota will not work [ 358.919209][ T7018] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 358.937748][ T6509] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.979681][ T7018] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 359.041915][ T7018] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 359.133767][ T7018] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 359.717383][ T7133] loop5: detected capacity change from 0 to 256 [ 359.748495][ T7133] vfat: Bad value for 'fmask' [ 359.778077][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.786612][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.115562][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.124010][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.876972][ T7018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.120724][ T7018] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.147908][ T7150] netlink: 'syz.3.316': attribute type 1 has an invalid length. [ 361.243740][ T7150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 361.294191][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.301776][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.371580][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.379303][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.434546][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.841411][ T7018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 362.581583][ T7162] loop6: detected capacity change from 0 to 2048 [ 362.724396][ T7162] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.927811][ T7187] overlayfs: failed to resolve './file0': -2 [ 364.142073][ T7018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.689081][ T7199] netlink: 'syz.6.332': attribute type 1 has an invalid length. [ 364.798675][ T7198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.914456][ T7018] veth0_vlan: entered promiscuous mode [ 367.159548][ T7018] veth1_vlan: entered promiscuous mode [ 367.320076][ T7233] overlayfs: failed to resolve './file0': -2 [ 367.534673][ T7018] veth0_macvtap: entered promiscuous mode [ 367.620055][ T7018] veth1_macvtap: entered promiscuous mode [ 367.843707][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.968538][ T7018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.138025][ T14] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.170406][ T7245] loop6: detected capacity change from 0 to 128 [ 368.230577][ T14] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.315397][ T14] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.374338][ T14] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.132063][ T1328] bio_check_eod: 4 callbacks suppressed [ 369.132139][ T1328] kworker/u8:9: attempt to access beyond end of device [ 369.132139][ T1328] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 369.170849][ T1328] kworker/u8:9: attempt to access beyond end of device [ 369.170849][ T1328] loop6: rw=1, sector=161, nr_sectors = 8 limit=128 [ 369.659023][ T7264] loop6: detected capacity change from 0 to 256 [ 369.971498][ T7264] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 370.111250][ T7271] overlayfs: failed to resolve './file0': -2 [ 370.125781][ T7264] exFAT-fs (loop6): start_clu is invalid cluster(0x0) [ 371.671984][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 372.425361][ T7317] overlayfs: failed to resolve './file1': -2 [ 374.808425][ T7354] overlayfs: failed to resolve './file1': -2 [ 376.300276][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.308434][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.662177][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.670904][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.761460][ T7398] overlayfs: failed to resolve './file1': -2 [ 380.047741][ T7439] overlayfs: failed to resolve './file1': -2 [ 382.219556][ T7476] overlayfs: failed to resolve './file1': -2 [ 384.564205][ T7511] loop7: detected capacity change from 0 to 128 [ 385.379787][ T7527] overlayfs: failed to resolve './file1': -2 [ 385.484859][ T1142] kworker/u8:7: attempt to access beyond end of device [ 385.484859][ T1142] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 385.498993][ T1142] kworker/u8:7: attempt to access beyond end of device [ 385.498993][ T1142] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 385.512985][ T1142] kworker/u8:7: attempt to access beyond end of device [ 385.512985][ T1142] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 385.526955][ T1142] kworker/u8:7: attempt to access beyond end of device [ 385.526955][ T1142] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 386.044315][ T1142] kworker/u8:7: attempt to access beyond end of device [ 386.044315][ T1142] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 388.087858][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 389.435652][ T7564] loop6: detected capacity change from 0 to 128 [ 389.590412][ T7570] netlink: 'syz.3.447': attribute type 29 has an invalid length. [ 389.735414][ T7570] netlink: 'syz.3.447': attribute type 29 has an invalid length. [ 390.532717][ T7576] overlayfs: failed to resolve './file0': -2 [ 391.488260][ T12] kworker/u8:0: attempt to access beyond end of device [ 391.488260][ T12] loop6: rw=1, sector=145, nr_sectors = 8 limit=128 [ 391.502858][ T12] kworker/u8:0: attempt to access beyond end of device [ 391.502858][ T12] loop6: rw=1, sector=161, nr_sectors = 8 limit=128 [ 391.517209][ T12] kworker/u8:0: attempt to access beyond end of device [ 391.517209][ T12] loop6: rw=1, sector=177, nr_sectors = 8 limit=128 [ 391.800699][ T12] kworker/u8:0: attempt to access beyond end of device [ 391.800699][ T12] loop6: rw=1, sector=193, nr_sectors = 8 limit=128 [ 395.122454][ T7625] overlayfs: failed to resolve './file0': -2 [ 397.338784][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 397.354135][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 397.364871][ T7647] netlink: 33 bytes leftover after parsing attributes in process `syz.0.473'. [ 397.374214][ T7647] veth0_to_bond: entered allmulticast mode [ 397.382590][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 397.392143][ T7647] netlink: 33 bytes leftover after parsing attributes in process `syz.0.473'. [ 398.084508][ T7658] loop7: detected capacity change from 0 to 128 [ 398.607561][ T7664] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 400.336769][ T30] audit: type=1326 audit(1755172747.066:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.6.486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f858558ebe9 code=0x0 [ 400.424872][ T7692] fuse: Bad value for 'fd' [ 401.057166][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 401.067181][ T7698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 401.076531][ T7698] netlink: 'syz.3.489': attribute type 4 has an invalid length. [ 401.907676][ T7707] netlink: 'syz.3.494': attribute type 10 has an invalid length. [ 401.916731][ T7707] veth1_macvtap: left promiscuous mode [ 402.218322][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.493'. [ 403.771356][ T7725] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 404.135247][ T7733] netlink: 52 bytes leftover after parsing attributes in process `syz.6.500'. [ 408.923965][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.930865][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.014776][ T7788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.978081][ T7832] vlan2: entered allmulticast mode [ 413.983528][ T7832] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 414.218078][ T7836] netlink: 'syz.0.538': attribute type 4 has an invalid length. [ 414.675768][ T7830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.573663][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.541'. [ 415.629045][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.541'. [ 415.782227][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 416.808933][ T7860] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.548'. [ 420.502939][ T7892] netlink: 'syz.5.556': attribute type 1 has an invalid length. [ 420.925707][ T7892] vlan2: entered allmulticast mode [ 421.029494][ T7901] loop7: detected capacity change from 0 to 512 [ 421.169372][ T7901] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 421.180519][ T7887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.250125][ T7901] EXT4-fs (loop7): invalid journal inode [ 421.256457][ T7901] EXT4-fs (loop7): can't get journal size [ 421.373777][ T7901] EXT4-fs (loop7): 1 truncate cleaned up [ 421.382723][ T7901] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.841408][ T7018] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.578750][ T7958] netlink: 'syz.6.581': attribute type 1 has an invalid length. [ 426.769208][ T7958] vlan2: entered allmulticast mode [ 426.889159][ T7956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 428.503020][ T7984] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 428.512532][ T7984] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 430.966780][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.599'. [ 432.237595][ T8013] netlink: 'syz.7.603': attribute type 1 has an invalid length. [ 432.352624][ T8013] vlan2: entered allmulticast mode [ 432.358752][ T8013] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 432.527892][ T8012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.890088][ T8022] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 432.899664][ T8022] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 435.882309][ T8066] binder: 8064:8066 ioctl c0306201 200000000080 returned -14 [ 436.351552][ T8073] netlink: 'syz.5.622': attribute type 1 has an invalid length. [ 436.557037][ T8073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 436.613232][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.7.627'. [ 436.821075][ T5814] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 436.856928][ T8070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.544360][ T8092] netlink: 830 bytes leftover after parsing attributes in process `syz.6.629'. [ 437.554193][ T8092] bond_slave_0: entered promiscuous mode [ 437.560318][ T8092] bond_slave_1: entered promiscuous mode [ 440.097870][ T8129] netlink: 'syz.3.647': attribute type 1 has an invalid length. [ 440.205847][ T8129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 440.467965][ T8128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.567245][ T8137] netlink: 40 bytes leftover after parsing attributes in process `syz.0.649'. [ 440.576537][ T8137] netlink: 'syz.0.649': attribute type 1 has an invalid length. [ 440.839361][ T5814] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 440.848511][ T5814] Bluetooth: hci3: Injecting HCI hardware error event [ 440.856578][ T5814] Bluetooth: hci3: hardware error 0x00 [ 442.918562][ T5814] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 443.338956][ T5814] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 443.347792][ T5814] Bluetooth: hci1: Injecting HCI hardware error event [ 443.355573][ T5814] Bluetooth: hci1: hardware error 