last executing test programs: 34m41.858324708s ago: executing program 32 (id=14): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) landlock_create_ruleset(0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYRES8], 0x3c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000cfc000/0x2000)=nil, 0x2000, 0x17) open(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x46a400, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) 34m37.618413455s ago: executing program 33 (id=26): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x148, 0x24, 0x3fe3aa0262d8c583, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "7a3e43e80837defb69af9b7a03397287ff1ab5bc788bfe49d51a05120edadc3583674682548b615edb789453bb1e266b9805de1854edc83286bf016a42f80c72abe39b425ca32459bcf9c5b522084cc2a63a6039cab0848a028eff0ff3f4de43174afc989015b83a60081299114082616213e4fc92b6564173063ff22fd813d228fbe00c99da4c74200cecf87e49e5aa8dab1cf6a65bd70691e631dc207c9355e320dfd6251e94f857f51fde900744337b42cd971549ee0baff1c85d39ac1057ff0dc4bd726d74e7a04fdad885a01688e51414d872a65d0e07ccedb13faa31124a27d4b5d412d540dd71e02d92f52572be5cb1afb60497c5ecae56127b56b3cf"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x8a8, 0x10, 0xd, 0x11, 0x3a, 0x6}}]}}]}, 0x148}}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x80, 0x0, 0x0) r6 = dup(r5) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="5400000010000304000000000000000000007400", @ANYRES32=r9, @ANYBLOB="0000000003120100340012800b00010062726964676500002400028008000500010000000600270000000000080001001500000005002d"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 34m6.214947881s ago: executing program 34 (id=64): socket$rds(0x15, 0x5, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c) 31m39.087883314s ago: executing program 35 (id=364): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000003f0000009e7d0f3a0000f1952d03d515b16ec93cbeff3417b054fab4ff34fdd7cee87680d0795a"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r2, 0x0, 0x0}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r3) openat$cgroup_subtree(r3, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd8, 0xa, 0xd0e0000, 0xd8, 0x100, 0x1a8, 0x1d8, 0x1d8, 0x1a8, 0x1d8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0xffffff00, 0xff, 'veth0\x00', 'team0\x00', {}, {}, 0x2, 0x3, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xffff, 0x800, 0x1, 'syz1\x00', 'syz0\x00', {0x3}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x5, 0x3], 0x5, 0x5}, {0x0, [0x6, 0x6, 0x1, 0x7, 0x5, 0x5], 0x3, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r7, &(0x7f0000000000)=""/38, 0x26, 0x102, 0x0, 0x0) 20m58.513774933s ago: executing program 36 (id=2518): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9m48.826460214s ago: executing program 37 (id=4358): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) truncate(&(0x7f0000000140)='./file1\x00', 0x2) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) 9m40.899578447s ago: executing program 38 (id=4373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='objagg_obj_get\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) rseq(&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) set_mempolicy(0x4003, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x4, 0x81, 0x9, 0x4, 0x4, 0x401, 0x4}, 0x9c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, &(0x7f0000000040)={0x1}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x80) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x7], 0x0, 0x0, 0x1, 0x0, r4}}, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400, 0x8) 9m35.027524017s ago: executing program 39 (id=4383): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write$binfmt_elf64(r0, 0x0, 0x40) 5m8.153042529s ago: executing program 8 (id=5280): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x8000000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010104}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x404, 0x0, @mcast1={0xff, 0x7}, 0x7}}, {{0xa, 0x2002, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902"], 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0xfffffffd, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffffc, @local}}}, 0x108) 5m5.545060426s ago: executing program 8 (id=5288): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b9104006"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 5m4.664862831s ago: executing program 8 (id=5293): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001180)='!', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0xa}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x40000) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)="10", 0x1}], 0x1) shutdown(r0, 0x1) 5m3.5212223s ago: executing program 8 (id=5298): r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) 5m1.111833554s ago: executing program 8 (id=5307): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {0x0}], 0x2}}], 0x1, 0x4400c800) 5m0.300470297s ago: executing program 8 (id=5312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0x4fa, &(0x7f0000001000)="$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") io_uring_setup(0x1581, &(0x7f00000000c0)={0x0, 0x8241ffff, 0x42, 0x0, 0x3bf}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@filename='./bus\x00', 0x0, 0x0, 0x400080, 0x0) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r2, 0x0, 0x4000000) open(&(0x7f0000000180)='./file2\x00', 0x200000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 4m44.820958671s ago: executing program 40 (id=5312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f0000000040), 0x1, 0x4fa, &(0x7f0000001000)="$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") io_uring_setup(0x1581, &(0x7f00000000c0)={0x0, 0x8241ffff, 0x42, 0x0, 0x3bf}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@filename='./bus\x00', 0x0, 0x0, 0x400080, 0x0) mlock2(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x1) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000), 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r2, 0x0, 0x4000000) open(&(0x7f0000000180)='./file2\x00', 0x200000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 3m49.636520769s ago: executing program 4 (id=5514): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f000000000000000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x805}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000909000000000100000007"], 0x4c}}, 0x0) 3m48.602463795s ago: executing program 4 (id=5519): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) truncate(0x0, 0x0) 3m47.745582314s ago: executing program 4 (id=5524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183b78a27a819010000190000ef180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x44898}, 0x4886) 3m46.838467272s ago: executing program 4 (id=5528): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000c96, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0, @ANYRES16, @ANYRES8, @ANYRESOCT], 0x12, 0x9e8, &(0x7f0000000440)="$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") mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f00000001c0)='./file0\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) open_tree(r2, 0x0, 0x88900) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121140, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r9, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 3m42.356472039s ago: executing program 4 (id=5546): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000000)=0x3c, 0x4) 3m38.164347329s ago: executing program 4 (id=5561): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2143, 0x0) 3m35.110726752s ago: executing program 41 (id=5561): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) recvmmsg(r0, 0x0, 0x0, 0x2143, 0x0) 2m54.060622695s ago: executing program 6 (id=5667): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f0000000100)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYBLOB="6d65e142112d0bf69c675780be52f54c0d9a315e57f7fb6690a2e51969761de3a7ef59988ed46d0991cf948bce3b4f2621118858aeda9f2a876be107a6c45de0", @ANYRESOCT, @ANYRES64, @ANYRESHEX], 0xff, 0x5a0f, &(0x7f0000005f80)="$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") 2m49.226450999s ago: executing program 6 (id=5681): bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$eJzsmb+uEkEUxr+Z3QvcG2NiY2GjiTfxmlyW3UUNjQU+gQn4r5PIStAFDGwBJBbExsbH8BUsqCzs7Gy1UBMTCymt18xw2B35J8QQSTy/hNlvZs7MnDnAVwAYhvlv+frl5+dXt0rVUwBncIwsjX+30hhpxH/Kkfj4+l377PPx/H4CQBxvfr4N4G3ZQkT9OP599TE9q5CJvgOJq6TvQcAh/RASd0kHEHhA+omhO4ckwsB51Anrj5th4KrGU42vmuJ8fpORQB1AjvITxnxvMHxaC8OgOy8O4tk5C1Pbij/Uz56UJW4a9VPv1/2XL0aqP6uNa9TPg4RHugiBCukSsnAcJy2Jcf8Ldrq/tcn990Gcy6+LOd2DDFn8AyGMkUMl1Bc6GTk/Gb9fXPVtl4ld2u2VQZ69MPXh6O92zpAJLI1J/VNZ7hXDn2zYiX8UotazQm8wzDdbtUbQCNq+X7zhXnPd635BG9G0XeN/Oe1PR8b+BytiMyKDfi2Kul4fiLpe0venreG4lTedH3qN1P4ncXJ5uof6qOhrZ5efIegl9VOpE2tl8gzDMAzDMAzDMAzDMAzDMFtxEUL/Ckp/VMUr8G/r6F8BAAD///ckZMc=") chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/182, 0xb6) 2m43.933413129s ago: executing program 6 (id=5691): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@generic={&(0x7f00000001c0)='./file0\x00', r0}, 0x18) 2m42.682858003s ago: executing program 6 (id=5695): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) 2m41.712260262s ago: executing program 6 (id=5698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000040), 0x27, 0x4ba, &(0x7f0000000740)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2, 0x0, 0x900}, 0x10}}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x10800, 0x15) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @name="92f974b327c0fe845292c603a1fed197934a385954f4b83c0ff4e69f80497354"}) r5 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x66800, 0x0) ioctl$RNDADDENTROPY(r5, 0x40085203, 0x0) 2m38.429809334s ago: executing program 3 (id=5708): write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x2ba, 0x40, 0x0, 0x0, 0x3, 0x38, 0x1}, [{0x3, 0x5a, 0x4, 0x0, 0xf04, 0x3, 0x787, 0x5}]}, 0x78) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2m37.469072279s ago: executing program 3 (id=5711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m37.170014761s ago: executing program 6 (id=5712): socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r2, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = syz_open_dev$dri(0x0, 0x2, 0x102801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x20010, r3, 0x95a74000) dup2(0xffffffffffffffff, r3) 2m36.431523468s ago: executing program 3 (id=5713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x5c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m35.470905415s ago: executing program 3 (id=5715): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e00000085"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) setrlimit(0x3, &(0x7f0000000000)={0x0, 0xffffffffffff9c99}) 2m34.456962889s ago: executing program 3 (id=5717): syz_open_procfs(0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x2b, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x1f8) 2m32.249045563s ago: executing program 3 (id=5721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000019640), 0x82000000002, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x0, 0x34324241, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES16=r7, @ANYBLOB], 0x14}}, 0x0) 2m21.34230565s ago: executing program 42 (id=5712): socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(0xffffffffffffffff, 0x1) shutdown(0xffffffffffffffff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x400000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, r2, 0x303, 0x0, 0x25dfdbfd, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r3 = syz_open_dev$dri(0x0, 0x2, 0x102801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000000, 0x20010, r3, 0x95a74000) dup2(0xffffffffffffffff, r3) 2m17.671603148s ago: executing program 0 (id=5742): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x2ba, 0x40, 0x0, 0x0, 0x3, 0x38, 0x1}, [{0x3, 0x5a, 0x4, 0x0, 0xf04, 0x3, 0x787, 0x5}]}, 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 2m15.82131667s ago: executing program 43 (id=5721): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) close(r4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) r5 = syz_open_dev$vim2m(&(0x7f0000019640), 0x82000000002, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x0, 0x34324241, 0x2, @stepwise={0x8, 0x8, 0x7ff, 0x4, 0xaeae, 0x84a}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYRES16=r7, @ANYBLOB], 0x14}}, 0x0) 2m15.679089277s ago: executing program 0 (id=5744): utimensat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x10000000000016, 0x0) 2m14.278931545s ago: executing program 0 (id=5747): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002304e800000000000000ea850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000012050582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x0) 2m12.977521499s ago: executing program 0 (id=5749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_GROUP={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m11.156367307s ago: executing program 0 (id=5751): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)) pipe(&(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 2m8.75730268s ago: executing program 0 (id=5754): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) futex(&(0x7f0000000300)=0x2, 0xd, 0x2, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380), 0x1) syz_emit_ethernet(0x42, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='&#\x90%+}}\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="64000000100003052cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="08020200000000003c00128009000100766c616e000000002c00028006000100030000000c00020002000000010000000600050088a800000c000200110000001200000008000500", @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1m53.142073965s ago: executing program 44 (id=5754): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x3, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) futex(&(0x7f0000000300)=0x2, 0xd, 0x2, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380), 0x1) syz_emit_ethernet(0x42, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='&#\x90%+}}\x00', 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="64000000100003052cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="08020200000000003c00128009000100766c616e000000002c00028006000100030000000c00020002000000010000000600050088a800000c000200110000001200000008000500", @ANYRES32=r1], 0x64}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1m1.932731013s ago: executing program 7 (id=5850): getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 1m0.461550861s ago: executing program 7 (id=5857): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000002c0)={0x1, 0x5, 0x4, 0x0, 0x1, {}, {0x4, 0x1, 0xb9, 0x5, 0x6, 0x40, "f53c41ea"}, 0x9}) 59.394440991s ago: executing program 7 (id=5861): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x805}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x4c}}, 0x0) 58.476529819s ago: executing program 7 (id=5864): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40fff, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c"], 0x20) 57.212463544s ago: executing program 7 (id=5869): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000420005"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}], 0x1}}], 0x1, 0x0, 0x0) 56.235273366s ago: executing program 7 (id=5871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) syz_open_dev$sndctrl(0x0, 0x800, 0x80) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$unix(0x1, 0x1, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = io_uring_setup(0x310f, &(0x7f0000000280)={0x0, 0x5f95, 0x40, 0xfffffffe, 0x2000}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) recvfrom$ax25(r4, 0x0, 0x0, 0x40010011, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 40.442617323s ago: executing program 45 (id=5871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xa, 0x0) syz_open_dev$sndctrl(0x0, 0x800, 0x80) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$unix(0x1, 0x1, 0x0) io_setup(0x4, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x1802, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = io_uring_setup(0x310f, &(0x7f0000000280)={0x0, 0x5f95, 0x40, 0xfffffffe, 0x2000}) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) recvfrom$ax25(r4, 0x0, 0x0, 0x40010011, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 14.532866388s ago: executing program 9 (id=5944): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 13.610713724s ago: executing program 9 (id=5946): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x242, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 9.940064943s ago: executing program 1 (id=5950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x2b, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) socket(0x1, 0x803, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7785, 0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x1f8) 9.900696146s ago: executing program 5 (id=5951): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x4d) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) 9.352611053s ago: executing program 2 (id=5952): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}, r2}}, 0xfffffe10) 8.809634238s ago: executing program 9 (id=5953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 8.192484734s ago: executing program 1 (id=5954): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40fff, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="010000000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c"], 0x20) 8.189642156s ago: executing program 2 (id=5955): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 7.668525008s ago: executing program 9 (id=5956): ioctl(0xffffffffffffffff, 0xe, &(0x7f0000000000)="9198aa3e7937a618e2848806172e7681d31ce4c4f96afeac24bfecc357f0bcd740bfd92f43d304ba8c2d7a683ea0b9b9ee6132e413a021667aea8770e08db8c3ce69debdaec871f34977f04c0c1b65d98566cb55bf3edd5f1a620d4d2b9444a45bd0c86fd9d1c707d560da6a389c408773dacd78e5dd37881608272bfa0d127ab9fd36ccc518") r0 = socket$inet6(0xa, 0x80003, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000005) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000000104010300000000000000000500000a08000440000000030800034000007fff05000100010000006d64fe90e6d8d9"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x10, 0x3a}, {0x0, 0x40000000004, 0x4, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x20000a78a}, 0xfffffffe, 0x0, 0x1, 0x1, 0x0, 0x2}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@broadcast, 0xfffffffc, 0x3, 0x1, 0x4, 0x200}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r5 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 5.770672127s ago: executing program 1 (id=5959): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x6229, &(0x7f0000001080)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f000000b6c0)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRES8, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000001a80)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRES8, @ANYRES16, @ANYBLOB="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", @ANYRES8, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8f74c177cb5e687b, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16], 0x0, 0x0, &(0x7f0000000c40)) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000000100)=""/212, 0xd4) 5.492606751s ago: executing program 2 (id=5960): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x2c060000) r0 = msgget(0x0, 0x2c4) msgctl$IPC_RMID(r0, 0x0) 5.120365205s ago: executing program 5 (id=5961): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000000)='./file0\x00', 0x10) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x7d5, &(0x7f0000000280)={0x0, 0x0, 0x100, 0x5, 0x20d}, 0x0, 0x0) pipe2$9p(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r0) pipe(&(0x7f0000000040)) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x2502, &(0x7f0000000180)={0x0, 0xb11, 0x10100, 0x2, 0xfffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.541473166s ago: executing program 2 (id=5962): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) rmdir(&(0x7f0000000040)='./file0\x00') ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000140)={0x10, 0x1, r5}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}, 0x1, 0x0, 0x0, 0xe7259449286aa6a6}, 0xc090) 3.981629329s ago: executing program 5 (id=5963): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 3.712496272s ago: executing program 2 (id=5964): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x83) mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 3.07152994s ago: executing program 5 (id=5965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.483127422s ago: executing program 9 (id=5966): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40fff, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="010000000000", @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c"], 0x20) 2.159929388s ago: executing program 5 (id=5967): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.463765107s ago: executing program 9 (id=5968): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) sendfile(r2, r2, 0x0, 0xfffe80) 1.352597605s ago: executing program 5 (id=5969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x0, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 496.835412ms ago: executing program 1 (id=5970): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0xc001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7050000080000", @ANYRESOCT], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0x1a3) write$binfmt_misc(r0, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 0s ago: executing program 1 (id=5971): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a0001"], 0x2c}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) kernel console output (not intermixed with test programs): cpia1-2.14.0 probing 0813:0001 [ 1881.005905][T19748] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1881.112429][T14339] gspca_cpia1: usb_control_msg 03, error -32 [ 1881.145099][T14339] cpia1 9-1:0.0: unexpected state after lo power cmd: 01 [ 1881.560675][T14339] gspca_cpia1: usb_control_msg 02, error -71 [ 1881.599887][T14339] gspca_cpia1: usb_control_msg 05, error -71 [ 1881.607892][T14339] cpia1 9-1:0.0: unexpected systemstate: 01 [ 1881.708553][T14339] usb 9-1: USB disconnect, device number 75 [ 1882.491635][T19752] loop3: detected capacity change from 0 to 4096 [ 1882.589829][T19752] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1883.152945][T19766] overlayfs: missing 'lowerdir' [ 1883.287986][T19752] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 1885.410978][T19788] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 1885.489791][T19788] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1887.664772][T19803] loop1: detected capacity change from 0 to 4096 [ 1887.680304][T19808] loop2: detected capacity change from 0 to 2048 [ 1887.756882][T19803] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1887.838630][T19808] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1888.104887][T19382] libceph: connect (1)[c::]:6789 error -101 [ 1888.111865][T19382] libceph: mon0 (1)[c::]:6789 connect error [ 1888.119143][T19805] ceph: No mds server is up or the cluster is laggy [ 1888.488870][T19803] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1888.543880][T19803] ntfs3(loop1): Failed to load $Extend (-22). [ 1888.550667][T19803] ntfs3(loop1): Failed to initialize $Extend. [ 1891.453137][T14339] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1891.734691][T14339] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1891.744482][T14339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1891.819323][T14339] usb 4-1: config 0 descriptor?? [ 1891.869182][T14339] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1892.293332][T19845] loop2: detected capacity change from 0 to 4096 [ 1892.336838][T14339] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1892.389759][T19845] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1892.561924][T14339] gspca_cpia1: usb_control_msg 01, error -32 [ 1892.784773][T14339] gspca_cpia1: usb_control_msg 02, error -71 [ 1892.793362][T14339] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1892.864509][T14339] usb 4-1: USB disconnect, device number 7 [ 1892.951815][T19845] ntfs3(loop2): Failed to initialize $Extend/$Reparse. [ 1893.139309][T19856] loop8: detected capacity change from 0 to 2048 [ 1893.409209][T19856] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1893.743848][T14339] libceph: connect (1)[c::]:6789 error -101 [ 1893.750698][T14339] libceph: mon0 (1)[c::]:6789 connect error [ 1893.779126][T19856] ceph: No mds server is up or the cluster is laggy [ 1894.873954][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1895.653506][T19882] loop3: detected capacity change from 0 to 1024 [ 1895.976526][T19888] loop8: detected capacity change from 0 to 512 [ 1896.061833][T19888] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1896.248081][T19888] EXT4-fs (loop8): 1 truncate cleaned up [ 1896.256764][T19888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1896.357540][T19888] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.4555: corrupted in-inode xattr: overlapping e_value [ 1896.415586][T19888] EXT4-fs (loop8): Remounting filesystem read-only [ 1896.428719][T19888] EXT4-fs warning (device loop8): ext4_xattr_set_entry:1772: inode #15: comm syz.8.4555: unable to update i_inline_off [ 1896.444423][T19888] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1897.685739][T14339] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1897.883213][T16370] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1898.033678][T14339] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1898.046270][T14339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.179090][T14339] usb 4-1: config 0 descriptor?? [ 1898.245511][T14339] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1898.632154][T14339] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1898.850920][T14339] gspca_cpia1: usb_control_msg 01, error -32 [ 1899.093222][T14339] gspca_cpia1: usb_control_msg 02, error -71 [ 1899.099521][T14339] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1899.204454][T14339] usb 4-1: USB disconnect, device number 8 [ 1899.914411][T19923] loop2: detected capacity change from 0 to 2048 [ 1900.101032][T19923] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1900.367404][T14339] libceph: connect (1)[c::]:6789 error -101 [ 1900.374333][T14339] libceph: mon0 (1)[c::]:6789 connect error [ 1900.395201][T19919] ceph: No mds server is up or the cluster is laggy [ 1900.561749][T19382] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1900.770644][T19382] usb 9-1: Using ep0 maxpacket: 8 [ 1900.879891][T19382] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1900.889800][T19382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.898566][T19382] usb 9-1: Product: syz [ 1900.903405][T19382] usb 9-1: Manufacturer: syz [ 1900.908297][T19382] usb 9-1: SerialNumber: syz [ 1901.015748][T19382] usb 9-1: config 0 descriptor?? [ 1901.271969][T19382] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1902.417726][T19943] loop2: detected capacity change from 0 to 1024 [ 1902.853890][T19943] hfsplus: invalid extended attribute record [ 1902.860817][T19943] hfsplus: can't free extent [ 1902.931856][T19382] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1903.038618][T19382] usb 9-1: USB disconnect, device number 76 [ 1903.322024][T15875] hfsplus: b-tree write err: -5, ino 4 [ 1904.824693][ T5829] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1905.088022][ T5829] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1905.099772][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.193785][ T5829] usb 4-1: config 0 descriptor?? [ 1905.263273][ T5829] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1905.729097][ T5829] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1905.905108][T19973] loop8: detected capacity change from 0 to 2048 [ 1905.938777][ T5829] gspca_cpia1: usb_control_msg 01, error -32 [ 1906.056366][T19973] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1906.153114][T14339] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1906.190949][ T5829] gspca_cpia1: usb_control_msg 02, error -71 [ 1906.197261][ T5829] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 1906.309196][ T5829] usb 4-1: USB disconnect, device number 9 [ 1906.382651][T14339] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1906.394088][T14339] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1906.505974][T19973] ceph: No mds server is up or the cluster is laggy [ 1906.518449][T14870] libceph: connect (1)[c::]:6789 error -101 [ 1906.525792][T14870] libceph: mon0 (1)[c::]:6789 connect error [ 1906.571088][T14339] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1906.580918][T14339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1906.589263][T14339] usb 3-1: SerialNumber: syz [ 1906.900118][T14339] usb 3-1: invalid UAC_HEADER (v1) [ 1907.077355][T14339] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1907.162590][T14339] usb 3-1: USB disconnect, device number 2 [ 1907.560204][T15017] udevd[15017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1908.441175][T19997] loop8: detected capacity change from 0 to 512 [ 1908.561907][T19997] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1910.631348][ T5829] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1910.896111][ T5829] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1910.906027][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.002250][ T5829] usb 3-1: config 0 descriptor?? [ 1911.052348][ T5829] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1911.470969][ T5829] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1911.703968][ T5829] gspca_cpia1: usb_control_msg 01, error -32 [ 1911.757635][T20026] loop8: detected capacity change from 0 to 2048 [ 1911.957040][ T5829] gspca_cpia1: usb_control_msg 02, error -71 [ 1911.965472][ T5829] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1912.048064][ T5829] usb 3-1: USB disconnect, device number 3 [ 1912.205446][T20026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1912.466113][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1912.473269][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1912.842126][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1912.849041][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1912.943467][T20025] ceph: No mds server is up or the cluster is laggy [ 1914.202156][ T5829] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1914.575103][ T5829] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1914.585599][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1914.639470][ T5829] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1914.655311][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1914.666614][ T5829] usb 4-1: Product: syz [ 1914.671221][ T5829] usb 4-1: Manufacturer: syz [ 1914.676109][ T5829] usb 4-1: SerialNumber: syz [ 1914.849035][T20054] loop8: detected capacity change from 0 to 512 [ 1914.869409][ T5829] usb 4-1: config 0 descriptor?? [ 1914.912049][ T5829] usb 4-1: selecting invalid altsetting 0 [ 1915.232665][T20054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1915.246826][T20054] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1915.411933][T14339] usb 4-1: USB disconnect, device number 10 [ 1915.473037][ T30] audit: type=1800 audit(1742139020.167:373): pid=20054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4608" name="file2" dev="loop8" ino=16 res=0 errno=0 [ 1915.992795][T14889] udevd[14889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1916.063327][T16370] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1916.765709][T20073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1916.773821][T20073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1916.859844][T20073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1916.868302][T20073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1917.220872][ T5829] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1917.426287][ T5829] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1917.436476][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.549487][ T5829] usb 9-1: config 0 descriptor?? [ 1917.616856][ T5829] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1918.019780][ T5829] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 1918.245720][ T5829] gspca_cpia1: usb_control_msg 01, error -32 [ 1918.488553][ T5829] gspca_cpia1: usb_control_msg 02, error -71 [ 1918.495304][ T5829] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0) [ 1918.535983][ T5829] usb 9-1: USB disconnect, device number 77 [ 1918.865269][T20088] loop2: detected capacity change from 0 to 2048 [ 1918.881937][T20095] tipc: Enabling of bearer rejected, failed to enable media [ 1919.107923][T20088] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1919.487016][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1919.493980][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1919.660246][T20101] loop8: detected capacity change from 0 to 1764 [ 1919.689958][T20092] loop3: detected capacity change from 0 to 4096 [ 1919.797790][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1919.804765][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1919.823341][T20101] netlink: 328 bytes leftover after parsing attributes in process `syz.8.4624'. [ 1919.987216][T20088] ceph: No mds server is up or the cluster is laggy [ 1921.832088][ T5829] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1922.069906][ T5829] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1922.083787][ T5829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1922.172697][ T5829] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1922.182401][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1922.190951][ T5829] usb 3-1: SerialNumber: syz [ 1922.503043][ T5829] usb 3-1: 0:2 : does not exist [ 1922.717791][ T5829] usb 3-1: USB disconnect, device number 4 [ 1923.212751][T15017] udevd[15017]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1925.371416][T14339] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1925.602273][T14339] usb 