last executing test programs: 2m28.457262138s ago: executing program 1 (id=564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff020000000000000000000000000001890090780000000020410000000000000000000000000001fe800000000000000000000000000038220560aeb59d3fb13258c6f29dd7eed9c5aaa04a18f74d2a890000000000000000001c000000000000"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/252], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2m21.018316271s ago: executing program 1 (id=577): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x3) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040e05027a0c"], 0x7) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 2m20.043415879s ago: executing program 1 (id=581): socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="140100001f00011f00fd8db125bb284401"], 0x114}], 0x1}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xc0) writev(0xffffffffffffffff, 0x0, 0x0) 2m19.082786881s ago: executing program 1 (id=582): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 2m19.081832281s ago: executing program 1 (id=583): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) 2m18.128647286s ago: executing program 1 (id=585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 2m2.342847374s ago: executing program 32 (id=585): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0xffffff6a) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 13.863597119s ago: executing program 3 (id=834): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 13.60542271s ago: executing program 3 (id=835): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = memfd_create(0x0, 0x3) ftruncate(r2, 0xffff) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000000c0)={r2, 0x1, 0x10000}) syz_io_uring_submit(0x0, 0x0, 0x0) epoll_create(0x7fffffff) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @loopback, @empty}}}}) 13.411614013s ago: executing program 5 (id=838): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xe4010000, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) syz_open_procfs(r1, &(0x7f00000021c0)='net/vlan/vlan0\x00') r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='stack :'], 0x564) 11.493544207s ago: executing program 5 (id=840): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x10f0c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC], 0x54}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.480336822s ago: executing program 4 (id=841): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) 10.446067693s ago: executing program 2 (id=843): io_submit(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x140c0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 10.210624905s ago: executing program 4 (id=844): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x7, 0xfffffdfd, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x0, 0x2, {0x4, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.215818074s ago: executing program 2 (id=846): ftruncate(0xffffffffffffffff, 0xcf2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000080) 8.998548141s ago: executing program 0 (id=847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) fsopen(0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="796100000000000000007e000000c13793b662e1b12b940a3bd19e5f9bd47e3f7f600e7406a5129bb288f78573610564130ca7a8e45dd686f4014dcd42a656f07e91858fd92337541a37b8f1c9fa300b5539261cf90e85bf7592"], 0x14}}, 0x4000054) 8.996574797s ago: executing program 5 (id=848): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000046842, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeeb, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x35314241, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x7}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {}, {0x0, 0x1}], 0x0, 0x0, 0x7}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[0x0]) 8.857882708s ago: executing program 2 (id=849): fcntl$notify(0xffffffffffffffff, 0x402, 0x33) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x1, 0x50f, &(0x7f0000000140)="$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") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x1, 0x35a, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = dup(0xffffffffffffffff) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) 7.871849303s ago: executing program 5 (id=850): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xe4010000, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f941a3c92b", 0x14}], 0x1}, 0x0) syz_open_procfs(r1, &(0x7f00000021c0)='net/vlan/vlan0\x00') r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='stack :'], 0x564) 7.266834905s ago: executing program 0 (id=851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d4"], 0xd0060) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) shmctl$IPC_RMID(0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 6.271464358s ago: executing program 5 (id=852): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000040)='./file1\x00', 0x2000c12, &(0x7f0000000240)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@utf8}, {@map_normal}, {@nocompress}, {@check_relaxed}, {@check_strict}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@mode={'mode', 0x3d, 0x7}}, {@overriderock}, {@overriderock}, {@session={'session', 0x3d, 0x4f}}, {@cruft}, {@unhide}, {@overriderock}]}, 0x1, 0x9fd, &(0x7f0000000740)="$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") llistxattr(&(0x7f0000000340)='./file1\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x2982, 0x0) read(r0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000000080)={0xe000003, 0xf, &(0x7f0000000580)=[0x2, 0x5, 0xf, 0xffff, 0x0, 0x1ed, 0x2, 0x3, 0xbf, 0x80, 0x3, 0x81, 0xfffffff7, 0x1, 0xa1b], 0x0, 0x3}) socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[], 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x94) 6.204966841s ago: executing program 3 (id=853): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) io_submit(0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200047ee, 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x73) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$sock(r1, &(0x7f0000001740)=[{{&(0x7f0000000140)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000)) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010700ec13b2106d04d308280b01020301090229000100000000"], 0x0) 6.15932946s ago: executing program 4 (id=854): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[], 0x88}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.095868662s ago: executing program 0 (id=855): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645", 0x11, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) sendto$inet6(r3, &(0x7f0000003380)="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", 0xfef, 0x22000040, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 4.8529116s ago: executing program 0 (id=856): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x100000, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0x3, @vbi={0x8, 0x7f, 0x2, 0x32314742, [0x76, 0x6], [0x3, 0x2c8f], 0x2}}) 4.735332043s ago: executing program 5 (id=857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000003c0)=""/73, &(0x7f0000000300)=0x49) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, r5, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48881}, 0x40) chdir(&(0x7f0000000000)='./file0\x00') 3.974356046s ago: executing program 4 (id=858): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) recvmsg(0xffffffffffffffff, &(0x7f00000024c0)={&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000002400)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/47, 0x2f}], 0x4, &(0x7f0000002440)=""/96, 0x60}, 0x10021) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x54, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}]}, 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0xc, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000040000000000000000000085100000010000009500000000200000850000f02b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xa}, 0x94) 3.689227218s ago: executing program 0 (id=859): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000300)=0x6a1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ioctl$FS_IOC_GETVERSION(r2, 0x80087601, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000001240)) 2.975525768s ago: executing program 4 (id=860): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000500)={0x3, @vbi={0x8, 0x7f, 0x2, 0x32314742, [0x76, 0x6], [0x3, 0x2c8f], 0x2}}) 2.760654912s ago: executing program 2 (id=861): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0904000000000000000002"], 0xc4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x8054) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[], 0x58}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)=ANY=[], 0x384}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) timer_create(0x1, &(0x7f0000000640)={0x0, 0x40, 0x2}, &(0x7f00000006c0)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.695173439s ago: executing program 3 (id=862): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) r4 = syz_open_procfs(r1, &(0x7f00000021c0)='net/vlan/vlan0\x00') read$FUSE(r4, &(0x7f0000000140)={0x2020}, 0x2020) r5 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='stack :'], 0x564) 1.682325808s ago: executing program 3 (id=863): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.473950194s ago: executing program 4 (id=864): timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=@ng={0x4, 0x12}, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x20010, r0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x2) mknod(&(0x7f0000000180)='./file0\x00', 0x20, 0x3) r4 = syz_io_uring_setup(0x4e1e, &(0x7f0000000240)={0x0, 0xa34e, 0x400, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x2000000, 0x2, 0x0, 0x0) 1.407801731s ago: executing program 2 (id=865): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x3, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f202", 0x87, 0x800, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r3, 0x0) 390.215641ms ago: executing program 0 (id=866): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) read(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xfffff) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8000) socket(0x200000000000011, 0x4, 0xfffffffd) 264.502673ms ago: executing program 3 (id=867): syz_mount_image$ext4(&(0x7f0000002180)='ext3\x00', &(0x7f0000000340)='./file0\x00', 0x1008802, &(0x7f0000000240), 0x9, 0x606, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0xff, 0x3}}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x2, {0x0, 0xff, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 0s ago: executing program 2 (id=868): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) close(r0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file0\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x81c0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.130' (ED25519) to the list of known hosts. [ 73.182464][ T5852] cgroup: Unknown subsys name 'net' [ 73.352051][ T5852] cgroup: Unknown subsys name 'cpuset' [ 73.360714][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.720144][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.146730][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.155537][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.168336][ T5873] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.176630][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.184400][ T5873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.192036][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.201372][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.201456][ T5873] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.209483][ T5873] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.217749][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.224559][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.230430][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.238892][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.245105][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.252366][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.265730][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.279829][ T5873] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.286989][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.312826][ T5879] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.321216][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.333923][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.334230][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.368769][ T5866] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.376846][ T5866] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.385176][ T5866] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.846383][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 77.915369][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 78.154417][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 78.185786][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.193180][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.201290][ T5865] bridge_slave_0: entered allmulticast mode [ 78.208363][ T5865] bridge_slave_0: entered promiscuous mode [ 78.227909][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.235430][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.243314][ T5872] bridge_slave_0: entered allmulticast mode [ 78.251437][ T5872] bridge_slave_0: entered promiscuous mode [ 78.280831][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.288129][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.295780][ T5865] bridge_slave_1: entered allmulticast mode [ 78.304284][ T5865] bridge_slave_1: entered promiscuous mode [ 