last executing test programs: 23m27.55457553s ago: executing program 32 (id=850): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x7, &(0x7f0000000100)={0x0, 0x10, 0x6}, &(0x7f0000000240)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x54c1}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}, 0x1, 0x300, 0x0, 0x20000081}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = io_uring_setup(0x291c, &(0x7f0000000140)={0x0, 0x0, 0x40}) dup3(0xffffffffffffffff, r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x800) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r5, 0xae78, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0) 22m17.326391297s ago: executing program 33 (id=1019): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x79, 0x79, 0x5, [@fwd={0x8}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x10, 0x4}, {0xc, 0x2}, {0xa, 0x1}, {0x2, 0x5}, {0x3, 0x4}, {0x7, 0x5}, {0xf}, {0x7, 0x2}, {0x7, 0x3}]}, @func={0xc, 0x0, 0x0, 0xc, 0x2}, @datasec={0xb, 0x0, 0x0, 0xf, 0x1, [], "dd"}]}, {0x0, [0x61, 0x5f, 0x5f]}}, &(0x7f0000000400)=""/99, 0x99, 0x63, 0x0, 0x7, 0x0, @void, @value}, 0x28) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) 21m52.865590179s ago: executing program 34 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 19m58.232801183s ago: executing program 35 (id=1206): socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) semop(0x0, 0x0, 0x0) semop(0x0, &(0x7f0000000280), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000d4a17a8502000000080002000000000000000000", @ANYRES32=r4, @ANYBLOB], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) 18m17.278587928s ago: executing program 36 (id=1356): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x10008ff, &(0x7f0000000340)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x800}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 10m58.572252621s ago: executing program 37 (id=2514): syslog(0x2, 0x0, 0x0) syslog(0x2, 0x0, 0x0) syslog(0x9, 0x0, 0x0) syslog(0x9, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000380)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@lazytime}, {@jqfmt_vfsold}, {@dioread_lock}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 10m31.272821417s ago: executing program 38 (id=2573): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200002, &(0x7f0000000440)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@noblock_validity}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@noacl}, {@nobarrier}], [{@obj_role={'obj_role', 0x3d, '&@(,@/&[}\xc1'}}]}, 0xdd, 0x587, &(0x7f0000001240)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}, 0x1, 0xba01}, 0x4008800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000cc0)={[{@utf8no}, {@utf8no}, {@numtail}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@shortname_mixed}, {@fat=@fmask={'fmask', 0x3d, 0xd}}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x351, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100423c, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRES32=r0, @ANYBLOB="c27499e2ee65a8176ce28a0962b449f5f5f68f8a2157aa2da19f46e3568a69844136ed37b79c9c3cafbdbf94551fb1fd3ae35261fa3fc97da1823543357ffb95924b9efea81dec5b1bc0e8462fb2ff6541ce59eaa4c1", @ANYRESOCT, @ANYRES32=r3], 0x6, 0x340, &(0x7f0000000900)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r8, 0x100, 0x0) fadvise64(r3, 0x8, 0x9, 0x2) getdents64(r8, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 10m27.977676175s ago: executing program 0 (id=2606): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000600)={0x0, 0x0, 0x0, 'queue0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x1) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 10m24.528588016s ago: executing program 0 (id=2610): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/210, 0xd2}], 0x1}, 0x121) bind$tipc(r0, 0x0, 0x0) 10m22.403753114s ago: executing program 0 (id=2615): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x206e) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, r4, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) 10m21.601387852s ago: executing program 0 (id=2618): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0xc05c5340, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='net\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x1) r5 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r5, &(0x7f0000000100)='-1\x00', 0x2) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 10m18.036482352s ago: executing program 0 (id=2623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listxattr(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x80, "66864e02"}, 0x3, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 10m17.424061339s ago: executing program 0 (id=2624): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}, 0x1, 0xba01}, 0x4008800) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000cc0)={[{@utf8no}, {@utf8no}, {@numtail}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@shortname_mixed}, {@fat=@fmask={'fmask', 0x3d, 0xd}}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x351, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100423c, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="c27499e2ee65a8176ce28a0962b449f5f5f68f8a2157aa2da19f46e3568a69844136ed37b79c9c3cafbdbf94551fb1fd3ae35261fa3fc97da1823543357ffb95924b9efea81dec5b1bc0e8462fb2ff6541ce59eaa4c1", @ANYRESOCT, @ANYRES32=r2], 0x6, 0x340, &(0x7f0000000900)="$eJzs3E1rK1UYwPGnebtJ6k2yEEVBetCNboY2uhaD3AtiwEvbiK0gTO1EQ8akZEIkItqu3Ir7rgQXpcvuCrZfoB9AN26660YQaRfiyLw1yeSlMX1Jb/P/QcnJOedJzpmeKc8ZOnP2yY9fVcuWVtabEkkqeUFE5EIkJxEJzPmvEbeckG7b8tb8X7+9trK2/mGhWHyyrNTTwurbeaVUZuHXr79N+d0OH8lJ7rOzP/OnJy+dvHL27+qXFUtVLFWrN5WuNup/NPUN01CbFauqKfXMNHTLUJWaZTS89rrXXjbrW1ttpdc2H6e3GoZlKb3WVlWjrZp11Wy0lf6FXqkpTdOij9MyyPzA2llV2lte1gsTBn9+w4PBLWk0CnpURFJ9LaW9qQwIAABMVTj/jzgp/Yj8PxmK7+T/knHzf6dzJ//ff/24Of/xQcbP/w8Tp1Hpy//f+d37rJ783/miq/J/e0D+vytu/q+G5P+9+jOi2XKt/B/3w0Kir2qu552T/6fd89c/p3c+3V90C+T/AAAAAAAAAAAAAAAAAAAAAAA8Dy5sO2vbdjZ4DX46txD47/EgDfv9P/Lv9bpcD3iQVtbWJeneuBfLiJg/tEqtkvfqdzgWEVMMWZSs/OOuB59TDu48Uo6cHJlx8eK/b5WibkuhLBU3fkmykgvH2/bTD4pPlpRHjpy41uWNh+nu+Lxk5cXB8fneeP/7E/LmG13x2t/n8aq4k9l013Un/rslpd7/qBiKT7n9AAAAAAB4CDR/7xxc4WmF9u9a0MHb33ftj72njFzurwdeH/D214sD9+ex7Kux6c4dAAAAAIBZYbW/qeqmaTRGFFJydZ/JC7HxOidCNfFRnaNdMxx3PAn/2cbXndfPYx7VnkLwjxQ9TcGzlicbTzD//zuL3WFHbLu7JiJjfGAsPPgFp0Jdd9kEl40SQ46zPOuPioxYCfEbW88v//TL+c2dIO8eBOv46s47k35XMrzq3EL8Lv72AAAAALhbnaQ/qHmvu3luKoMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDG3Moj/YJCatqzAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6X/wIAAP//y1b1pw==") mkdirat(0xffffffffffffff9c, 0x0, 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r7, 0x100, 0x0) fadvise64(r2, 0x8, 0x9, 0x2) getdents64(r7, &(0x7f00000001c0)=""/48, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 10m1.530039248s ago: executing program 39 (id=2624): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x48}, 0x1, 0xba01}, 0x4008800) r2 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2000006, &(0x7f0000000cc0)={[{@utf8no}, {@utf8no}, {@numtail}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@shortname_mixed}, {@fat=@fmask={'fmask', 0x3d, 0xd}}, {@shortname_mixed}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@shortname_winnt}, {@uni_xlate}, {@shortname_mixed}, {@shortname_lower}, {@shortname_mixed}]}, 0x25, 0x351, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x100423c, &(0x7f0000000380)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="c27499e2ee65a8176ce28a0962b449f5f5f68f8a2157aa2da19f46e3568a69844136ed37b79c9c3cafbdbf94551fb1fd3ae35261fa3fc97da1823543357ffb95924b9efea81dec5b1bc0e8462fb2ff6541ce59eaa4c1", @ANYRESOCT, @ANYRES32=r2], 0x6, 0x340, &(0x7f0000000900)="$eJzs3E1rK1UYwPGnebtJ6k2yEEVBetCNboY2uhaD3AtiwEvbiK0gTO1EQ8akZEIkItqu3Ir7rgQXpcvuCrZfoB9AN26660YQaRfiyLw1yeSlMX1Jb/P/QcnJOedJzpmeKc8ZOnP2yY9fVcuWVtabEkkqeUFE5EIkJxEJzPmvEbeckG7b8tb8X7+9trK2/mGhWHyyrNTTwurbeaVUZuHXr79N+d0OH8lJ7rOzP/OnJy+dvHL27+qXFUtVLFWrN5WuNup/NPUN01CbFauqKfXMNHTLUJWaZTS89rrXXjbrW1ttpdc2H6e3GoZlKb3WVlWjrZp11Wy0lf6FXqkpTdOij9MyyPzA2llV2lte1gsTBn9+w4PBLWk0CnpURFJ9LaW9qQwIAABMVTj/jzgp/Yj8PxmK7+T/knHzf6dzJ//ff/24Of/xQcbP/w8Tp1Hpy//f+d37rJ783/miq/J/e0D+vytu/q+G5P+9+jOi2XKt/B/3w0Kir2qu552T/6fd89c/p3c+3V90C+T/AAAAAAAAAAAAAAAAAAAAAAA8Dy5sO2vbdjZ4DX46txD47/EgDfv9P/Lv9bpcD3iQVtbWJeneuBfLiJg/tEqtkvfqdzgWEVMMWZSs/OOuB59TDu48Uo6cHJlx8eK/b5WibkuhLBU3fkmykgvH2/bTD4pPlpRHjpy41uWNh+nu+Lxk5cXB8fneeP/7E/LmG13x2t/n8aq4k9l013Un/rslpd7/qBiKT7n9AAAAAAB4CDR/7xxc4WmF9u9a0MHb33ftj72njFzurwdeH/D214sD9+ex7Kux6c4dAAAAAIBZYbW/qeqmaTRGFFJydZ/JC7HxOidCNfFRnaNdMxx3PAn/2cbXndfPYx7VnkLwjxQ9TcGzlicbTzD//zuL3WFHbLu7JiJjfGAsPPgFp0Jdd9kEl40SQ46zPOuPioxYCfEbW88v//TL+c2dIO8eBOv46s47k35XMrzq3EL8Lv72AAAAALhbnaQ/qHmvu3luKoMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDG3Moj/YJCatqzAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6X/wIAAP//y1b1pw==") mkdirat(0xffffffffffffff9c, 0x0, 0x8) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r7, 0x100, 0x0) fadvise64(r2, 0x8, 0x9, 0x2) getdents64(r7, &(0x7f00000001c0)=""/48, 0x30) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 8m42.395398757s ago: executing program 1 (id=2771): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x823d, 0x10100, 0x0, 0x17}, &(0x7f0000000280)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 8m41.303063663s ago: executing program 1 (id=2776): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 8m39.965859566s ago: executing program 1 (id=2779): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x2000c12, &(0x7f0000000240)={[{@gid}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@hide}, {@map_acorn}, {@map_normal}, {@map_off}, {@session={'session', 0x3d, 0x32}}, {@map_off}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@unhide}, {@hide}, {@check_strict}]}, 0x4, 0xa00, &(0x7f00000003c0)="$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") r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1c8, 0x12) 8m38.221873284s ago: executing program 1 (id=2781): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) fallocate(r0, 0x1, 0x8416, 0x4) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 8m36.867427929s ago: executing program 1 (id=2785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8000000000004, 0x0, 0x3, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x6}, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) sendmmsg(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000580)=""/102392, 0x18ff8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x4000, 0x0, 0x101}}) setsockopt$inet6_int(r1, 0x29, 0xce, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, 0x0, 0x0) 8m29.823300255s ago: executing program 1 (id=2786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1103, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000900)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000940)={{0x5, 0x3, 0x2000004, 0x5, 'syz1\x00', 0x2}, 0x4, 0x20000000, 0x7, r0, 0x0, 0xfff, 'syz1\x00', 0x0}) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="005aba45f601df2ac2282b90843c011c5241b0dcdb624529352857cfbee893995ad07fa2cae89d78f640c74dcdd6cce9a53e8b9ebdc944653b2f9ac9acbc19de0d1ded2fe70f9aef9f613ff31bed246918caab78bfa6bcc004b89c2a7bc0354887abbc479b370398a3ef240523ff64bcbb165400"/129], 0x1, 0x1a7, &(0x7f0000000640)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT=r0, @ANYRES32, @ANYRESOCT], 0x2, 0x1ff, &(0x7f00000003c0)="$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") r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$P9_RVERSION(r4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair(0x29, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 8m13.080752098s ago: executing program 40 (id=2786): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1103, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, &(0x7f0000000900)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000940)={{0x5, 0x3, 0x2000004, 0x5, 'syz1\x00', 0x2}, 0x4, 0x20000000, 0x7, r0, 0x0, 0xfff, 'syz1\x00', 0x0}) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="005aba45f601df2ac2282b90843c011c5241b0dcdb624529352857cfbee893995ad07fa2cae89d78f640c74dcdd6cce9a53e8b9ebdc944653b2f9ac9acbc19de0d1ded2fe70f9aef9f613ff31bed246918caab78bfa6bcc004b89c2a7bc0354887abbc479b370398a3ef240523ff64bcbb165400"/129], 0x1, 0x1a7, &(0x7f0000000640)="$eJzs0LFrE2EYx/Hv894luQoqUXGoYAMWzwvV3qXq4BScIvTAwUUwaEjPpnhRm8tgS4tdpCDV/gs61VEFBUHEgnNxEBzkXLpJMxQHUZCT610G/4a+n+F+9zzw8j7v04nmoxLwd3epTZ09Bof4jGACY5L1lMrybV7/yHM9Cy7n9VqeL/IcjRYW77TCMOhVLlUo/9cAflYo/0kyYdCLXnFcMRDqyNfdpXZLbvkkdbpqxqc8TfUJRpN55ymj5kGO3cQgsde4osjGOzzZ796fjBYWz851W7PBbHC3Vpu66J533QsWEAbuG8R5LIpnLOP4lHxGnGUKTR5tmQeYEMTpqNiQ6oBik/Ut48ypiQHK2SFB+GgPKL2zOhV1jdNYN9IHNTgqPMfwGZ9mRGFyey4M3AZyVb0Wz/xi/ioorBXDONe+F86sXlfyu7hRlx1LvG0Ktket6jGVroYjbLIaMx7TiNmI2f7OmLxPbxnu1VxJvy/z6gQnociDVr/f84rwSWyfmu0nSfIwXSmbqL25yvAhP5MH34Y/mqZpmqZpmqZp2j7wLwAA//+uNG5Z") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESOCT=r0, @ANYRES32, @ANYRESOCT], 0x2, 0x1ff, &(0x7f00000003c0)="$eJzsmTGLE0EUx/8zu0nOIIqNhSgWBozobXY3KtdcoWApCKeolQRvPU73LrJZ4RIQDDY2lhaCrV/AwiKVhV0+ghYqCBamtF6Z2dnsZDcJCYmxuPeDTP77ZubNe2+H1ywIgji0/Pj+59vr6xu3LwE4igpKyv7LSNdwbf3Xt88uvtm88e7Dl/ef948972X9MQBRNPv5awA+nTGAF8flcxSN7q6AS5swV5TtDjguKH0XDFYSa5Tu9sBwX5kfS82kbh5RRt9jD5v+9qNd37PF4IjBFUMdSEMwAQy6DNsqVnEC0+JrtTtPGj4QxML3ElGIknNyU5OF8JyfmlY/Gd81jk2tBOJ93Xv1siueLWW3wYf1c8DhKF0Hw5bSGyjBsqy0JFr+p8zUv5HLf64kVydOrP8jz0n2y3dYWLbn1QiMvbiLiNO6hWOZMbOshekFPzno9fO7fnpB60HGj3hX/7fyxZlui2xcQK6GfZR9/+YCYSTHj05Vy5n+xEzgvNafTJjD+Vq497TWanfWd/caO96Ot++69av2Zdu+4tZkI4rHKf1vTfansua/MGFtkRVx0AjDwDkAwsAZPrvxqHXcrY/N33IPl/2Po3ou9iGuiky7NP4Mpn5c/gtVNSYGTxAEQRAEQRAEQRAEQRAEMRdnwZIvZiz5JjYG95Zc/TcAAP//Gulcrg==") r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) write$P9_RVERSION(r4, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair(0x29, 0x2, 0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xf) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 7m50.814310475s ago: executing program 6 (id=2841): waitid(0x0, 0x0, 0x0, 0x61000006, 0x0) waitid(0x0, 0x0, &(0x7f0000000040), 0x1, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 7m50.295250905s ago: executing program 6 (id=2843): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@iocharset={'iocharset', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0xa0}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@dmask}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) 