0x00 [ 444.290583][ T8183] netlink: 'syz.5.663': attribute type 1 has an invalid length. [ 444.484960][ T8183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 444.970527][ T8179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.209484][ T8203] overlayfs: missing 'lowerdir' [ 445.416724][ T5814] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 446.436799][ T5814] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 446.445413][ T5814] Bluetooth: hci4: Injecting HCI hardware error event [ 446.453418][ T5811] Bluetooth: hci4: hardware error 0x00 [ 447.918209][ T8241] overlayfs: missing 'lowerdir' [ 448.537115][ T5811] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 448.745608][ T8248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.528676][ T8273] binder: 8268:8273 ioctl c0306201 200000000080 returned -14 [ 450.571391][ T8277] overlayfs: missing 'lowerdir' [ 454.207749][ T8317] binder: 8315:8317 ioctl c0306201 200000000080 returned -14 [ 454.348150][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.6.716'. [ 456.442550][ T8345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 460.747973][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.749'. [ 461.291790][ T8422] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 462.298219][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.759'. [ 465.752403][ T8480] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 465.791104][ T8480] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 466.267730][ T8485] syz.3.777 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 466.981181][ T8495] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 467.455936][ T8499] netlink: 5 bytes leftover after parsing attributes in process `syz.7.782'. [ 467.465758][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.7.782'. [ 467.475310][ T8499] netlink: 12 bytes leftover after parsing attributes in process `syz.7.782'. [ 467.824454][ T8506] netlink: 104 bytes leftover after parsing attributes in process `syz.3.784'. [ 468.386445][ T8511] fuse: Unknown parameter 'group_id00000000000000000000' [ 470.337736][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.344376][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 470.573574][ T8531] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 471.673287][ T8548] fuse: Unknown parameter 'group_id00000000000000000000' [ 472.418028][ T8561] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 472.425986][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 472.435253][ T8561] netlink: 2 bytes leftover after parsing attributes in process `syz.3.805'. [ 473.713697][ T8569] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 478.017613][ T8620] netlink: 'syz.7.827': attribute type 1 has an invalid length. [ 478.118473][ T8620] 8021q: adding VLAN 0 to HW filter on device bond1 [ 482.708257][ T8610] Set syz1 is full, maxelem 65536 reached [ 485.358004][ T8668] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 485.538593][ T8668] 8021q: adding VLAN 0 to HW filter on device bond4 [ 485.559513][ T8676] netlink: 60 bytes leftover after parsing attributes in process `syz.5.844'. [ 485.571660][ T8676] netlink: 60 bytes leftover after parsing attributes in process `syz.5.844'. [ 485.604252][ T8676] netlink: 60 bytes leftover after parsing attributes in process `syz.5.844'. [ 488.308602][ T8711] netlink: 8 bytes leftover after parsing attributes in process `syz.6.860'. [ 489.789336][ T8729] netlink: 196 bytes leftover after parsing attributes in process `syz.7.866'. [ 489.887565][ T8724] netlink: 'syz.5.864': attribute type 8 has an invalid length. [ 489.895397][ T8724] netlink: 'syz.5.864': attribute type 1 has an invalid length. [ 491.818100][ T8749] loop7: detected capacity change from 0 to 128 [ 493.347102][ T53] kworker/u8:3: attempt to access beyond end of device [ 493.347102][ T53] loop7: rw=1, sector=145, nr_sectors = 8 limit=128 [ 493.361124][ T53] kworker/u8:3: attempt to access beyond end of device [ 493.361124][ T53] loop7: rw=1, sector=161, nr_sectors = 8 limit=128 [ 493.376082][ T53] kworker/u8:3: attempt to access beyond end of device [ 493.376082][ T53] loop7: rw=1, sector=177, nr_sectors = 8 limit=128 [ 493.390770][ T53] kworker/u8:3: attempt to access beyond end of device [ 493.390770][ T53] loop7: rw=1, sector=193, nr_sectors = 8 limit=128 [ 493.409416][ T53] kworker/u8:3: attempt to access beyond end of device [ 493.409416][ T53] loop7: rw=1, sector=209, nr_sectors = 8 limit=128 [ 493.424899][ T53] kworker/u8:3: attempt to access beyond end of device [ 493.424899][ T53] loop7: rw=1, sector=225, nr_sectors = 8 limit=128 [ 493.438864][ T53] kworker/u8:3: attempt to access beyond end of device [ 493.438864][ T53] loop7: rw=1, sector=241, nr_sectors = 8 limit=128 [ 493.798261][ T53] kworker/u8:3: attempt to access beyond end of device [ 493.798261][ T53] loop7: rw=1, sector=257, nr_sectors = 8 limit=128 [ 501.627734][ T8849] netlink: 752 bytes leftover after parsing attributes in process `syz.3.912'. [ 502.215049][ T8855] overlayfs: failed to clone lowerpath [ 502.314705][ T8855] overlayfs: failed to clone upperpath [ 507.558555][ T8897] netlink: 752 bytes leftover after parsing attributes in process `syz.6.927'. [ 508.488232][ T8909] syz.7.930 uses obsolete (PF_INET,SOCK_PACKET) [ 509.344128][ T8922] loop6: detected capacity change from 0 to 64 [ 513.953111][ T8945] netlink: 752 bytes leftover after parsing attributes in process `syz.7.939'. [ 521.039640][ T8991] netlink: 752 bytes leftover after parsing attributes in process `syz.0.952'. [ 521.287628][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.299595][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.357978][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.398167][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.418558][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 523.740237][ T5814] Bluetooth: hci5: command tx timeout [ 524.070546][ T8992] chnl_net:caif_netlink_parms(): no params data found [ 524.718294][ T9020] netlink: 'syz.5.958': attribute type 11 has an invalid length. [ 525.807117][ T5814] Bluetooth: hci5: command tx timeout [ 526.687545][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.694897][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.702729][ T8992] bridge_slave_0: entered allmulticast mode [ 526.711444][ T8992] bridge_slave_0: entered promiscuous mode [ 526.821380][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.829033][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.836977][ T8992] bridge_slave_1: entered allmulticast mode [ 526.845558][ T8992] bridge_slave_1: entered promiscuous mode [ 527.075774][ T9035] netlink: 752 bytes leftover after parsing attributes in process `syz.0.962'. [ 527.524254][ T8992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.705705][ T8992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.933461][ T5814] Bluetooth: hci5: command tx timeout [ 528.058253][ T8992] team0: Port device team_slave_0 added [ 528.083056][ T8992] team0: Port device team_slave_1 added [ 528.978484][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.985727][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.012666][ T8992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.384541][ T8992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.391884][ T8992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.419361][ T8992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.957589][ T5814] Bluetooth: hci5: command tx timeout [ 530.103489][ T8992] hsr_slave_0: entered promiscuous mode [ 530.112226][ T8992] hsr_slave_1: entered promiscuous mode [ 530.120528][ T8992] debugfs: 'hsr0' already exists in 'hsr' [ 530.126742][ T8992] Cannot create hsr debugfs directory [ 532.755308][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.762169][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.272037][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 533.311695][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 533.370825][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 533.424418][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 533.561216][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 535.440134][ T9062] chnl_net:caif_netlink_parms(): no params data found [ 535.618671][ T8992] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 535.716703][ T5814] Bluetooth: hci6: command tx timeout [ 535.917637][ T8992] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 535.958598][ T8992] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 536.039701][ T9080] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 536.136491][ T8992] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 536.163176][ T5811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 536.185990][ T5811] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 536.202591][ T5811] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 536.269301][ T5811] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 536.283728][ T5811] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 537.506889][ T9089] netlink: 752 bytes leftover after parsing attributes in process `syz.0.974'. [ 537.805059][ T5811] Bluetooth: hci6: command tx timeout [ 538.375187][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 538.517306][ T5811] Bluetooth: hci7: command tx timeout [ 538.850313][ T8992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.297784][ T8992] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.375643][ T3771] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.383281][ T3771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.547993][ T3771] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.555466][ T3771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.888579][ T5811] Bluetooth: hci6: command tx timeout [ 542.356915][ T5811] Bluetooth: hci7: command tx timeout [ 542.367316][ T5811] Bluetooth: hci6: command tx timeout [ 542.451979][ T9062] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.459446][ T9062] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.467104][ T9062] bridge_slave_0: entered allmulticast mode [ 542.475355][ T9062] bridge_slave_0: entered promiscuous mode [ 542.618784][ T9062] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.626769][ T9062] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.634488][ T9062] bridge_slave_1: entered allmulticast mode [ 542.642902][ T9062] bridge_slave_1: entered promiscuous mode [ 542.966113][ T9081] chnl_net:caif_netlink_parms(): no params data found [ 543.644019][ T9062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.988578][ T9062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.449917][ T5814] Bluetooth: hci7: command tx timeout [ 545.153960][ T9062] team0: Port device team_slave_0 added [ 545.408075][ T9062] team0: Port device team_slave_1 added [ 546.095011][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 546.141134][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 546.150631][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 