78.351881][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.359324][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.366620][ T5872] bridge_slave_1: entered allmulticast mode [ 78.375297][ T5872] bridge_slave_1: entered promiscuous mode [ 78.402594][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.421071][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.459759][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 78.471789][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 78.496108][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.547131][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.598458][ T5865] team0: Port device team_slave_0 added [ 78.607012][ T5865] team0: Port device team_slave_1 added [ 78.668229][ T5872] team0: Port device team_slave_0 added [ 78.708068][ T5872] team0: Port device team_slave_1 added [ 78.714214][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.721833][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.729359][ T5880] bridge_slave_0: entered allmulticast mode [ 78.736712][ T5880] bridge_slave_0: entered promiscuous mode [ 78.754513][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.761775][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.787819][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.825431][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.833160][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.840764][ T5880] bridge_slave_1: entered allmulticast mode [ 78.847779][ T5880] bridge_slave_1: entered promiscuous mode [ 78.876773][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.883855][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.909919][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.922319][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.929335][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.955321][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.003836][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.011172][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.038390][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.072735][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.079995][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.087148][ T5868] bridge_slave_0: entered allmulticast mode [ 79.094613][ T5868] bridge_slave_0: entered promiscuous mode [ 79.103635][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.110936][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.119189][ T5868] bridge_slave_1: entered allmulticast mode [ 79.126191][ T5868] bridge_slave_1: entered promiscuous mode [ 79.157050][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.166356][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.173856][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.181192][ T5862] bridge_slave_0: entered allmulticast mode [ 79.188205][ T5862] bridge_slave_0: entered promiscuous mode [ 79.196258][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.203841][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.211272][ T5862] bridge_slave_1: entered allmulticast mode [ 79.218266][ T5862] bridge_slave_1: entered promiscuous mode [ 79.254111][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.313437][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.339539][ T5871] Bluetooth: hci3: command tx timeout [ 79.339543][ T5866] Bluetooth: hci1: command tx timeout [ 79.354161][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.369517][ T5865] hsr_slave_0: entered promiscuous mode [ 79.376016][ T5865] hsr_slave_1: entered promiscuous mode [ 79.386516][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.412123][ T5880] team0: Port device team_slave_0 added [ 79.418813][ T5866] Bluetooth: hci4: command tx timeout [ 79.419006][ T5871] Bluetooth: hci0: command tx timeout [ 79.424626][ T5184] Bluetooth: hci2: command tx timeout [ 79.445512][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.482683][ T5880] team0: Port device team_slave_1 added [ 79.490595][ T5868] team0: Port device team_slave_0 added [ 79.502034][ T5872] hsr_slave_0: entered promiscuous mode [ 79.508417][ T5872] hsr_slave_1: entered promiscuous mode [ 79.515407][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 79.521626][ T5872] Cannot create hsr debugfs directory [ 79.556796][ T5868] team0: Port device team_slave_1 added [ 79.599695][ T5862] team0: Port device team_slave_0 added [ 79.632215][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.639214][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.665818][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.689407][ T5862] team0: Port device team_slave_1 added [ 79.712900][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.720256][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.746620][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.775340][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.782390][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.808487][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.821849][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.828866][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.855589][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.952860][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.960246][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.987127][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.000370][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.007317][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.033617][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.152027][ T5880] hsr_slave_0: entered promiscuous mode [ 80.158376][ T5880] hsr_slave_1: entered promiscuous mode [ 80.165019][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 80.171634][ T5880] Cannot create hsr debugfs directory [ 80.219489][ T5862] hsr_slave_0: entered promiscuous mode [ 80.226263][ T5862] hsr_slave_1: entered promiscuous mode [ 80.233328][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 80.239258][ T5862] Cannot create hsr debugfs directory [ 80.260586][ T5868] hsr_slave_0: entered promiscuous mode [ 80.266908][ T5868] hsr_slave_1: entered promiscuous mode [ 80.273456][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 80.279235][ T5868] Cannot create hsr debugfs directory [ 80.552370][ T5872] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.565580][ T5872] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.617073][ T5872] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.667150][ T5872] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.758538][ T5865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.795648][ T5865] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.811998][ T5865] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.822605][ T5865] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.900615][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.911238][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.922757][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.962059][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.030314][ T5880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.040986][ T5880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.051967][ T5880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.067187][ T5880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.184149][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.210684][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.221562][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.235335][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.323369][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.385438][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.404460][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.419008][ T5866] Bluetooth: hci3: command tx timeout [ 81.424842][ T5184] Bluetooth: hci1: command tx timeout [ 81.442946][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.450265][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.487127][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.497963][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.505254][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.509902][ T5184] Bluetooth: hci0: command tx timeout [ 81.514934][ T5866] Bluetooth: hci2: command tx timeout [ 81.519272][ T5871] Bluetooth: hci4: command tx timeout [ 81.535229][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.550488][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.557620][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.596906][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.612367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.619596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.660374][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.705238][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.725579][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.748483][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.755712][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.810411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.817660][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.837106][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.844385][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.884468][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.892126][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.948278][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.026485][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.033698][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.171042][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.178304][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.384554][ T5868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.516651][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.545173][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.724641][ T5865] veth0_vlan: entered promiscuous mode [ 82.771291][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.784487][ T5872] veth0_vlan: entered promiscuous mode [ 82.803598][ T5872] veth1_vlan: entered promiscuous mode [ 82.819852][ T5865] veth1_vlan: entered promiscuous mode [ 82.828522][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.881969][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.960701][ T5872] veth0_macvtap: entered promiscuous mode [ 82.972719][ T5865] veth0_macvtap: entered promiscuous mode [ 82.993946][ T5872] veth1_macvtap: entered promiscuous mode [ 83.044863][ T5862] veth0_vlan: entered promiscuous mode [ 83.052140][ T5865] veth1_macvtap: entered promiscuous mode [ 83.104796][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.137757][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.159560][ T5862] veth1_vlan: entered promiscuous mode [ 83.167418][ T5868] veth0_vlan: entered promiscuous mode [ 83.191647][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.213380][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.241631][ T5868] veth1_vlan: entered promiscuous mode [ 83.255929][ T1005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.277083][ T1005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.286183][ T1005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.306467][ T1005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.340410][ T1005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.363251][ T1005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.372718][ T1005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.409833][ T1005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.435500][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.444752][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.483049][ T5862] veth0_macvtap: entered promiscuous mode [ 83.501744][ T5871] Bluetooth: hci1: command tx timeout [ 83.501753][ T5184] Bluetooth: hci3: command tx timeout [ 83.523483][ T5862] veth1_macvtap: entered promiscuous mode [ 83.534242][ T5880] veth0_vlan: entered promiscuous mode [ 83.561145][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.574355][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.584749][ T5871] Bluetooth: hci2: command tx timeout [ 83.589928][ T5184] Bluetooth: hci4: command tx timeout [ 83.590515][ T5866] Bluetooth: hci0: command tx timeout [ 83.597963][ T5880] veth1_vlan: entered promiscuous mode [ 83.631398][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.634375][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.639388][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.672090][ T5868] veth0_macvtap: entered promiscuous mode [ 83.699097][ T5868] veth1_macvtap: entered promiscuous mode [ 83.719033][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.750518][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.798894][ T1005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.817360][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.848800][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.855418][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.864930][ T1005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.875669][ T1005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.900527][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.926155][ T5984] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.948147][ T5984] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 83.953868][ T1005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.968346][ T5880] veth0_macvtap: entered promiscuous mode [ 84.002364][ T5880] veth1_macvtap: entered promiscuous mode [ 