7m49.760619225s ago: executing program 6 (id=2845): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000f80)={0xa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @dev, 0x1ff}, 0x1c) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000100)=0xfffffffe) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}) read$eventfd(r3, &(0x7f0000000240), 0x8) io_uring_enter(r3, 0x2def, 0x3fff, 0x8, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) connect(0xffffffffffffffff, &(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x102, @private0, 0x8, 0x1}, 0x80) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a", 0xa}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) 7m45.985522336s ago: executing program 6 (id=2850): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x23108000) 7m41.76621246s ago: executing program 6 (id=2853): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r0, 0x8800000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000886739cf44094938c91b0e168fdbf89f2f2fc0dfb70734caaa8dc0cb9c88e01ce5ef8610ffe4b63c9caf293f52c8e16bcabaff24c3596121d5de8c0c8438cf54427734b7e2d782c0c9cf9c0cde4b5a82fd0f9291a5dd5e72ad448138910fc7a19878e51cf1a3959081b14", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x520, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x2}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x8199, 0x800000000000000, 0x1}) 7m36.68241938s ago: executing program 6 (id=2858): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x82) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000800)) 7m20.373644947s ago: executing program 41 (id=2858): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x82) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000800)) 4m6.243395578s ago: executing program 2 (id=3482): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r0, &(0x7f0000000280), 0x0}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socket$inet(0xa, 0x801, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 4m5.953250822s ago: executing program 2 (id=3483): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}], 0x1, 0x7ffeedc3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x64, 0x30, 0x25, 0x0, 0x0, {}, [{0x50, 0x1, [@m_pedit={0x4c, 0x1, 0x0, 0x0, {{0xa}, {0x20, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x1c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) 4m5.226732578s ago: executing program 2 (id=3487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m4.795705132s ago: executing program 2 (id=3489): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) clock_gettime(0xfffffffffffffffc, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) 4m1.231023114s ago: executing program 2 (id=3499): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0x0, 0x0, 0x0) 4m0.363392792s ago: executing program 2 (id=3503): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r0, 0x8800000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000886739cf44094938c91b0e168fdbf89f2f2fc0dfb70734caaa8dc0cb9c88e01ce5ef8610ffe4b63c9caf293f52c8e16bcabaff24c3596121d5de8c0c8438cf54427734b7e2d782c0c9cf9c0cde4b5a82fd0f9291a5dd5e72ad448138910fc7a19878e51cf1a3959081b14", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x520, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x2}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x8199, 0x800000000000000, 0x1}) 3m44.493051961s ago: executing program 42 (id=3503): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) ftruncate(r0, 0x8800000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000886739cf44094938c91b0e168fdbf89f2f2fc0dfb70734caaa8dc0cb9c88e01ce5ef8610ffe4b63c9caf293f52c8e16bcabaff24c3596121d5de8c0c8438cf54427734b7e2d782c0c9cf9c0cde4b5a82fd0f9291a5dd5e72ad448138910fc7a19878e51cf1a3959081b14", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="bb64753734e50b1e3f220065b7a35d32", 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x520, 0x1d8, 0xf8, 0x378, 0x378, 0x378, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'ip_vti0\x00', 'ip6_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0x3a010000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x3000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {}, 0xfff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1, 0x2}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000380)={{@my=0x1}, 0x8199, 0x800000000000000, 0x1}) 3m31.959348041s ago: executing program 9 (id=3570): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1d, r1}, 0x10, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) 3m30.33620389s ago: executing program 9 (id=3573): r0 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x400, 0x0, 0xe9}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f00000000c0)=0x32) read(r4, &(0x7f00000019c0)=""/4107, 0x100b) 3m24.622274706s ago: executing program 9 (id=3578): write(0xffffffffffffffff, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f", 0x1f) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3m23.918995833s ago: executing program 9 (id=3581): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f00000001c0)='./file1\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='./bus\x00') 3m22.523715475s ago: executing program 9 (id=3584): ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listxattr(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x4, 0x0, 0x0, 0x0, 0x0, 0x80, "66864e02"}, 0x3, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3m20.507164845s ago: executing program 9 (id=3587): r0 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x400, 0x0, 0xe9}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)=0x32) read(r5, &(0x7f00000019c0)=""/4107, 0x100b) 3m4.856712088s ago: executing program 43 (id=3587): r0 = syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0xfffffffe, 0x400, 0x0, 0xe9}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f00000000c0)=0x32) read(r5, &(0x7f00000019c0)=""/4107, 0x100b) 2m0.909793645s ago: executing program 8 (id=3724): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000351f12e200605f811a0bf0102030109021200010967"], &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, 0x0, 0x0}, 0x0) 1m56.514941251s ago: executing program 8 (id=3740): write(0xffffffffffffffff, &(0x7f0000000000)="240000001e00ff3bd90ea7eff078000000000000000000000000000008000f", 0x1f) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c00090000000000000000000200000004"], 0x24}}, 0x0) 1m54.084449378s ago: executing program 8 (id=3743): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') 1m45.331021283s ago: executing program 8 (id=3754): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8010, r0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x1}) socket$inet6_dccp(0xa, 0x6, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x80) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='htcp\x00', 0x5) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 1m39.446471113s ago: executing program 8 (id=3758): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) epoll_create1(0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2=0xe0000001}, @timestamp_reply={0x11}}}}}, 0x0) 1m38.746974392s ago: executing program 8 (id=3761): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f00000000c0)) 1m21.979455149s ago: executing program 44 (id=3761): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r5, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f00000000c0)) 10.54014931s ago: executing program 4 (id=3917): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f00000001c0)='./file1\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='./bus\x00') 9.246730038s ago: executing program 5 (id=3919): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x568047571b0c3be3}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd70000000000007000000080001002800000008000300", @ANYRES32=r6, @ANYBLOB="140004006e69637666300000000000e1ff0700000800050006000000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01bc911cbd00000000000800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.178203458s ago: executing program 4 (id=3920): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write(r1, &(0x7f0000000000)="5c000300010001", 0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x1, 0x20, 0x0, 0x0, {{0xe, 0x4, 0x0, 0x1, 0x38, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @local, {[@ssrr={0x89, 0x1f, 0x51, [@private=0xa010100, @remote, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @end, @noop]}}}}}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 7.50541593s ago: executing program 3 (id=3922): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000080)={&(0x7f0000000300)={{@my=0x0}, {@my=0x0}, 0x400, "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"}, 0x418}) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) socket$rds(0x15, 0x5, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setsig(r1, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, 0x0, 0x4000, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0x804000000000000) 6.678990818s ago: executing program 3 (id=3923): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000072009fb3"], 0x18}}, 0x24000490) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0], 0xc0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) r2 = msgget(0x2, 0x217) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(r2, &(0x7f00000002c0)={0x1}, 0x8, 0x0) 6.590325612s ago: executing program 5 (id=3924): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.572060806s ago: executing program 4 (id=3925): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f000000", @ANYRES32=r3], 0x1c}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 6.294438761s ago: executing program 7 (id=3926): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8086, &(0x7f0000000480)={[{@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa2a4}}]}, 0x1, 0x4a9, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) 5.74192666s ago: executing program 4 (id=3927): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100003052cbd7000ffff00000d000000", @ANYRES32=0x0, @ANYBLOB="4040020028030100050011000100000008000a00", @ANYRES32, @ANYBLOB="140012800a000100767863616e"], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 5.670631921s ago: executing program 5 (id=3928): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000eca7306369c1e20e804e90000250000000e0016006e2e363cec3acc157c657464657673696d30000008008b00"/69, @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464"], 0x64}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x406c040) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c826d8bce62cb84c8b765cbac71c46bc4718", @ANYRES16=r1], 0x398}}, 0x0) 5.242919836s ago: executing program 3 (id=3929): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f00000001c0)='./file1\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='./bus\x00') 5.238657481s ago: executing program 7 (id=3930): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)="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", 0x86d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000027c0)="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", 0x348}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000008c0)="a2f21429d160fdbd776e61e1d776c39006", 0x11}, {&(0x7f00000037c0)}, {&(0x7f0000000900)="0a46f34c9e2472c9a3619f2b921c25b08497aa750b7ed7f3a148", 0x1a}], 0x4}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x58, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1e, 0xa8, @random="63879160953fadb68e176101455cd8517fc21321c69ffd47e5cb"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x14) 4.714343835s ago: executing program 7 (id=3931): r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x1008801, &(0x7f0000000080)=ANY=[], 0x1, 0x1f8, &(0x7f0000000400)="$eJzsmTGL1EAUx/8zyWbPQxQbCxsLD1T0sklW5ZpDTrC0uhO1DF487py7lb0IdweCi42NpYUfwC8gaLGVhZ2drRYqCBaunZ0wMskkmU3YJSvKLtz7wU7+mcx7897b7AtsQBDEoeXrl1+fn11bWrsI4CgW0NTz361iDTfWf3rx8MLz5evWq48v3+0ce9Qv+2MApKy/vwPg7YqFxuPjybmUw9YL+rgGnuub4Div9S0wuFmssrCOwHBHT28ZunNECxGxux2xfm9TRJ4afDUEamgDRQg2gEGPYV1XRu3AjPh29w/uhwLopkJEmWjIbJ/KpUnFuPol8a1wLBslUN/X7adPeurc1fOeUT8fHL7WbTCsar2EJlzXLUpi5H/KLvxblfz/QZL/Q5xYnIkwquL11m+ZMhvxQN/Sf+1HGU89i7qClWdU9vnMyUH/fdXqW+0tfoaC6R/L1DNNBebScCqXPswLcaO0WDbre3Yw5rYp+pMqx1mjP9mw8/7RircftHb3DxY3t8ONaCPaCYL2Fe+S510OWkkjSscx/W8u6U/zhv/GiLUOc7AXxnHX3wPirp+fB+lodNzVN50fiQ1P+h+/ijOpD6afWfmDsgTTH54clTpnjQyeIAiCIAiCIAiCIAiCIAhiIk6DQb9cYNk7sWHMPyT/BAAA//9cM2SO") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES64=r0, @ANYBLOB="30512ca73e7d996cceffe04a0d78c011024ca62a2e5ecf4258fba7d19d2f2efa94bb7f"], 0x48) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x800, 0x0, 0x2}, {0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) 4.638864038s ago: executing program 3 (id=3932): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4010, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) utime(&(0x7f00000001c0)='./file0\x00', 0x0) acct(&(0x7f00000002c0)='./file0\x00') 3.455671311s ago: executing program 3 (id=3933): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x568047571b0c3be3}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd70000000000007000000080001002800000008000300", @ANYRES32=r6, @ANYBLOB="140004006e69637666300000000000e1ff0700000800050006000000"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01bc911cbd00000000000800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.783554629s ago: executing program 4 (id=3934): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}, 0x0, 0x4}, 0x80, 0x0}, 0x24004059) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)={0x400003}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xab, 0x4, 0x0, 0x0, 0x40000000}, {0x8001, 0x0, 0x6, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040084}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.731856206s ago: executing program 5 (id=3935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.112602375s ago: executing program 7 (id=3936): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f000000", @ANYRES32=r3], 0x1c}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 910.895219ms ago: executing program 5 (id=3937): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') 688.329334ms ago: executing program 3 (id=3938): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000072009fb3"], 0x18}}, 0x24000490) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0], 