546.210905][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 546.223700][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 546.528108][ T5811] Bluetooth: hci7: command tx timeout [ 546.621921][ T9062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.629540][ T9062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.660972][ T9062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.751213][ T9062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.759059][ T9062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.789018][ T9062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.821349][ T9081] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.829006][ T9081] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.836883][ T9081] bridge_slave_0: entered allmulticast mode [ 547.846658][ T9081] bridge_slave_0: entered promiscuous mode [ 548.182885][ T8992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.315834][ T9081] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.323485][ T9081] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.331486][ T9081] bridge_slave_1: entered allmulticast mode [ 548.341492][ T9081] bridge_slave_1: entered promiscuous mode [ 548.480258][ T5811] Bluetooth: hci4: command tx timeout [ 549.106038][ T9141] netlink: 'syz.0.981': attribute type 1 has an invalid length. [ 549.737444][ T9121] chnl_net:caif_netlink_parms(): no params data found [ 549.785714][ T9081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.818777][ T9062] hsr_slave_0: entered promiscuous mode [ 549.828884][ T9062] hsr_slave_1: entered promiscuous mode [ 549.837124][ T9062] debugfs: 'hsr0' already exists in 'hsr' [ 549.842956][ T9062] Cannot create hsr debugfs directory [ 549.947647][ T9081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.213350][ T9147] netlink: 752 bytes leftover after parsing attributes in process `syz.0.982'. [ 550.546529][ T5811] Bluetooth: hci4: command tx timeout [ 550.697784][ T9081] team0: Port device team_slave_0 added [ 551.054338][ T9081] team0: Port device team_slave_1 added [ 551.627867][ T30] audit: type=1326 audit(1755172898.346:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54c38ebe9 code=0x7fc00000 [ 552.132991][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.140254][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.166730][ T9081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.609424][ T5811] Bluetooth: hci4: command tx timeout [ 553.120619][ T9081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.127759][ T9081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.154108][ T9081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.743829][ T9062] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 554.098363][ T9062] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 554.360956][ T30] audit: type=1326 audit(1755172901.006:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9151 comm="syz.0.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff54c32add9 code=0x7fc00000 [ 554.539431][ T9062] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 554.688776][ T5811] Bluetooth: hci4: command tx timeout [ 554.802911][ T8992] veth0_vlan: entered promiscuous mode [ 554.828818][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.843060][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.851224][ T9121] bridge_slave_0: entered allmulticast mode [ 554.859803][ T9121] bridge_slave_0: entered promiscuous mode [ 555.083261][ T9062] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 555.453094][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.587037][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.594643][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.602611][ T9121] bridge_slave_1: entered allmulticast mode [ 555.612297][ T9121] bridge_slave_1: entered promiscuous mode [ 555.801779][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.147994][ T9081] hsr_slave_0: entered promiscuous mode [ 556.161504][ T9081] hsr_slave_1: entered promiscuous mode [ 556.175504][ T9081] debugfs: 'hsr0' already exists in 'hsr' [ 556.181540][ T9081] Cannot create hsr debugfs directory [ 556.877735][ T8992] veth1_vlan: entered promiscuous mode [ 561.824194][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.518207][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.607119][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.068861][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.807174][ T9121] team0: Port device team_slave_0 added [ 564.176975][ T9121] team0: Port device team_slave_1 added [ 564.729576][ T35] bridge_slave_1: left allmulticast mode [ 564.735441][ T35] bridge_slave_1: left promiscuous mode [ 564.742001][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.917973][ T35] bridge_slave_0: left allmulticast mode [ 564.923805][ T35] bridge_slave_0: left promiscuous mode [ 564.930715][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.043462][ T9192] netlink: 752 bytes leftover after parsing attributes in process `syz.0.989'. [ 565.962131][ T30] audit: type=1326 audit(1755172912.676:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54c38ebe9 code=0x7fc00000 [ 566.358352][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.484089][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.563710][ T35] bond0 (unregistering): Released all slaves [ 566.590015][ T35] bond1 (unregistering): Released all slaves [ 566.625244][ T35] bond2 (unregistering): Released all slaves [ 566.935224][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.942753][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.970100][ T9121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.307983][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.315173][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.346352][ T9121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.375703][ T8992] veth0_macvtap: entered promiscuous mode [ 567.667954][ T8992] veth1_macvtap: entered promiscuous mode [ 568.340878][ T35] hsr_slave_0: left promiscuous mode [ 568.366261][ T35] hsr_slave_1: left promiscuous mode [ 568.374089][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.381984][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.429261][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.437320][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.539201][ T35] veth1_macvtap: left promiscuous mode [ 568.544961][ T35] veth0_macvtap: left promiscuous mode [ 568.551466][ T35] veth1_vlan: left promiscuous mode [ 568.561461][ T35] veth0_vlan: left promiscuous mode [ 569.196447][ T30] audit: type=1326 audit(1755172915.926:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff54c32add9 code=0x7fc00000 [ 569.219135][ T30] audit: type=1326 audit(1755172915.926:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff54c32ae9f code=0x7fc00000 [ 569.242881][ T30] audit: type=1326 audit(1755172915.926:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9194 comm="syz.0.990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff54c38ebe9 code=0x7fc00000 [ 569.997002][ T35] team0 (unregistering): Port device team_slave_1 removed [ 570.075451][ T35] team0 (unregistering): Port device team_slave_0 removed [ 571.532716][ T9121] hsr_slave_0: entered promiscuous mode [ 571.543256][ T9121] hsr_slave_1: entered promiscuous mode [ 571.552361][ T9121] debugfs: 'hsr0' already exists in 'hsr' [ 571.558403][ T9121] Cannot create hsr debugfs directory [ 571.582262][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.048887][ T9081] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 573.154515][ T9081] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 573.280328][ T9081] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 573.346711][ T9081] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 573.398991][ T8992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.632281][ T9175] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.831568][ T9175] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.926740][ T9175] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.011819][ T35] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.096926][ T9175] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.275557][ T35] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.448267][ T35] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.557164][ T9062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.634033][ T35] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.978803][ T9062] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.095743][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.103420][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.590288][ T9252] netlink: 752 bytes leftover after parsing attributes in process `syz.0.996'. [ 575.669443][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.677071][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.758986][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.954880][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.137619][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.194598][ T30] audit: type=1326 audit(1755172922.916:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff54c38ebe9 code=0x7fc00000 [ 576.402207][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.885012][ T9081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.560401][ T9081] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.891984][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.018237][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.025817][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.188058][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.280562][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.288188][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.371669][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.642877][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.253542][ T9121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 579.413297][ T9121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 579.493195][ T35] bridge_slave_1: left allmulticast mode [ 579.501141][ T35] bridge_slave_1: left promiscuous mode [ 579.508644][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.517497][ T30] audit: type=1326 audit(1755172926.226:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9256 comm="syz.0.997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff54c32add9 code=0x7fc00000 [ 579.647605][ T35] bridge_slave_0: left allmulticast mode [ 579.653702][ T35] bridge_slave_0: left promiscuous mode [ 579.661487][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.754244][ T35] bridge_slave_1: left allmulticast mode [ 579.760404][ T35] bridge_slave_1: left promiscuous mode [ 579.767189][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.858007][ T35] bridge_slave_0: left allmulticast mode [ 579.863856][ T35] bridge_slave_0: left promiscuous mode [ 579.872101][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.952064][ T35] bridge_slave_1: left allmulticast mode [ 579.958682][ T35] bridge_slave_1: left