84.034997][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.053744][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.076488][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.086126][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.145909][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.157863][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.166934][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.257639][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.374989][ T3605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.453040][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.453265][ T3605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.481614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.548795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.756628][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.771424][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.853954][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.119108][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.638944][ T5866] Bluetooth: hci3: command tx timeout [ 85.644984][ T5866] Bluetooth: hci1: command tx timeout [ 85.659041][ T5866] Bluetooth: hci0: command tx timeout [ 85.661364][ T5871] Bluetooth: hci2: command tx timeout [ 85.664603][ T5184] Bluetooth: hci4: command tx timeout [ 85.670394][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.907256][ T5991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.937665][ T5991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.120459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.129287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.137557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.332711][ T6012] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.355894][ T1344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.950402][ T1557] cfg80211: failed to load regulatory.db [ 86.967884][ T1344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.041774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.420903][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.429015][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.438044][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.739311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.804502][ T6034] loop2: detected capacity change from 0 to 1024 [ 89.069105][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.078560][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.021613][ T5991] hfsplus: b-tree write err: -5, ino 4 [ 91.467552][ T6058] loop2: detected capacity change from 0 to 2048 [ 92.227110][ T6058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.286736][ T5862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.552125][ T6094] loop4: detected capacity change from 0 to 128 [ 94.654918][ T6094] EXT4-fs warning (device loop4): ext4_init_metadata_csum:4633: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 94.737294][ T6094] EXT4-fs (loop4): Encoding requested by superblock is unknown [ 96.715374][ T6112] loop4: detected capacity change from 0 to 1024 [ 99.507766][ T6107] hfsplus: b-tree write err: -5, ino 4 [ 99.600985][ T6136] o2cb: This node has not been configured. [ 99.607048][ T6136] o2cb: Cluster check failed. Fix errors before retrying. [ 99.615115][ T6136] (syz.3.29,6136,1):user_dlm_register:674 ERROR: status = -22 [ 99.622735][ T6136] (syz.3.29,6136,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 101.117026][ T6145] loop4: detected capacity change from 0 to 2048 [ 101.692355][ T6145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.075092][ T5880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.095973][ T6166] loop3: detected capacity change from 0 to 512 [ 103.291748][ T6172] loop0: detected capacity change from 0 to 64 [ 103.295970][ T6166] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.36: casefold flag without casefold feature [ 103.299301][ T6172] ======================================================= [ 103.299301][ T6172] WARNING: The mand mount option has been deprecated and [ 103.299301][ T6172] and is ignored by this kernel. Remove the mand [ 103.299301][ T6172] option from the mount to silence this warning. [ 103.299301][ T6172] ======================================================= [ 103.345457][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.366657][ T6176] netlink: 256 bytes leftover after parsing attributes in process `syz.1.40'. [ 103.414604][ T6166] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.36: couldn't read orphan inode 15 (err -117) [ 103.469218][ T6166] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.781844][ T6182] netlink: 40 bytes leftover after parsing attributes in process `syz.3.36'. [ 104.292390][ T5872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.624110][ T6186] loop4: detected capacity change from 0 to 256 [ 104.782017][ T6186] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.613741][ T6186] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 105.749395][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.0.39'. [ 105.805467][ T6186] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.983478][ T6222] netlink: 256 bytes leftover after parsing attributes in process `syz.4.49'. [ 108.166693][ T6225] netlink: 56 bytes leftover after parsing attributes in process `syz.3.48'. [ 112.632429][ T6260] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.286476][ T6323] loop1: detected capacity change from 0 to 256 [ 118.576557][ T6323] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.591590][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.4.70'. [ 118.860325][ T6323] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 118.940891][ T6323] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 118.953642][ T6323] exFAT-fs (loop1): failed to load alloc-bitmap [ 118.963770][ T6323] exFAT-fs (loop1): failed to recognize exfat type [ 120.846740][ T6338] tipc: Started in network mode [ 120.879493][ T6338] tipc: Node identity 3e2febc857dc, cluster identity 4711 [ 120.938087][ T6338] tipc: Enabled bearer , priority 0 [ 121.005763][ T6340] syzkaller0: entered promiscuous mode [ 121.081243][ T6340] syzkaller0: entered allmulticast mode [ 121.274559][ T6338] tipc: Resetting bearer [ 121.303627][ T6336] tipc: Resetting bearer [ 121.621628][ T6336] tipc: Disabling bearer [ 122.169584][ T5870] tipc: Node number set to 1777593288 [ 125.929989][ T6390] netlink: 256 bytes leftover after parsing attributes in process `syz.0.84'. [ 127.895883][ T6414] netlink: 'syz.1.88': attribute type 21 has an invalid length. [ 127.905287][ T6414] netlink: 128 bytes leftover after parsing attributes in process `syz.1.88'. [ 127.915202][ T6414] netlink: 'syz.1.88': attribute type 5 has an invalid length. [ 127.922860][ T6414] netlink: 'syz.1.88': attribute type 6 has an invalid length. [ 127.930759][ T6414] netlink: 3 bytes leftover after parsing attributes in process `syz.1.88'. [ 129.562767][ T6430] loop2: detected capacity change from 0 to 512 [ 130.220227][ T6430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.315232][ T6430] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.539757][ T6451] netlink: 'syz.2.94': attribute type 29 has an invalid length. [ 130.592840][ T6451] netlink: 'syz.2.94': attribute type 29 has an invalid length. [ 131.190927][ T5862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.895694][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907705][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.844372][ T6497] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 138.390600][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.108'. [ 138.412807][ T6521] bridge_slave_1: left allmulticast mode [ 138.535161][ T6523] Zero length message leads to an empty skb [ 138.664026][ T6521] bridge_slave_1: left promiscuous mode [ 138.905369][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.992667][ T6521] bridge_slave_0: left allmulticast mode [ 139.021413][ T6521] bridge_slave_0: left promiscuous mode [ 139.094329][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.976359][ T6530] loop1: detected capacity change from 0 to 2048 [ 140.237177][ T6530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.189045][ T5938] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 143.522725][ T5938] usb 2-1: config 0 has no interfaces? [ 143.568699][ T5938] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 143.782678][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.908469][ T5938] usb 2-1: config 0 descriptor?? [ 145.174413][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.262767][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.771064][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.979310][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.043102][ T48] usb 2-1: USB disconnect, device number 2 [ 147.142878][ T6580] loop0: detected capacity change from 0 to 4096 [ 147.965813][ T6580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.195745][ T5868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.278814][ T6601] vivid-000: kernel_thread() failed [ 151.173603][ T6617] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 151.909080][ T6624] loop3: detected capacity change from 0 to 128 [ 151.978204][ T6624] vxfs: WRONG superblock magic 7b3185b5 at 1 [ 151.985246][ T6624] vxfs: WRONG superblock magic 7b318cb5 at 8 [ 151.991353][ T6624] vxfs: can't find superblock. [ 155.183275][ T6652] lo speed is unknown, defaulting to 1000 [ 155.190030][ T6652] lo speed is unknown, defaulting to 1000 [ 155.207909][ T6652] lo speed is unknown, defaulting to 1000 [ 155.242420][ T6652] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.294932][ T6652] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.471622][ T6652] lo speed is unknown, defaulting to 1000 [ 155.488344][ T6652] lo speed is unknown, defaulting to 1000 [ 155.504827][ T6652] lo speed is unknown, defaulting to 1000 [ 155.521590][ T6652] lo speed is unknown, defaulting to 1000 [ 155.538538][ T6652] lo speed is unknown, defaulting to 1000 [ 157.222075][ T6670] netem: change failed [ 158.315509][ T6675] capability: warning: `syz.1.148' uses deprecated v2 capabilities in a way that may be insecure [ 158.491089][ T6680] process 'syz.1.148' launched './file1' with NULL argv: empty string added [ 159.928751][ T5929] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.066551][ T5929] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 161.076011][ T5929] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 161.088546][ T5929] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.048764][ T5929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 162.078733][ T5929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 162.207551][ T30] audit: type=1800 audit(1758653802.569:2): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.4.156" name="/newroot/32" dev="tmpfs" ino=180 res=0 errno=0 [ 162.255766][ T6705] tipc: Failed to remove unknown binding: 66,1,1/0:2865015912/2865015914 [ 162.566445][ T5929] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.585870][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.572294][ T5929] usb 4-1: can't set config #1, error -71 [ 164.591437][ T5929] usb 4-1: USB disconnect, device number 2 [ 167.417633][ T5975] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 167.790414][ T5975] usb 3-1: config 5 has an invalid interface number: 3 but max is 0 [ 167.800766][ T5975] usb 3-1: config 5 has no interface number 0 [ 167.812484][ T5975] usb 3-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=fd.36 [ 167.830928][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.861940][ T5975] usb 3-1: Product: syz [ 167.868586][ T5975] usb 3-1: Manufacturer: syz [ 167.896762][ T5975] usb 3-1: SerialNumber: syz [ 167.970455][ T5975] ftdi_sio 3-1:5.3: FTDI USB Serial Device converter detected [ 167.990451][ T5975] ftdi_sio ttyUSB0: unknown device type: 0xfd36 [ 168.239054][ T5975] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 168.250650][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.165'. [ 168.292153][ T6747] team_slave_0: entered promiscuous mode [ 168.298046][ T6747] team_slave_1: entered promiscuous mode [ 168.340465][ T6747] macvtap1: entered promiscuous mode [ 168.362857][ T6747] team0: entered promiscuous mode [ 168.394530][ T6747] macvtap1: entered allmulticast mode [ 168.415739][ T6747] team0: entered allmulticast mode [ 168.419662][ T5975] usb 2-1: Using ep0 maxpacket: 16 [ 168.420959][ T6747] team_slave_0: entered allmulticast mode [ 168.454379][ T6747] team_slave_1: entered allmulticast mode [ 168.454851][ T5975] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 168.471206][ T6747] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 168.478812][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.498791][ T6763] team0: left allmulticast mode [ 168.511292][ T5975] usb 2-1: Product: syz [ 168.520665][ T5975] usb 2-1: Manufacturer: syz [ 168.525368][ T6763] team_slave_0: left allmulticast mode [ 168.531696][ T5975] usb 2-1: SerialNumber: syz [ 168.553518][ T5975] r8152-cfgselector 2-1: Unknown version 0x0000 [ 168.560143][ T5975] r8152-cfgselector 2-1: config 0 descriptor?? [ 168.694826][ T6763] team_slave_1: left allmulticast mode [ 168.720946][ T6763] team0: left promiscuous mode [ 168.728795][ T6763] team_slave_0: left promiscuous mode [ 168.735208][ T6763] team_slave_1: left promiscuous mode [ 168.807830][ T5929] usb 3-1: USB disconnect, device number 2 [ 168.817652][ T5929] ftdi_sio 3-1:5.3: device disconnected [ 171.529747][ T5975] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 171.614113][ T30] audit: type=1326 audit(1758653811.999:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 171.722480][ T30] audit: type=1326 audit(1758653812.029:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 171.759925][ T6781] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 171.766666][ T6781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 171.922499][ T30] audit: type=1326 audit(1758653812.049:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 172.042323][ T6781] vhci_hcd vhci_hcd.0: Device attached [ 172.109530][ T6787] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 172.137946][ T30] audit: type=1326 audit(1758653812.049:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 172.160580][ T30] audit: type=1326 audit(1758653812.049:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 172.182653][ T30] audit: type=1326 audit(1758653812.049:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 172.204826][ T30] audit: type=1326 audit(1758653812.049:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 172.309239][ T6797] netlink: 64 bytes leftover after parsing attributes in process `syz.4.177'. [ 172.797845][ T24] vhci_hcd: vhci_device speed not set [ 172.927127][ T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 173.288448][ T6785] vhci_hcd: connection closed [ 173.290108][ T6786] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 173.328777][ T30] audit: type=1326 audit(1758653812.049:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 173.351021][ C1] vkms_vblank_simulate: vblank timer overrun [ 173.687240][ T49] vhci_hcd: stop threads [ 173.701980][ T49] vhci_hcd: release socket [ 173.707653][ T49] vhci_hcd: disconnect device [ 173.794481][ T30] audit: type=1326 audit(1758653812.069:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 173.816412][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.532464][ T30] audit: type=1326 audit(1758653812.069:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6779 comm="syz.2.