9-1: Using ep0 maxpacket: 16 [ 1925.651031][T14339] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1925.663151][T14339] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1925.845934][T14339] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1925.855643][T14339] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.864331][T14339] usb 9-1: Product: syz [ 1925.868806][T14339] usb 9-1: Manufacturer: syz [ 1925.874032][T14339] usb 9-1: SerialNumber: syz [ 1926.036720][T14339] usb 9-1: config 0 descriptor?? [ 1926.090951][T14339] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1926.100850][T14339] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1926.675835][T14339] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1926.711987][T14339] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1927.134163][T14339] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1927.147334][T14339] em28xx 9-1:0.0: No AC97 audio processor [ 1927.157593][ T5829] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1927.394405][ T5829] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1927.404052][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.607531][ T5829] usb 3-1: config 0 descriptor?? [ 1927.650675][ T5829] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1928.208383][ T5829] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1928.618980][T14870] usb 9-1: USB disconnect, device number 78 [ 1928.626793][T14870] em28xx 9-1:0.0: Disconnecting em28xx [ 1928.656916][ T5829] gspca_cpia1: usb_control_msg 02, error -32 [ 1928.701239][ T5829] gspca_cpia1: usb_control_msg 02, error -71 [ 1928.727763][T14870] em28xx 9-1:0.0: Freeing device [ 1928.801037][ T5829] gspca_cpia1: usb_control_msg 05, error -71 [ 1928.807574][ T5829] cpia1 3-1:0.0: unexpected systemstate: 00 [ 1928.970266][ T5829] usb 3-1: USB disconnect, device number 5 [ 1929.978909][T20205] loop2: detected capacity change from 0 to 64 [ 1931.381090][T14870] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1931.531432][T19382] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1931.594685][T14870] usb 9-1: Using ep0 maxpacket: 8 [ 1931.671559][T14870] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1931.681346][T14870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1931.689682][T14870] usb 9-1: Product: syz [ 1931.694406][T14870] usb 9-1: Manufacturer: syz [ 1931.699300][T14870] usb 9-1: SerialNumber: syz [ 1931.795304][T19382] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.806387][T19382] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1931.849642][T19382] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1931.864961][T19382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1931.875259][T19382] usb 4-1: SerialNumber: syz [ 1931.925404][T14870] usb 9-1: config 0 descriptor?? [ 1932.149070][T19382] usb 4-1: 0:2 : does not exist [ 1932.253062][T14870] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1932.461979][T19382] usb 4-1: USB disconnect, device number 11 [ 1932.923146][T14870] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1933.069869][T15017] udevd[15017]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1934.480847][T19382] usb 9-1: USB disconnect, device number 79 [ 1936.808095][T20268] loop3: detected capacity change from 0 to 1024 [ 1936.960889][T20268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1937.131744][T19382] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1937.322193][ T5829] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1937.378427][T19382] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1937.395817][T19382] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1937.407303][T19382] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1937.510814][T19382] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1937.520617][T19382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1937.528949][T19382] usb 3-1: SerialNumber: syz [ 1937.547916][T20268] EXT4-fs (loop3): shut down requested (0) [ 1937.593874][ T5829] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1937.604756][ T5829] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1937.632966][ T5829] usb 9-1: config 0 descriptor?? [ 1937.682895][ T5829] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1937.889077][T19197] Bluetooth: hci3: command 0x0406 tx timeout [ 1937.968132][T19382] usb 3-1: 0:2 : does not exist [ 1938.132017][ T5829] cpia1 9-1:0.0: unexpected state after lo power cmd: 00 [ 1938.310171][T19382] usb 3-1: USB disconnect, device number 6 [ 1938.534288][ T5829] gspca_cpia1: usb_control_msg 02, error -32 [ 1938.588249][ T5829] gspca_cpia1: usb_control_msg 02, error -71 [ 1938.648223][ T5829] gspca_cpia1: usb_control_msg 05, error -71 [ 1938.654689][ T5829] cpia1 9-1:0.0: unexpected systemstate: 00 [ 1938.745666][ T5829] usb 9-1: USB disconnect, device number 80 [ 1938.773438][T17222] udevd[17222]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1939.005973][T19285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1941.711311][T14870] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1941.726429][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4692'. [ 1941.965773][T14870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1941.977557][T14870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1941.988071][T14870] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1942.002989][T14870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1942.138353][T14870] usb 3-1: config 0 descriptor?? [ 1942.654340][T14870] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 1942.662463][T14870] cm6533_jd 0003:0D8C:0022.0017: item fetching failed at offset 1/5 [ 1942.778479][T14870] cm6533_jd 0003:0D8C:0022.0017: parse failed [ 1942.785658][T14870] cm6533_jd 0003:0D8C:0022.0017: probe with driver cm6533_jd failed with error -22 [ 1942.831197][T20335] fuse: Bad value for 'fd' [ 1942.865602][T14870] usb 3-1: USB disconnect, device number 7 [ 1943.001179][T13829] Bluetooth: hci0: command 0x0406 tx timeout [ 1946.243137][T20360] loop3: detected capacity change from 0 to 4096 [ 1946.267711][T20360] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1946.765412][T20360] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1946.820184][T20360] ntfs3(loop3): Failed to load $Extend (-22). [ 1946.826805][T20360] ntfs3(loop3): Failed to initialize $Extend. [ 1947.244287][T20379] overlayfs: failed to clone upperpath [ 1948.206693][T19197] Bluetooth: hci1: command 0x0406 tx timeout [ 1948.381189][T20387] loop8: detected capacity change from 0 to 4096 [ 1948.464122][T20387] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512). [ 1948.940920][T20398] 9pnet_fd: Insufficient options for proto=fd [ 1949.051214][T20387] ntfs3(loop8): ino=1b, mi_enum_attr [ 1949.061241][T20387] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1953.558023][T20445] loop8: detected capacity change from 0 to 1024 [ 1953.807191][T20445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1954.001048][ T30] audit: type=1800 audit(1742139058.697:374): pid=20445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4732" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1955.002983][T16370] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1955.749807][T20482] tmpfs: Bad value for 'mpol' [ 1956.323580][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 1957.908915][T20502] loop3: detected capacity change from 0 to 512 [ 1958.175644][T20502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1958.192504][T20502] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1958.953760][T19285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1959.777275][T20532] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4760'. [ 1961.051338][T20544] loop8: detected capacity change from 0 to 2048 [ 1961.198639][T20544] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1963.371005][T20569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4774'. [ 1964.642236][T14870] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1964.890847][T14870] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1964.902798][T14870] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1964.912237][T14870] usb 9-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1964.923745][T14870] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1965.078105][T14870] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1965.087868][T14870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1965.096570][T14870] usb 9-1: SerialNumber: syz [ 1965.423236][T14870] usb 9-1: 0:2 : does not exist [ 1965.428488][T14870] usb 9-1: unit 5 not found! [ 1965.663307][T14870] usb 9-1: USB disconnect, device number 81 [ 1966.154067][T15017] udevd[15017]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1967.208414][T20598] loop3: detected capacity change from 0 to 2048 [ 1967.480974][T20598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1968.373969][T20618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4787'. [ 1970.694105][T20644] loop3: detected capacity change from 0 to 1024 [ 1970.794322][T20644] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1971.394809][T20655] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4797'. [ 1971.741924][T19285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1972.806016][T20669] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4802'. [ 1975.018298][ T5829] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1975.236461][ T5829] usb 9-1: Using ep0 maxpacket: 16 [ 1975.320717][ T5829] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1975.332820][ T5829] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1975.449439][ T5829] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1975.459545][ T5829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.468135][ T5829] usb 9-1: Product: syz [ 1975.472802][ T5829] usb 9-1: Manufacturer: syz [ 1975.485954][ T5829] usb 9-1: SerialNumber: syz [ 1975.621833][ T5829] usb 9-1: config 0 descriptor?? [ 1975.697416][ T5829] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1975.707358][ T5829] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1976.057482][T20703] netlink: 'syz.2.4814': attribute type 10 has an invalid length. [ 1976.065999][T20703] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4814'. [ 1976.174305][T20703] team0: Port device netdevsim1 added [ 1976.283111][ T5829] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1976.327263][ T5829] em28xx 9-1:0.0: Config register raw data: 0x00 [ 1976.739002][T20706] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4815'. [ 1977.739129][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1977.747171][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1977.870205][T20714] ceph: No mds server is up or the cluster is laggy [ 1978.250784][T14870] usb 9-1: USB disconnect, device number 82 [ 1978.258469][T14870] em28xx 9-1:0.0: Disconnecting em28xx [ 1978.365511][T14870] em28xx 9-1:0.0: Freeing device [ 1978.870270][T20733] loop3: detected capacity change from 0 to 1764 [ 1979.179429][T20733] netlink: 328 bytes leftover after parsing attributes in process `syz.3.4821'. [ 1980.512213][T20755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4829'. [ 1982.118052][T20777] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4835'. [ 1982.843931][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1982.863896][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1982.883011][T20776] ceph: No mds server is up or the cluster is laggy [ 1983.301275][T20790] loop8: detected capacity change from 0 to 256 [ 1983.345109][T20790] exfat: Deprecated parameter 'utf8' [ 1983.704381][T20790] exFAT-fs (loop8): error, data size is invalid(34359738378) [ 1984.294288][T20801] loop3: detected capacity change from 0 to 164 [ 1984.365811][T20801] Unable to read rock-ridge attributes [ 1986.994804][ T30] audit: type=1326 audit(1742139091.697:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20833 comm="syz.8.4855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf743d579 code=0x7fc00000 [ 1987.113200][T20828] ceph: No mds server is up or the cluster is laggy [ 1987.121882][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 1987.128391][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 1987.581130][ T30] audit: type=1326 audit(1742139092.277:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20833 comm="syz.8.4855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf743d579 code=0x7fc00000 [ 1987.883146][T20848] lo speed is unknown, defaulting to 1000 [ 1987.889323][T20848] lo speed is unknown, defaulting to 1000 [ 1987.897173][T20848] lo speed is unknown, defaulting to 1000 [ 1987.957736][T20848] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1988.261666][T20848] lo speed is unknown, defaulting to 1000 [ 1988.270522][T20848] lo speed is unknown, defaulting to 1000 [ 1988.286289][T20848] lo speed is unknown, defaulting to 1000 [ 1988.297519][T20848] lo speed is unknown, defaulting to 1000 [ 1988.306440][T20848] lo speed is unknown, defaulting to 1000 [ 1990.710800][T20879] loop3: detected capacity change from 0 to 2048 [ 1991.011277][T20879] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1991.333409][T14870] libceph: connect (1)[c::]:6789 error -101 [ 1991.340054][T14870] libceph: mon0 (1)[c::]:6789 connect error [ 1991.412463][T20878] ceph: No mds server is up or the cluster is laggy [ 1993.975927][T20922] loop3: detected capacity change from 0 to 512 [ 1994.289511][T20922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1994.303191][T20922] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1994.883790][T19285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1996.393748][T20950] loop3: detected capacity change from 0 to 2048 [ 1996.540507][T20950] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1996.839708][T20947] ceph: No mds server is up or the cluster is laggy [ 1996.851882][T19382] libceph: connect (1)[c::]:6789 error -101 [ 1996.858404][T19382] libceph: mon0 (1)[c::]:6789 connect error [ 1998.369960][T20981] netlink: 'syz.3.4905': attribute type 7 has an invalid length. [ 1998.378739][T20981] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4905'. [ 2001.678278][T21006] ceph: No mds server is up or the cluster is laggy [ 2001.704235][T14870] libceph: connect (1)[c::]:6789 error -101 [ 2001.711251][T14870] libceph: mon0 (1)[c::]:6789 connect error [ 2003.507199][T21027] netlink: 'syz.0.4920': attribute type 7 has an invalid length. [ 2003.515578][T21027] netlink: 17 bytes leftover after parsing attributes in process `syz.0.4920'. [ 2005.639052][T21047] loop8: detected capacity change from 0 to 2048 [ 2005.966975][T21047] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2006.286318][T19382] libceph: connect (1)[c::]:6789 error -101 [ 2006.293274][T19382] libceph: mon0 (1)[c::]:6789 connect error [ 2006.354668][T21046] ceph: No mds server is up or the cluster is laggy [ 2008.060899][T21080] netlink: 'syz.2.4940': attribute type 33 has an invalid length. [ 2008.239024][T21082] loop8: detected capacity change from 0 to 512 [ 2008.354518][T21082] EXT4-fs (loop8): blocks per group (16384) and clusters per group (6) inconsistent [ 2008.407331][T21086] loop3: detected capacity change from 0 to 128 [ 2009.633232][T21096] loop3: detected capacity change from 0 to 64 [ 2009.964756][T21104] hfs: request for non-existent node 24 in B*Tree [ 2009.971840][T21104] hfs: request for non-existent node 24 in B*Tree [ 2010.068261][T21106] hfs: request for non-existent node 25 in B*Tree [ 2010.076895][T21106] hfs: request for non-existent node 25 in B*Tree [ 2010.132274][T21096] hfs: request for non-existent node 26 in B*Tree [ 2010.139020][T21096] hfs: request for non-existent node 26 in B*Tree [ 2010.242551][T21104] hfs: request for non-existent node 27 in B*Tree [ 2010.249286][T21104] hfs: request for non-existent node 27 in B*Tree [ 2010.356825][T14870] libceph: connect (1)[c::]:6789 error -101 [ 2010.363728][T14870] libceph: mon0 (1)[c::]:6789 connect error [ 2010.442821][T21100] ceph: No mds server is up or the cluster is laggy [ 2012.540743][T21135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4959'. [ 2012.595469][T21134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4958'. [ 2014.257020][T21152] syzkaller0: entered allmulticast mode [ 2016.044366][T21177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4973'. [ 2017.672340][T21194] loop8: detected capacity change from 0 to 512 [ 2017.789112][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2017.958758][T21194] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 2017.977247][T21194] ext4 filesystem being mounted at /310/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2018.521819][T16370] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 2019.121347][T21214] lo speed is unknown, defaulting to 1000 [ 2019.668421][T21220] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2019.680662][T21220] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2023.949183][T21277] netlink: 'syz.8.5008': attribute type 7 has an invalid length. [ 2023.957537][T21277] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5008'. [ 