promiscuous mode [ 579.965173][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.073864][ T35] bridge_slave_0: left allmulticast mode [ 580.079948][ T35] bridge_slave_0: left promiscuous mode [ 580.089976][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.293943][ T35] bond_slave_0: left promiscuous mode [ 580.299783][ T35] bond_slave_1: left promiscuous mode [ 580.811547][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 580.833465][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 580.855985][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 580.898996][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 580.938535][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 581.564657][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 581.604156][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 581.651787][ T35] bond0 (unregistering): Released all slaves [ 581.680826][ T35] bond1 (unregistering): Released all slaves [ 582.058411][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.095555][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.122470][ T35] bond0 (unregistering): Released all slaves [ 582.194957][ T35] bond1 (unregistering): (slave vlan0): Releasing active interface [ 582.227193][ T35] bond1 (unregistering): Released all slaves [ 582.250781][ T35] bond2 (unregistering): Released all slaves [ 582.273760][ T35] bond3 (unregistering): Released all slaves [ 582.301377][ T35] bond4 (unregistering): Released all slaves [ 582.640986][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.672716][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.720215][ T35] bond0 (unregistering): Released all slaves [ 582.753637][ T9121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 582.857853][ T9121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 583.049378][ T5814] Bluetooth: hci1: command tx timeout [ 583.131520][ T9062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.780335][ T9081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.087156][ T5814] Bluetooth: hci1: command tx timeout [ 585.235600][ T9294] chnl_net:caif_netlink_parms(): no params data found [ 586.185890][ T35] hsr_slave_0: left promiscuous mode [ 586.217222][ T35] hsr_slave_1: left promiscuous mode [ 586.225151][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.233124][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.328980][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.336720][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.394697][ T35] hsr_slave_0: left promiscuous mode [ 586.403014][ T35] hsr_slave_1: left promiscuous mode [ 586.412612][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.420556][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.469391][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.480089][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.558350][ T35] hsr_slave_0: left promiscuous mode [ 586.586812][ T35] hsr_slave_1: left promiscuous mode [ 586.594742][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.604754][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.659330][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.667053][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.809365][ T35] veth1_macvtap: left promiscuous mode [ 586.815087][ T35] veth0_macvtap: left promiscuous mode [ 586.821331][ T35] veth1_vlan: left promiscuous mode [ 586.826974][ T35] veth0_vlan: left promiscuous mode [ 586.849757][ T35] veth0_macvtap: left promiscuous mode [ 586.868115][ T35] veth1_macvtap: left promiscuous mode [ 586.873885][ T35] veth0_macvtap: left promiscuous mode [ 586.880387][ T35] veth1_vlan: left promiscuous mode [ 586.887125][ T35] veth0_vlan: left promiscuous mode [ 587.156654][ T5814] Bluetooth: hci1: command tx timeout [ 588.325347][ T35] team0 (unregistering): Port device team_slave_1 removed [ 588.403194][ T35] team0 (unregistering): Port device team_slave_0 removed [ 588.715032][ T35] pimreg (unregistering): left allmulticast mode [ 588.902028][ T35] team0 (unregistering): Port device team_slave_1 removed [ 588.951225][ T35] team0 (unregistering): Port device team_slave_0 removed [ 589.237347][ T5814] Bluetooth: hci1: command tx timeout [ 589.354790][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 589.365868][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 589.404697][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 589.432582][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 589.463897][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 589.695930][ T35] team0 (unregistering): Port device team_slave_1 removed [ 589.752839][ T35] team0 (unregistering): Port device team_slave_0 removed [ 590.217885][ T1720] infiniband syz0: ib_query_port failed (-19) [ 590.450820][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.504649][ T9081] veth0_vlan: entered promiscuous mode [ 590.734344][ T9081] veth1_vlan: entered promiscuous mode [ 590.866023][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.137584][ T9344] netlink: 752 bytes leftover after parsing attributes in process `syz.0.1003'. [ 591.325493][ T3681] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.333168][ T3681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.359131][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.367833][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.375541][ T9294] bridge_slave_0: entered allmulticast mode [ 591.385576][ T9294] bridge_slave_0: entered promiscuous mode [ 591.482855][ T3681] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.490542][ T3681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.509623][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.517915][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.525603][ T9294] bridge_slave_1: entered allmulticast mode [ 591.535275][ T9294] bridge_slave_1: entered promiscuous mode [ 591.566368][ T5814] Bluetooth: hci2: command tx timeout [ 592.529025][ T9294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.830729][ T9294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.243407][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.250800][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 593.330626][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 593.402379][ T9294] team0: Port device team_slave_0 added [ 593.411455][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 593.422478][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 593.439013][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 593.472883][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 593.497630][ T9294] team0: Port device team_slave_1 added [ 593.636103][ T9356] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1005'. [ 593.649167][ T5811] Bluetooth: hci2: command tx timeout [ 593.720940][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.728736][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.756054][ T9294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.039971][ T35] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.130441][ T9337] chnl_net:caif_netlink_parms(): no params data found [ 594.263901][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.271212][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.298945][ T9294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.439942][ T35] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.691722][ T35] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.011502][ T35] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.615871][ T9294] hsr_slave_0: entered promiscuous mode [ 595.626905][ T9294] hsr_slave_1: entered promiscuous mode [ 595.650034][ T5811] Bluetooth: hci3: command tx timeout [ 595.762617][ T5811] Bluetooth: hci2: command tx timeout [ 596.670830][ T35] bridge_slave_1: left allmulticast mode [ 596.678413][ T35] bridge_slave_1: left promiscuous mode [ 596.685077][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.759582][ T35] bridge_slave_0: left allmulticast mode [ 596.765442][ T35] bridge_slave_0: left promiscuous mode [ 596.772647][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.224006][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.246832][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.269935][ T35] bond0 (unregistering): Released all slaves [ 597.475696][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.718334][ T5811] Bluetooth: hci3: command tx timeout [ 597.762954][ T9337] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.770664][ T9337] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.778762][ T9337] bridge_slave_0: entered allmulticast mode [ 597.788545][ T9337] bridge_slave_0: entered promiscuous mode [ 597.796666][ T5811] Bluetooth: hci2: command tx timeout [ 597.913562][ T35] hsr_slave_0: left promiscuous mode [ 597.937557][ T35] hsr_slave_1: left promiscuous mode [ 597.948455][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.956027][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.022029][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.029894][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 598.095907][ T35] veth1_macvtap: left promiscuous mode [ 598.102014][ T35] veth0_macvtap: left promiscuous mode [ 598.109841][ T35] veth1_vlan: left promiscuous mode [ 598.115392][ T35] veth0_vlan: left promiscuous mode [ 598.936767][ T35] team0 (unregistering): Port device team_slave_1 removed [ 598.968738][ T35] team0 (unregistering): Port device team_slave_0 removed [ 599.275699][ T9353] chnl_net:caif_netlink_parms(): no params data found [ 599.369235][ T9337] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.381706][ T9337] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.391778][ T9337] bridge_slave_1: entered allmulticast mode [ 599.404839][ T9337] bridge_slave_1: entered promiscuous mode [ 599.858546][ T5811] Bluetooth: hci3: command tx timeout [ 600.176100][ T9337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.330729][ T9337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.882932][ T9337] team0: Port device team_slave_0 added [ 601.077104][ T9337] team0: Port device team_slave_1 added [ 601.378034][ T9353] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.385538][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.393514][ T9353] bridge_slave_0: entered allmulticast mode [ 601.403118][ T9353] bridge_slave_0: entered promiscuous mode [ 601.470662][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.479893][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.506379][ T9337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.656566][ T9353] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.664095][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.672202][ T9353] bridge_slave_1: entered allmulticast mode [ 601.681774][ T9353] bridge_slave_1: entered promiscuous mode [ 601.828851][ T9337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.837042][ T9337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.863905][ T9337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.877164][ T5811] Bluetooth: hci3: command tx timeout [ 601.953103][ T9353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.974663][ T9294] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 602.052042][ T9294] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 602.127912][ T9353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.331882][ T9294] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 602.672260][ T9337] hsr_slave_0: entered promiscuous mode [ 602.682413][ T9337] hsr_slave_1: entered promiscuous mode [ 602.691401][ T9337] debugfs: 'hsr0' already exists in 'hsr' [ 602.697571][ T9337] Cannot create hsr debugfs directory [ 602.711459][ T9294] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 602.917341][ T9353] team0: Port device team_slave_0 added [ 603.100734][ T9121] veth0_vlan: entered promiscuous mode [ 603.129280][ T9353] team0: Port device team_slave_1 added [ 603.489109][ T9121] veth1_vlan: entered promiscuous mode [ 603.560793][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.568973][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.595953][ T9353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 603.772068][ T9445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1020'. [ 603.793217][ T9353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 603.801159][ T9353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.827691][ T9353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.326634][ T35] bridge_slave_1: left allmulticast mode [ 604.332490][ T35] bridge_slave_1: left promiscuous mode [ 604.339244][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.377983][ T35] bridge_slave_0: left allmulticast mode [ 604.383856][ T35] bridge_slave_0: left promiscuous mode [ 604.390646][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.450916][ T35] bridge_slave_1: left allmulticast mode [ 604.456969][ T35] bridge_slave_1: left promiscuous mode [ 604.463452][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.523902][ T35] bridge_slave_0: left allmulticast mode [ 604.530075][ T35] bridge_slave_0: left promiscuous mode [ 604.536771][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.106519][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.154938][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.191484][ T35] bond0 (unregistering): Released all slaves [ 605.226563][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 605.238657][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 605.247909][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 605.261048][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 605.273912][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 605.477897][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.525623][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.568834][ T35] bond0 (unregistering): Released all slaves [ 605.658608][ T9353] hsr_slave_0: entered promiscuous mode [ 605.668843][ T9353] hsr_slave_1: entered promiscuous mode [ 605.677665][ T9353] debugfs: 'hsr0' already exists in 'hsr' [ 605.683563][ T9353] Cannot create hsr debugfs directory [ 606.475354][ T35] hsr_slave_0: left promiscuous mode [ 606.530788][ T35] hsr_slave_1: left promiscuous mode [ 606.540826][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.583187][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.690068][ T35] hsr_slave_0: left promiscuous mode [ 606.714469][ T35] hsr_slave_1: left promiscuous mode [ 606.722871][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.753526][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.829935][ T35] veth1_vlan: left promiscuous mode [ 606.835585][ T35] veth0_vlan: left promiscuous mode [ 607.399591][ T5811] Bluetooth: hci5: command tx timeout [ 607.596861][ T35] team0 (unregistering): Port device team_slave_1 removed [ 607.712142][ T35] team0 (unregistering): Port device team_slave_0 removed [ 608.273504][ T35] team0 (unregistering): Port device team_slave_1 removed [ 608.303586][ T35] team0 (unregistering): Port device team_slave_0 removed [ 608.960804][ T9294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.142989][ T9469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'. [ 609.182504][ T9337] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 609.286501][ T9337] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 609.476829][ T5811] Bluetooth: hci5: command tx timeout [ 609.605022][ T9337] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 609.643452][ T9337] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 609.666717][ T9453] chnl_net:caif_netlink_parms(): no params data found [ 609.774707][ T9294] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.128273][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.135774][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.395164][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.402824][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.062639][ T9353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 611.239377][ T9353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 611.381283][ T35] bridge_slave_1: left allmulticast mode [ 611.388055][ T35] bridge_slave_1: left promiscuous mode [ 611.394628][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.418098][ T35] bridge_slave_0: left allmulticast mode [ 611.424039][ T35] bridge_slave_0: left promiscuous mode [ 611.430894][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.626578][ T5811] Bluetooth: hci5: command tx timeout [ 611.857473][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.886005][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.907513][ T35] bond0 (unregistering): Released all slaves [ 611.930464][ T9353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 612.079165][ T9353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 612.149011][ T35] hsr_slave_0: left promiscuous mode [ 612.184917][ T35] hsr_slave_1: left promiscuous mode [ 612.192987][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.248555][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.316930][ T35] veth1_vlan: left promiscuous mode [ 612.322610][ T35] veth0_vlan: left promiscuous mode [ 612.917311][ T35] team0 (unregistering): Port device team_slave_1 removed [ 612.962836][ T35] team0 (unregistering): Port device team_slave_0 removed [ 613.277849][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.285553][ T9453] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.293572][ T9453] bridge_slave_0: entered allmulticast mode [ 613.304552][ T9453] bridge_slave_0: entered promiscuous mode [ 613.495169][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.504402][ T9453] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.513695][ T9453] bridge_slave_1: entered allmulticast mode [ 613.523205][ T9453] bridge_slave_1: entered promiscuous mode [ 613.638286][ T9294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.657453][ T5811] Bluetooth: hci5: command tx timeout [ 613.667322][ T9337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 613.768679][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1034'. [ 613.978146][ T9453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.142417][ T9453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.169392][ T9337] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.412849][ T1331] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.420461][ T1331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.563241][ T9453] team0: Port device team_slave_0 added [ 614.654923][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.662520][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.695218][ T9453] team0: Port device team_slave_1 added [ 615.093818][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.101202][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.127676][ T9453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.162634][ T9353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.174029][ T9453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.181615][ T9453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.208174][ T9453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.483069][ T9353] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.732369][ T9453] hsr_slave_0: entered promiscuous mode [ 615.742551][ T9453] hsr_slave_1: entered promiscuous mode [ 615.751424][ T9453] debugfs: 'hsr0' already exists in 'hsr' [ 615.757461][ T9453] Cannot create hsr debugfs directory [ 615.771621][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.779361][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.942421][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.950253][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.558619][ T9294] veth0_vlan: entered promiscuous mode [ 619.013685][ T9294] veth1_vlan: entered promiscuous mode [ 619.095196][ T9453] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 619.145068][ T9453] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 619.194909][ T9337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.229510][ T9453] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 619.319655][ T9453] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 619.645033][ T9294] veth0_macvtap: entered promiscuous mode [ 619.724781][ T9294] veth1_macvtap: entered promiscuous mode [ 619.971725][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.065962][ T9533] overlayfs: failed to clone upperpath [ 620.112145][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.649709][ T3771] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.005421][ T1312] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.329438][ T9353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.394010][ T1312] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.500873][ T1312] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.668981][ T9453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.893158][ T9353] veth0_vlan: entered promiscuous mode [ 621.953464][ T9453] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.023995][ T9353] veth1_vlan: entered promiscuous mode [ 622.115577][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.123226][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.278566][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.286057][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.529258][ T9353] veth0_macvtap: entered promiscuous mode [ 622.599009][ T9353] veth1_macvtap: entered promiscuous mode [ 622.791333][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.909515][ T9353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.058792][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.157204][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.217761][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.268289][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.960949][ T9337] veth0_vlan: entered promiscuous mode [ 624.069897][ T9337] veth1_vlan: entered promiscuous mode [ 624.485435][ T9337] veth0_macvtap: entered promiscuous mode [ 624.621425][ T9337] veth1_macvtap: entered promiscuous mode [ 