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f0b58eec9 code=0x7ffc0000 [ 176.683400][ T6819] loop4: detected capacity change from 0 to 1024 [ 178.106207][ T6819] hfsplus: failed to load catalog file [ 179.988802][ T24] vhci_hcd: vhci_device speed not set [ 182.591635][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 183.056256][ T6851] loop2: detected capacity change from 0 to 1024 [ 183.952361][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 183.952378][ T30] audit: type=1800 audit(1758653824.339:19): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.193" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 183.989697][ T30] audit: type=1800 audit(1758653824.359:20): pid=6851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.193" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 184.349938][ T30] audit: type=1804 audit(1758653824.639:21): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.193" name="/newroot/35/file1/file1" dev="loop2" ino=20 res=1 errno=0 [ 186.347972][ T30] audit: type=1800 audit(1758653826.719:22): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.193" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 187.074065][ T6883] netlink: 'syz.0.200': attribute type 8 has an invalid length. [ 189.178477][ T6904] loop1: detected capacity change from 0 to 128 [ 189.266038][ T6904] EXT4-fs (loop1): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 189.315427][ T5863] udevd[5863]: incorrect ext4 checksum on /dev/loop1 [ 190.492240][ T6917] loop3: detected capacity change from 0 to 128 [ 190.499861][ T6917] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 194.451652][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.475694][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.800727][ T5184] Bluetooth: hci0: unexpected event 0x2f length: 763 > 260 [ 195.882947][ T6958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.999763][ T6965] befs: (nullb0): No write support. Marking filesystem read-only [ 196.010782][ T6965] befs: (nullb0): invalid magic header [ 201.509115][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 201.518513][ T5873] Bluetooth: hci0: command 0x0406 tx timeout [ 201.521195][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 201.536904][ T5876] Bluetooth: hci4: command 0x0406 tx timeout [ 201.543145][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 202.945310][ T7024] siw: device registration error -23 [ 203.604528][ T7015] input: syz0 as /devices/virtual/input/input5 [ 205.865343][ T5871] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 206.439442][ T7048] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 207.274825][ T7052] loop0: detected capacity change from 0 to 64 [ 208.095525][ T7066] siw: device registration error -23 [ 209.908091][ T7076] raw_sendmsg: syz.3.247 forgot to set AF_INET. Fix it! [ 210.432268][ T5938] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 211.523431][ T5938] usb 4-1: Using ep0 maxpacket: 16 [ 211.561873][ T5938] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.578740][ T5938] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 212.389562][ T5938] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 212.445862][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.480210][ T5938] usb 4-1: Product: syz [ 212.498683][ T5938] usb 4-1: Manufacturer: syz [ 212.526868][ T5938] usb 4-1: SerialNumber: syz [ 212.550053][ T5938] usb 4-1: config 0 descriptor?? [ 212.982050][ T5870] hid (null): global environment stack underflow [ 213.136668][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 213.439857][ T5870] hid (null): invalid report_count 458457392 [ 213.445910][ T5870] hid (null): report_id 0 is invalid [ 213.462659][ T5870] hid (null): unknown global tag 0xc [ 213.478110][ T5870] hid (null): unknown global tag 0xd [ 213.499490][ T5938] usb 4-1: USB disconnect, device number 3 [ 213.527773][ T5870] hid (null): report_id 0 is invalid [ 213.559425][ T5870] hid (null): unknown global tag 0xd [ 213.586158][ T5870] hid-generic 0FFF:0007:0003.0001: global environment stack underflow [ 213.600935][ T5870] hid-generic 0FFF:0007:0003.0001: item 0 0 1 11 parsing failed [ 213.644819][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 213.645742][ T5870] hid-generic 0FFF:0007:0003.0001: probe with driver hid-generic failed with error -22 [ 214.153709][ T24] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 214.228739][ T24] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 214.242766][ T24] usb 2-1: Product: syz [ 214.246969][ T24] usb 2-1: Manufacturer: syz [ 214.251638][ T24] usb 2-1: SerialNumber: syz [ 214.263946][ T24] usb 2-1: config 0 descriptor?? [ 215.968942][ T24] usb 2-1: USB disconnect, device number 4 [ 216.164817][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.503485][ T7119] loop3: detected capacity change from 0 to 256 [ 216.707558][ T7119] FAT-fs (loop3): count of clusters too big (66845694) [ 216.719110][ T7119] FAT-fs (loop3): Can't find a valid FAT filesystem [ 218.248943][ T5871] Bluetooth: hci4: unexpected event for opcode 0x0c7a [ 219.069031][ T7145] netlink: 256 bytes leftover after parsing attributes in process `syz.2.264'. [ 223.041703][ T7155] loop2: detected capacity change from 0 to 32768 [ 223.164041][ T7177] loop3: detected capacity change from 0 to 8192 [ 223.343423][ T7182] tipc: Enabled bearer , priority 0 [ 223.379849][ T7182] syzkaller0: entered promiscuous mode [ 223.385356][ T7182] syzkaller0: entered allmulticast mode [ 223.478351][ T7182] tipc: Resetting bearer [ 224.057224][ T48] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 224.088323][ T7179] tipc: Resetting bearer [ 224.386353][ T7179] tipc: Disabling bearer [ 224.655157][ T48] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 224.692828][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.875972][ T48] usb 4-1: config 0 descriptor?? [ 225.733273][ T48] kaweth 4-1:0.0: Firmware present in device. [ 225.739885][ T48] kaweth 4-1:0.0: Error reading configuration (-71), no net device created [ 225.756880][ T48] kaweth 4-1:0.0: probe with driver kaweth failed with error -5 [ 225.972345][ T48] usb 4-1: USB disconnect, device number 4 [ 227.470207][ T5871] Bluetooth: hci0: unexpected event for opcode 0x0c7a [ 232.476230][ T7260] loop1: detected capacity change from 0 to 4096 [ 232.649789][ T7265] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 234.774888][ T7281] loop1: detected capacity change from 0 to 64 [ 234.856830][ T7281] hfs: unable to locate alternate MDB [ 234.895352][ T7281] hfs: continuing without an alternate MDB [ 234.958070][ T5871] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 237.923272][ T7296] loop2: detected capacity change from 0 to 512 [ 237.954701][ T7296] EXT4-fs: Ignoring removed orlov option [ 238.058838][ T7296] ext2: Unknown parameter 'obj_role' [ 238.607042][ T7307] netlink: 384 bytes leftover after parsing attributes in process `syz.2.303'. [ 238.618055][ T7307] netlink: 'syz.2.303': attribute type 2 has an invalid length. [ 239.818826][ T7301] mmap: syz.1.304 (7301) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 240.977544][ T7320] tipc: Started in network mode [ 241.592677][ T7320] tipc: Node identity 6aa02a367da3, cluster identity 4711 [ 241.600546][ T7320] tipc: Enabled bearer , priority 0 [ 241.607932][ T7317] syzkaller0: entered promiscuous mode [ 241.614106][ T7317] syzkaller0: entered allmulticast mode [ 242.166414][ T7332] loop3: detected capacity change from 0 to 1024 [ 242.810874][ T5870] tipc: Node number set to 386083382 [ 242.880483][ T7333] tipc: Resetting bearer [ 242.903040][ T30] audit: type=1800 audit(1758653883.289:23): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.312" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 242.948185][ T7316] tipc: Resetting bearer [ 242.996090][ T30] audit: type=1800 audit(1758653883.289:24): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.312" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 243.274022][ T7316] tipc: Disabling bearer [ 244.036885][ T30] audit: type=1804 audit(1758653884.419:25): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.312" name="/newroot/64/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 245.689222][ T7367] random: crng reseeded on system resumption [ 247.047626][ T7374] loop0: detected capacity change from 0 to 1024 [ 247.133609][ T30] audit: type=1800 audit(1758653887.519:26): pid=7374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.322" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 247.161077][ T7377] loop4: detected capacity change from 0 to 256 [ 247.340135][ T7377] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 247.352481][ T7377] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 247.378720][ T30] audit: type=1800 audit(1758653887.639:27): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.322" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 247.782502][ T30] audit: type=1804 audit(1758653888.169:28): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.322" name="/newroot/55/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 247.799063][ T7377] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 248.300896][ T7377] exFAT-fs (loop4): failed to load alloc-bitmap [ 248.309903][ T7377] exFAT-fs (loop4): failed to recognize exfat type [ 249.670751][ T7399] netlink: 'syz.1.326': attribute type 29 has an invalid length. [ 249.678563][ T7399] netlink: 'syz.1.326': attribute type 3 has an invalid length. [ 249.686368][ T7399] netlink: 76 bytes leftover after parsing attributes in process `syz.1.326'. [ 251.996655][ T7405] loop1: detected capacity change from 0 to 1024 [ 254.080891][ T7440] loop3: detected capacity change from 0 to 1024 [ 254.175340][ T30] audit: type=1800 audit(1758653894.559:29): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.337" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 254.280753][ T30] audit: type=1800 audit(1758653894.559:30): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.337" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 254.488424][ T30] audit: type=1804 audit(1758653894.689:31): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.337" name="/newroot/68/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 254.633261][ T7449] loop4: detected capacity change from 0 to 64 [ 254.656346][ T7449] hfs: creator requires a 4 character value [ 254.797401][ T7449] tipc: New replicast peer: 255.255.255.255 [ 254.807246][ T7449] tipc: Enabled bearer , priority 10 [ 254.865544][ T7449] loop4: detected capacity change from 0 to 512 [ 255.029436][ T7449] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 255.518983][ T7453] random: crng reseeded on system resumption [ 255.744614][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.751373][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.878902][ T5938] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 255.893434][ T7457] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 256.053307][ T7462] loop3: detected capacity change from 0 to 1024 [ 256.082930][ T7457] macvtap1: entered promiscuous mode [ 256.440968][ T7460] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 256.441046][ T7460] IPv6: NLM_F_CREATE should be set when creating new route [ 256.461941][ T7457] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 256.474086][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.516218][ T5938] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 256.569424][ T5938] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 256.580516][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.615173][ T5938] usb 3-1: config 0 descriptor?? [ 256.684599][ T5938] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 256.702592][ T5938] dvb-usb: bulk message failed: -22 (3/0) [ 257.797855][ T5938] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 257.849499][ T5938] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 257.856834][ T5938] usb 3-1: media controller created [ 258.080911][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.112149][ T5938] dvb-usb: bulk message failed: -22 (6/0) [ 258.122947][ T5938] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 