0xc0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@random="2f5b02cb75db", @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) r2 = msgget(0x2, 0x217) msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgsnd(r2, &(0x7f00000002c0)={0x1}, 0x8, 0x0) 614.091753ms ago: executing program 4 (id=3939): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000180)=""/199) 315.286618ms ago: executing program 5 (id=3940): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)="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", 0x86d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000027c0)="4ad3f4d8123f8decc2b470af1cbf7a1d2533ce928be8bb3a08ae2e0e7e118ab076a95bc72217d3ebb314579c07c84dd99c618fff54c8cd5a194899e26d2d0bdba81355e8d2954c33e847a56bf46f9657fbcf90be90659aeab74ce1487d4fc7f05eec8aa537be830531fd954beddaa8f0b9858534fda3219f0bc9114b9bdf59b4ef116c80a9828daeed4e6f75738a6563d3f4187b29ad1455d390bda768e9f27e6f11d9dfe701de99e070a30a59c9eb3b325fea33f19a9297843e0206570b750a02b56b3182159910ee64dff2c6ce3dd4fcd8d6a9f7736ba285b530a882c5b5aa71b2fe02d27cdfb4157f5da1bb9850e772286d90e93b3b5e749d305da752c7e0689c7d92b5a23e050d69f2ad9e48f131d05641f61fa7fc61fef33484673809a91f16981029d14b4e6139c2a6635ba577679643708ac9d66ebf03c2331cdf2b90b2fbc1cba3e53e4c171fdaf66b1023ec4db6fb9d3c3255c2e784696c2469aab0038cc112c105bcf3c6c12b04ceb055b56504dc82fb3e0b18249102317201ea71eca7e609354d3e69b5c3566de0e1bd3e6806cb1c9a4e2a44be81e48fd0d3c9724f2e092da061edc16859e2a0e4414cc2ab36aaaf76440f493ff177fa69513055c1dd3d698f6626fcf4cbaaaeac4ce173def73a9ac49c0a2de0cfc9b25c0a723f1c7efd558e0870e1f5b153f24bb81341c730fe764fa5ff381b3ab22065764abc7fc9ad87ff4a932b401c209592ce9252d10d09fe4c5afb28cc28219ca73449932ce1e15b5fa1c0c5cbf67c2105e7ba05a3a5c6fb300fec7caf1789647b5046634a5ef7f0e3181932e659c32c98ca6528e4691579d46d9f08bb5b111b7a5e4c6ebf418e0dddca1f17765733862c9f86cfe4d11e4dfa7d40c5a1f5d0aa155861cb5ec0ccfe9ace2abf2c7c2e0af9bfdb87d27ca73bd203a757b24ea5c39aecbd6552beee9db2e682128b64ecd8fe662bc442e0ec99923b4ba40e49a260efab31abae35dbe26ef94a4047d53d64d51141e9db47123a0cb10532c50516468e0500d1854b77e41c524af77c4f443d3dc26e463335fa2703a25e4471b258bcdc3d368353a010e6782d3edfa9be450cea50b27d1c6afd9f2291e1176a422377a107d994073c3f8c13e66bea8dac1ae86be508466b028bd8cfca43467afb9fffe6ba912cb7a2a798770fc302", 0x348}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f00000008c0)="a2f21429d160fdbd776e61e1d776c39006", 0x11}, {&(0x7f00000037c0)}, {&(0x7f0000000900)="0a46f34c9e2472c9a3619f2b921c25b08497aa750b7ed7f3a148", 0x1a}], 0x4}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r2) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d40)={0x58, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x1e, 0xa8, @random="63879160953fadb68e176101455cd8517fc21321c69ffd47e5cb"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x8}, 0x14) 266.619998ms ago: executing program 7 (id=3941): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f00000001c0)='./file1\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000280)='./file1\x00', &(0x7f0000000200)='./bus\x00') 0s ago: executing program 7 (id=3942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24006018}, 0x40044) kernel console output (not intermixed with test programs): m0 [ 1326.770433][ T3941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.778621][ T3941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1326.795976][ T3941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.803994][ T3941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1327.208677][T13656] Bluetooth: hci2: command 0x0406 tx timeout [ 1327.795376][T13656] Bluetooth: hci4: command 0x0c1a tx timeout [ 1327.801717][T13656] Bluetooth: hci3: command 0x0405 tx timeout [ 1327.813370][T13656] Bluetooth: hci1: command 0x0405 tx timeout [ 1327.820520][T13656] Bluetooth: hci6: command 0x0406 tx timeout [ 1327.957472][T13656] Bluetooth: hci0: command 0x041b tx timeout [ 1328.195580][T13875] chnl_net:caif_netlink_parms(): no params data found [ 1328.592796][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2608'. [ 1329.737972][T13908] loop9: detected capacity change from 0 to 128 [ 1329.874778][ T5794] Bluetooth: hci4: command 0x0c1a tx timeout [ 1329.929499][T13908] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1330.013754][T13908] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1330.043776][ T5794] Bluetooth: hci0: command 0x041b tx timeout [ 1330.624980][T10442] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1330.644216][T13875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1330.652141][T13875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1330.660290][T13875] bridge_slave_0: entered allmulticast mode [ 1330.672653][T13875] bridge_slave_0: entered promiscuous mode [ 1330.747509][T13875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1330.755473][T13875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.763603][T13875] bridge_slave_1: entered allmulticast mode [ 1330.773631][T13875] bridge_slave_1: entered promiscuous mode [ 1330.809324][T13756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.230506][T13875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.330506][T13875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.711092][T13875] team0: Port device team_slave_0 added [ 1331.783633][T13875] team0: Port device team_slave_1 added [ 1331.952533][ T5794] Bluetooth: hci4: command 0x0c1a tx timeout [ 1332.080569][T13875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1332.088260][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.115764][T13875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1332.142677][ T5794] Bluetooth: hci0: command 0x041b tx timeout [ 1332.243152][T13875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1332.250390][T13875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1332.277061][T13875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1332.464485][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2617'. [ 1332.806844][T13875] hsr_slave_0: entered promiscuous mode [ 1332.841832][T13875] hsr_slave_1: entered promiscuous mode [ 1332.864805][T13875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1332.874133][T13875] Cannot create hsr debugfs directory [ 1332.959582][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2619'. [ 1334.224447][ T5794] Bluetooth: hci0: command 0x041b tx timeout [ 1334.477415][T13756] veth0_vlan: entered promiscuous mode [ 1334.825496][T13756] veth1_vlan: entered promiscuous mode [ 1335.295505][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.302600][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1335.890415][T13875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1336.031275][T13756] veth0_macvtap: entered promiscuous mode [ 1336.087652][T13875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1336.249282][T13875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1336.272905][ T5794] Bluetooth: hci0: command 0x041b tx timeout [ 1336.298445][T13875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1336.364352][T13756] veth1_macvtap: entered promiscuous mode [ 1336.727061][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.738115][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.748568][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.760939][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.771308][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.782477][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.792725][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1336.803621][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.819351][T13756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1336.936706][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.947763][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.960630][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.972905][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.983440][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.994314][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.004597][T13756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.015422][T13756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.030418][T13756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1337.224172][T13756] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.233982][T13756] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.243389][T13756] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.252681][T13756] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.459028][T13958] loop0: detected capacity change from 0 to 256 [ 1337.833502][T13875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1337.917435][T13958] FAT-fs (loop0): Directory bread(block 64) failed [ 1337.924769][T13958] FAT-fs (loop0): Directory bread(block 65) failed [ 1337.931762][T13958] FAT-fs (loop0): Directory bread(block 66) failed [ 1337.938913][T13958] FAT-fs (loop0): Directory bread(block 67) failed [ 1337.946067][T13958] FAT-fs (loop0): Directory bread(block 68) failed [ 1337.953246][T13958] FAT-fs (loop0): Directory bread(block 69) failed [ 1337.960266][T13958] FAT-fs (loop0): Directory bread(block 70) failed [ 1337.967293][T13958] FAT-fs (loop0): Directory bread(block 71) failed [ 1337.974382][T13958] FAT-fs (loop0): Directory bread(block 72) failed [ 1337.981191][T13958] FAT-fs (loop0): Directory bread(block 73) failed [ 1338.027625][T13875] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.070450][ T992] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.078406][ T992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.162573][ T992] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.170392][ T992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1338.359501][ T5794] Bluetooth: hci0: command 0x041b tx timeout [ 1338.424183][T13875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1338.438258][T13875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1339.306139][T13963] syz.0.2624: attempt to access beyond end of device [ 1339.306139][T13963] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 1339.322653][T13963] syz.0.2624: attempt to access beyond end of device [ 1339.322653][T13963] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 1339.356501][ T29] audit: type=1800 audit(1734478865.464:374): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2624" name="file0" dev="loop0" ino=1048624 res=0 errno=0 [ 1341.105605][T13875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1341.653021][T13875] veth0_vlan: entered promiscuous mode [ 1341.675864][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2629'. [ 1341.793885][T13875] veth1_vlan: entered promiscuous mode [ 1342.156877][T13875] veth0_macvtap: entered promiscuous mode [ 1342.221510][T13875] veth1_macvtap: entered promiscuous mode [ 1342.336349][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.347266][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.359060][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.369914][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.380107][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.391209][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.401392][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.412338][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.422538][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1342.434386][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.451029][T13875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1342.798526][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.809713][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.819928][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.830761][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.845263][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.856919][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.867189][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.878047][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.888406][T13875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1342.899260][T13875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1342.914979][T13875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1343.207449][T13875] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.216886][T13875] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.226842][T13875] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1343.236246][T13875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1348.643770][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.651910][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.152738][ T1804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1349.160978][ T1804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.430424][T14027] overlayfs: failed to resolve './file0': -2 [ 1351.499945][T14029] lo speed is unknown, defaulting to 1000 [ 1351.510403][T14029] lo speed is unknown, defaulting to 1000 [ 1351.517849][T14029] lo speed is unknown, defaulting to 1000 [ 1351.586407][T14024] siw: device registration error -23 [ 1351.595048][T14024] »»»»»»: renamed from lo (while UP) [ 1351.975506][T14029] infiniband sz1: set active [ 1351.981697][T14029] infiniband sz1: added »»»»»» [ 1351.991557][T14029] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1352.001334][T14029] infiniband sz1: Couldn't open port 1 [ 1352.051282][T14029] RDS/IB: sz1: added [ 1352.055832][T14029] smc: adding ib device sz1 with port count 1 [ 1352.071643][T14029] smc: ib device sz1 port 1 has pnetid [ 1352.648610][T13724] »»»»»» speed is unknown, defaulting to 1000 [ 1352.656880][T14029] »»»»»» speed is unknown, defaulting to 1000 [ 1353.123973][T14029] »»»»»» speed is unknown, defaulting to 1000 [ 1353.544692][T12343] »»»»»» speed is unknown, defaulting to 1000 [ 1354.023085][T14029] »»»»»» speed is unknown, defaulting to 1000 [ 1354.493642][T14029] »»»»»» speed is unknown, defaulting to 1000 [ 1354.962793][T14029] »»»»»» speed is unknown, defaulting to 1000 [ 1357.137138][T14029] »»»»»» speed is unknown, defaulting to 1000 [ 1357.368449][T14015] Set syz1 is full, maxelem 65536 reached [ 1358.337748][T13656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1358.453852][T13656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1358.475005][T13656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1358.525339][T13656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1358.550050][T13656] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1358.576741][T13656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1358.889236][T14037] »»»»»» speed