2025.264051][T21296] netlink: 'syz.1.5015': attribute type 33 has an invalid length. [ 2026.923283][T21315] netlink: 'syz.3.5023': attribute type 7 has an invalid length. [ 2026.931505][T21315] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5023'. [ 2027.406966][T21324] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5026'. [ 2027.416480][T21324] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5026'. [ 2028.244621][T21333] netlink: 'syz.8.5029': attribute type 33 has an invalid length. [ 2030.379432][T21359] netlink: 'syz.1.5037': attribute type 7 has an invalid length. [ 2030.387765][T21359] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5037'. [ 2033.940191][T21401] netlink: 'syz.8.5052': attribute type 7 has an invalid length. [ 2033.955713][T21401] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5052'. [ 2035.054111][T21410] netlink: 'syz.8.5056': attribute type 33 has an invalid length. [ 2035.812386][T21416] loop3: detected capacity change from 0 to 8 [ 2035.853642][T21416] squashfs: Unknown parameter '3˜O”ê¸×ü4Eß¾ ó5-¨×éÄaö¿+/—ݱ9Óåê}ìñDœûjIáRkáÖèEL(¬0|BÙ–UÆß¨‡ ¥!:`»(’‡\–‡È½uÆ<3' [ 2035.999145][T21416] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5058'. [ 2037.366694][T21438] loop3: detected capacity change from 0 to 512 [ 2037.422817][T21438] EXT4-fs (loop3): blocks per group (16384) and clusters per group (6) inconsistent [ 2037.676660][T21442] netlink: 'syz.2.5066': attribute type 7 has an invalid length. [ 2037.688835][T21442] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5066'. [ 2040.657176][T21480] loop3: detected capacity change from 0 to 512 [ 2040.747050][T21480] EXT4-fs (loop3): blocks per group (16384) and clusters per group (6) inconsistent [ 2042.643430][T21504] loop8: detected capacity change from 0 to 256 [ 2043.202810][T21504] FAT-fs (loop8): Directory bread(block 64) failed [ 2043.209869][T21504] FAT-fs (loop8): Directory bread(block 65) failed [ 2043.217174][T21504] FAT-fs (loop8): Directory bread(block 66) failed [ 2043.224283][T21504] FAT-fs (loop8): Directory bread(block 67) failed [ 2043.231566][T21504] FAT-fs (loop8): Directory bread(block 68) failed [ 2043.238447][T21504] FAT-fs (loop8): Directory bread(block 69) failed [ 2043.245681][T21504] FAT-fs (loop8): Directory bread(block 70) failed [ 2043.252721][T21504] FAT-fs (loop8): Directory bread(block 71) failed [ 2043.259748][T21504] FAT-fs (loop8): Directory bread(block 72) failed [ 2043.273531][T21504] FAT-fs (loop8): Directory bread(block 73) failed [ 2050.918276][T21603] loop8: detected capacity change from 0 to 512 [ 2050.994602][T21603] EXT4-fs (loop8): blocks per group (16384) and clusters per group (6) inconsistent [ 2055.689817][T21658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5146'. [ 2058.265747][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5158'. [ 2059.711792][T21703] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5163'. [ 2059.961649][T19382] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 2060.164482][T19382] usb 4-1: Using ep0 maxpacket: 16 [ 2060.198282][T19382] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2060.341467][T19382] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2060.351092][T19382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.359422][T19382] usb 4-1: Product: syz [ 2060.369507][T19382] usb 4-1: Manufacturer: syz [ 2060.376383][T19382] usb 4-1: SerialNumber: syz [ 2060.507321][T19382] usb 4-1: config 0 descriptor?? [ 2062.504766][T21732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5172'. [ 2063.081253][T19382] usb 4-1: USB disconnect, device number 12 [ 2064.335947][T21746] loop8: detected capacity change from 0 to 1024 [ 2064.574281][T21746] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2064.881003][T21756] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 2065.463786][T16370] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2066.157792][T21773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5185'. [ 2068.837693][T21804] loop3: detected capacity change from 0 to 64 [ 2069.930736][T21815] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5200'. [ 2072.558152][T21852] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5212'. [ 2073.328543][T21858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5215'. [ 2074.607966][T19382] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 2074.923322][T19382] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 2074.933399][T19382] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2074.941997][T19382] usb 4-1: Product: syz [ 2074.946569][T19382] usb 4-1: Manufacturer: syz [ 2074.951688][T19382] usb 4-1: SerialNumber: syz [ 2074.989209][T19382] usb 4-1: config 0 descriptor?? [ 2075.302122][T19382] usb 4-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 2075.309152][T19382] f81604 4-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 2075.325586][T19382] f81604 4-1:0.0: probe with driver f81604 failed with error -121 [ 2075.492385][T19382] usb 4-1: USB disconnect, device number 13 [ 2076.745310][T21897] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5230'. [ 2076.767850][T21901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5229'. [ 2078.083478][T14870] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 2078.287622][T14870] usb 9-1: Using ep0 maxpacket: 8 [ 2078.319168][T14870] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2078.328896][T14870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.337460][T14870] usb 9-1: Product: syz [ 2078.342222][T14870] usb 9-1: Manufacturer: syz [ 2078.347125][T14870] usb 9-1: SerialNumber: syz [ 2078.422926][T21916] siw: device registration error -23 [ 2078.474595][T14870] usb 9-1: config 0 descriptor?? [ 2078.822438][T14870] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2079.019641][T21920] loop3: detected capacity change from 0 to 1024 [ 2079.053994][T14870] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2079.196965][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2079.363342][T21920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2079.996038][T19285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2080.657011][T21941] loop3: detected capacity change from 0 to 512 [ 2080.716984][T21941] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2080.861947][T21941] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a040c018, mo2=0002] [ 2080.926949][T21941] System zones: 0-2, 18-18, 34-35 [ 2081.006676][T21950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5244'. [ 2081.030976][T21941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2081.044441][T21941] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2081.371051][T14870] usb 9-1: USB disconnect, device number 83 [ 2081.484227][T21941] EXT4-fs error (device loop3): ext4_get_first_dir_block:3552: inode #12: comm syz.3.5241: directory missing '.' [ 2081.932739][T19285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2082.060182][T21961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5245'. [ 2082.099637][T21960] loop8: detected capacity change from 0 to 8 [ 2082.124173][T21960] squashfs: Unknown parameter '3˜O”ê¸×ü4Eß¾ ó5-¨×éÄaö¿+/—ݱ9Óåê}ìñDœûjIáRkáÖèEL(¬0|BÙ–UÆß¨‡ ¥!:`»(’‡\–‡È½uÆ<3' [ 2082.269026][T21960] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5247'. [ 2082.622339][T21966] netlink: 'syz.3.5249': attribute type 11 has an invalid length. [ 2084.751257][T19382] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 2084.951247][T19382] usb 9-1: Using ep0 maxpacket: 8 [ 2084.993527][T19382] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2085.003300][T19382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2085.012004][T19382] usb 9-1: Product: syz [ 2085.016462][T19382] usb 9-1: Manufacturer: syz [ 2085.023019][T19382] usb 9-1: SerialNumber: syz [ 2085.088308][T19382] usb 9-1: config 0 descriptor?? [ 2085.343738][T19382] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2085.583490][T19382] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2085.786592][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5262'. [ 2087.484426][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5268'. [ 2087.566974][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5268'. [ 2088.045315][T14870] usb 9-1: USB disconnect, device number 84 [ 2088.433507][T22031] netlink: 'syz.3.5271': attribute type 33 has an invalid length. [ 2089.354953][T22040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5275'. [ 2089.626697][T22044] loop8: detected capacity change from 0 to 8 [ 2089.683395][T22044] squashfs: Unknown parameter '3˜O”ê¸×ü4Eß¾ ó5-¨×éÄaö¿+/—ݱ9Óåê}ìñDœûjIáRkáÖèEL(¬0|BÙ–UÆß¨‡ ¥!:`»(’‡\–‡È½uÆ<3' [ 2091.144609][T19382] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 2091.271925][T22059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5282'. [ 2091.405832][T19382] usb 9-1: config 0 has no interfaces? [ 2091.469210][T19382] usb 9-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 2091.478980][T19382] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2091.487594][T19382] usb 9-1: Product: syz [ 2091.498714][T19382] usb 9-1: Manufacturer: syz [ 2091.505555][T19382] usb 9-1: SerialNumber: syz [ 2091.587095][T19382] usb 9-1: config 0 descriptor?? [ 2091.833283][T22065] netlink: 'syz.1.5284': attribute type 33 has an invalid length. [ 2091.884276][T14870] usb 9-1: USB disconnect, device number 85 [ 2091.940764][ T5829] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 2092.167120][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 2092.282097][ T5829] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2092.291822][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2092.300134][ T5829] usb 4-1: Product: syz [ 2092.304803][ T5829] usb 4-1: Manufacturer: syz [ 2092.309692][ T5829] usb 4-1: SerialNumber: syz [ 2092.420590][ T5829] usb 4-1: config 0 descriptor?? [ 2092.697482][ T5829] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2092.908695][ T5829] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2093.401651][T22082] netlink: 'syz.2.5289': attribute type 7 has an invalid length. [ 2093.409820][T22082] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5289'. [ 2094.912143][T22102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5295'. [ 2095.240670][T14339] usb 4-1: USB disconnect, device number 14 [ 2095.363566][T22107] netlink: 'syz.1.5297': attribute type 33 has an invalid length. [ 2095.929075][T22116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5299'. [ 2096.543169][T22122] netlink: 'syz.0.5302': attribute type 7 has an invalid length. [ 2096.553793][T22122] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5302'. [ 2098.502465][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5310'. [ 2098.674352][T22150] netlink: 'syz.2.5311': attribute type 33 has an invalid length. [ 2098.813855][T22148] loop8: detected capacity change from 0 to 512 [ 2099.090831][T22148] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 2099.162272][T22158] netlink: 'syz.3.5314': attribute type 7 has an invalid length. [ 2099.171402][T22158] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5314'. [ 2099.179076][T22148] EXT4-fs (loop8): orphan cleanup on readonly fs [ 2099.231780][T22148] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 2099.243046][T22148] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2099.331061][T22148] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 2099.409001][T22148] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5312: bg 0: block 40: padding at end of block bitmap is not set [ 2099.491587][T22148] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 2099.551750][T22148] EXT4-fs (loop8): 1 truncate cleaned up [ 2099.559562][T22148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2099.835359][T22163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5315'. [ 2100.329114][T22170] EXT4-fs error (device loop8): ext4_get_link:106: inode #16: comm syz.8.5312: bad symlink. [ 2101.559014][T22185] loop3: detected capacity change from 0 to 8 [ 2101.666488][T22185] squashfs: Unknown parameter '3˜O”ê¸×ü4Eß¾ ó5-¨×éÄaö¿+/—ݱ9Óåê}ìñDœûjIáRkáÖèEL(¬0|BÙ–UÆß¨‡ ¥!:`»(’‡\–‡È½uÆ<3' [ 2102.436494][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5324'. [ 2103.011438][T14339] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 2103.210722][T14339] usb 4-1: Using ep0 maxpacket: 8 [ 2103.308343][T14339] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2103.317915][T14339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2103.326768][T14339] usb 4-1: Product: syz [ 2103.331564][T14339] usb 4-1: Manufacturer: syz [ 2103.336454][T14339] usb 4-1: SerialNumber: syz [ 2103.429307][T14339] usb 4-1: config 0 descriptor?? [ 2103.652895][T22204] netlink: 'syz.0.5328': attribute type 7 has an invalid length. [ 2103.661387][T22204] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5328'. [ 2103.731115][T14339] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2103.951457][T14339] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2105.546146][T22224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5334'. [ 2106.296448][ T5829] usb 4-1: USB disconnect, device number 15 [ 2107.637871][T22238] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5339'. [ 2108.852363][T22248] netlink: 'syz.3.5342': attribute type 7 has an invalid length. [ 2108.861033][T22248] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5342'. [ 2111.831304][T22275] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5351'. [ 2112.881763][T22283] netlink: 'syz.3.5354': attribute type 7 has an invalid length. [ 2112.889985][T22283] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5354'. [ 2115.586637][T22308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2115.599782][T22308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2115.612514][T22308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2115.634688][T22308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2115.648645][T22308] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2115.666972][T22308] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2116.051645][T22307] lo speed is unknown, defaulting to 1000 [ 2116.191144][T22313] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5364'. [ 2116.492012][T22315] pim6reg: entered allmulticast mode [ 2116.638405][T22318] pim6reg: left allmulticast mode [ 2117.724828][T22308] Bluetooth: hci5: command tx timeout [ 2118.103386][T22331] netlink: 'syz.1.5369': attribute type 7 has an invalid length. [ 2118.111616][T22331] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5369'. [ 2118.461851][T22307] chnl_net:caif_netlink_parms(): no params data found [ 2119.801900][T22308] Bluetooth: hci5: command tx timeout [ 2121.202771][T22307] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.210769][T22307] bridge0: port 1(bridge_slave_0) entered disabled state [ 2121.218553][T22307] bridge_slave_0: entered allmulticast mode [ 2121.227325][T22307] bridge_slave_0: entered promiscuous mode [ 2121.404878][T22307] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.413031][T22307] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.421069][T22307] bridge_slave_1: entered allmulticast mode [ 2121.429817][T22307] bridge_slave_1: entered promiscuous mode [ 2121.892198][T22308] Bluetooth: hci5: command tx timeout [ 2121.973482][T22307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2122.037514][T22307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2122.587659][T22307] team0: Port device team_slave_0 added [ 2122.705669][T22307] team0: Port device team_slave_1 added [ 2123.228374][T22307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2123.236365][T22307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.267267][T22307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2123.474799][T22307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2123.482196][T22307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.508648][T22307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2123.921882][T22370] netlink: 'syz.2.5381': attribute type 7 has an invalid length. [ 2123.930069][T22370] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5381'. [ 2123.962591][T22308] Bluetooth: hci5: command tx timeout [ 2124.289875][T22307] hsr_slave_0: entered promiscuous mode [ 2124.299747][T22307] hsr_slave_1: entered promiscuous mode [ 2124.308911][T22307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2124.316796][T22307] Cannot create hsr debugfs directory [ 2128.149488][T22400] loop3: detected capacity change from 0 to 64 [ 2128.746513][T22307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2128.916186][T22307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2129.072628][T22307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2129.244212][T22307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2130.135759][T22410] netlink: 'syz.1.5393': attribute type 7 has an invalid length. [ 2130.144060][T22410] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5393'. [ 2130.175498][T22413] loop3: detected capacity change from 0 to 256 [ 2130.233219][T22148] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2130.581131][ T30] audit: type=1804 audit(1742139235.257:377): pid=22413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5394" name="/newroot/183/file0/file0" dev="loop3" ino=128 res=1 errno=0 [ 2131.382907][T22307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2131.759004][T22307] 8021q: adding VLAN 0 to HW filter on device team0 [ 2131.899823][ T4063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.907728][ T4063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2132.091623][ T4063] bridge0: port 2(bridge_slave_1) entered blocking state [ 2132.099449][ T4063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2132.122841][T22427] loop3: detected capacity change from 0 to 512 [ 2132.475344][T22427] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.5399: corrupted in-inode xattr: invalid ea_ino [ 2132.621916][T22427] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.5399: couldn't read orphan inode 15 (err -117) [ 2132.727087][T22427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2134.925524][ T3002] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2135.147535][ T3002] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2135.338546][ T3002] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2135.535711][ T3002] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2135.702674][T22307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2135.704549][T19285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2136.422425][ T3002] bridge_slave_1: left allmulticast mode [ 2136.428481][ T3002] bridge_slave_1: left promiscuous mode [ 2136.444225][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 2136.604882][ T3002] bridge_slave_0: left allmulticast mode [ 2136.611368][ T3002] bridge_slave_0: left promiscuous mode [ 2136.618152][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 2137.872317][ T3002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2137.928889][ T3002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2138.019365][ T3002] bond0 (unregistering): Released all slaves [ 2138.043386][ T3002] bond1 (unregistering): Released all slaves [ 2138.065855][ T3002] bond2 (unregistering): Released all slaves [ 2139.675610][ T3002] hsr_slave_0: left promiscuous mode [ 2139.700643][ T3002] hsr_slave_1: left promiscuous mode [ 2139.709043][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2139.722195][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2139.844237][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2139.852344][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2139.971148][ T3002] veth1_macvtap: left promiscuous mode [ 2139.977016][ T3002] veth0_macvtap: left promiscuous mode [ 2139.983826][ T3002] veth1_vlan: left promiscuous mode [ 2139.989501][ T3002] veth0_vlan: left promiscuous mode [ 2140.303320][T22496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5416'. [ 2140.664596][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2141.811646][T22511] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2142.579785][ T3002] team0 (unregistering): Port device team_slave_1 removed [ 2142.643311][ T3002] team0 (unregistering): Port device team_slave_0 removed [ 2143.687405][T22307] veth0_vlan: entered promiscuous mode [ 2143.897886][T22307] veth1_vlan: entered promiscuous mode [ 2144.477455][T22307] veth0_macvtap: entered promiscuous mode [ 2144.564587][T22307] veth1_macvtap: entered promiscuous mode [ 2144.789647][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.801472][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.811901][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.822922][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.833297][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.848667][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.865727][T22307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2144.964602][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.975848][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.986212][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.997264][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.007786][T22307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2145.019530][T22307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2145.035524][T22307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2145.237978][T22307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.247952][T22307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.260992][T22307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2145.271805][T22307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2148.125915][T22570] overlayfs: failed to clone upperpath [ 2149.466852][T19355] libceph: connect (1)[c::]:6789 error -101 [ 2149.473545][T19355] libceph: mon0 (1)[c::]:6789 connect error [ 2149.485698][T22581] ceph: No mds server is up or the cluster is laggy [ 2153.459350][T13926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2153.467735][T13926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2153.812591][ T3684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2153.821049][ T3684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2155.215855][T22654] loop3: detected capacity change from 0 to 512 [ 2155.282642][T22654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2155.421060][T22654] EXT4-fs (loop3): 1 truncate cleaned up [ 2155.429210][T22654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2159.373200][T19285] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2161.810947][T22718] loop4: detected capacity change from 0 to 64 [ 2161.935899][T22721] loop3: detected capacity change from 0 to 8 [ 2162.024046][T22721] squashfs: Unknown parameter '3˜O”ê¸×ü4Eß¾ ó5-¨×éÄaö¿+/—ݱ9Óåê}ìñDœûjIáRkáÖèEL(¬0|BÙ–UÆß¨‡ ¥!:`»(’‡\–‡È½uÆ<3' [ 2162.267581][T22721] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5485'. [ 2166.365559][T22765] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5501'. [ 2167.601825][T22780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5506'. [ 2169.667570][T22805] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5515'. [ 2170.735197][T22819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5520'. [ 2172.440074][T22843] loop3: detected capacity change from 0 to 8 [ 2172.503501][T22843] squashfs: Unknown parameter '3˜O”ê¸×ü4Eß¾ ó5-¨×éÄaö¿+/—ݱ9Óåê}ìñDœûjIáRkáÖèEL(¬0|BÙ–UÆß¨‡ ¥!:`»(’‡\–‡È½uÆ<3' [ 2172.752679][T22843] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5530'. [ 2173.446187][T22845] loop4: detected capacity change from 0 to 1764 [ 2174.432704][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5536'. [ 2174.455875][T22866] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5537'. [ 2174.713708][T22870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5538'. [ 2174.723211][T22870] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5538'. [ 2176.293085][T22885] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5545'. [ 2178.084316][T22901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5551'. [ 2179.474970][ T3684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.665232][ T3684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2179.886391][ T3684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.061509][ T3684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2180.921328][ T3684] bridge_slave_1: left allmulticast mode [ 2180.927434][ T3684] bridge_slave_1: left promiscuous mode [ 2180.934567][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 2181.051302][ T3684] bridge_slave_0: left allmulticast mode [ 2181.057276][ T3684] bridge_slave_0: left promiscuous mode [ 2181.064489][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.152387][ T3684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2182.197021][ T3684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2182.255938][ T3684] bond0 (unregistering): Released all slaves [ 2183.028390][ T3684] hsr_slave_0: left promiscuous mode [ 2183.054829][ T3684] hsr_slave_1: left promiscuous mode [ 2183.067585][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2183.075680][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2183.104009][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2183.112353][ T3684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2183.166939][ T3684] veth1_macvtap: left promiscuous mode [ 2183.172942][ T3684] veth0_macvtap: left promiscuous mode [ 2183.178954][ T3684] veth1_vlan: left promiscuous mode [ 2183.184846][ T3684] veth0_vlan: left promiscuous mode [ 2183.808133][T22947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5565'. [ 2184.972517][T19197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2185.008293][T19197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2185.032201][T19197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2185.098841][T19197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2185.159298][T19197] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2185.169930][T19197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2185.682006][ T3684] team0 (unregistering): Port device team_slave_1 removed [ 2185.775412][ T3684] team0 (unregistering): Port device team_slave_0 removed [ 2185.815595][T22966] netlink: 'syz.2.5573': attribute type 11 has an invalid length. [ 2185.824073][T22966] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5573'. [ 2186.296907][T22961] lo speed is unknown, defaulting to 1000 [ 2187.328487][T19197] Bluetooth: hci2: command tx timeout [ 2187.763070][T22961] chnl_net:caif_netlink_parms(): no params data found [ 2188.108240][T22987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5579'. [ 2189.400580][T19197] Bluetooth: hci2: command tx timeout [ 2190.230597][T22961] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.246228][T22961] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.254546][T22961] bridge_slave_0: entered allmulticast mode [ 2190.264538][T22961] bridge_slave_0: entered promiscuous mode [ 2190.436998][T22961] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.446234][T22961] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.454209][T22961] bridge_slave_1: entered allmulticast mode [ 2190.463168][T22961] bridge_slave_1: entered promiscuous mode [ 2190.981243][T22961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2191.058546][T22961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2191.419513][T22961] team0: Port device team_slave_0 added [ 2191.484889][T22961] team0: Port device team_slave_1 added [ 2191.493486][T19197] Bluetooth: hci2: command tx timeout [ 2191.725895][T22961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2191.734805][T22961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2191.761577][T22961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2191.959163][T22961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2191.966807][T22961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2191.993344][T22961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2192.548818][T22961] hsr_slave_0: entered promiscuous mode [ 2192.560174][T22961] hsr_slave_1: entered promiscuous mode [ 2193.363491][ T5829] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 2193.551787][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 2193.577237][T19197] Bluetooth: hci2: command tx timeout [ 2193.616873][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2193.631199][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2193.818251][ T5829] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2193.828149][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2193.836700][ T5829] usb 4-1: Product: syz [ 2193.841319][ T5829] usb 4-1: Manufacturer: syz [ 2193.846179][ T5829] usb 4-1: SerialNumber: syz [ 2193.942831][ T5829] usb 4-1: config 0 descriptor?? [ 2193.965091][ T5829] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2193.975033][ T5829] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 2194.863418][ T5829] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 2194.892546][ T5829] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 2195.518927][ T5829] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 2195.529217][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 2195.580688][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 2195.618400][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 2195.701713][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 2195.771930][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 2195.999005][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 2196.006129][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 2196.013091][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 2196.019774][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 2196.026856][ T5829] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 2196.232818][ T5829] usb 4-1: USB disconnect, device number 16 [ 2197.519313][T22961] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2197.669427][T22961] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2197.802162][T22961] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2197.920176][T22961] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2199.173806][T22961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2199.449916][T22961] 8021q: adding VLAN 0 to HW filter on device team0 [ 2199.575924][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 2199.584055][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2199.713688][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 2199.721587][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2202.084151][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2202.337854][T22961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2205.942942][T22961] veth0_vlan: entered promiscuous mode [ 2206.109695][T22961] veth1_vlan: entered promiscuous mode [ 2206.559290][T22961] veth0_macvtap: entered promiscuous mode [ 2206.669245][T22961] veth1_macvtap: entered promiscuous mode [ 2206.918287][T22961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.930778][T22961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.941201][T22961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.952217][T22961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.962557][T22961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2206.973357][T22961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2206.992069][T22961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2207.329996][T22961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.341654][T22961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.352107][T22961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.362970][T22961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.373368][T22961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2207.384210][T22961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2207.400585][T22961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2207.772356][T22961] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.781697][T22961] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.791183][T22961] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2207.800447][T22961] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2216.092876][T23241] fuse: Bad value for 'fd' [ 2216.515826][T13925] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2216.529110][T13925] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2216.766062][ T4862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2216.774602][ T4862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2221.202590][T22308] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2221.244274][T22308] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2221.263797][T22308] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2221.301707][T22308] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2221.324254][T22308] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2221.351951][T22308] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2221.513003][T23282] lo speed is unknown, defaulting to 1000 [ 2222.003936][T23292] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2222.012286][T14340] IPVS: starting estimator thread 0... [ 2222.111718][T23295] IPVS: using max 240 ests per chain, 12000 per kthread [ 2223.212312][T23282] chnl_net:caif_netlink_parms(): no params data found [ 2223.494051][T22308] Bluetooth: hci5: command tx timeout [ 2225.621195][T22308] Bluetooth: hci5: command tx timeout [ 2226.109075][ T7722] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.248838][T23282] bridge0: port 1(bridge_slave_0) entered blocking state [ 2226.262164][T23282] bridge0: port 1(bridge_slave_0) entered disabled state [ 2226.270496][T23282] bridge_slave_0: entered allmulticast mode [ 2226.280120][T23282] bridge_slave_0: entered promiscuous mode [ 2226.380042][ T7722] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.424067][T23282] bridge0: port 2(bridge_slave_1) entered blocking state [ 2226.432633][T23282] bridge0: port 2(bridge_slave_1) entered disabled state [ 2226.440882][T23282] bridge_slave_1: entered allmulticast mode [ 2226.452692][T23282] bridge_slave_1: entered promiscuous