258.676482][ T5938] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 258.694967][ T5938] dvb-usb: schedule remote query interval to 150 msecs. [ 258.702067][ T5938] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 258.860829][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 258.888351][ T5938] dvb-usb: error while querying for an remote control event. [ 259.711473][ T48] usb 3-1: USB disconnect, device number 3 [ 259.714921][ T5938] dvb-usb: bulk message failed: -22 (1/0) [ 259.727508][ T5938] dvb-usb: error while querying for an remote control event. [ 260.013560][ T48] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 261.638123][ T7509] loop1: detected capacity change from 0 to 8 [ 261.709034][ T7509] squashfs image failed sanity check [ 262.985747][ T7530] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 264.956114][ T5871] Bluetooth: hci0: unexpected event for opcode 0x041b [ 266.021327][ T7549] siw: device registration error -23 [ 269.573121][ T7580] loop2: detected capacity change from 0 to 64 [ 271.075166][ T7594] loop2: detected capacity change from 0 to 1024 [ 271.670374][ T30] audit: type=1800 audit(1758653912.059:32): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.376" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 271.692649][ T30] audit: type=1800 audit(1758653912.059:33): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.376" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 271.713056][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.641333][ T30] audit: type=1804 audit(1758653913.019:34): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.376" name="/newroot/75/file1/file1" dev="loop2" ino=20 res=1 errno=0 [ 272.662862][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.705281][ T7611] fuse: Unknown parameter '01777777777777777777777' [ 274.060391][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 274.083733][ T7628] team_slave_0: entered promiscuous mode [ 274.089448][ T7628] team_slave_1: entered promiscuous mode [ 274.095341][ T7628] macvtap1: entered promiscuous mode [ 274.117795][ T7628] team0: entered promiscuous mode [ 274.185964][ T7628] macvtap1: entered allmulticast mode [ 274.288950][ T7628] team0: entered allmulticast mode [ 274.312785][ T7628] team_slave_0: entered allmulticast mode [ 274.447000][ T7636] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 274.867943][ T7628] team_slave_1: entered allmulticast mode [ 274.891899][ T7628] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 275.070852][ T7630] team0: left allmulticast mode [ 275.076172][ T7630] team_slave_0: left allmulticast mode [ 275.424349][ T7630] team_slave_1: left allmulticast mode [ 275.430105][ T7630] team0: left promiscuous mode [ 275.440001][ T7630] team_slave_0: left promiscuous mode [ 275.445552][ T7630] team_slave_1: left promiscuous mode [ 278.137337][ T7656] loop4: detected capacity change from 0 to 1024 [ 278.781692][ T30] audit: type=1800 audit(1758653919.169:35): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.391" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 279.073478][ T30] audit: type=1800 audit(1758653919.429:36): pid=7656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.391" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 279.635611][ T30] audit: type=1804 audit(1758653920.019:37): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.391" name="/newroot/83/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 279.757866][ T7671] netlink: 'syz.3.395': attribute type 10 has an invalid length. [ 280.536321][ T7671] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 280.788800][ T1344] hfsplus: b-tree write err: -5, ino 8 [ 281.120734][ T7674] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.441477][ T7692] netlink: 'syz.4.398': attribute type 1 has an invalid length. [ 282.114758][ T7696] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 282.141420][ T7696] CIFS mount error: No usable UNC path provided in device string! [ 282.141420][ T7696] [ 282.151718][ T7696] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 285.824658][ T7732] netlink: 'syz.4.408': attribute type 16 has an invalid length. [ 286.015635][ T5937] lo speed is unknown, defaulting to 1000 [ 288.804290][ T7752] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 289.226256][ T5937] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 289.541509][ T5937] usb 2-1: Using ep0 maxpacket: 16 [ 289.563867][ T5937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.188836][ T5937] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.222233][ T5937] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 290.244895][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.290418][ T5937] usb 2-1: Product: syz [ 290.330442][ T5937] usb 2-1: Manufacturer: syz [ 290.428735][ T7761] tracefs: Unknown parameter '/dev/cpu/#/msr' [ 290.621953][ T5929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 290.748743][ T5937] usb 2-1: SerialNumber: syz [ 290.752528][ T5937] usb 2-1: config 0 descriptor?? [ 290.892885][ T7763] loop4: detected capacity change from 0 to 1024 [ 290.905200][ T5929] usb 4-1: config 0 has no interfaces? [ 290.911647][ T5929] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 290.964982][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.984485][ T48] usb 2-1: USB disconnect, device number 5 [ 291.004343][ T30] audit: type=1800 audit(1758653931.369:38): pid=7763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.417" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 291.037887][ T30] audit: type=1800 audit(1758653931.369:39): pid=7763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.417" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 291.077645][ T5929] usb 4-1: config 0 descriptor?? [ 291.314114][ T30] audit: type=1804 audit(1758653931.559:40): pid=7766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.417" name="/newroot/90/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 293.928813][ T48] usb 4-1: USB disconnect, device number 5 [ 294.098829][ T7793] loop3: detected capacity change from 0 to 128 [ 294.609225][ T48] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 294.829395][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.189099][ T48] usb 3-1: config 0 has no interfaces? [ 295.195241][ T48] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 295.205880][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.219719][ T48] usb 3-1: config 0 descriptor?? [ 295.521216][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.426'. [ 296.122873][ T5938] usb 3-1: USB disconnect, device number 4 [ 296.916592][ T7817] sctp: [Deprecated]: syz.2.430 (pid 7817) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.916592][ T7817] Use struct sctp_sack_info instead [ 297.059417][ T7817] 9pnet_fd: Insufficient options for proto=fd [ 297.081725][ T7815] loop1: detected capacity change from 0 to 512 [ 297.178435][ T7815] journal_path: Non-blockdev passed as './bus' [ 297.287542][ T7815] EXT4-fs: error: could not find journal device path [ 304.108908][ T7876] loop2: detected capacity change from 0 to 32768 [ 304.116451][ T7876] btrfs: Unknown parameter 'fragment' [ 307.135114][ T7888] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 309.778364][ T7916] loop1: detected capacity change from 0 to 256 [ 309.824734][ T7916] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 309.861701][ T7915] exFAT-fs (loop1): start_clu is invalid cluster(0x0) [ 309.878145][ T30] audit: type=1800 audit(1758653950.259:41): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.454" name="file1" dev="loop1" ino=1048612 res=0 errno=0 [ 310.214121][ T7922] syz_tun: entered allmulticast mode [ 310.235263][ T7922] syz_tun: left allmulticast mode [ 313.126071][ T7944] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 313.384287][ T7953] loop4: detected capacity change from 0 to 512 [ 313.496247][ T7953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.511060][ T7950] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 313.531716][ T7953] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 313.555790][ T7950] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 313.589874][ T7963] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 313.711985][ T7952] gretap1: entered promiscuous mode [ 313.720820][ T7952] bond1: (slave gretap1): making interface the new active one [ 313.730477][ T7952] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 313.747959][ T7944] macvlan2: entered promiscuous mode [ 313.763183][ T7944] macvlan2: entered allmulticast mode [ 313.771910][ T7944] bond1: entered promiscuous mode [ 313.789493][ T7944] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 313.889609][ T7944] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 313.956788][ T7944] bond1: left promiscuous mode [ 313.982715][ T7967] loop2: detected capacity change from 0 to 1024 [ 314.067723][ T30] audit: type=1800 audit(1758653954.449:42): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.466" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 314.130198][ T30] audit: type=1800 audit(1758653954.459:43): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.466" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 317.192511][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.199544][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.330649][ T7989] loop1: detected capacity change from 0 to 1024 [ 317.377282][ T30] audit: type=1800 audit(1758653957.759:44): pid=7989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.471" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 318.091876][ T30] audit: type=1800 audit(1758653958.469:45): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.471" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 318.225709][ T5880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.310099][ T30] audit: type=1804 audit(1758653958.689:46): pid=7997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.471" name="/newroot/98/file1/file1" dev="loop1" ino=20 res=1 errno=0 [ 318.528755][ T5987] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 319.672578][ T5987] usb 4-1: Using ep0 maxpacket: 8 [ 319.907777][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.924879][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 319.936783][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 319.974890][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 319.975981][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 320.783376][ T5987] usb 4-1: string descriptor 0 read error: -71 [ 320.783458][ T5987] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 320.783471][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.965840][ T5987] usb 4-1: config 0 descriptor?? [ 321.001056][ T8022] loop4: detected capacity change from 0 to 1024 [ 321.169401][ T8024] loop0: detected capacity change from 0 to 512 [ 321.191305][ T8024] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.576264][ T5987] usb 4-1: can't set config #0, error -71 [ 321.587550][ T5987] usb 4-1: USB disconnect, device number 6 [ 321.605445][ T8024] EXT4-fs (loop0): Test dummy encryption mode enabled [ 321.642188][ T8024] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 321.655362][ T8024] EXT4-fs (loop0): 1 truncate cleaned up [ 321.683991][ T8024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.817693][ T30] audit: type=1800 audit(1758653962.199:47): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.479" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 322.526709][ T30] audit: type=1800 audit(1758653962.219:48): pid=8022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.479" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 322.587439][ T5868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.523078][ T3605] hfsplus: b-tree write err: -5, ino 8 [ 324.799807][ T8059] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 328.149481][ T8084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 331.248742][ T5987] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 331.428745][ T5987] usb 3-1: Using ep0 maxpacket: 16 [ 331.450519][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.478859][ T5987] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.510852][ T5987] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 331.538685][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.556941][ T5987] usb 3-1: Product: syz [ 331.567280][ T5987] usb 3-1: Manufacturer: syz [ 331.587293][ T5987] usb 3-1: SerialNumber: syz [ 331.598429][ T5987] usb 3-1: config 0 descriptor?? [ 331.858526][ T5937] usb 3-1: USB disconnect, device number 5 [ 332.030498][ T5871] Bluetooth: hci2: unexpected event for opcode 0x0c7a [ 332.679661][ T8124] netlink: 256 bytes leftover after parsing attributes in process `syz.0.504'. [ 333.229054][ T5929] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 334.149720][ T5929] usb 2-1: Using ep0 maxpacket: 16 [ 335.122044][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.571803][ T5929] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.619185][ T5987] IPVS: starting estimator thread 0... [ 335.628333][ T5929] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 335.645787][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.665202][ T5929] usb 2-1: Product: syz [ 335.759197][ T8143] IPVS: using max 26 ests per chain, 62400 per kthread [ 335.824995][ T5929] usb 2-1: Manufacturer: syz [ 335.829968][ T5929] usb 2-1: SerialNumber: syz [ 335.840130][ T5929] usb 2-1: config 0 descriptor?? [ 336.468889][ T5929] usb 2-1: can't set config #0, error -71 [ 336.478175][ T5929] usb 2-1: USB disconnect, device number 6 [ 339.011223][ T8165] netlink: 256 bytes leftover after parsing attributes in process `syz.0.515'. [ 339.638979][ T8174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.134781][ T8189] evm: overlay not supported [ 342.269271][ T8190] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 346.168768][ T5929] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 346.548987][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 346.557413][ T5929] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.567867][ T5929] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.294646][ T5929] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 347.340404][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.351347][ T8234] loop0: detected capacity change from 0 to 128 [ 347.374566][ T8234] FAT-fs (loop0): bogus sectors per cluster 7 [ 347.383963][ T5929] usb 3-1: Product: syz [ 347.396989][ T5929] usb 3-1: Manufacturer: syz [ 347.421656][ T8234] FAT-fs (loop0): Can't find a valid FAT filesystem [ 347.499605][ T5929] usb 3-1: SerialNumber: syz [ 347.832209][ T5929] usb 3-1: config 0 descriptor?? [ 348.133696][ T48] usb 3-1: USB disconnect, device number 6 [ 351.241883][ T5866] Bluetooth: hci4: unexpected event for opcode 0x0c7a [ 354.692122][ T8283] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 356.696496][ T5866] Bluetooth: hci3: unexpected event for opcode 0x0c7a [ 359.108727][ T5929] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 359.258717][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 359.277422][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.306429][ T5929] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.327551][ T5929] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 359.346856][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.358863][ T5929] usb 5-1: Product: syz [ 359.363022][ T5929] usb 5-1: Manufacturer: syz [ 359.378090][ T5929] usb 5-1: SerialNumber: syz [ 359.396066][ T5929] usb 5-1: config 0 descriptor?? [ 359.613608][ T5938] usb 5-1: USB disconnect, device number 2 [ 362.028118][ T8349] netlink: 256 bytes leftover after parsing attributes in process `syz.2.560'. [ 362.099510][ T5938] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 362.469093][ T5938] usb 5-1: Using ep0 maxpacket: 16 [ 362.483443][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.488072][ T8348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'. [ 362.696550][ T5938] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 363.161550][ T5866] Bluetooth: hci3: unexpected event for opcode 0x0c7a [ 363.629904][ T5938] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 363.663903][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.699936][ T5938] usb 5-1: Product: syz [ 363.809552][ T5938] usb 5-1: Manufacturer: syz [ 363.814873][ T5938] usb 5-1: SerialNumber: syz [ 363.831801][ T5938] usb 5-1: config 0 descriptor?? [ 364.588106][ T48] usb 5-1: USB disconnect, device number 3 [ 365.040217][ T8372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 365.052453][ T8372] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 366.094769][ T8379] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 367.978557][ T8392] loop2: detected capacity change from 0 to 8 [ 367.990242][ T8392] squashfs image failed sanity check [ 370.210880][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.221123][ T8413] bridge_slave_1: left allmulticast mode [ 370.226877][ T8413] bridge_slave_1: left promiscuous mode [ 370.234748][ T8413] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.391948][ T8413] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 371.219220][ T5938] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 371.921247][ T5866] Bluetooth: hci1: unexpected event for opcode 0x0c7a [ 372.028789][ T5938] usb 3-1: Using ep0 maxpacket: 16 [ 372.404147][ T5938] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.438739][ T5938] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.470232][ T5938] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 372.490952][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.611250][ T5938] usb 3-1: Product: syz [ 372.627947][ T5938] usb 3-1: Manufacturer: syz [ 372.639063][ T5938] usb 3-1: SerialNumber: syz [ 372.684302][ T8430] netlink: 256 bytes leftover after parsing attributes in process `syz.1.581'. [ 372.969936][ T5938] usb 3-1: config 0 descriptor?? [ 372.998757][ T5929] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 373.779432][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 373.822663][ T5937] usb 3-1: USB disconnect, device number 7 [ 373.987644][ T5929] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.009503][ T5929] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.032886][ T5929] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 374.057556][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.067428][ T5929] usb 4-1: Product: syz [ 374.077090][ T5929] usb 4-1: Manufacturer: syz [ 374.082604][ T5929] usb 4-1: SerialNumber: syz [ 374.224624][ T5929] usb 4-1: config 0 descriptor?? [ 374.847402][ T5929] usb 4-1: USB disconnect, device number 7 [ 375.014251][ T8448] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.020547][ T8448] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 375.101792][ T8452] loop3: detected capacity change from 0 to 1024 [ 375.188060][ T8448] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.196425][ T8448] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 375.208393][ T8448] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.214376][ T8448] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 375.224349][ T8448] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.231253][ T8448] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 375.280375][ T8452] EXT4-fs: Ignoring removed bh option [ 375.605993][ T8452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 376.723154][ T5872] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.651242][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.657778][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.328247][ T8505] loop0: detected capacity change from 0 to 1024 [ 379.420251][ T30] audit: type=1800 audit(1758654019.809:49): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.593" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 379.500893][ T8510] loop3: detected capacity change from 0 to 4096 [ 379.584391][ T30] audit: type=1800 audit(1758654019.839:50): pid=8505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.593" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 379.867306][ T8518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 380.481109][ T30] audit: type=1804 audit(1758654020.869:51): pid=8515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.593" name="/newroot/102/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 381.622609][ T8527] ptrace attach of "./syz-executor exec"[5872] was attempted by ""[8527] [ 382.321253][ T8534] siw: device registration error -23 [ 383.055121][ T8545] loop2: detected capacity change from 0 to 1024 [ 383.221373][ T30] audit: type=1800 audit(1758654023.599:52): pid=8545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.601" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 383.314165][ T30] audit: type=1800 audit(1758654023.599:53): pid=8545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.601" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 383.442874][ T30] audit: type=1804 audit(1758654023.789:54): pid=8545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.601" name="/newroot/121/file1/file1" dev="loop2" ino=20 res=1 errno=0 [ 384.717048][ T8567] lo speed is unknown, defaulting to 1000 [ 384.764561][ T8571] Bluetooth: MGMT ver 1.23 [ 386.642533][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'. [ 387.337450][ T8592] loop0: detected capacity change from 0 to 1024 [ 388.443986][ T30] audit: type=1800 audit(1758654028.829:55): pid=8592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.609" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 388.534860][ T30] audit: type=1800 audit(1758654028.849:56): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.609" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 388.586026][ T30] audit: type=1804 audit(1758654028.909:57): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.609" name="/newroot/106/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 390.108408][ T8618] loop0: detected capacity change from 0 to 1024 [ 390.281970][ T30] audit: type=1800 audit(1758654030.669:58): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.615" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 390.729372][ T30] audit: type=1800 audit(1758654030.669:59): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.615" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 390.768080][ T30] audit: type=1804 audit(1758654031.149:60): pid=8621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.615" name="/newroot/108/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 390.818170][ T8448] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 390.824198][ T8448] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 392.600229][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.239040][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.309163][ T5866] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.371340][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.390123][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.442248][ T5871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.453422][ T5871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.462576][ T5871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.483702][ T5871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.546072][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.330153][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.845891][ T5987] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 395.310173][ T5987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.398500][ T5987] usb 3-1: config 0 has no interfaces? [ 395.405528][ T5987] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 395.578972][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.633699][ T8635] lo speed is unknown, defaulting to 1000 [ 395.744648][ T5871] Bluetooth: hci1: command tx timeout [ 395.768521][ T5987] usb 3-1: config 0 descriptor?? [ 396.212055][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.539088][ T1557] usb 3-1: USB disconnect, device number 8 [ 396.703568][ T8665] loop0: detected capacity change from 0 to 8 [ 396.886981][ T8665] SQUASHFS error: zlib decompression failed, data probably corrupt [ 396.952842][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.964233][ T8665] SQUASHFS error: Failed to read block 0x9b: -5 [ 396.974996][ T8665] SQUASHFS error: Unable to read metadata cache entry [99] [ 396.993254][ T8665] SQUASHFS error: Unable to read inode 0x127 [ 397.293063][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.368771][ T5937] IPVS: starting estimator thread 0... [ 397.528817][ T8675] IPVS: using max 29 ests per chain, 69600 per kthread [ 397.819153][ T5871] Bluetooth: hci1: command tx timeout [ 398.420306][ T8635] chnl_net:caif_netlink_parms(): no params data found [ 398.516171][ T36] bridge_slave_1: left allmulticast mode [ 398.548044][ T36] bridge_slave_1: left promiscuous mode [ 398.581048][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.150833][ T36] bridge_slave_0: left allmulticast mode [ 399.181326][ T36] bridge_slave_0: left promiscuous mode [ 399.187154][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.584714][ T8700] loop3: detected capacity change from 0 to 1024 [ 399.649571][ T30] audit: type=1800 audit(1758654040.029:61): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.635" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 399.786469][ T30] audit: type=1800 audit(1758654040.059:62): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.635" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 399.898835][ T5871] Bluetooth: hci1: command tx timeout [ 399.946033][ T30] audit: type=1804 audit(1758654040.209:63): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.635" name="/newroot/130/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 400.746786][ T36] bond1 (unregistering): (slave gretap1): Releasing active interface [ 400.792922][ T8716] loop4: detected capacity change from 0 to 4096 [ 401.174061][ T8727] ptrace attach of "./syz-executor exec"[5880] was attempted by ""[8727] [ 401.918917][ T8733] netlink: 'syz.0.637': attribute type 3 has an invalid length. [ 402.024951][ T8733] loop0: detected capacity change from 0 to 1764 [ 402.038513][ T8733] iso9660: Bad value for 'uid' [ 402.044747][ T8733] iso9660: Bad value for 'uid' [ 402.116319][ T8733] loop0: detected capacity change from 0 to 128 [ 402.131805][ T5928] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 402.139651][ T5871] Bluetooth: hci1: command tx timeout [ 402.255094][ T8733] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 402.261648][ T8733] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 402.269635][ T8733] vhci_hcd vhci_hcd.0: Device attached [ 402.350748][ T5928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.380625][ T5928] usb 5-1: config 0 has no interfaces? [ 402.394070][ T5928] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 402.437709][ T8734] vhci_hcd: connection closed [ 402.446240][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.448708][ T994] vhci_hcd: stop threads [ 402.454748][ T5928] usb 5-1: config 0 descriptor?? [ 402.496882][ T994] vhci_hcd: release socket [ 402.502007][ T994] vhci_hcd: disconnect device [ 402.596532][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.619913][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.644325][ T36] bond0 (unregistering): Released all slaves [ 402.671826][ T36] bond1 (unregistering): Released