is unknown, defaulting to 1000 [ 1359.177542][T14047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2639'. [ 1359.298475][T14037] »»»»»» speed is unknown, defaulting to 1000 [ 1360.224602][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.233132][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1360.705844][ T5794] Bluetooth: hci5: command tx timeout [ 1360.890994][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1360.899411][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1362.754232][ T5794] Bluetooth: hci5: command tx timeout [ 1363.078773][T14037] chnl_net:caif_netlink_parms(): no params data found [ 1364.915418][ T5794] Bluetooth: hci5: command tx timeout [ 1366.946201][T14037] bridge0: port 1(bridge_slave_0) entered blocking state [ 1366.954312][T14037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.963131][T14037] bridge_slave_0: entered allmulticast mode [ 1366.973024][T14037] bridge_slave_0: entered promiscuous mode [ 1366.994004][ T5794] Bluetooth: hci5: command tx timeout [ 1367.125298][T14037] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.134999][T14037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1367.143208][T14037] bridge_slave_1: entered allmulticast mode [ 1367.153085][T14037] bridge_slave_1: entered promiscuous mode [ 1367.215885][T14091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2650'. [ 1367.681605][T14037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1367.794874][T14037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1368.466238][T14037] team0: Port device team_slave_0 added [ 1368.608215][T14037] team0: Port device team_slave_1 added [ 1371.406423][T14037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.415590][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.445452][T14037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1371.938265][T14037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1371.949044][T14037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1371.977315][T14037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1373.529644][T14037] hsr_slave_0: entered promiscuous mode [ 1373.640935][T14037] hsr_slave_1: entered promiscuous mode [ 1373.673787][T14037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1373.681910][T14037] Cannot create hsr debugfs directory [ 1373.978118][ T4151] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.353765][ T4151] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.617232][ T4151] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1374.954363][ T4151] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.833845][ T4151] bridge_slave_1: left allmulticast mode [ 1376.839827][ T4151] bridge_slave_1: left promiscuous mode [ 1376.846903][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.935843][ T4151] bridge_slave_0: left allmulticast mode [ 1376.941902][ T4151] bridge_slave_0: left promiscuous mode [ 1376.949099][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.940970][ T4151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1379.094691][ T4151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1379.173284][ T4151] bond0 (unregistering): Released all slaves [ 1379.995310][ T4151] tipc: Left network mode [ 1382.236017][ T4151] hsr_slave_0: left promiscuous mode [ 1382.330485][ T4151] hsr_slave_1: left promiscuous mode [ 1382.399616][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.408137][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.564524][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.572705][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.743886][ T4151] veth1_macvtap: left promiscuous mode [ 1382.749900][ T4151] veth0_macvtap: left promiscuous mode [ 1382.756060][ T4151] veth1_vlan: left promiscuous mode [ 1382.761705][ T4151] veth0_vlan: left promiscuous mode [ 1384.678180][T14143] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2667'. [ 1384.791773][ T4151] team0 (unregistering): Port device team_slave_1 removed [ 1384.820912][ T4151] team0 (unregistering): Port device team_slave_0 removed [ 1385.140386][T14037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1385.294017][T14037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1385.484089][T14037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1385.574635][T14037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1385.688026][T14150] kvm: emulating exchange as write [ 1385.947643][ T4151] IPVS: stop unused estimator thread 0... [ 1387.315718][T14037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1387.548162][T14037] 8021q: adding VLAN 0 to HW filter on device team0 [ 1387.658344][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.666295][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1387.853616][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.861500][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1387.948064][T14037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1391.877124][T14037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.558738][T14037] veth0_vlan: entered promiscuous mode [ 1392.692008][T14037] veth1_vlan: entered promiscuous mode [ 1393.121034][T14037] veth0_macvtap: entered promiscuous mode [ 1393.171004][T14206] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2689'. [ 1393.280825][T14037] veth1_macvtap: entered promiscuous mode [ 1393.581956][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.593495][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.603995][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.615060][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.625411][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.636466][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.646717][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.658760][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.669344][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1393.680194][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1393.695325][T14037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.041851][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.053082][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.066572][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.078446][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.088702][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.099547][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.109923][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.121624][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.134738][T14037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.145854][T14037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.160913][T14037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.354018][T14037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.363343][T14037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.376056][T14037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.386461][T14037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.519148][T12343] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1395.722568][T12343] usb 10-1: Using ep0 maxpacket: 16 [ 1395.805608][T12343] usb 10-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1395.816340][T12343] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.826337][T12343] usb 10-1: Product: syz [ 1395.834605][T12343] usb 10-1: Manufacturer: syz [ 1395.839759][T12343] usb 10-1: SerialNumber: syz [ 1395.966770][T12343] usb 10-1: config 0 descriptor?? [ 1396.029857][T12343] ftdi_sio 10-1:0.0: FTDI USB Serial Device converter detected [ 1396.041891][T12343] usb 10-1: Detected FT232H [ 1396.243201][T12343] ftdi_sio ttyUSB0: Unable to read latency timer: -121 [ 1396.453604][T12343] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1396.485259][T12343] ftdi_sio 10-1:0.0: GPIO initialisation failed: -71 [ 1396.528200][T12343] usb 10-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1396.592308][T12343] usb 10-1: USB disconnect, device number 5 [ 1396.643134][T12343] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1396.654023][T12343] ftdi_sio 10-1:0.0: device disconnected [ 1396.696223][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1396.703234][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.227594][T13724] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1397.488576][T13724] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.499354][T13724] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1397.508748][T13724] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1397.629928][T13724] usb 4-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 1397.639988][T13724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1397.651104][T13724] usb 4-1: Product: syz [ 1397.656591][T13724] usb 4-1: Manufacturer: syz [ 1397.661484][T13724] usb 4-1: SerialNumber: syz [ 1397.759029][T13724] usb 4-1: config 0 descriptor?? [ 1397.794352][T12343] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1397.809709][T13724] usb 4-1: Found Unit with invalid ID 0. [ 1398.030412][T12343] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.041348][T12343] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1398.064497][ T8967] usb 4-1: USB disconnect, device number 3 [ 1398.144605][T12343] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1398.154224][T12343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1398.163604][T12343] usb 5-1: Product: syz [ 1398.168068][T12343] usb 5-1: Manufacturer: syz [ 1398.173474][T12343] usb 5-1: SerialNumber: syz [ 1399.310385][T12343] cdc_mbim 5-1:1.0: bind() failure [ 1399.327440][T12343] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1399.334844][T12343] cdc_ncm 5-1:1.1: bind() failure [ 1399.579380][T12343] usb 5-1: USB disconnect, device number 8 [ 1404.026490][T14290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1404.034264][T14290] IPv6: NLM_F_CREATE should be set when creating new route [ 1404.882413][T12343] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1405.072706][ T3941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.080927][ T3941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.160162][T12343] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.170787][T12343] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1405.184318][T12343] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1405.193813][T12343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.307991][T12343] usb 4-1: config 0 descriptor?? [ 1405.344681][T12343] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1405.396905][ T4151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1405.405487][ T4151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1405.522011][T14306] netlink: 'syz.9.2716': attribute type 4 has an invalid length. [ 1408.170178][ T992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.555236][ T992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.966245][ T992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.485181][ T992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.828107][T13724] usb 4-1: USB disconnect, device number 4 [ 1412.627192][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.801197][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.866754][ T992] bond0 (unregistering): Released all slaves [ 1413.083037][T14336] vlan2: entered promiscuous mode [ 1413.272655][T13724] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1413.404458][T14346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2727'. [ 1413.414128][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2727'. [ 1413.553338][T13724] usb 7-1: Using ep0 maxpacket: 32 [ 1413.696015][T13724] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.706829][T13724] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1413.717346][T13724] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1413.734449][T13724] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1413.993633][T13724] usb 7-1: New USB device found, idVendor=0e25, idProduct=a400, bcdDevice= 0.40 [ 1414.003660][T13724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.013627][T13724] usb 7-1: Product: syz [ 1414.018104][T13724] usb 7-1: Manufacturer: syz [ 1414.023746][T13724] usb 7-1: SerialNumber: syz [ 1414.638824][ T992] tipc: Left network mode [ 1414.678394][T14346] bridge0: entered promiscuous mode [ 1415.253008][T13724] usb 7-1: can't set config #1, error -71 [ 1415.320808][T13724] usb 7-1: USB disconnect, device number 5 [ 1416.173615][ T992] team0: left promiscuous mode [ 1416.178857][ T992] team_slave_0: left promiscuous mode [ 1416.188255][ T992] team_slave_1: left promiscuous mode [ 1416.434858][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.443206][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.510217][ T992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.519351][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.934451][ T992] veth1_macvtap: left promiscuous mode [ 1416.940290][ T992] veth0_macvtap: left promiscuous mode [ 1416.946471][ T992] veth1_vlan: left promiscuous mode [ 1416.952106][ T992] veth0_vlan: left promiscuous mode [ 1418.765265][ T8967] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1418.908191][ T992] team0 (unregistering): Port device team_slave_1 removed [ 1419.022507][ T8967] usb 10-1: Using ep0 maxpacket: 16 [ 1419.044672][ T992] team0 (unregistering): Port device team_slave_0 removed [ 1419.777061][T12343] »»»»»» speed is unknown, defaulting to 1000 [ 1419.797832][ T8967] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1419.809322][ T8967] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1419.819681][ T8967] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1419.833746][ T8967] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1419.843469][ T8967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.229023][ T8967] usb 10-1: config 0 descriptor?? [ 1421.006834][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.014597][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.022319][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.029904][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.037673][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.045370][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.053187][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.060753][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.068795][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.076599][ T8967] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 1421.850847][ T8967] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0008/input/input11 [ 1422.488290][ T8967] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1422.564142][ T8967] usb 10-1: USB disconnect, device number 6 [ 1422.739250][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 1429.130775][T14446] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.2760' sets config #0 [ 1431.772888][T13724] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1431.957511][T13724] usb 7-1: Using ep0 maxpacket: 8 [ 1432.286773][T13724] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.297442][T13724] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1432.306797][T13724] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1432.318643][T13724] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1432.330297][T13724] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1432.339819][T13724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.695279][T13724] hub 7-1:1.0: bad descriptor, ignoring hub [ 1432.701493][T13724] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1432.711291][T13724] cdc_wdm 7-1:1.0: skipping garbage [ 1432.718080][T13724] cdc_wdm 7-1:1.0: skipping garbage [ 1432.793130][T13724] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1432.799429][T13724] cdc_wdm 7-1:1.0: Unknown control protocol [ 1433.033186][T13724] usb 7-1: USB disconnect, device number 6 [ 1433.382478][T13724] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1433.564189][T13724] usb 7-1: Using ep0 maxpacket: 8 [ 1433.857723][T13724] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.868311][T13724] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1433.877810][T13724] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1433.889460][T13724] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1433.905252][T13724] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1433.915942][T13724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.028100][T13724] hub 7-1:1.0: bad descriptor, ignoring hub [ 1434.034667][T13724] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1434.044030][T13724] cdc_wdm 7-1:1.0: skipping garbage [ 1434.049551][T13724] cdc_wdm 7-1:1.0: skipping garbage [ 1434.061576][T13724] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1434.068001][T13724] cdc_wdm 7-1:1.0: Unknown control protocol [ 1435.310344][T14499] block device autoloading is deprecated and will be removed. [ 1437.153515][ T8967] usb 7-1: USB disconnect, device number 7 [ 1448.712644][T13724] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1448.904973][T13724] usb 5-1: Using ep0 maxpacket: 32 [ 1448.966356][T13724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.977822][T13724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.988069][T13724] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1448.997605][T13724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.030822][T13724] usb 5-1: config 0 descriptor?? [ 1449.063315][T13724] hub 5-1:0.0: USB hub found [ 1449.343144][T13724] hub 5-1:0.0: 1 port detected [ 1449.532034][T13724] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1449.538952][T13724] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1449.611583][T13724] usbhid 5-1:0.0: can't add hid device: -71 [ 1449.618552][T13724] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1449.681958][T13724] usb 5-1: USB disconnect, device number 9 [ 1458.210606][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.217850][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1461.284441][ T8967] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1461.495222][ T8967] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1461.504623][ T8967] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1461.515299][ T8967] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1461.524823][ T8967] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1461.536299][ T8967] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1461.659163][ T8967] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1461.669009][ T8967] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1461.677527][ T8967] usb 4-1: Product: syz [ 1461.681983][ T8967] usb 4-1: Manufacturer: syz [ 1461.736059][ T8967] cdc_wdm 4-1:1.0: skipping garbage [ 1461.741729][ T8967] cdc_wdm 4-1:1.0: skipping garbage [ 1461.835488][ T8967] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1461.841704][ T8967] cdc_wdm 4-1:1.0: Unknown control protocol [ 1462.350818][T13656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1462.368101][T13656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1462.383883][T13656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1462.417367][T13656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1462.431935][T13656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1462.445662][T13656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1462.758525][T14598] Bluetooth: MGMT ver 1.23 [ 1462.921395][T13724] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1463.163958][T14592] »»»»»» speed is unknown, defaulting to 1000 [ 1463.167602][T13724] usb 10-1: Using ep0 maxpacket: 8 [ 1463.194804][T13724] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1463.203753][T13724] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1463.214041][T13724] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1463.224664][T13724] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1463.245040][T13724] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1463.260756][T13724] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1463.270392][T13724] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.216290][T13724] usb 4-1: USB disconnect, device number 5 [ 1464.360219][ T4151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.513351][T13656] Bluetooth: hci2: command tx timeout [ 1464.644140][ T4151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.902475][ T4151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.943862][T13656] Bluetooth: hci0: command 0x041b tx timeout [ 1464.944954][ T5794] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1465.520030][ T4151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.592452][ T5794] Bluetooth: hci2: command tx timeout [ 1467.356023][ T4151] bridge_slave_1: left allmulticast mode [ 1467.356148][ T4151] bridge_slave_1: left promiscuous mode [ 1467.357363][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1467.657652][ T4151] bridge_slave_0: left allmulticast mode [ 1467.657863][ T4151] bridge_slave_0: left promiscuous mode [ 1467.658838][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.657760][T12202] usb 10-1: USB disconnect, device number 7 [ 1468.673757][ T5794] Bluetooth: hci2: command tx timeout [ 1469.297837][ T4151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.451138][ T4151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1469.545084][ T4151] bond0 (unregistering): Released all slaves [ 1469.851149][T14592] chnl_net:caif_netlink_parms(): no params data found [ 1470.759677][ T5794] Bluetooth: hci2: command tx timeout [ 1471.896360][ T4151] hsr_slave_0: left promiscuous mode [ 1472.396583][ T4151] hsr_slave_1: left promiscuous mode [ 1472.538687][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1472.546625][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1472.645581][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1472.653779][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1472.807363][ T4151] veth1_macvtap: left promiscuous mode [ 1472.816488][ T4151] veth0_macvtap: left promiscuous mode [ 1472.823961][ T4151] veth1_vlan: left promiscuous mode [ 1472.829538][ T4151] veth0_vlan: left promiscuous mode [ 1474.023674][ T4151] team0 (unregistering): Port device team_slave_1 removed [ 1474.224703][ T4151] team0 (unregistering): Port device team_slave_0 removed [ 1476.298551][T14592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.307679][T14592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1476.315721][T14592] bridge_slave_0: entered allmulticast mode [ 1476.325483][T14592] bridge_slave_0: entered promiscuous mode [ 1476.566735][T14592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.575539][T14592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.583616][T14592] bridge_slave_1: entered allmulticast mode [ 1476.593188][T14592] bridge_slave_1: entered promiscuous mode [ 1477.195955][T14592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.337656][T14592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1477.773321][T14592] team0: Port device team_slave_0 added [ 1477.840353][T14592] team0: Port device team_slave_1 added [ 1478.101311][T14592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.109014][T14592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.138638][T14592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.162576][ T8967] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1478.226656][T14592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.234171][T14592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1478.263746][T14592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.363527][ T8967] usb 7-1: Using ep0 maxpacket: 8 [ 1478.410456][ T8967] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1478.420199][ T8967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.487167][ T8967] usb 7-1: config 0 descriptor?? [ 1478.763323][ T8967] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1478.927803][T14592] hsr_slave_0: entered promiscuous mode [ 1479.195666][T14592] hsr_slave_1: entered promiscuous mode [ 1479.345672][T14592] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1479.354510][T14592] Cannot create hsr debugfs directory [ 1479.472014][ T8967] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1479.483615][ T8967] asix 7-1:0.0: probe with driver asix failed with error -61 [ 1480.593072][T13810] usb 7-1: USB disconnect, device number 8 [ 1483.098326][T14592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1483.263562][T14592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1483.394159][T14592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1483.473733][T14592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1484.657715][T14592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1484.873153][T14592] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.926101][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.934035][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1485.011118][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.019021][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1485.093153][T13810] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1485.273416][T13810] usb 7-1: Using ep0 maxpacket: 8 [ 1485.337991][T13810] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1485.347758][T13810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.404851][T13810] usb 7-1: config 0 descriptor?? [ 1485.626583][T13810] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1486.084428][T13810] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1486.096756][T13810] asix 7-1:0.0: probe with driver asix failed with error -61 [ 1486.352484][T12202] usb 7-1: USB disconnect, device number 9 [ 1490.868969][T14592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.575523][T14740] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1497.553180][T14592] veth0_vlan: entered promiscuous mode [ 1497.897677][T14592] veth1_vlan: entered promiscuous mode [ 1499.144501][ T8967] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1499.302315][T14592] veth0_macvtap: entered promiscuous mode [ 1499.441136][T14592] veth1_macvtap: entered promiscuous mode [ 1499.773770][T14592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.784942][T14592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.795139][T14592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.805970][T14592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.816132][T14592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.827006][T14592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.837411][T14592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1499.848256][T14592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1499.863852][T14592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1500.182492][T14592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.193743][T14592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.203942][T14592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.214794][T14592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.224981][T14592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.235737][T14592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.245981][T14592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1500.256746][T14592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1500.271888][T14592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1500.686223][T14592] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.695750][T14592] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.704927][T14592] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.714254][T14592] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1501.037568][ T8967] usb 10-1: Using ep0 maxpacket: 8 [ 1501.049147][ T8967] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1501.058915][ T8967] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.072472][ T8967] usb 10-1: config 0 descriptor?? [ 1501.696342][ T8967] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1501.707709][ T8967] asix 10-1:0.0: probe with driver asix failed with error -71 [ 1501.741580][ T8967] usb 10-1: USB disconnect, device number 8 [ 1512.869535][T12202] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1512.877648][ T29] audit: type=1326 audit(1734479038.984:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14820 comm="syz.9.2875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c3d385d29 code=0x0 [ 1513.042872][T12202] usb 5-1: Using ep0 maxpacket: 8 [ 