624.845077][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.942632][ T9337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.081988][ T3771] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.188166][ T53] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.212045][ T9453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.241817][ T53] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.297495][ T53] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.312780][ T9453] veth0_vlan: entered promiscuous mode [ 628.461573][ T9453] veth1_vlan: entered promiscuous mode [ 628.870165][ T9453] veth0_macvtap: entered promiscuous mode [ 628.932988][ T9453] veth1_macvtap: entered promiscuous mode [ 629.180084][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.242702][ T9453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.343132][ T3771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.366540][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.374555][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.479033][ T3771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.564290][ T3771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.612196][ T3771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.689927][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.699271][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.547421][ T9175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.556348][ T9175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.697306][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.705320][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.496797][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.507423][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.560884][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.569278][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.239139][ T30] audit: type=1326 audit(1755172981.966:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.9.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174498ebe9 code=0x7ffc0000 [ 635.261803][ T30] audit: type=1326 audit(1755172981.966:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.9.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174498ebe9 code=0x7ffc0000 [ 635.521725][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d32d800: rx timeout, send abort [ 635.531796][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804d32d800: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 635.532055][ T30] audit: type=1326 audit(1755172982.066:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.9.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f174498ebe9 code=0x7ffc0000 [ 635.549951][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d32ca00: rx timeout, send abort [ 635.571446][ T30] audit: type=1326 audit(2000000000.000:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.9.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174498ebe9 code=0x7ffc0000 [ 635.586985][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804d32ca00: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 635.601106][ T30] audit: type=1326 audit(2000000000.000:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.9.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f174498ebe9 code=0x7ffc0000 [ 635.674773][ T9694] loop1: detected capacity change from 0 to 128 [ 635.786753][ T9694] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 635.980173][ T9694] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 637.274192][ T9707] loop1: detected capacity change from 0 to 1764 [ 638.269597][ T9720] warning: `syz.9.1065' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 639.521710][ T9734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.556949][ T5814] Bluetooth: hci2: unexpected event 0x3e length: 262 > 260 [ 639.557088][ T5814] Bluetooth: hci2: unexpected subevent 0x02 length: 261 > 260 [ 639.911717][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.919973][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.004877][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.013550][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 641.237540][ T9741] can: request_module (can-proto-0) failed. [ 643.221743][ T9762] mmap: syz.4.1075 (9762) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 647.075237][ T9782] loop8: detected capacity change from 0 to 1764 [ 650.471737][ T9794] TCP: tcp_parse_options: Illegal window scaling value 250 > 14 received [ 654.902609][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.909406][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 655.090463][ T9816] loop8: detected capacity change from 0 to 64 [ 657.925264][ T9837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 657.968045][ T9837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 657.984170][ T9837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 658.003517][ T9837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 658.016661][ T9837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 660.136602][ T9837] Bluetooth: hci4: command tx timeout [ 660.553333][ T9837] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 660.563521][ T9837] CPU: 1 UID: 0 PID: 9837 Comm: kworker/u9:0 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(none) [ 660.563682][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.563819][ T9837] Workqueue: hci2 hci_rx_work [ 660.563973][ T9837] Call Trace: [ 660.564035][ T9837] [ 660.564086][ T9837] __dump_stack+0x26/0x30 [ 660.564265][ T9837] dump_stack_lvl+0x1df/0x270 [ 660.564442][ T9837] dump_stack+0x1e/0x25 [ 660.564605][ T9837] sysfs_create_dir_ns+0x46c/0x540 [ 660.564825][ T9837] kobject_add_internal+0xeed/0x1840 [ 660.565051][ T9837] kobject_add+0x2c1/0x410 [ 660.565265][ T9837] ? kmsan_get_metadata+0xfb/0x160 [ 660.565423][ T9837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 660.565605][ T9837] device_add+0xa70/0x1c10 [ 660.565774][ T9837] hci_conn_add_sysfs+0x15f/0x2f0 [ 660.565962][ T9837] le_conn_complete_evt+0x1b35/0x21b0 [ 660.566165][ T9837] hci_le_conn_complete_evt+0x157/0x260 [ 660.566335][ T9837] hci_le_meta_evt+0x6e8/0x960 [ 660.566486][ T9837] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 660.566666][ T9837] hci_event_packet+0xce2/0x1e40 [ 660.566854][ T9837] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 660.567044][ T9837] hci_rx_work+0x9a8/0x12b0 [ 660.567200][ T9837] ? __pfx_hci_rx_work+0x10/0x10 [ 660.567337][ T9837] process_scheduled_works+0xb91/0x1d80 [ 660.567595][ T9837] worker_thread+0xedf/0x1590 [ 660.567818][ T9837] kthread+0xd59/0xf00 [ 660.567951][ T9837] ? __pfx_worker_thread+0x10/0x10 [ 660.568158][ T9837] ? __pfx_kthread+0x10/0x10 [ 660.568299][ T9837] ret_from_fork+0x1e3/0x310 [ 660.568438][ T9837] ? __pfx_kthread+0x10/0x10 [ 660.568583][ T9837] ret_from_fork_asm+0x1a/0x30 [ 660.568796][ T9837] [ 660.740567][ T9837] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 660.756649][ T9837] Bluetooth: hci2: failed to register connection device [ 662.094119][ T9261] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 662.217205][ T9837] Bluetooth: hci4: command tx timeout [ 662.366921][ T9261] usb 10-1: Using ep0 maxpacket: 16 [ 662.429434][ T9261] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.440436][ T9261] usb 10-1: config 0 has no interfaces? [ 662.621606][ T9261] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 662.631415][ T9261] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 662.639920][ T9261] usb 10-1: SerialNumber: syz [ 662.884961][ T9261] usb 10-1: config 0 descriptor?? [ 663.213008][ T9261] usb 10-1: USB disconnect, device number 2 [ 663.740972][ T1331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.014474][ T9875] loop4: detected capacity change from 0 to 128 [ 664.063259][ T1331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.171405][ T9875] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 664.187974][ T9836] chnl_net:caif_netlink_parms(): no params data found [ 664.276663][ T9837] Bluetooth: hci4: command tx timeout [ 664.352350][ T9875] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 664.422174][ T1331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.572863][ T1331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.460201][ T9837] Bluetooth: hci4: command tx timeout [ 667.336941][ T1331] bridge_slave_1: left allmulticast mode [ 667.342937][ T1331] bridge_slave_1: left promiscuous mode [ 667.349901][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.587996][ T1331] bridge_slave_0: left allmulticast mode [ 667.593852][ T1331] bridge_slave_0: left promiscuous mode [ 667.602217][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.321587][ T9837] Bluetooth: hci2: command 0x0406 tx timeout [ 669.669525][ T9911] loop8: detected capacity change from 0 to 256 [ 670.329420][ T1331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 670.512644][ T1331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 670.603240][ T1331] bond0 (unregistering): Released all slaves [ 671.406621][ T9261] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 671.581160][ T9836] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.586632][ T9261] usb 9-1: Using ep0 maxpacket: 32 [ 671.589583][ T9836] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.601366][ T9836] bridge_slave_0: entered allmulticast mode [ 671.611253][ T9836] bridge_slave_0: entered promiscuous mode [ 671.623502][ T9261] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 671.634927][ T9261] usb 9-1: config 1 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.648672][ T9261] usb 9-1: config 1 interface 0 has no altsetting 0 [ 671.768432][ T9261] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 671.780783][ T9261] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 671.790899][ T9261] usb 9-1: SerialNumber: syz [ 671.932338][ T9836] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.940096][ T9836] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.948003][ T9836] bridge_slave_1: entered allmulticast mode [ 671.958583][ T9836] bridge_slave_1: entered promiscuous mode [ 672.175043][ T9261] usb 9-1: bad CDC descriptors [ 672.209992][ T1331] hsr_slave_0: left promiscuous mode [ 672.272126][ T1331] hsr_slave_1: left promiscuous mode [ 672.280318][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.292045][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.422640][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.430883][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.751007][ T1331] veth1_macvtap: left promiscuous mode [ 672.756976][ T1331] veth0_macvtap: left promiscuous mode [ 672.762952][ T1331] veth1_vlan: left promiscuous mode [ 672.768864][ T1331] veth0_vlan: left promiscuous mode [ 672.960265][ T9261] usb 9-1: USB disconnect, device number 2 [ 673.596930][ T9942] loop8: detected capacity change from 0 to 64 [ 673.768200][ T9942] hfs: small file entry [ 674.262778][ T9944] loop4: detected capacity change from 0 to 512 [ 674.530265][ T9944] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.702508][ T1331] team0 (unregistering): Port device team_slave_1 removed [ 674.761832][ T9944] fs-verity (loop4, inode 13): Unknown hash algorithm number: 99 [ 674.825837][ T1331] team0 (unregistering): Port device team_slave_0 removed [ 675.164375][ T9453] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.994905][ T9836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.138229][ T9836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.743606][ T9836] team0: Port device team_slave_0 added [ 677.628684][ T9836] team0: Port device team_slave_1 added [ 678.307956][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.315336][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.345882][ T9836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.537761][ T9836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.545895][ T9836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.572799][ T9836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.439776][ T9988] affs: No valid root block on device nullb0 [ 679.475791][ T9836] hsr_slave_0: entered promiscuous mode [ 679.491578][ T9836] hsr_slave_1: entered promiscuous mode [ 679.504296][ T9836] debugfs: 'hsr0' already exists in 'hsr' [ 679.510746][ T9836] Cannot create hsr debugfs directory [ 683.905381][T10002] loop4: detected capacity change from 0 to 128 [ 684.093289][T10002] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 684.210541][T10002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 685.413332][T10014] loop8: detected capacity change from 0 to 64 [ 686.913637][ T9836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 687.104861][ T9836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 687.264912][ T9836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 687.358679][ T9836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 687.692032][T10032] netlink: 220 bytes leftover after parsing attributes in process `syz.9.1153'. [ 688.007972][T10030] can: request_module (can-proto-0) failed. [ 689.411940][T10046] loop8: detected capacity change from 0 to 128 [ 689.537600][T10046] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 689.683441][T10046] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 689.857649][ T9836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.341122][ T9836] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.543703][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.551314][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.124482][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.132018][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.508961][T10072] sd 0:0:1:0: PR command failed: 1026 [ 692.514689][T10072] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 692.525322][T10072] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 693.607480][T10087] loop9: detected capacity change from 0 to 128 [ 693.675594][T10087] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 693.904092][T10087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 693.940885][ T9836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 695.339679][ T9836] veth0_vlan: entered promiscuous mode [ 695.702486][ T9836] veth1_vlan: entered promiscuous mode [ 697.838517][ T9836] veth0_macvtap: entered promiscuous mode [ 697.924657][ T9836] veth1_macvtap: entered promiscuous mode [ 698.035529][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.225816][ T9836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.354654][ T1312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.392240][ T1312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.462203][ T1312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.511392][ T1312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.870262][T10114] loop9: detected capacity change from 0 to 64 [ 699.830251][T10123] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1179'. [ 699.865028][T10123] bridge0: port 3(batadv1) entered blocking state [ 699.872108][T10123] bridge0: port 3(batadv1) entered disabled state [ 699.879743][T10123] batadv1: entered allmulticast mode [ 699.888638][T10123] batadv1: entered promiscuous mode [ 700.463956][ T68] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 700.473573][ T68] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 701.422857][T10135] loop4: detected capacity change from 0 to 256 [ 701.540142][T10135] exfat: Deprecated parameter 'namecase' [ 701.936844][T10135] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 701.936941][T10137] vivid-000: ================= START STATUS ================= [ 701.937027][T10137] vivid-000: Test Pattern: 75% Colorbar [ 701.964134][T10137] vivid-000: Fill Percentage of Frame: 100 [ 701.970550][T10137] vivid-000: Horizontal Movement: No Movement [ 701.977010][T10137] vivid-000: Vertical Movement: No Movement [ 701.985772][T10137] vivid-000: OSD Text Mode: All [ 701.992913][T10137] vivid-000: Show Border: false [ 701.998497][T10137] vivid-000: Show Square: false [ 702.003624][T10137] vivid-000: Sensor Flipped Horizontally: false [ 702.010307][T10137] vivid-000: Sensor Flipped Vertically: false [ 702.016976][T10137] vivid-000: Insert SAV Code in Image: false [ 702.023248][T10137] vivid-000: Insert EAV Code in Image: false [ 702.029653][T10137] vivid-000: Insert Video Guard Band: false [ 702.035832][T10137] vivid-000: Reduced Framerate: false [ 702.041800][T10137] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 702.049983][T10137] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 702.058302][T10137] vivid-000: Enable Capture Cropping: true [ 702.064434][T10137] vivid-000: Enable Capture Composing: true [ 702.070954][T10137] vivid-000: Enable Capture Scaler: true [ 702.077341][T10137] vivid-000: Timestamp Source: End of Frame [ 702.086090][T10137] vivid-000: Colorspace: sRGB [ 702.091952][T10137] vivid-000: Transfer Function: Default [ 702.100090][T10137] vivid-000: Y'CbCr Encoding: Default [ 702.105746][T10137] vivid-000: HSV Encoding: Hue 0-179 [ 702.112745][T10137] vivid-000: Quantization: Default [ 702.119051][T10137] vivid-000: Apply Alpha To Red Only: false [ 702.125461][T10137] vivid-000: Standard Aspect Ratio: 4x3 [ 702.132457][T10137] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 702.140698][T10137] vivid-000: DV Timings: 640x480p59 inactive [ 702.147218][T10137] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 702.154795][T10137] vivid-000: Maximum EDID Blocks: 2 [ 702.160491][T10137] vivid-000: Limited RGB Range (16-235): false [ 702.167124][T10137] vivid-000: Rx RGB Quantization Range: Automatic [ 702.173953][T10137] vivid-000: Power Present: 0x00000001 [ 702.180023][T10137] tpg source WxH: 320x240 (Y'CbCr) [ 702.185304][T10137] tpg field: 1 [ 702.191519][T10137] tpg crop: (0,0)/320x240 [ 702.197815][T10137] tpg compose: (0,0)/320x240 [ 702.202590][T10137] tpg colorspace: 8 [ 702.207053][T10137] tpg transfer function: 0/0 [ 702.211799][T10137] tpg Y'CbCr encoding: 0/0 [ 702.216560][T10137] tpg quantization: 0/0 [ 702.220870][T10137] tpg RGB range: 0/2 [ 702.224908][T10137] vivid-000: ================== END STATUS ================== [ 704.400838][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.873086][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.295545][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.502839][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.944105][ T53] bridge_slave_1: left allmulticast mode [ 705.950131][ T53] bridge_slave_1: left promiscuous mode [ 705.956985][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.027518][T10171] loop8: detected capacity change from 0 to 1024 [ 706.091589][ T53] bridge_slave_0: left allmulticast mode [ 706.097637][ T53] bridge_slave_0: left promiscuous mode [ 706.104315][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.220489][T10171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.233319][T10171] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 706.348715][T10171] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.891865][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 706.919266][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.948337][ T53] bond0 (unregistering): Released all slaves [ 707.555050][ T53] hsr_slave_0: left promiscuous mode [ 707.586912][ T53] hsr_slave_1: left promiscuous mode [ 707.594903][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.603241][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 707.640387][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.648263][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.706957][ T53] veth1_macvtap: left promiscuous mode [ 707.712695][ T53] veth0_macvtap: left promiscuous mode [ 707.723517][ T53] veth1_vlan: left promiscuous mode [ 707.729356][ T53] veth0_vlan: left promiscuous mode [ 707.880564][ T9837] Bluetooth: hci1: command 0x0406 tx timeout [ 708.682485][ T9837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 708.698161][ T9837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 708.708315][ T9837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 708.730251][ T9837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 708.748160][ T9837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 708.758821][ T53] team0 (unregistering): Port device team_slave_1 removed [ 708.786633][ T53] team0 (unregistering): Port device team_slave_0 removed [ 709.299526][T10186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1198'. [ 710.038001][T10209] overlayfs: failed to clone upperpath [ 710.067828][T10209] overlayfs: failed to clone upperpath [ 710.958664][ T9837] Bluetooth: hci3: command tx timeout [ 711.243836][T10220] loop9: detected capacity change from 0 to 1024 [ 712.318568][T10220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 712.787479][T10195] chnl_net:caif_netlink_parms(): no params data found [ 713.027053][ T5811] Bluetooth: hci2: command 0x0406 tx timeout [ 713.033431][ T5811] Bluetooth: hci3: command tx timeout [ 713.573328][ T3771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.581633][ T3771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.858483][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.869124][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.631196][T10265] netlink: 752 bytes leftover after parsing attributes in process `syz.2.1091'. [ 714.826775][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.834382][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.843054][T10195] bridge_slave_0: entered allmulticast mode [ 714.852768][T10195] bridge_slave_0: entered promiscuous mode [ 715.326766][ T9837] Bluetooth: hci3: command tx timeout [ 715.861845][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.869983][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.878067][T10195] bridge_slave_1: entered allmulticast mode [ 715.887820][T10195] bridge_slave_1: entered promiscuous mode [ 716.089943][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.096819][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 716.458389][T10277] loop2: detected capacity change from 0 to 1024 [ 716.887220][T10277] hfsplus: bad catalog