mode [ 2226.509814][ T7722] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.750363][ T7722] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2226.824763][T23334] netlink: 'syz.3.5672': attribute type 4 has an invalid length. [ 2227.043311][T23282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2227.274399][T23282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2227.351326][ T7722] bridge_slave_1: left allmulticast mode [ 2227.357464][ T7722] bridge_slave_1: left promiscuous mode [ 2227.365030][ T7722] bridge0: port 2(bridge_slave_1) entered disabled state [ 2227.526687][ T7722] bridge_slave_0: left allmulticast mode [ 2227.533033][ T7722] bridge_slave_0: left promiscuous mode [ 2227.539871][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state [ 2227.671680][T22308] Bluetooth: hci5: command tx timeout [ 2228.698651][ T7722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2228.805389][ T7722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2228.884839][ T7722] bond0 (unregistering): Released all slaves [ 2228.907626][ T7722] bond1 (unregistering): Released all slaves [ 2228.938865][ T7722] bond2 (unregistering): Released all slaves [ 2229.215222][ T7722] bond3 (unregistering): Released all slaves [ 2229.254350][ T7722] bond4 (unregistering): Released all slaves [ 2229.382521][ T7722] bond5 (unregistering): Released all slaves [ 2229.754465][T22308] Bluetooth: hci5: command tx timeout [ 2229.824775][T23282] team0: Port device team_slave_0 added [ 2229.862985][T23282] team0: Port device team_slave_1 added [ 2230.178281][T23282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2230.185907][T23282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2230.213588][T23282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2230.237970][T23282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2230.250645][T23282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2230.279053][T23282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2231.257231][ T7722] hsr_slave_0: left promiscuous mode [ 2231.286487][ T7722] hsr_slave_1: left promiscuous mode [ 2231.298392][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2231.306489][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2231.363523][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2231.377707][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2231.501927][ T7722] veth1_macvtap: left promiscuous mode [ 2231.507778][ T7722] veth0_macvtap: left promiscuous mode [ 2231.514261][ T7722] veth1_vlan: left promiscuous mode [ 2231.519921][ T7722] veth0_vlan: left promiscuous mode [ 2233.723173][ T7722] team0 (unregistering): Port device team_slave_1 removed [ 2233.757955][ T7722] team0 (unregistering): Port device team_slave_0 removed [ 2234.127869][T23282] hsr_slave_0: entered promiscuous mode [ 2234.161702][T23282] hsr_slave_1: entered promiscuous mode [ 2234.176750][T23282] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2234.186091][T23282] Cannot create hsr debugfs directory [ 2236.786947][T23282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2236.896579][T23282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2237.041817][T23282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2237.185702][T23282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2237.377346][T23413] loop6: detected capacity change from 0 to 512 [ 2237.620825][ T30] audit: type=1804 audit(1742139342.297:378): pid=23416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5700" name="file0" dev="tmpfs" ino=1437 res=1 errno=0 [ 2237.711245][T23413] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.5698: corrupted in-inode xattr: e_value size too large [ 2237.798140][T23413] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.5698: couldn't read orphan inode 15 (err -117) [ 2237.888082][T23413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2238.836697][T23282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2239.105611][T23282] 8021q: adding VLAN 0 to HW filter on device team0 [ 2239.233552][ T4063] bridge0: port 1(bridge_slave_0) entered blocking state [ 2239.241624][ T4063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2239.388005][ T4063] bridge0: port 2(bridge_slave_1) entered blocking state [ 2239.395967][ T4063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2239.528701][T23436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5706'. [ 2239.538821][T23436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5706'. [ 2239.571153][T23436] bridge0: entered promiscuous mode [ 2239.582857][T23436] ip6gretap0: entered promiscuous mode [ 2241.352613][T22961] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2242.206872][T23282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2243.055048][T23282] veth0_vlan: entered promiscuous mode [ 2243.245255][T23282] veth1_vlan: entered promiscuous mode [ 2243.692927][T23282] veth0_macvtap: entered promiscuous mode [ 2243.796589][T23282] veth1_macvtap: entered promiscuous mode [ 2244.034708][T23282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2244.045834][T23282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.056501][T23282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2244.067916][T23282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.087298][T23282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2244.100580][T23282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.117270][T23282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2244.483658][T23282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2244.496339][T23282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.506662][T23282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2244.517647][T23282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.529111][T23282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2244.540542][T23282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2244.557006][T23282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2244.752680][T23475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5718'. [ 2244.764977][T23475] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5718'. [ 2244.819361][T23475] bridge0: entered promiscuous mode [ 2244.831886][T23475] ip6gretap0: entered promiscuous mode [ 2244.844781][T23475] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 2244.853112][T23475] Cannot create hsr debugfs directory [ 2244.964228][T23282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.975449][T23282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.984812][T23282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2245.000779][T23282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2251.102291][T23526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5729'. [ 2251.111849][T23526] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5729'. [ 2255.841491][T13926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2255.852370][T13926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.059674][T13925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2256.067929][T13925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2259.779661][T19197] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2259.789003][T19197] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2259.801863][T19197] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2259.820743][T19197] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2259.832872][T19197] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2259.848612][T19197] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2260.038341][T23581] lo speed is unknown, defaulting to 1000 [ 2260.216209][T23586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5739'. [ 2260.226040][T23586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5739'. [ 2261.761937][T23581] chnl_net:caif_netlink_parms(): no params data found [ 2261.892643][T19197] Bluetooth: hci4: command tx timeout [ 2263.524116][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2263.961014][T19197] Bluetooth: hci4: command tx timeout [ 2264.013025][T23581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.020916][T23581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2264.028736][T23581] bridge_slave_0: entered allmulticast mode [ 2264.044802][T23581] bridge_slave_0: entered promiscuous mode [ 2264.268437][T23581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.276240][T23581] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.284421][T23581] bridge_slave_1: entered allmulticast mode [ 2264.293496][T23581] bridge_slave_1: entered promiscuous mode [ 2264.894802][T23581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2265.023771][T23581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2265.623624][T23581] team0: Port device team_slave_0 added [ 2265.789572][T23581] team0: Port device team_slave_1 added [ 2266.042579][T19197] Bluetooth: hci4: command tx timeout [ 2266.335295][T23581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2266.342599][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2266.369201][T23581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2266.435220][T22308] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2266.445749][T22308] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2266.472340][T22308] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2266.487765][T22308] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2266.539810][T22308] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2266.555439][T22308] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2266.737387][T23581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2266.750555][T23581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2266.777905][T23581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2266.863447][T23614] lo speed is unknown, defaulting to 1000 [ 2267.333753][T23581] hsr_slave_0: entered promiscuous mode [ 2267.344614][T23581] hsr_slave_1: entered promiscuous mode [ 2267.353874][T23581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2267.362204][T23581] Cannot create hsr debugfs directory [ 2268.130484][T22308] Bluetooth: hci4: command tx timeout [ 2268.617623][T22308] Bluetooth: hci6: command tx timeout [ 2268.804768][T23624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5751'. [ 2268.814539][T23624] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5751'. [ 2268.997273][T23614] chnl_net:caif_netlink_parms(): no params data found [ 2270.680682][T22308] Bluetooth: hci6: command tx timeout [ 2272.710390][T23581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2272.760802][T22308] Bluetooth: hci6: command tx timeout [ 2272.937594][T23581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2272.996490][T23614] bridge0: port 1(bridge_slave_0) entered blocking state [ 2273.004802][T23614] bridge0: port 1(bridge_slave_0) entered disabled state [ 2273.012896][T23614] bridge_slave_0: entered allmulticast mode [ 2273.021692][T23614] bridge_slave_0: entered promiscuous mode [ 2273.101589][T23581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2273.207849][T23614] bridge0: port 2(bridge_slave_1) entered blocking state [ 2273.215813][T23614] bridge0: port 2(bridge_slave_1) entered disabled state [ 2273.224123][T23614] bridge_slave_1: entered allmulticast mode [ 2273.233453][T23614] bridge_slave_1: entered promiscuous mode [ 2273.244309][T23581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2273.774943][T23614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2273.945143][T23614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2274.565225][T23614] team0: Port device team_slave_0 added [ 2274.665839][T23614] team0: Port device team_slave_1 added [ 2274.840950][T22308] Bluetooth: hci6: command tx timeout [ 2275.377737][T23614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2275.386070][T23614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.424857][T23614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2275.824611][T23614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2275.832032][T23614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.858512][T23614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2276.731057][T23614] hsr_slave_0: entered promiscuous mode [ 2276.747924][T23614] hsr_slave_1: entered promiscuous mode [ 2276.756519][T23614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2276.764464][T23614] Cannot create hsr debugfs directory [ 2276.889923][T23581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2277.275058][T23581] 8021q: adding VLAN 0 to HW filter on device team0 [ 2277.546754][ T1838] bridge0: port 1(bridge_slave_0) entered blocking state [ 2277.554643][ T1838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2277.779973][ T1838] bridge0: port 2(bridge_slave_1) entered blocking state [ 2277.787664][ T1838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2278.285809][T23668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5762'. [ 2278.295419][T23668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5762'. [ 2280.854470][T23614] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2281.013110][T23614] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2281.173078][T23614] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2281.615189][T23614] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2282.738593][T23581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2284.528545][T23614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2285.069637][T23614] 8021q: adding VLAN 0 to HW filter on device team0 [ 2285.262207][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.269905][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2285.453514][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 2285.461283][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2287.911000][T19197] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2287.966252][T19197] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2287.981806][T19197] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2288.165123][T19197] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2288.178819][T19197] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2288.197595][T19197] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2288.607491][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2288.942925][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2289.301928][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2289.380781][T23713] lo speed is unknown, defaulting to 1000 [ 2289.604534][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2290.202267][T23581] veth0_vlan: entered promiscuous mode [ 2290.444633][T19197] Bluetooth: hci7: command tx timeout [ 2290.509581][T23581] veth1_vlan: entered promiscuous mode [ 2290.787159][ T12] bridge_slave_1: left allmulticast mode [ 2290.794204][ T12] bridge_slave_1: left promiscuous mode [ 2290.801282][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2290.981521][ T12] bridge_slave_0: left allmulticast mode [ 2290.987505][ T12] bridge_slave_0: left promiscuous mode [ 2290.994793][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2292.164845][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2292.235815][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2292.269438][ T12] bond0 (unregistering): Released all slaves [ 2292.524458][T19197] Bluetooth: hci7: command tx timeout [ 2293.073513][ T12] hsr_slave_0: left promiscuous mode [ 2293.103764][ T12] hsr_slave_1: left promiscuous mode [ 2293.112577][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2293.124957][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2293.203827][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2293.212025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2293.291013][ T12] veth1_macvtap: left promiscuous mode [ 2293.297024][ T12] veth0_macvtap: left promiscuous mode [ 2293.303710][ T12] veth1_vlan: left promiscuous mode [ 2293.309366][ T12] veth0_vlan: left promiscuous mode [ 2294.435648][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2294.574481][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2294.603102][T19197] Bluetooth: hci7: command tx timeout [ 2295.012896][T23614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2295.302621][T23713] chnl_net:caif_netlink_parms(): no params data found [ 2295.352491][T23581] veth0_macvtap: entered promiscuous mode [ 2295.466158][T23581] veth1_macvtap: entered promiscuous mode [ 2295.919850][T23581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2295.932179][T23581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2295.942609][T23581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2295.953607][T23581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2295.963977][T23581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2295.974968][T23581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2295.998964][T23581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2296.238445][T23581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.249877][T23581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.260385][T23581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.271352][T23581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.281688][T23581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2296.297422][T23581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2296.314474][T23581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2296.523679][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.683206][T19197] Bluetooth: hci7: command tx timeout [ 2296.713219][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.853668][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2296.935677][T23581] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2296.945038][T23581] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2296.954296][T23581] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2296.963488][T23581] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2297.138290][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.120947][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.273267][T23713] bridge0: port 1(bridge_slave_0) entered blocking state [ 2298.281907][T23713] bridge0: port 1(bridge_slave_0) entered disabled state [ 2298.289979][T23713] bridge_slave_0: entered allmulticast mode [ 2298.300013][T23713] bridge_slave_0: entered promiscuous mode [ 2298.361874][T23774] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2298.452732][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.521673][T23713] bridge0: port 2(bridge_slave_1) entered blocking state [ 2298.529528][T23713] bridge0: port 2(bridge_slave_1) entered disabled state [ 2298.539192][T23713] bridge_slave_1: entered allmulticast mode [ 2298.553866][T23713] bridge_slave_1: entered promiscuous mode [ 2298.637761][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2298.845336][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.017720][ T30] audit: type=1326 audit(1742139403.707:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2299.040600][ T30] audit: type=1326 audit(1742139403.707:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2299.068511][ T30] audit: type=1326 audit(1742139403.757:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2299.092679][ T30] audit: type=1326 audit(1742139403.757:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2299.115288][ T30] audit: type=1326 audit(1742139403.757:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2299.221229][T23713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2299.425587][T23713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2299.490587][ T30] audit: type=1326 audit(1742139403.857:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=451 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2299.513753][ T30] audit: type=1326 audit(1742139403.857:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2299.536496][ T30] audit: type=1326 audit(1742139403.857:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23776 comm="syz.1.5778" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2300.123110][ T12] bridge_slave_1: left allmulticast mode [ 2300.129105][ T12] bridge_slave_1: left promiscuous mode [ 2300.136191][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.221457][ T12] bridge_slave_0: left allmulticast mode [ 2300.227466][ T12] bridge_slave_0: left promiscuous mode [ 2300.234761][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2300.330884][ T12] bridge_slave_1: left allmulticast mode [ 2300.336888][ T12] bridge_slave_1: left promiscuous mode [ 2300.343945][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2300.412380][ T12] bridge_slave_0: left allmulticast mode [ 2300.418402][ T12] bridge_slave_0: left promiscuous mode [ 2300.425417][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 2301.982589][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2302.038933][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2302.085005][ T12] bond0 (unregistering): Released all slaves [ 2302.153035][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2302.196466][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2302.254060][ T12] bond0 (unregistering): Released all slaves [ 2302.379130][T23614] veth0_vlan: entered promiscuous mode [ 2302.400062][T23713] team0: Port device team_slave_0 added [ 2302.408885][T23791] netlink: 'syz.1.5781': attribute type 3 has an invalid length. [ 2302.532335][T23713] team0: Port device team_slave_1 added [ 2302.574764][T23614] veth1_vlan: entered promiscuous mode [ 2303.326827][T23713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2303.334647][T23713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2303.364686][T23713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2303.695460][T23713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2303.702921][T23713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2303.730531][T23713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2304.091703][T23614] veth0_macvtap: entered promiscuous mode [ 2304.356182][T23614] veth1_macvtap: entered promiscuous mode [ 2304.775330][ T12] hsr_slave_0: left promiscuous mode [ 2304.790702][ T12] hsr_slave_1: left promiscuous mode [ 2304.800873][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2304.808713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2304.869477][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2304.877666][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2305.036231][ T12] hsr_slave_0: left promiscuous mode [ 2305.071939][ T12] hsr_slave_1: left promiscuous mode [ 2305.080433][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2305.088436][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2305.132723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2305.140742][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2305.208559][ T12] veth1_macvtap: left promiscuous mode [ 2305.215176][ T12] veth0_macvtap: left promiscuous mode [ 2305.221414][ T12] veth1_vlan: left promiscuous mode [ 2305.227057][ T12] veth0_vlan: left promiscuous mode [ 2305.257505][ T12] veth1_macvtap: left promiscuous mode [ 2305.263720][ T12] veth0_macvtap: left promiscuous mode [ 2305.269721][ T12] veth1_vlan: left promiscuous mode [ 2305.275700][ T12] veth0_vlan: left promiscuous mode [ 2307.533092][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2307.647870][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2308.521733][ T12] team0 (unregistering): Port device team_slave_1 removed [ 2308.646444][ T12] team0 (unregistering): Port device team_slave_0 removed [ 2308.715745][T19354] IPVS: starting estimator thread 0... [ 2308.723616][T23831] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2308.820800][T23834] IPVS: using max 192 ests per chain, 9600 per kthread [ 2308.942558][T23713] hsr_slave_0: entered promiscuous mode [ 2308.964773][T23713] hsr_slave_1: entered promiscuous mode [ 2309.224410][T23614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.235349][T23614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.245798][T23614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2309.256678][T23614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.272942][T23614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2309.441068][T23614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.452156][T23614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.462565][T23614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2309.473471][T23614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2309.489343][T23614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2309.777540][T23614] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.786889][T23614] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.796528][T23614] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2309.805836][T23614] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2311.777608][T23713] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2311.898627][T23713] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2311.982161][T23713] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2312.073959][T23713] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2312.552401][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2312.560678][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2312.776695][ T1838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2312.788351][ T1838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2313.581923][T23713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2313.949285][T23713] 8021q: adding VLAN 0 to HW filter on device team0 [ 2314.070021][T13926] bridge0: port 1(bridge_slave_0) entered blocking state [ 2314.078080][T13926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2314.220253][T13926] bridge0: port 2(bridge_slave_1) entered blocking state [ 2314.228060][T13926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2316.649933][T23713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2316.872800][T23901] tipc: Can't bind to reserved service type 2 [ 2317.319952][T23903] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2317.351172][T23733] IPVS: starting estimator thread 0... [ 2317.451778][T23907] IPVS: using max 192 ests per chain, 9600 per kthread [ 2318.838715][T15875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2318.847030][T15875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2318.936073][T23924] netlink: 'syz.1.5799': attribute type 2 has an invalid length. [ 2318.945022][T23924] netlink: 'syz.1.5799': attribute type 8 has an invalid length. [ 2319.198848][T15875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2319.207537][T15875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2319.979694][T23713] veth0_vlan: entered promiscuous mode [ 2320.165329][T23713] veth1_vlan: entered promiscuous mode [ 2320.687818][T23713] veth0_macvtap: entered promiscuous mode [ 2320.768815][T23713] veth1_macvtap: entered promiscuous mode [ 2321.044146][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2321.055162][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2321.067427][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2321.079700][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2321.091532][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2321.103856][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2321.119782][T23713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2321.228440][T23947] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2321.358729][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2321.371514][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2321.383087][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2321.394331][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2321.404750][T23713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2321.415650][T23713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2321.431709][T23713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2321.745474][T23713] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2321.754832][T23713] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2321.765340][T23713] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2321.774695][T23713] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2322.871249][T23733] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 2323.060621][T23733] usb 8-1: Using ep0 maxpacket: 32 [ 2323.081387][T23733] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2323.091942][T23733] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 2323.102342][T23733] usb 8-1: config 0 interface 0 has no altsetting 0 [ 2323.215001][T23733] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2323.226155][T23733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2323.235022][T23733] usb 8-1: Product: syz [ 2323.239502][T23733] usb 8-1: Manufacturer: syz [ 2323.244806][T23733] usb 8-1: SerialNumber: syz [ 2323.363998][T23733] usb 8-1: config 0 descriptor?? [ 2323.850876][T23733] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 2324.066881][T23733] gs_usb 8-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 2324.102363][T23733] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -22 [ 2324.316043][T23733] usb 8-1: USB disconnect, device number 19 [ 2324.973660][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2326.920829][T23999] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2328.731940][ T30] audit: type=1800 audit(1742139433.427:387): pid=24024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5823" name="file1" dev="tmpfs" ino=1672 res=0 errno=0 [ 2328.950991][ T5829] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 2329.142625][ T5829] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 2329.152580][ T5829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2329.161268][ T5829] usb 6-1: Product: syz [ 2329.166929][ T5829] usb 6-1: Manufacturer: syz [ 2329.172377][ T5829] usb 6-1: SerialNumber: syz [ 2329.257541][ T5829] usb 6-1: config 0 descriptor?? [ 2329.307204][ T5829] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 2330.032302][T24033] sctp: [Deprecated]: syz.7.5826 (pid 24033) Use of int in max_burst socket option deprecated. [ 2330.032302][T24033] Use struct sctp_assoc_value instead [ 2330.168464][ T1838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2330.176956][ T1838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2330.251850][T14340] usb 6-1: USB disconnect, device number 53 [ 2330.308004][T23706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2330.317189][T23706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2331.942348][T23733] IPVS: starting estimator thread 0... [ 2331.957178][T24044] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 2332.041653][T24048] IPVS: using max 192 ests per chain, 9600 per kthread [ 2333.112312][T24057] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5832'. [ 2333.555885][T24065] loop7: detected capacity change from 0 to 2048 [ 2333.747487][T24070] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2335.444454][T14340] IPVS: starting estimator thread 0... [ 2335.560815][T24093] IPVS: using max 192 ests per chain, 9600 per kthread [ 2340.087309][T24147] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5863'. [ 2340.924363][T24157] loop5: detected capacity change from 0 to 512 [ 2341.059698][T24157] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 2341.278339][T24157] EXT4-fs (loop5): 1 truncate cleaned up [ 2341.286873][T24157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2343.981655][T24183] loop9: detected capacity change from 0 to 16 [ 2344.047061][T24183] erofs (device loop9): unidentified incompatible feature 9000000, please upgrade kernel [ 2344.821249][T23614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2345.355622][T24192] loop9: detected capacity change from 0 to 8 [ 2345.407004][T24192] squashfs: Unknown parameter '3˜O”ê¸×ü4Eß¾ ó5-¨×éÄaö¿+/—ݱ9Óåê}ìñDœûjIáRkáÖèEL(¬0|BÙ–UÆß¨‡ ¥!:`»(’‡\–‡È½uÆ<3' [ 2345.539550][T24192] netlink: 44 bytes leftover after parsing attributes in process `syz.9.5877'. [ 2348.878271][T24215] loop5: detected capacity change from 0 to 256 [ 2349.351296][T24215] FAT-fs (loop5): Directory bread(block 64) failed [ 2349.358608][T24215] FAT-fs (loop5): Directory bread(block 65) failed [ 2349.365831][T24215] FAT-fs (loop5): Directory bread(block 66) failed [ 2349.372816][T24215] FAT-fs (loop5): Directory bread(block 67) failed [ 2349.379646][T24215] FAT-fs (loop5): Directory bread(block 68) failed [ 2349.386557][T24215] FAT-fs (loop5): Directory bread(block 69) failed [ 2349.393611][T24215] FAT-fs (loop5): Directory bread(block 70) failed [ 2349.400751][T24215] FAT-fs (loop5): Directory bread(block 71) failed [ 2349.407629][T24215] FAT-fs (loop5): Directory bread(block 72) failed [ 2349.414512][T24215] FAT-fs (loop5): Directory bread(block 73) failed [ 2357.285475][T24275] loop9: detected capacity change from 0 to 16 [ 2357.348874][T24275] erofs (device loop9): unidentified incompatible feature 9000000, please upgrade kernel [ 2359.658493][T22308] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2359.668580][T22308] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2359.692421][T22308] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2359.708844][T22308] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2359.757608][T22308] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2359.768088][T22308] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2360.239834][T24294] lo speed is unknown, defaulting to 1000 [ 2361.013838][T24291] loop5: detected capacity change from 0 to 4096 [ 2361.162795][T24291] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 2361.883606][T22308] Bluetooth: hci1: command tx timeout [ 2362.127687][T24291] ntfs3(loop5): ino=b, mi_enum_attr [ 2362.133461][T24291] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 2362.296948][T24294] chnl_net:caif_netlink_parms(): no params data found [ 2362.322838][T24291] ntfs3(loop5): Failed to load $Extend (-22). [ 2362.329283][T24291] ntfs3(loop5): Failed to initialize $Extend. [ 2363.970440][T22308] Bluetooth: hci1: command tx timeout [ 2364.837992][T24294] bridge0: port 1(bridge_slave_0) entered blocking state [ 2364.846001][T24294] bridge0: port 1(bridge_slave_0) entered disabled state [ 2364.854203][T24294] bridge_slave_0: entered allmulticast mode [ 2364.864910][T24294] bridge_slave_0: entered promiscuous mode [ 2364.883092][T24294] bridge0: port 2(bridge_slave_1) entered blocking state [ 2364.891195][T24294] bridge0: port 2(bridge_slave_1) entered disabled state [ 2364.899242][T24294] bridge_slave_1: entered allmulticast mode [ 2364.914131][T24294] bridge_slave_1: entered promiscuous mode [ 2365.185979][T24294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2365.218255][T24294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2365.701811][T24294] team0: Port device team_slave_0 added [ 2365.811057][T24294] team0: Port device team_slave_1 added [ 2365.919513][T24294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2365.933087][T24294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2365.963888][T24294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2366.042110][T22308] Bluetooth: hci1: command tx timeout [ 2366.211599][T24294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2366.219106][T24294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2366.253592][T24294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2366.692665][T24326] loop9: detected capacity change from 0 to 16 [ 2366.813773][T24326] erofs (device loop9): unidentified incompatible feature 9000000, please upgrade kernel [ 2367.107249][T24294] hsr_slave_0: entered promiscuous mode [ 2367.118653][T24294] hsr_slave_1: entered promiscuous mode [ 2367.127258][T24294] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2367.135345][T24294] Cannot create hsr debugfs directory [ 2368.710334][T22308] Bluetooth: hci1: command tx timeout [ 2372.868090][T24294] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2373.025330][T24294] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2373.153312][T24294] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2373.269297][T24294] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2375.217894][T24294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2375.543513][T24294] 8021q: adding VLAN 0 to HW filter on device team0 [ 2375.793946][ T7722] bridge0: port 1(bridge_slave_0) entered blocking state [ 2375.801612][ T7722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2376.032305][ T7722] bridge0: port 2(bridge_slave_1) entered blocking state [ 2376.040078][ T7722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2377.632988][T24380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5928'. [ 2378.799757][T24389] loop5: detected capacity change from 0 to 1024 [ 2379.052869][T24389] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2379.669527][T24389] EXT4-fs (loop5): shut down requested (0) [ 2379.772034][ T3002] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2379.996397][ T3002] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.173549][ T3002] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.436265][ T3002] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2380.521627][T23614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2380.631813][T24294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2381.441611][ T3002] bridge_slave_1: left allmulticast mode [ 2381.447628][ T3002] bridge_slave_1: left promiscuous mode [ 2381.454877][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 2381.642530][ T3002] bridge_slave_0: left allmulticast mode [ 2381.648630][ T3002] bridge_slave_0: left promiscuous mode [ 2381.655778][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 2383.377897][ T3002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2383.469762][ T3002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2383.532720][ T3002] bond0 (unregistering): Released all slaves [ 2384.625366][ T3002] hsr_slave_0: left promiscuous mode [ 2384.696327][ T3002] hsr_slave_1: left promiscuous mode [ 2384.704235][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2384.712335][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2384.737269][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2384.746763][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2384.903089][ T3002] veth1_macvtap: left promiscuous mode [ 2384.908972][ T3002] veth0_macvtap: left promiscuous mode [ 2384.915482][ T3002] veth1_vlan: left promiscuous mode [ 2384.922205][ T3002] veth0_vlan: left promiscuous mode [ 2386.414557][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 2386.582395][ T3002] team0 (unregistering): Port device team_slave_1 removed [ 2386.679203][ T3002] team0 (unregistering): Port device team_slave_0 removed [ 2387.721755][T24444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5948'. [ 2387.803063][T24444] netlink: 'syz.1.5948': attribute type 1 has an invalid length. [ 2387.811369][T24444] netlink: 'syz.1.5948': attribute type 2 has an invalid length. [ 2388.165740][ T3002] IPVS: stop unused estimator thread 0... [ 2388.838911][T24294] veth0_vlan: entered promiscuous mode [ 2388.991446][T24294] veth1_vlan: entered promiscuous mode [ 2389.456652][T24294] veth0_macvtap: entered promiscuous mode [ 2389.609049][T24294] veth1_macvtap: entered promiscuous mode [ 2389.925994][T24294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2389.937879][T24294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2389.948257][T24294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2389.959291][T24294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2389.969627][T24294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2389.980489][T24294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2390.001963][T24294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2390.423651][T24294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2390.435211][T24294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2390.445530][T24294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2390.456359][T24294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2390.466714][T24294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2390.477734][T24294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2390.493784][T24294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2390.816184][T24294] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2390.825594][T24294] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2390.834888][T24294] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2390.847598][T24294] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2393.566796][T19197] Bluetooth: hci6: command 0x0406 tx timeout [ 2397.603759][T24514] loop9: detected capacity change from 0 to 1024 [ 2397.818931][T24514] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2398.159478][T24514] EXT4-fs (loop9): shut down requested (0) [ 2398.647629][T23713] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2399.044798][T24529] 9pnet_fd: Insufficient options for proto=fd [ 2399.374212][T15875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2399.382647][T15875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2399.587097][T24535] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 2399.594008][T24535] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2399.602582][T24535] vhci_hcd vhci_hcd.0: Device attached [ 2399.608524][ T3002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2399.620484][ T3002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2399.801018][T24536] usbip_core: unknown command [ 2399.805982][T24536] vhci_hcd: unknown pdu 234881024 [ 2399.811560][T24536] usbip_core: unknown command [ 2399.825403][ T3002] vhci_hcd: stop threads [ 2399.829931][ T3002] vhci_hcd: release socket [ 2399.834914][ T3002] vhci_hcd: disconnect device [ 2399.862498][ T5829] vhci_hcd: vhci_device speed not set [ 2401.409160][ T30] audit: type=1326 audit(1742139506.117:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2401.432567][ T30] audit: type=1326 audit(1742139506.137:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2401.595900][T24561] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5979'. [ 2401.676165][ T30] audit: type=1326 audit(1742139506.217:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2401.699858][ T30] audit: type=1326 audit(1742139506.217:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2401.727210][ T30] audit: type=1326 audit(1742139506.237:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=242 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2401.753009][ T30] audit: type=1326 audit(1742139506.237:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2401.780457][ T30] audit: type=1326 audit(1742139506.237:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2401.807514][ T30] audit: type=1326 audit(1742139506.237:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2401.830898][ T30] audit: type=1326 audit(1742139506.257:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2401.853518][ T30] audit: type=1326 audit(1742139506.257:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24548 comm="syz.1.5977" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f76579 code=0x7ffc0000 [ 2404.623500][T24564] loop8: detected capacity change from 0 to 32768 [ 2404.853635][T24564] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 2404.870991][T24564] bcachefs (loop8): initializing new filesystem [ 2404.899265][T24564] bcachefs (loop8): going read-write [ 2404.911656][T24564] bcachefs (loop8): marking superblocks [ 2405.021736][T12796] ===================================================== [ 2405.029103][T12796] BUG: KMSAN: uninit-value in bch2_alloc_v4_validate+0x73f/0x1c10 [ 2405.037602][T12796] bch2_alloc_v4_validate+0x73f/0x1c10 [ 2405.048450][T12796] bch2_bkey_val_validate+0x357/0x530 [ 2405.055993][T12796] validate_bset_keys+0x2048/0x22b0 [ 2405.061670][T12796] validate_bset_for_write+0x2b3/0x410 [ 2405.067392][T12796] __bch2_btree_node_write+0x5436/0x6870 [ 2405.073614][T12796] bch2_btree_node_write_trans+0xd7/0x890 [ 2405.079593][T12796] btree_interior_update_work+0x3eac/0x4830 [ 2405.086504][T12796] process_scheduled_works+0xc1a/0x1e80 [ 2405.092677][T12796] worker_thread+0xea7/0x14f0 [ 2405.097585][T12796] kthread+0x6b9/0xef0 [ 2405.102036][T12796] ret_from_fork+0x6d/0x90 [ 2405.106733][T12796] ret_from_fork_asm+0x1a/0x30 [ 2405.112033][T12796] [ 2405.114504][T12796] Uninit was stored to memory at: [ 2405.119874][T12796] bch2_alloc_v4_validate+0x215/0x1c10 [ 2405.125920][T12796] bch2_bkey_val_validate+0x357/0x530 [ 2405.133534][T12796] validate_bset_keys+0x2048/0x22b0 [ 2405.138996][T12796] validate_bset_for_write+0x2b3/0x410 [ 2405.152340][T12796] __bch2_btree_node_write+0x5436/0x6870 [ 2405.158259][T12796] bch2_btree_node_write_trans+0xd7/0x890 [ 2405.164517][T12796] btree_interior_update_work+0x3eac/0x4830 [ 2405.170901][T12796] process_scheduled_works+0xc1a/0x1e80 [ 2405.176824][T12796] worker_thread+0xea7/0x14f0 [ 2405.182052][T12796] kthread+0x6b9/0xef0 [ 2405.186355][T12796] ret_from_fork+0x6d/0x90 [ 2405.191283][T12796] ret_from_fork_asm+0x1a/0x30 [ 2405.196293][T12796] [ 2405.198741][T12796] Uninit was stored to memory at: [ 2405.204300][T12796] bch2_sort_keys_keep_unwritten_whiteouts+0x14ab/0x1840 [ 2405.212028][T12796] __bch2_btree_node_write+0x3b3f/0x6870 [ 2405.217931][T12796] bch2_btree_node_write_trans+0xd7/0x890 [ 2405.224199][T12796] btree_interior_update_work+0x3eac/0x4830 [ 2405.230549][T12796] process_scheduled_works+0xc1a/0x1e80 [ 2405.236404][T12796] worker_thread+0xea7/0x14f0 [ 2405.242287][T12796] kthread+0x6b9/0xef0 [ 2405.251751][T12796] ret_from_fork+0x6d/0x90 [ 2405.256439][T12796] ret_from_fork_asm+0x1a/0x30 [ 2405.264601][T12796] [ 2405.267076][T12796] Uninit was created at: [ 2405.273373][T12796] ___kmalloc_large_node+0x22c/0x370 [ 2405.278915][T12796] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 2405.285652][T12796] __kmalloc_node_noprof+0xc96/0x1250 [ 2405.291495][T12796] __kvmalloc_node_noprof+0xc0/0x2d0 [ 2405.297080][T12796] __bch2_btree_node_mem_alloc+0x2be/0xa80 [ 2405.303508][T12796] bch2_fs_btree_cache_init+0x4f0/0xb60 [ 2405.309340][T12796] bch2_fs_open+0x4d84/0x5ba0 [ 2405.314526][T12796] bch2_fs_get_tree+0x98a/0x24e0 [ 2405.319812][T12796] vfs_get_tree+0xb1/0x5a0 [ 2405.324801][T12796] do_new_mount+0x71f/0x15e0 [ 2405.329714][T12796] path_mount+0x742/0x1f10 [ 2405.334684][T12796] __se_sys_mount+0x71f/0x800 [ 2405.339648][T12796] __ia32_sys_mount+0xe3/0x150 [ 2405.344945][T12796] ia32_sys_call+0x260e/0x4180 [ 2405.355359][T12796] __do_fast_syscall_32+0xb0/0x110 [ 2405.362585][T12796] do_fast_syscall_32+0x38/0x80 [ 2405.367718][T12796] do_SYSENTER_32+0x1f/0x30 [ 2405.372657][T12796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2405.379330][T12796] [ 2405.382129][T12796] CPU: 0 UID: 0 PID: 12796 Comm: kworker/u8:2 Not tainted 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 2405.393470][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2405.405946][T12796] Workqueue: btree_update btree_interior_update_work [ 2405.413119][T12796] ===================================================== [ 2405.420428][T12796] Disabling lock debugging due to kernel taint [ 2405.426754][T12796] Kernel panic - not syncing: kmsan.panic set ... [ 2405.433374][T12796] CPU: 0 UID: 0 PID: 12796 Comm: kworker/u8:2 Tainted: G B 6.14.0-rc6-syzkaller-00244-g31d7109a19f6 #0 [ 2405.446073][T12796] Tainted: [B]=BAD_PAGE [ 2405.450371][T12796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2405.460647][T12796] Workqueue: btree_update btree_interior_update_work [ 2405.467661][T12796] Call Trace: [ 2405.471206][T12796] [ 2405.474573][T12796] dump_stack_lvl+0x216/0x2d0 [ 2405.479486][T12796] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2405.485603][T12796] dump_stack+0x1e/0x24 [ 2405.489987][T12796] panic+0x4e2/0xcf0 [ 2405.494162][T12796] ? kmsan_get_metadata+0x51/0x1c0 [ 2405.499568][T12796] kmsan_report+0x2c7/0x2d0 [ 2405.504341][T12796] ? __msan_memcpy+0x108/0x1c0 [ 2405.509383][T12796] ? btree_interior_update_work+0x3eac/0x4830 [ 2405.515750][T12796] ? ret_from_fork+0x6d/0x90 [ 2405.520602][T12796] ? ret_from_fork_asm+0x1a/0x30 [ 2405.525801][T12796] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 2405.532158][T12796] ? __msan_warning+0x95/0x120 [ 2405.537171][T12796] ? bch2_alloc_v4_validate+0x73f/0x1c10 [ 2405.543045][T12796] ? bch2_bkey_val_validate+0x357/0x530 [ 2405.548839][T12796] ? validate_bset_keys+0x2048/0x22b0 [ 2405.554462][T12796] ? validate_bset_for_write+0x2b3/0x410 [ 2405.560349][T12796] ? __bch2_btree_node_write+0x5436/0x6870 [ 2405.566414][T12796] ? bch2_btree_node_write_trans+0xd7/0x890 [ 2405.572560][T12796] ? btree_interior_update_work+0x3eac/0x4830 [ 2405.578918][T12796] ? process_scheduled_works+0xc1a/0x1e80 [ 2405.584945][T12796] ? worker_thread+0xea7/0x14f0 [ 2405.590028][T12796] ? kthread+0x6b9/0xef0 [ 2405.594513][T12796] ? ret_from_fork+0x6d/0x90 [ 2405.599353][T12796] ? ret_from_fork_asm+0x1a/0x30 [ 2405.604554][T12796] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2405.610721][T12796] ? kmsan_get_metadata+0x13e/0x1c0 [ 2405.616381][T12796] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2405.623000][T12796] ? kmsan_get_metadata+0x13e/0x1c0 [ 2405.628481][T12796] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2405.634589][T12796] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 2405.640723][T12796] ? kmsan_get_metadata+0x13e/0x1c0 [ 2405.646248][T12796] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 2405.652853][T12796] ? kmsan_get_metadata+0x13e/0x1c0 [ 2405.658330][T12796] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2405.664451][T12796] __msan_warning+0x95/0x120 [ 2405.669286][T12796] bch2_alloc_v4_validate+0x73f/0x1c10 [ 2405.674999][T12796] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 2405.681615][T12796] ? kmsan_get_shadow_origin_ptr+0x11/0xb0 [ 2405.687735][T12796] ? __pfx_bch2_alloc_v4_validate+0x10/0x10 [ 2405.693875][T12796] bch2_bkey_val_validate+0x357/0x530 [ 2405.699521][T12796] validate_bset_keys+0x2048/0x22b0 [ 2405.705042][T12796] validate_bset_for_write+0x2b3/0x410 [ 2405.710777][T12796] __bch2_btree_node_write+0x5436/0x6870 [ 2405.716666][T12796] ? kmsan_get_metadata+0x13e/0x1c0 [ 2405.722146][T12796] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2405.728235][T12796] ? kmsan_get_metadata+0x13e/0x1c0 [ 2405.733708][T12796] ? kmsan_get_metadata+0x13e/0x1c0 [ 2405.739247][T12796] bch2_btree_node_write_trans+0xd7/0x890 [ 2405.745243][T12796] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2405.751344][T12796] btree_interior_update_work+0x3eac/0x4830 [ 2405.757578][T12796] ? btree_interior_update_work+0x3c6f/0x4830 [ 2405.763949][T12796] ? __pfx_btree_interior_update_work+0x10/0x10 [ 2405.770488][T12796] process_scheduled_works+0xc1a/0x1e80 [ 2405.776381][T12796] worker_thread+0xea7/0x14f0 [ 2405.781297][T12796] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2405.787421][T12796] kthread+0x6b9/0xef0 [ 2405.791736][T12796] ? __pfx_worker_thread+0x10/0x10 [ 2405.797160][T12796] ? __pfx_kthread+0x10/0x10 [ 2405.801989][T12796] ret_from_fork+0x6d/0x90 [ 2405.806674][T12796] ? __pfx_kthread+0x10/0x10 [ 2405.811507][T12796] ret_from_fork_asm+0x1a/0x30 [ 2405.816502][T12796] [ 2405.820073][T12796] Kernel Offset: disabled [ 2405.824518][T12796] Rebooting in 86400 seconds..