1513.088712][T12202] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1513.098745][T12202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.141114][T12202] usb 5-1: config 0 descriptor?? [ 1513.296781][ T3941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.305961][ T3941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.424297][T12202] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1513.513694][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1513.522016][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.925172][T12202] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1513.937461][T12202] asix 5-1:0.0: probe with driver asix failed with error -61 [ 1514.189154][T13724] usb 5-1: USB disconnect, device number 10 [ 1517.064980][T13656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1517.160401][T13656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1517.197079][T13656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1517.223026][T13656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1517.679318][T13656] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1517.698285][T13656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1518.430706][T14841] »»»»»» speed is unknown, defaulting to 1000 [ 1519.182038][ T29] audit: type=1326 audit(1734479045.264:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.3.2885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x0 [ 1519.589171][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1519.596792][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1519.792912][T13656] Bluetooth: hci5: command tx timeout [ 1520.099033][T14841] chnl_net:caif_netlink_parms(): no params data found [ 1520.832564][T12202] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1521.013506][T12202] usb 10-1: Using ep0 maxpacket: 8 [ 1521.077536][T12202] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1521.087406][T12202] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.198571][T12202] usb 10-1: config 0 descriptor?? [ 1521.443787][T12202] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1521.685640][ T4151] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.981792][T13656] Bluetooth: hci5: command tx timeout [ 1522.238595][ T4151] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.674278][ T4151] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1522.810533][T12202] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1522.821775][T12202] asix 10-1:0.0: probe with driver asix failed with error -61 [ 1522.842560][T14841] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.850362][T14841] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.858545][T14841] bridge_slave_0: entered allmulticast mode [ 1522.868343][T14841] bridge_slave_0: entered promiscuous mode [ 1523.030911][T13724] usb 10-1: USB disconnect, device number 9 [ 1523.054814][T14841] bridge0: port 2(bridge_slave_1) entered blocking state [ 1523.062893][T14841] bridge0: port 2(bridge_slave_1) entered disabled state [ 1523.070846][T14841] bridge_slave_1: entered allmulticast mode [ 1523.080573][T14841] bridge_slave_1: entered promiscuous mode [ 1523.200609][ T4151] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1523.996894][T14841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.143828][T13656] Bluetooth: hci5: command tx timeout [ 1524.166057][T14841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.209390][ T4151] bridge_slave_1: left allmulticast mode [ 1524.216078][ T4151] bridge_slave_1: left promiscuous mode [ 1524.223067][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.252057][ T4151] bridge_slave_0: left allmulticast mode [ 1524.258154][ T4151] bridge_slave_0: left promiscuous mode [ 1524.265182][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.972992][ T4151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1525.033423][ T4151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1525.050767][ T4151] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1525.079933][ T4151] bond0 (unregistering): Released all slaves [ 1525.101797][ T4151] bond1 (unregistering): Released all slaves [ 1525.600374][T14841] team0: Port device team_slave_0 added [ 1525.775229][T14841] team0: Port device team_slave_1 added [ 1526.033751][T14841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1526.041472][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.068707][T14841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.091847][T14841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.102726][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.131254][T14841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.247564][T13656] Bluetooth: hci5: command tx timeout [ 1528.070479][ T4151] hsr_slave_0: left promiscuous mode [ 1528.092988][ T4151] hsr_slave_1: left promiscuous mode [ 1528.109129][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1528.119727][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1528.193908][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1528.201739][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.324900][ T4151] dummy0: left allmulticast mode [ 1528.332927][ T4151] dummy0: left promiscuous mode [ 1528.338370][ T4151] veth1_macvtap: left promiscuous mode [ 1528.344763][ T4151] veth0_macvtap: left promiscuous mode [ 1528.350909][ T4151] veth1_vlan: left promiscuous mode [ 1528.357339][ T4151] veth0_vlan: left promiscuous mode [ 1528.625913][ T4151] infiniband syz0: set down [ 1529.327915][ T1838] smc: removing ib device syz0 [ 1529.860359][ T4151] team0 (unregistering): Port device team_slave_1 removed [ 1529.904093][ T4151] team0 (unregistering): Port device team_slave_0 removed [ 1529.942463][T13810] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1530.152596][T13810] usb 10-1: Using ep0 maxpacket: 8 [ 1530.170307][T13810] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1530.180314][T13810] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.343610][T13810] usb 10-1: config 0 descriptor?? [ 1531.179508][T14916] netlink: 'syz.3.2903': attribute type 1 has an invalid length. [ 1531.377008][T14841] hsr_slave_0: entered promiscuous mode [ 1531.424101][T13810] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1531.625816][T14841] hsr_slave_1: entered promiscuous mode [ 1532.693156][T13810] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1532.704633][T13810] asix 10-1:0.0: probe with driver asix failed with error -61 [ 1533.312714][ T8967] usb 10-1: USB disconnect, device number 10 [ 1537.509537][T14841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1537.583692][T14841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1537.657289][T14841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1537.744754][T14841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1539.731243][T14841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.111624][T14841] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.278242][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.286139][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.498039][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.505943][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.428889][T14841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.184479][T14841] veth0_vlan: entered promiscuous mode [ 1545.404924][T14841] veth1_vlan: entered promiscuous mode [ 1545.804369][T14841] veth0_macvtap: entered promiscuous mode [ 1545.861318][T14841] veth1_macvtap: entered promiscuous mode [ 1546.010030][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.021019][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.031304][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.043955][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.055049][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.065933][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.076161][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1546.087019][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.103718][T14841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.264017][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.275051][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.285259][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.296072][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.306309][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.317190][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.327531][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1546.338535][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1546.353520][T14841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1546.405538][T14841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.414809][T14841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.424092][T14841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1546.434443][T14841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.343501][T15040] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2935'. [ 1549.783639][T15052] fuse: Bad value for 'rootmode' [ 1552.804188][T15093] fuse: Bad value for 'rootmode' [ 1553.306913][ T3650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.315340][ T3650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1553.484638][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1553.493576][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.039831][T15132] fuse: Bad value for 'rootmode' [ 1561.641133][T15170] fuse: Unknown parameter 'use00000000000000000000' [ 1564.173665][T15189] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2985'. [ 1564.458103][T15195] fuse: Unknown parameter 'use00000000000000000000' [ 1566.461763][T15227] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2998'. [ 1566.954657][T15233] fuse: Unknown parameter 'use00000000000000000000' [ 1568.473205][T15257] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3012'. [ 1568.582398][T15256] vcan0: Master is either lo or non-ether device [ 1568.934229][T15261] fuse: Unknown parameter 'user_i00000000000000000000' [ 1570.098746][ T29] audit: type=1326 audit(1734479096.204:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d21185d29 code=0x7ffc0000 [ 1570.123083][ T29] audit: type=1326 audit(1734479096.224:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d21185d29 code=0x7ffc0000 [ 1570.146094][ T29] audit: type=1326 audit(1734479096.234:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f8d21185d29 code=0x7ffc0000 [ 1570.169118][ T29] audit: type=1326 audit(1734479096.234:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d21185d29 code=0x7ffc0000 [ 1570.193184][ T29] audit: type=1326 audit(1734479096.234:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f8d21185d29 code=0x7ffc0000 [ 1570.216594][ T29] audit: type=1326 audit(1734479096.234:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15276 comm="syz.5.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d21185d29 code=0x7ffc0000 [ 1570.683191][T15287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3025'. [ 1571.153239][T15291] fuse: Unknown parameter 'user_i00000000000000000000' [ 1572.279863][T15306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3034'. [ 1572.855606][ T29] audit: type=1326 audit(1734479098.964:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15312 comm="syz.3.3038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x0 [ 1573.056460][T15319] fuse: Unknown parameter 'user_i00000000000000000000' [ 1574.482642][T15335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 1575.039545][T15350] fuse: Unknown parameter 'user_id00000000000000000000' [ 1575.692611][ T29] audit: type=1326 audit(1734479101.784:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15356 comm="syz.2.3055" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a08185d29 code=0x0 [ 1576.759755][T15375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3062'. [ 1577.045902][T15381] fuse: Unknown parameter 'user_id00000000000000000000' [ 1579.272480][ T29] audit: type=1326 audit(1734479105.384:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15405 comm="syz.3.3074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x0 [ 1580.955584][T15419] fuse: Unknown parameter 'user_id00000000000000000000' [ 1581.029595][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1581.036592][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1582.314559][T15436] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1583.452289][ T29] audit: type=1326 audit(1734479109.544:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15445 comm="syz.4.3088" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc2d985d29 code=0x0 [ 1584.886425][T15456] fuse: Bad value for 'fd' [ 1587.484045][ T29] audit: type=1326 audit(1734479113.484:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15482 comm="syz.2.3103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a08185d29 code=0x0 [ 1588.199474][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1589.157389][T15495] fuse: Bad value for 'fd' [ 1589.959001][T13656] Bluetooth: hci5: command 0x0405 tx timeout [ 1590.325976][T15501] vlan2: entered promiscuous mode [ 1590.331342][T15501] dummy0: entered promiscuous mode [ 1590.433133][T15501] dummy0: left promiscuous mode [ 1591.123919][ T29] audit: type=1326 audit(1734479117.234:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15517 comm="syz.5.3115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d21185d29 code=0x0 [ 1592.499074][T15533] overlayfs: failed to resolve './file0': -2 [ 1592.520772][T15533] rdma_rxe: rxe_newlink: failed to add lo [ 1592.531932][T15533] lo speed is unknown, defaulting to 1000 [ 1592.538550][T15533] lo speed is unknown, defaulting to 1000 [ 1592.545786][T15533] lo speed is unknown, defaulting to 1000 [ 1592.586255][T15534] »»»»»»: renamed from lo (while UP) [ 1592.601506][T15533] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1592.669905][T15533] »»»»»» speed is unknown, defaulting to 1000 [ 1592.679417][T15533] »»»»»» speed is unknown, defaulting to 1000 [ 1592.688627][T15533] »»»»»» speed is unknown, defaulting to 1000 [ 1592.697629][T15533] »»»»»» speed is unknown, defaulting to 1000 [ 1592.706608][T15533] »»»»»» speed is unknown, defaulting to 1000 [ 1597.659279][T15566] overlayfs: failed to resolve './file0': -2 [ 1600.824024][T15584] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1603.755035][T15606] overlayfs: failed to resolve './file0': -2 [ 1603.768936][T15606] rdma_rxe: rxe_newlink: failed