entry type [ 717.050028][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.130818][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.160392][ T68] hfsplus: b-tree write err: -5, ino 4 [ 717.396866][ T9837] Bluetooth: hci3: command tx timeout [ 717.490418][T10195] team0: Port device team_slave_0 added [ 717.508990][T10195] team0: Port device team_slave_1 added [ 717.860959][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.868417][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.895129][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.101065][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.108565][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.135236][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.587616][T10300] netlink: 752 bytes leftover after parsing attributes in process `syz.9.1228'. [ 719.040910][T10195] hsr_slave_0: entered promiscuous mode [ 719.051152][T10195] hsr_slave_1: entered promiscuous mode [ 719.060071][T10195] debugfs: 'hsr0' already exists in 'hsr' [ 719.065984][T10195] Cannot create hsr debugfs directory [ 721.447628][T10195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 721.561346][T10195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 721.678079][T10195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 721.765226][T10195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 722.536896][ T9261] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 722.737448][ T9261] usb 3-1: Using ep0 maxpacket: 8 [ 722.800979][ T9261] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 722.810580][ T9261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.819195][ T9261] usb 3-1: Product: syz [ 722.823545][ T9261] usb 3-1: Manufacturer: syz [ 722.828542][ T9261] usb 3-1: SerialNumber: syz [ 722.999381][ T9261] usb 3-1: config 0 descriptor?? [ 723.017855][ T9261] gspca_main: sq905-2.14.0 probing 2770:9120 [ 723.140034][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.298653][ T9837] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 723.522971][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 723.682817][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.690419][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.821337][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.828905][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 723.901972][ T9261] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 723.912481][ T9261] sq905 3-1:0.0: probe with driver sq905 failed with error -32 [ 724.060940][ T9261] usb 3-1: USB disconnect, device number 5 [ 725.275355][T10368] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1249'. [ 725.584002][T10371] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 725.627811][ T53] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.682870][ T53] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.704193][ T53] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 725.749548][ T53] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 726.728956][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.257272][ T9837] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 727.434213][T10195] veth0_vlan: entered promiscuous mode [ 727.539152][T10195] veth1_vlan: entered promiscuous mode [ 727.902183][T10195] veth0_macvtap: entered promiscuous mode [ 727.987010][T10195] veth1_macvtap: entered promiscuous mode [ 728.251835][T10195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.357729][T10195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.479876][ T53] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.563287][ T53] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.641870][ T53] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.693716][ T53] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.806106][T10407] loop2: detected capacity change from 0 to 64 [ 729.006048][T10407] hfs: unable to locate alternate MDB [ 729.011961][T10407] hfs: continuing without an alternate MDB [ 729.022023][T10407] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended. mounting read-only. [ 730.795947][T10427] vlan2: entered allmulticast mode [ 730.801328][T10427] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 735.875029][T10475] loop2: detected capacity change from 0 to 64 [ 737.019935][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 737.032501][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 737.046447][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 737.059059][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 737.085677][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 737.462183][T10487] loop2: detected capacity change from 0 to 512 [ 739.239393][ T5811] Bluetooth: hci5: command tx timeout [ 739.595939][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.604703][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.858898][T10510] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.866709][T10510] IPv6: NLM_F_CREATE should be set when creating new route [ 739.874377][T10510] IPv6: NLM_F_CREATE should be set when creating new route [ 739.882318][T10510] IPv6: NLM_F_CREATE should be set when creating new route [ 740.205287][T10482] chnl_net:caif_netlink_parms(): no params data found [ 741.257560][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.265572][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.719155][ T5811] Bluetooth: hci5: command tx timeout [ 743.797314][ T5811] Bluetooth: hci5: command tx timeout [ 744.788690][T10482] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.800200][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.808409][T10482] bridge_slave_0: entered allmulticast mode [ 744.818320][T10482] bridge_slave_0: entered promiscuous mode [ 744.973493][T10539] loop9: detected capacity change from 0 to 1024 [ 745.170186][T10482] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.180606][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.188748][T10482] bridge_slave_1: entered allmulticast mode [ 745.200910][T10482] bridge_slave_1: entered promiscuous mode [ 745.418425][T10539] ===================================================== [ 745.425927][T10539] BUG: KMSAN: uninit-value in hfsplus_uni2asc+0x9a6/0x27a0 [ 745.433528][T10539] hfsplus_uni2asc+0x9a6/0x27a0 [ 745.438637][T10539] hfsplus_readdir+0xd60/0x1a70 [ 745.443604][T10539] iterate_dir+0x44f/0x620 [ 745.448300][T10539] __se_sys_getdents64+0x17e/0x550 [ 745.453536][T10539] __x64_sys_getdents64+0x97/0xe0 [ 745.458878][T10539] x64_sys_call+0x3a14/0x3e20 [ 745.463749][T10539] do_syscall_64+0xd9/0x210 [ 745.468486][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.474501][T10539] [ 745.477870][T10539] Uninit was created at: [ 745.482276][T10539] __kmalloc_noprof+0x95f/0x1310 [ 745.487483][T10539] hfsplus_find_init+0x90/0x1d0 [ 745.492567][T10539] hfsplus_readdir+0x1dc/0x1a70 [ 745.497619][T10539] iterate_dir+0x44f/0x620 [ 745.504484][T10539] __se_sys_getdents64+0x17e/0x550 [ 745.510623][T10539] __x64_sys_getdents64+0x97/0xe0 [ 745.515816][T10539] x64_sys_call+0x3a14/0x3e20 [ 745.522445][T10539] do_syscall_64+0xd9/0x210 [ 745.527686][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.533677][T10539] [ 745.536039][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.9.1292 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(none) [ 745.548497][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.559061][T10539] ===================================================== [ 745.566031][T10539] Disabling lock debugging due to kernel taint [ 745.572343][T10539] Kernel panic - not syncing: kmsan.panic set ... [ 745.578826][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.9.1292 Tainted: G B 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(none) [ 745.592562][T10539] Tainted: [B]=BAD_PAGE [ 745.596756][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.606987][T10539] Call Trace: [ 745.610362][T10539] [ 745.613345][T10539] __dump_stack+0x26/0x30 [ 745.617823][T10539] dump_stack_lvl+0x53/0x270 [ 745.622513][T10539] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 745.628450][T10539] dump_stack+0x1e/0x25 [ 745.632727][T10539] vpanic+0x361/0xc50 [ 745.636815][T10539] panic+0x15d/0x160 [ 745.640837][T10539] kmsan_report+0x31c/0x320 [ 745.645454][T10539] ? kmsan_get_metadata+0xfb/0x160 [ 745.650849][T10539] ? __msan_warning+0x1b/0x30 [ 745.655602][T10539] ? hfsplus_uni2asc+0x9a6/0x27a0 [ 745.660707][T10539] ? hfsplus_readdir+0xd60/0x1a70 [ 745.665838][T10539] ? iterate_dir+0x44f/0x620 [ 745.670533][T10539] ? __se_sys_getdents64+0x17e/0x550 [ 745.675951][T10539] ? __x64_sys_getdents64+0x97/0xe0 [ 745.681266][T10539] ? x64_sys_call+0x3a14/0x3e20 [ 745.686327][T10539] ? do_syscall_64+0xd9/0x210 [ 745.691099][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.697259][T10539] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 745.703587][T10539] ? kmsan_get_metadata+0xfb/0x160 [ 745.708804][T10539] ? kmsan_get_metadata+0xfb/0x160 [ 745.714095][T10539] ? kmsan_get_metadata+0xfb/0x160 [ 745.719337][T10539] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 745.725683][T10539] ? kmsan_get_metadata+0xfb/0x160 [ 745.730905][T10539] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 745.736849][T10539] ? utf32_to_utf8+0x3e4/0x410 [ 745.741731][T10539] ? kmsan_get_metadata+0xfb/0x160 [ 745.746939][T10539] __msan_warning+0x1b/0x30 [ 745.751606][T10539] hfsplus_uni2asc+0x9a6/0x27a0 [ 745.756546][T10539] ? __msan_memcpy+0x108/0x1c0 [ 745.761404][T10539] hfsplus_readdir+0xd60/0x1a70 [ 745.766388][T10539] ? aa_file_perm+0x549/0x2140 [ 745.771241][T10539] ? kmsan_get_metadata+0xfb/0x160 [ 745.776448][T10539] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 745.782349][T10539] ? finish_task_switch+0x7b6/0x920 [ 745.787666][T10539] ? __pfx_hfsplus_readdir+0x10/0x10 [ 745.793062][T10539] iterate_dir+0x44f/0x620 [ 745.797579][T10539] __se_sys_getdents64+0x17e/0x550 [ 745.802776][T10539] ? __pfx_filldir64+0x10/0x10 [ 745.807624][T10539] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 745.813555][T10539] __x64_sys_getdents64+0x97/0xe0 [ 745.818721][T10539] x64_sys_call+0x3a14/0x3e20 [ 745.823517][T10539] do_syscall_64+0xd9/0x210 [ 745.828148][T10539] ? irqentry_exit+0x16/0x60 [ 745.832838][T10539] ? clear_bhb_loop+0x40/0x90 [ 745.837595][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.843586][T10539] RIP: 0033:0x7f174498ebe9 [ 745.848075][T10539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.867771][T10539] RSP: 002b:00007f17457ce038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 745.876268][T10539] RAX: ffffffffffffffda RBX: 00007f1744bb6180 RCX: 00007f174498ebe9 [ 745.884386][T10539] RDX: 0000000000001000 RSI: 0000200000000f80 RDI: 000000000000000a [ 745.892495][T10539] RBP: 00007f1744a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 745.900514][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.908530][T10539] R13: 00007f1744bb6218 R14: 00007f1744bb6180 R15: 00007fffb89d8d68 [ 745.916602][T10539] [ 745.919955][T10539] Kernel Offset: disabled [ 745.924418][T10539] Rebooting in 86400 seconds..