all slaves [ 402.710032][ T5987] usb 5-1: USB disconnect, device number 4 [ 402.929628][ T36] tipc: Left network mode [ 403.602630][ T8635] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.618924][ T1557] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 403.635814][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.103661][ T8635] bridge_slave_0: entered allmulticast mode [ 404.129290][ T8635] bridge_slave_0: entered promiscuous mode [ 404.173878][ T8635] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.205604][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.223767][ T8635] bridge_slave_1: entered allmulticast mode [ 404.245468][ T8635] bridge_slave_1: entered promiscuous mode [ 404.358611][ T1557] usb 3-1: Using ep0 maxpacket: 16 [ 404.383496][ T1557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.393774][ T1557] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 404.434838][ T1557] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 404.450652][ T1557] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.488325][ T1557] usb 3-1: Product: syz [ 404.492686][ T1557] usb 3-1: Manufacturer: syz [ 404.497496][ T1557] usb 3-1: SerialNumber: syz [ 404.508541][ T1557] usb 3-1: config 0 descriptor?? [ 404.594932][ T8635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.729784][ T8762] netlink: 312 bytes leftover after parsing attributes in process `syz.0.643'. [ 405.099672][ T8635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.106836][ T5987] usb 3-1: USB disconnect, device number 9 [ 405.167713][ T36] hsr_slave_0: left promiscuous mode [ 405.252853][ T36] hsr_slave_1: left promiscuous mode [ 405.269985][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.289022][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.325969][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.362811][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.851373][ T36] veth1_macvtap: left promiscuous mode [ 405.860938][ T8772] loop3: detected capacity change from 0 to 1024 [ 405.868976][ T36] veth0_macvtap: left promiscuous mode [ 405.875139][ T36] veth1_vlan: left promiscuous mode [ 405.926937][ T36] veth0_vlan: left promiscuous mode [ 405.982333][ T30] audit: type=1800 audit(1758654046.369:64): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.646" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 406.701238][ T30] audit: type=1800 audit(1758654046.399:65): pid=8772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.646" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 406.970395][ T30] audit: type=1804 audit(1758654047.359:66): pid=8785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.646" name="/newroot/133/file1/file1" dev="loop3" ino=20 res=1 errno=0 [ 410.656411][ T36] team0 (unregistering): Port device team_slave_1 removed [ 411.119918][ T36] team0 (unregistering): Port device team_slave_0 removed [ 412.307565][ T8635] team0: Port device team_slave_0 added [ 412.407207][ T8833] siw: device registration error -23 [ 412.795806][ T8635] team0: Port device team_slave_1 added [ 415.179447][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.198353][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.269207][ T8635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.290020][ T8635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.313725][ T8635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.544640][ T8635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.746128][ T8635] hsr_slave_0: entered promiscuous mode [ 416.763740][ T8635] hsr_slave_1: entered promiscuous mode [ 417.186715][ T8879] siw: device registration error -23 [ 418.549017][ T8635] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 418.579439][ T8635] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 418.615715][ T8635] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.802451][ T8635] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 420.354036][ T5937] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 421.228742][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 421.243452][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.264885][ T5937] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 421.326112][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 421.363353][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.396546][ T8635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.404955][ T5937] usb 3-1: Product: syz [ 421.413647][ T5937] usb 3-1: Manufacturer: syz [ 421.447946][ T5937] usb 3-1: SerialNumber: syz [ 421.469061][ T5937] usb 3-1: config 0 descriptor?? [ 421.630041][ T8635] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.845570][ T8924] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 421.845570][ T8924] program syz.3.677 not setting count and/or reply_len properly [ 422.218919][ T5937] usb 3-1: USB disconnect, device number 10 [ 422.297507][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.304774][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.622504][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.629805][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.619335][ T8941] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 423.756856][ T8945] loop3: detected capacity change from 0 to 128 [ 423.839480][ T8945] FAT-fs (loop3): bogus sectors per cluster 7 [ 423.854428][ T8945] FAT-fs (loop3): Can't find a valid FAT filesystem [ 425.125996][ T8635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.028733][ T8977] siw: device registration error -23 [ 428.357285][ T8635] veth0_vlan: entered promiscuous mode [ 428.415188][ T8635] veth1_vlan: entered promiscuous mode [ 429.413281][ T8635] veth0_macvtap: entered promiscuous mode [ 429.425964][ T9000] siw: device registration error -23 [ 429.466558][ T8635] veth1_macvtap: entered promiscuous mode [ 429.733457][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.159437][ T8635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.407021][ T5991] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.460502][ T5991] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.628479][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.656866][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.704823][ T5991] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.720409][ T9017] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 431.041946][ T5991] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.065534][ T9018] warning: `syz.4.692' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 431.146056][ T3605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.174828][ T3605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.473708][ T5987] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 432.254599][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.888940][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.663454][ T5987] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 433.673221][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.930961][ T5987] usb 5-1: config 0 descriptor?? [ 433.981111][ T5987] usb 5-1: can't set config #0, error -71 [ 434.020480][ T5987] usb 5-1: USB disconnect, device number 5 [ 434.037082][ T9043] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 434.318406][ T9046] loop0: detected capacity change from 0 to 8 [ 434.913377][ T9046] squashfs image failed sanity check [ 439.561270][ T9092] siw: device registration error -23 [ 439.698792][ T5987] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 439.771317][ T9098] loop2: detected capacity change from 0 to 1024 [ 439.861710][ T9100] loop5: detected capacity change from 0 to 1024 [ 439.871721][ T30] audit: type=1800 audit(1758654080.259:67): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.712" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 439.883557][ T5987] usb 4-1: config 0 has an invalid interface number: 27 but max is 0 [ 439.934976][ T30] audit: type=1800 audit(1758654080.259:68): pid=9098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.712" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 439.978158][ T5987] usb 4-1: config 0 has no interface number 0 [ 439.992098][ T5987] usb 4-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=17.05 [ 440.002897][ T30] audit: type=1800 audit(1758654080.379:69): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.713" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 440.018788][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.041446][ T30] audit: type=1800 audit(1758654080.409:70): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.713" name="file1" dev="loop5" ino=20 res=0 errno=0 [ 440.086140][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.094565][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.108840][ T5987] usb 4-1: Product: syz [ 440.122534][ T30] audit: type=1804 audit(1758654080.459:71): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.712" name="/newroot/150/file1/file1" dev="loop2" ino=20 res=1 errno=0 [ 440.152933][ T5987] usb 4-1: Manufacturer: syz [ 440.157579][ T5987] usb 4-1: SerialNumber: syz [ 440.185918][ T5987] usb 4-1: config 0 descriptor?? [ 440.207099][ T5987] uvcvideo 4-1:0.27: Found Unit with invalid ID 0 [ 440.221962][ T30] audit: type=1804 audit(1758654080.609:72): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.713" name="/newroot/3/file1/file1" dev="loop5" ino=20 res=1 errno=0 [ 440.407931][ T5987] uvcvideo 4-1:0.27: probe with driver uvcvideo failed with error -22 [ 440.442337][ T5987] usb 4-1: USB disconnect, device number 8 [ 442.443041][ T9133] siw: device registration error -23 [ 444.135064][ T5987] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 444.285552][ T5987] usb 6-1: device descriptor read/64, error -71 [ 445.308880][ T5987] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 445.369846][ T9171] loop2: detected capacity change from 0 to 16 [ 445.433259][ T9171] erofs: Unexpected value for 'user_xattr' [ 445.468761][ T5987] usb 6-1: device descriptor read/64, error -71 [ 445.592127][ T5987] usb usb6-port1: attempt power cycle [ 445.607217][ T9173] netlink: 96 bytes leftover after parsing attributes in process `syz.2.725'. [ 445.747869][ T9174] libceph: resolve '0' (ret=-3): failed [ 446.238893][ T5987] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 446.279735][ T5987] usb 6-1: device descriptor read/8, error -71 [ 446.600101][ T5987] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 446.728493][ T9183] loop4: detected capacity change from 0 to 1024 [ 446.998766][ T5987] usb 6-1: device not accepting address 5, error -71 [ 447.033329][ T5987] usb usb6-port1: unable to enumerate USB device [ 447.433405][ T30] audit: type=1800 audit(1758654087.799:73): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.727" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 447.471028][ T30] audit: type=1800 audit(1758654087.849:74): pid=9183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.727" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 448.302283][ T30] audit: type=1804 audit(1758654088.679:75): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.727" name="/newroot/154/file1/file1" dev="loop4" ino=20 res=1 errno=0 [ 448.571377][ T9213] loop0: detected capacity change from 0 to 1024 [ 449.522425][ T30] audit: type=1800 audit(1758654089.909:76): pid=9218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.732" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 449.625736][ T9222] veth0_to_bridge: entered promiscuous mode [ 450.109680][ T9212] veth0_to_bridge: left promiscuous mode [ 450.128868][ T30] audit: type=1800 audit(1758654089.909:77): pid=9213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.732" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 450.529181][ T9226] siw: device registration error -23 [ 450.766112][ T30] audit: type=1804 audit(1758654091.069:78): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.732" name="/newroot/137/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 450.958658][ T9233] loop2: detected capacity change from 0 to 8 [ 451.035158][ T9233] SQUASHFS error: zlib decompression failed, data probably corrupt [ 451.043645][ T9233] SQUASHFS error: Failed to read block 0x9b: -5 [ 451.050378][ T9233] SQUASHFS error: Unable to read metadata cache entry [99] [ 451.057861][ T9233] SQUASHFS error: Unable to read inode 0x127 [ 453.160964][ T9256] bridge0: port 3(gretap0) entered blocking state [ 453.168445][ T9256] bridge0: port 3(gretap0) entered disabled state [ 453.177502][ T9256] gretap0: entered allmulticast mode [ 453.200437][ T9256] gretap0: entered promiscuous mode [ 453.209595][ T9256] bridge0: port 3(gretap0) entered blocking state [ 453.216264][ T9256] bridge0: port 3(gretap0) entered forwarding state [ 455.378451][ T9264] loop2: detected capacity change from 0 to 1024 [ 455.792506][ T30] audit: type=1800 audit(1758654096.169:79): pid=9264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.742" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 456.318830][ T30] audit: type=1800 audit(1758654096.179:80): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.742" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 456.448756][ T30] audit: type=1804 audit(1758654096.329:81): pid=9285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.742" name="/newroot/158/file1/file1" dev="loop2" ino=20 res=1 errno=0 [ 456.470252][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.951952][ T9309] loop0: detected capacity change from 0 to 1024 [ 458.089062][ T30] audit: type=1800 audit(1758654098.479:82): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.751" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 458.580988][ T30] audit: type=1800 audit(1758654098.669:83): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.751" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 458.788757][ T30] audit: type=1804 audit(1758654098.799:84): pid=9321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.751" name="/newroot/141/file1/file1" dev="loop0" ino=20 res=1 errno=0 [ 463.529351][ T9385] syz.4.765 (9385) used greatest stack depth: 16136 bytes left [ 466.465185][ T9403] siw: device registration error -23 [ 468.513271][ T9422] ieee802154 phy0 wpan0: encryption failed: -22 [ 468.559095][ T5987] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 468.877849][ T5987] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 468.900350][ T5987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 468.921489][ T5987] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 468.949144][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 468.971849][ T5987] usb 3-1: Product: syz [ 468.976148][ T5987] usb 3-1: Manufacturer: syz [ 468.981212][ T5987] usb 3-1: SerialNumber: syz [ 468.995360][ T5987] usb 3-1: config 0 descriptor?? [ 469.013385][ T5987] usb 3-1: selecting invalid altsetting 0 [ 469.381549][ T9420] loop3: detected capacity change from 0 to 40427 [ 469.403846][ T9420] F2FS-fs (loop3): build fault injection rate: 771 [ 469.591498][ T9437] netlink: 'syz.4.779': attribute type 1 has an invalid length. [ 469.776761][ T9420] F2FS-fs (loop3): invalid crc value [ 469.973564][ T9444] loop0: detected capacity change from 0 to 256 [ 470.542352][ T5987] usb 3-1: USB disconnect, device number 11 [ 471.104969][ T9444] FAT-fs (loop0): Directory bread(block 64) failed [ 471.231930][ T9444] FAT-fs (loop0): Directory bread(block 65) failed [ 471.238578][ T9444] FAT-fs (loop0): Directory bread(block 66) failed [ 471.346401][ T9451] loop2: detected capacity change from 0 to 8 [ 471.388072][ T9451] squashfs image failed sanity check [ 471.804276][ T9444] FAT-fs (loop0): Directory bread(block 67) failed [ 471.819076][ T9444] FAT-fs (loop0): Directory bread(block 68) failed [ 471.837756][ T9444] FAT-fs (loop0): Directory bread(block 69) failed [ 471.883702][ T30] audit: type=1326 audit(1758654112.239:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4678eec9 code=0x7ffc0000 [ 471.884062][ T9444] FAT-fs (loop0): Directory bread(block 70) failed [ 472.001971][ T9452] loop5: detected capacity change from 0 to 1024 [ 472.061187][ T9444] FAT-fs (loop0): Directory bread(block 71) failed [ 472.068067][ T30] audit: type=1326 audit(1758654112.239:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee4678eec9 code=0x7ffc0000 [ 472.087300][ T9420] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 472.091567][ T30] audit: type=1326 audit(1758654112.239:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4678eec9 code=0x7ffc0000 [ 472.121832][ T9444] FAT-fs (loop0): Directory bread(block 72) failed [ 472.146456][ T30] audit: type=1326 audit(1758654112.239:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4678eec9 code=0x7ffc0000 [ 472.257334][ T9444] FAT-fs (loop0): Directory bread(block 73) failed [ 472.300690][ T30] audit: type=1326 audit(1758654112.239:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee46790de7 code=0x7ffc0000 [ 472.347044][ T30] audit: type=1326 audit(1758654112.239:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fee46790d5c code=0x7ffc0000 [ 473.311211][ T30] audit: type=1326 audit(1758654112.239:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fee46790c94 code=0x7ffc0000 [ 473.927946][ T30] audit: type=1326 audit(1758654112.239:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fee46790c94 code=0x7ffc0000 [ 474.020334][ T30] audit: type=1326 audit(1758654112.239:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fee4678db2a code=0x7ffc0000 [ 474.084485][ T30] audit: type=1326 audit(1758654112.239:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9445 comm="syz.5.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee4678eec9 code=0x7ffc0000 [ 474.803486][ T9473] tipc: Started in network mode [ 475.486577][ T9477] loop4: detected capacity change from 0 to 32768 [ 475.511270][ T9473] tipc: Node identity 62a1c1d423a1, cluster identity 4711 [ 475.596028][ T9473] tipc: Enabled bearer , priority 0 [ 475.622867][ T9475] syzkaller0: entered promiscuous mode [ 475.695487][ T9475] syzkaller0: entered allmulticast mode [ 475.894846][ T9466] tipc: Resetting bearer [ 475.949049][ T9465] tipc: Resetting bearer [ 476.203581][ T9465] tipc: Disabling bearer [ 476.995031][ T9495] syz.2.791 uses obsolete (PF_INET,SOCK_PACKET) [ 477.126297][ T9495] loop2: detected capacity change from 0 to 1024 [ 478.223214][ T9510] syzkaller1: entered promiscuous mode [ 478.263214][ T9510] syzkaller1: entered allmulticast mode [ 479.453375][ T9522] Bluetooth: MGMT ver 1.23 [ 479.472867][ T9522] netlink: 755 bytes leftover after parsing attributes in process `syz.0.797'. [ 479.947089][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.798'. [ 480.829083][ T9525] loop0: detected capacity change from 0 to 2048 [ 481.161240][ T9525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.703874][ T5868] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.807753][ T9546] loop4: detected capacity change from 0 to 512 [ 483.112741][ T9546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.232958][ T9546] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.852814][ T9553] virtio-fs: tag not found [ 483.870068][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.806'. [ 487.109832][ T9610] siw: device registration error -23 [ 488.326018][ T5880] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.364192][ T9620] siw: device registration error -23 [ 488.609174][ T48] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 489.098822][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 489.130165][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.352678][ T9631] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 489.352678][ T9631] program syz.0.818 not setting count and/or reply_len properly [ 489.731615][ T48] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 489.846604][ T48] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 489.858725][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.866791][ T48] usb 3-1: Product: syz [ 489.871514][ T48] usb 3-1: Manufacturer: syz [ 489.877081][ T48] usb 3-1: SerialNumber: syz [ 489.885741][ T48] usb 3-1: config 0 descriptor?? [ 490.632978][ T48] usb 3-1: USB disconnect, device number 12 [ 490.896597][ T9639] loop0: detected capacity change from 0 to 40427 [ 490.950599][ T9639] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 490.958380][ T9639] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 490.971255][ T9639] F2FS-fs (loop0): invalid crc value [ 491.043184][ T9639] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 491.069172][ T9639] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 491.076513][ T9639] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 495.744447][ T9653] loop3: detected capacity change from 0 to 4096 [ 495.757613][ T9653] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 495.768026][ T9653] ntfs3(loop3): ino=2, mi_enum_attr [ 495.773761][ T9653] ntfs3(loop3): Failed to load $LogFile (-22). [ 495.979325][ T9672] siw: device registration error -23 [ 496.577374][ T9679] siw: device registration error -23 [ 498.239884][ T9688] fuse: Bad value for 'fd' [ 498.347061][ T9689] loop0: detected capacity change from 0 to 512 [ 498.354918][ T9689] ext3: Unknown parameter 'fsname' [ 498.629059][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 500.549403][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 500.594265][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 500.609181][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 500.624081][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 500.633235][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.642455][ T24] usb 3-1: Product: syz [ 500.646811][ T24] usb 3-1: Manufacturer: syz [ 500.682379][ T24] usb 3-1: SerialNumber: syz [ 500.735753][ T24] usb 3-1: config 0 descriptor?? [ 501.502101][ T9720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 501.504530][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.515853][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.537669][ T24] usb 3-1: USB disconnect, device number 13 [ 502.062908][ T9728] siw: device registration error -23 [ 503.010640][ T9731] tipc: Enabled bearer , priority 0 [ 503.229801][ T9736] syzkaller0: entered promiscuous mode [ 503.369333][ T9736] syzkaller0: entered allmulticast mode [ 504.736279][ T9748] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 504.745743][ T9748] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 504.755499][ T9748] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 504.782263][ T9750] tipc: Resetting bearer [ 504.892411][ T9751] loop2: detected capacity change from 0 to 512 [ 504.953399][ T9730] tipc: Resetting bearer [ 505.084920][ T9751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 505.098048][ T9751] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 505.727768][ T9730] tipc: Disabling bearer [ 505.957486][ T9765] loop5: detected capacity change from 0 to 1764 [ 506.198809][ T5975] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 506.209243][ T9765] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 506.688890][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 507.233908][ T5975] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.248981][ T5975] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 507.265312][ T5975] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 507.289200][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.298300][ T5975] usb 4-1: Product: syz [ 507.308931][ T5975] usb 4-1: Manufacturer: syz [ 507.313861][ T5975] usb 4-1: SerialNumber: syz [ 507.321232][ T5975] usb 4-1: config 0 descriptor?? [ 507.530216][ T5870] usb 4-1: USB disconnect, device number 9 [ 507.599131][ T9778] siw: device registration error -23 [ 509.350012][ T5862] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.761794][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 510.761812][ T30] audit: type=1804 audit(1758654151.139:129): pid=9806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.864" name="/newroot/180/bus" dev="tmpfs" ino=959 res=1 errno=0 [ 512.268727][ T9816] loop3: detected capacity change from 0 to 1024 [ 512.689361][ T9819] BUG: sleeping function called from invalid context at fs/inode.c:1928 [ 512.698097][ T9819] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 9819, name: syz.2.868 [ 512.707321][ T9819] preempt_count: 1, expected: 0 [ 512.712352][ T9819] RCU nest depth: 0, expected: 0 [ 512.717318][ T9819] 2 locks held by syz.2.868/9819: [ 512.722926][ T9819] #0: ffff88802927c0e0 (&type->s_umount_key#66){++++}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 512.733591][ T9819] #1: ffff88802927c998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0xae/0xbd0 [ 512.743787][ T9819] Preemption disabled at: [ 512.743802][ T9819] [<0000000000000000>] 0x0 [ 512.752879][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.2.868 Not tainted syzkaller #0 PREEMPT(full) [ 512.752906][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 512.752930][ T9819] Call Trace: [ 512.752938][ T9819] [ 512.752947][ T9819] dump_stack_lvl+0x189/0x250 [ 512.752984][ T9819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.753009][ T9819] ? __pfx__printk+0x10/0x10 [ 512.753039][ T9819] ? print_lock_name+0xde/0x100 [ 512.753070][ T9819] __might_resched+0x495/0x610 [ 512.753107][ T9819] ? __pfx___might_resched+0x10/0x10 [ 512.753134][ T9819] ? __lock_acquire+0xab9/0xd20 [ 512.753179][ T9819] iput+0x2b/0xc50 [ 512.753203][ T9819] ? hook_sb_delete+0x1a8/0xbd0 [ 512.753234][ T9819] hook_sb_delete+0x6b5/0xbd0 [ 512.753260][ T9819] ? hook_sb_delete+0x1a8/0xbd0 [ 512.753291][ T9819] ? __pfx_hook_sb_delete+0x10/0x10 [ 512.753316][ T9819] ? __pfx_fsnotify_sb_delete+0x10/0x10 [ 512.753338][ T9819] ? evict_inodes+0x684/0x6d0 [ 512.753363][ T9819] ? __pfx_evict_inodes+0x10/0x10 [ 512.753394][ T9819] security_sb_delete+0x80/0x150 [ 512.753421][ T9819] generic_shutdown_super+0xaa/0x2c0 [ 512.753455][ T9819] kill_litter_super+0x76/0xb0 [ 512.753475][ T9819] deactivate_locked_super+0xbc/0x130 [ 512.753506][ T9819] cleanup_mnt+0x425/0x4c0 [ 512.753532][ T9819] ? lockdep_hardirqs_on+0x9c/0x150 [ 512.753563][ T9819] task_work_run+0x1d4/0x260 [ 512.753590][ T9819] ? __pfx_task_work_run+0x10/0x10 [ 512.753612][ T9819] ? __x64_sys_umount+0x122/0x160 [ 512.753636][ T9819] ? exit_to_user_mode_loop+0x40/0x130 [ 512.753666][ T9819] exit_to_user_mode_loop+0xe9/0x130 [ 512.753689][ T9819] do_syscall_64+0x2bd/0xfa0 [ 512.753714][ T9819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.753730][ T9819] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 512.753746][ T9819] ? clear_bhb_loop+0x60/0xb0 [ 512.753767][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.753784][ T9819] RIP: 0033:0x7f8f0b58eec9 [ 512.753800][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.753825][ T9819] RSP: 002b:00007f8f0c3f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 512.753847][ T9819] RAX: 0000000000000000 RBX: 00007f8f0b7e5fa0 RCX: 00007f8f0b58eec9 [ 512.753861][ T9819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 512.753874][ T9819] RBP: 00007f8f0b611f91 R08: 0000000000000000 R09: 0000000000000000 [ 512.753886][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.753898][ T9819] R13: 00007f8f0b7e6038 R14: 00007f8f0b7e5fa0 R15: 00007ffc10f09588 [ 512.753933][ T9819] [ 512.764291][ T9823] __vm_enough_memory: pid: 9823, comm: syz.3.867, bytes: 21199794651136 not enough memory for the allocation [ 513.034833][ T9824] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 518.948860][ T5871] Bluetooth: hci1: command 0x0406 tx timeout