to add lo [ 1603.779371][T15606] siw: device registration error -23 [ 1603.790092][T15606] »»»»»»: renamed from lo (while UP) [ 1609.315472][T15644] overlayfs: failed to resolve './file0': -2 [ 1609.326346][T15644] rdma_rxe: rxe_newlink: failed to add lo [ 1609.338456][T15644] siw: device registration error -23 [ 1609.347725][T15644] »»»»»»: renamed from lo [ 1616.570048][T15686] overlayfs: failed to resolve './file0': -2 [ 1622.052804][T15716] binder: 15715:15716 ioctl 4018620d 0 returned -22 [ 1625.419583][T15736] binder: 15734:15736 ioctl c00c620f 200000c0 returned -22 [ 1626.438396][T15750] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3209'. [ 1626.449816][T15750] unsupported nlmsg_type 40 [ 1632.004460][T15788] binder: 15784:15788 ioctl c0306201 20000180 returned -14 [ 1638.349271][T15840] IPVS: set_ctl: invalid protocol: 3 4.0.0.0:0 [ 1640.536922][T12202] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1640.593120][T12202] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1640.837272][ T8967] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1641.107274][ T8967] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1641.125620][ T8967] usb 6-1: no configurations [ 1641.130607][ T8967] usb 6-1: can't read configurations, error -22 [ 1642.476416][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1642.483747][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1644.512929][T13656] Bluetooth: hci5: command 0x0405 tx timeout [ 1646.451313][T15901] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3264'. [ 1646.515853][T15901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1646.563168][T15903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1646.572631][T15903] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1646.591218][T15903] bond1: (slave vcan1): Error -95 calling set_mac_address [ 1647.617727][T13724] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1647.815654][T13724] usb 3-1: Using ep0 maxpacket: 32 [ 1647.884111][T13724] usb 3-1: config 142 has too many interfaces: 97, using maximum allowed: 32 [ 1647.893815][T13724] usb 3-1: config 142 contains an unexpected descriptor of type 0x1, skipping [ 1647.903076][T13724] usb 3-1: config 142 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.914815][T13724] usb 3-1: config 142 has 0 interfaces, different from the descriptor's value: 97 [ 1648.176918][T13724] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1648.186678][T13724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.195122][T13724] usb 3-1: Product: syz [ 1648.199570][T13724] usb 3-1: Manufacturer: syz [ 1648.204543][T13724] usb 3-1: SerialNumber: syz [ 1649.113200][T13724] usb 3-1: USB disconnect, device number 7 [ 1658.882834][ T29] audit: type=1326 audit(1734479184.994:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16031 comm="syz.3.3320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x0 [ 1663.514591][ T29] audit: type=1326 audit(1734479189.634:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16079 comm="syz.5.3338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d21185d29 code=0x0 [ 1669.695909][ T29] audit: type=1326 audit(1734479195.804:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16133 comm="syz.3.3353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x0 [ 1674.550812][ T29] audit: type=1326 audit(1734479200.664:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16184 comm="syz.5.3368" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d21185d29 code=0x0 [ 1679.488877][ T29] audit: type=1326 audit(1734479205.594:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16243 comm="syz.5.3385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d21185d29 code=0x0 [ 1686.183987][ T29] audit: type=1326 audit(1734479212.294:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16290 comm="syz.9.3401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3c3d385d29 code=0x0 [ 1687.455565][T16316] CUSE: DEVNAME unspecified [ 1691.646598][T16350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1691.653910][T16350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1691.660882][T16350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1691.667429][T16350] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1691.766537][T16350] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1691.773628][T16350] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1692.833529][T13656] Bluetooth: hci3: command 0x0405 tx timeout [ 1693.712436][T13656] Bluetooth: hci4: command 0x0c1a tx timeout [ 1693.712667][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 1693.931822][ T5794] Bluetooth: hci5: command 0x0405 tx timeout [ 1695.797913][T16405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1695.805163][T16405] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1695.811965][T16405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1695.818887][T16405] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1697.152405][T13656] Bluetooth: hci3: command 0x0405 tx timeout [ 1697.872618][T13656] Bluetooth: hci5: command 0x0405 tx timeout [ 1697.879335][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 1697.886858][ T5794] Bluetooth: hci4: command 0x0c1a tx timeout [ 1699.860304][T16454] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1699.867807][T16454] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1699.874872][T16454] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1699.881667][T16454] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1701.232970][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 1701.953120][ T51] Bluetooth: hci5: command 0x0405 tx timeout [ 1701.959482][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1701.966143][T16439] Bluetooth: hci4: command 0x0c1a tx timeout [ 1703.903850][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1704.534198][T16505] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1704.541413][T16505] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1704.548789][T16505] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1704.556115][T16505] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1705.792934][T13656] Bluetooth: hci3: command 0x0405 tx timeout [ 1706.592804][T13656] Bluetooth: hci5: command 0x0405 tx timeout [ 1706.599117][T13656] Bluetooth: hci2: command 0x0406 tx timeout [ 1706.606266][T13656] Bluetooth: hci4: command 0x0c1a tx timeout [ 1709.547736][T16575] overlayfs: failed to resolve './file0': -2 [ 1709.888581][T16567] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1709.895769][T16567] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1709.904581][T16567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1709.911367][T16567] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1710.995435][T13656] Bluetooth: hci3: command 0x0405 tx timeout [ 1711.955815][T13656] Bluetooth: hci5: command 0x0405 tx timeout [ 1711.962575][T13656] Bluetooth: hci2: command 0x0406 tx timeout [ 1711.968853][T13656] Bluetooth: hci4: command 0x0c1a tx timeout [ 1728.630093][T16739] overlayfs: failed to resolve './file0': -2 [ 1732.013971][T13656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1732.107198][T13656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1732.119639][T13656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1732.147982][T13656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1732.163996][T13656] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1732.177402][T13656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1732.562469][T16771] »»»»»» speed is unknown, defaulting to 1000 [ 1732.947391][T16771] »»»»»» speed is unknown, defaulting to 1000 [ 1734.380490][T13656] Bluetooth: hci1: command tx timeout [ 1734.502671][T16786] overlayfs: failed to resolve './file0': -2 [ 1735.429323][T16771] chnl_net:caif_netlink_parms(): no params data found [ 1736.452859][T13656] Bluetooth: hci1: command tx timeout [ 1738.268440][ T9012] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.602728][T13656] Bluetooth: hci1: command tx timeout [ 1738.723612][ T9012] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.093559][ T9012] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.112833][T16771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1739.120722][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1739.129178][T16771] bridge_slave_0: entered allmulticast mode [ 1739.139659][T16771] bridge_slave_0: entered promiscuous mode [ 1739.340728][ T9012] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.433669][T16771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1739.441572][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.449690][T16771] bridge_slave_1: entered allmulticast mode [ 1739.459763][T16771] bridge_slave_1: entered promiscuous mode [ 1739.820999][T16830] overlayfs: failed to resolve './file0': -2 [ 1739.898844][T16771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1740.030016][T16771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1740.053353][ T9012] bridge_slave_1: left allmulticast mode [ 1740.059394][ T9012] bridge_slave_1: left promiscuous mode [ 1740.066662][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1740.253024][ T9012] bridge_slave_0: left allmulticast mode [ 1740.258985][ T9012] bridge_slave_0: left promiscuous mode [ 1740.266072][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1740.715762][T13656] Bluetooth: hci1: command tx timeout [ 1741.090538][ T9012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1741.240799][ T9012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1741.310643][ T9012] bond0 (unregistering): Released all slaves [ 1741.774206][T16771] team0: Port device team_slave_0 added [ 1741.950222][T16771] team0: Port device team_slave_1 added [ 1742.543409][T16771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1742.550648][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1742.577213][T16771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1742.613348][T16771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1742.620615][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1742.652679][T16771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1743.267240][ T9012] hsr_slave_0: left promiscuous mode [ 1743.429808][ T9012] hsr_slave_1: left promiscuous mode [ 1743.549650][ T9012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1743.557693][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1743.660826][ T9012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1743.669054][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1743.847211][ T9012] veth1_macvtap: left promiscuous mode [ 1743.853278][ T9012] veth0_macvtap: left promiscuous mode [ 1743.859455][ T9012] veth1_vlan: left promiscuous mode [ 1743.865183][ T9012] veth0_vlan: left promiscuous mode [ 1746.694893][ T9012] team0 (unregistering): Port device team_slave_1 removed [ 1746.900381][ T9012] team0 (unregistering): Port device team_slave_0 removed [ 1747.460280][T12202] »»»»»» speed is unknown, defaulting to 1000 [ 1747.840482][T16771] hsr_slave_0: entered promiscuous mode [ 1747.921863][T16771] hsr_slave_1: entered promiscuous mode [ 1751.517920][T16771] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1751.603563][T16771] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1751.673879][T16771] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1751.774679][T16771] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1754.226731][T16771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1754.827651][T16771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1755.024297][ T9014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.032152][ T9014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.181586][ T9014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.189711][ T9014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1758.088089][T16771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1761.984969][T16771] veth0_vlan: entered promiscuous mode [ 1762.094975][T16771] veth1_vlan: entered promiscuous mode [ 1762.413457][T16771] veth0_macvtap: entered promiscuous mode [ 1762.516552][T16771] veth1_macvtap: entered promiscuous mode [ 1762.772847][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1762.783788][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.794027][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1762.804847][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.815086][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1762.826056][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.836264][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1762.847057][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1762.862386][T16771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1762.979501][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1762.991890][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.002556][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.013505][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.023822][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.034725][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.045652][T16771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1763.056579][T16771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1763.071967][T16771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1763.204768][T16771] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.215399][T16771] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.235394][T16771] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1763.244931][T16771] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1765.361063][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1771.079589][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1771.091705][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1771.120135][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1771.142624][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1771.174619][ T51] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1771.192399][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1771.411578][T17066] »»»»»» speed is unknown, defaulting to 1000 [ 1772.509539][T17066] chnl_net:caif_netlink_parms(): no params data found [ 1773.312584][ T51] Bluetooth: hci5: command tx timeout [ 1773.528804][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.537213][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1773.790241][ T3650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.799862][ T3650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.761874][T17066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1774.770038][T17066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.778212][T17066] bridge_slave_0: entered allmulticast mode [ 1774.789386][T17066] bridge_slave_0: entered promiscuous mode [ 1774.919030][T17066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1774.927285][T17066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.935442][T17066] bridge_slave_1: entered allmulticast mode [ 1774.945143][T17066] bridge_slave_1: entered promiscuous mode [ 1775.396413][ T51] Bluetooth: hci5: command tx timeout [ 1775.421453][T17066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.631274][T17066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1776.433634][T17066] team0: Port device team_slave_0 added [ 1776.594246][T17066] team0: Port device team_slave_1 added [ 1777.356292][T17066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1777.363754][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.390225][T17066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1777.474285][ T51] Bluetooth: hci5: command tx timeout [ 1777.650164][T17066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1777.658713][T17066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1777.685543][T17066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1778.688035][T17066] hsr_slave_0: entered promiscuous mode [ 1778.845682][T17066] hsr_slave_1: entered promiscuous mode [ 1778.882973][T17066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1778.890831][T17066] Cannot create hsr debugfs directory [ 1779.575387][ T51] Bluetooth: hci5: command tx timeout [ 1781.330261][T17066] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1781.444557][T17066] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1781.523898][T17066] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1781.594522][T17066] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1785.377621][T17066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1785.823158][T17066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1786.133615][T14573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1786.141395][T14573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.481207][T14573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.489128][T14573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.840992][T17171] overlayfs: failed to resolve './file1': -2 [ 1791.983188][T17066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1796.886604][T17231] veth0_to_team: entered promiscuous mode [ 1796.892938][T17231] macsec1: entered allmulticast mode [ 1796.898496][T17231] veth0_to_team: entered allmulticast mode [ 1796.960047][T17231] veth0_to_team: left allmulticast mode [ 1796.966454][T17231] veth0_to_team: left promiscuous mode [ 1802.907042][T17254] overlayfs: failed to resolve './file1': -2 [ 1803.381351][T17066] veth0_vlan: entered promiscuous mode [ 1803.739345][T17066] veth1_vlan: entered promiscuous mode [ 1804.415150][T17066] veth0_macvtap: entered promiscuous mode [ 1804.542603][T17066] veth1_macvtap: entered promiscuous mode [ 1804.803831][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.815903][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.826443][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.838037][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.848369][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.859199][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.869590][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.880485][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.890748][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1804.903676][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1804.919042][T17066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1805.372441][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.383795][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.394130][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.406084][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.416680][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.427536][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.437771][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.448570][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.458806][T17066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1805.469589][T17066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1805.484945][T17066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1805.910976][T17066] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.921894][T17066] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.931582][T17066] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1805.941019][T17066] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.143218][T17280] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1808.877926][T17294] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1808.887684][T17294] overlayfs: failed to set xattr on upper [ 1808.894680][T17294] overlayfs: ...falling back to redirect_dir=nofollow. [ 1808.901785][T17294] overlayfs: ...falling back to uuid=null. [ 1808.908049][T17294] overlayfs: maximum fs stacking depth exceeded [ 1811.533092][T17329] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1814.791051][T13724] IPVS: starting estimator thread 0... [ 1814.797657][T17346] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1814.902401][T17348] IPVS: using max 192 ests per chain, 9600 per kthread [ 1815.513428][T17360] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3686'. [ 1816.309948][T17367] delete_channel: no stack [ 1819.397053][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.405623][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.859890][ T3586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.868851][ T3586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.924044][T17411] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3698'. [ 1826.830200][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1827.774839][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.144508][ T5841] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1832.292955][T17465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3716'. [ 1832.457736][ T5841] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1832.467526][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.476005][ T5841] usb 6-1: Product: syz [ 1832.480449][ T5841] usb 6-1: Manufacturer: syz [ 1832.485465][ T5841] usb 6-1: SerialNumber: syz [ 1832.659980][ T5841] usb 6-1: config 0 descriptor?? [ 1832.774058][ T5841] usb 6-1: selecting invalid altsetting 3 [ 1832.780209][ T5841] comedi comedi0: could not set alternate setting 3 in high speed [ 1832.789971][ T5841] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1832.959011][ T5841] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 1833.020615][ T5841] usb 6-1: USB disconnect, device number 5 [ 1834.896236][ T5841] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1835.066274][ T5841] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1835.076980][ T8967] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 1835.090236][ T5841] usb 9-1: not running at top speed; connect to a high speed hub [ 1835.132607][ T5841] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.143167][ T5841] usb 9-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1835.343489][ T8967] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1835.377688][ T8967] usb 4-1: not running at top speed; connect to a high speed hub [ 1835.465026][ T8967] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.475938][ T8967] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 1835.595796][ T8967] usb 4-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=bf.a0 [ 1835.605851][ T8967] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.617092][ T8967] usb 4-1: Product: syz [ 1835.621548][ T8967] usb 4-1: Manufacturer: syz [ 1835.627593][ T8967] usb 4-1: SerialNumber: syz [ 1835.681549][T17501] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1835.689109][T17501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1835.696332][T17501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1835.702922][T17501] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1835.813017][T17504] team0: Device ipvlan2 failed to register rx_handler [ 1835.970139][T17501] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1836.130209][T17501] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1836.137272][T17501] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1836.186969][ T5841] usb 9-1: New USB device found, idVendor=0506, idProduct=11f8, bcdDevice=bf.a0 [ 1836.196543][ T5841] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1836.205017][ T5841] usb 9-1: Product: syz [ 1836.209466][ T5841] usb 9-1: Manufacturer: syz [ 1836.214576][ T5841] usb 9-1: SerialNumber: syz [ 1836.384543][T17501] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1836.689885][ T8967] usb 4-1: USB disconnect, device number 6 [ 1836.970345][T17509] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3733'. [ 1837.038091][ T8967] usb 9-1: USB disconnect, device number 3 [ 1837.632493][T13656] Bluetooth: hci4: command 0x0c1a tx timeout [ 1837.640412][ T5841] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1837.792662][T13656] Bluetooth: hci1: command 0x0c1a tx timeout [ 1837.839837][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1837.872838][ T5841] usb 6-1: Using ep0 maxpacket: 8 [ 1837.967695][ T5841] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1837.977856][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.986357][ T5841] usb 6-1: Product: syz [ 1837.990789][ T5841] usb 6-1: Manufacturer: syz [ 1837.995760][ T5841] usb 6-1: SerialNumber: syz [ 1838.552733][T17520] team0: Device gtp0 is of different type [ 1838.559419][T13656] Bluetooth: hci5: command 0x0c1a tx timeout [ 1838.877584][ T5841] usb 6-1: config 0 descriptor?? [ 1839.474356][T17524] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3740'. [ 1839.512560][ T5841] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1839.872378][T13656] Bluetooth: hci1: command 0x0c1a tx timeout [ 1841.242708][T13656] Bluetooth: hci5: command 0x0c1a tx timeout [ 1842.268738][T13656] Bluetooth: hci1: command 0x0c1a tx timeout [ 1843.349208][T13656] Bluetooth: hci5: command 0x0c1a tx timeout [ 1843.457446][ T5841] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1843.622649][ T5841] usb 6-1: USB disconnect, device number 6 [ 1843.741452][T17539] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1843.748396][T17539] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1843.755249][T17539] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1843.761756][T17539] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1845.713074][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 1845.792363][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 1845.792672][T13656] Bluetooth: hci1: command 0x0c1a tx timeout [ 1845.798789][T16439] Bluetooth: hci2: command 0x0406 tx timeout [ 1845.888114][T17560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3748'. [ 1849.145859][T17575] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3753'. [ 1855.200778][T17590] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1855.208102][T17590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1855.215119][T17590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1855.221899][T17590] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1856.154406][ T5841] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1856.403279][ T5841] usb 4-1: Using ep0 maxpacket: 8 [ 1856.472490][ T5841] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1856.481367][ T5841] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1856.491774][ T5841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1856.503092][ T5841] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1856.513882][ T5841] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1856.527628][ T5841] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1856.537185][ T5841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.964406][ T5841] usb 4-1: usb_control_msg returned -32 [ 1856.970498][ T5841] usbtmc 4-1:16.0: can't read capabilities [ 1857.232760][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 1857.239312][T13656] Bluetooth: hci1: command 0x0c1a tx timeout [ 1857.246376][T16439] Bluetooth: hci2: command 0x0406 tx timeout [ 1857.253774][T16439] Bluetooth: hci4: command 0x0c1a tx timeout [ 1858.504254][T17628] team0: Device gtp0 is of different type [ 1859.393867][ T8967] usb 4-1: USB disconnect, device number 7 [ 1859.545156][T17633] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1859.582543][T17632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3769'. [ 1863.255937][T17643] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1863.265096][T17643] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1863.271924][T17643] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1863.279206][T17643] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1865.026878][T17668] team0: Device gtp0 is of different type [ 1865.156393][ T5794] Bluetooth: hci4: command 0x0c1a tx timeout [ 1865.312352][ T5794] Bluetooth: hci5: command 0x0c1a tx timeout [ 1865.318685][ T5794] Bluetooth: hci1: command 0x0c1a tx timeout [ 1865.325692][T17616] Bluetooth: hci2: command 0x0406 tx timeout [ 1865.637463][T17672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3781'. [ 1868.463355][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3784'. [ 1869.306632][T17687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1869.314033][T17687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1869.320908][T17687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1869.327949][T17687] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1869.645093][T17692] bridge0: port 3(erspan0) entered blocking state [ 1869.653933][T17692] bridge0: port 3(erspan0) entered disabled state [ 1869.662781][T17692] erspan0: entered allmulticast mode [ 1869.677882][T17692] erspan0: entered promiscuous mode [ 1869.690486][T17692] bridge0: port 3(erspan0) entered blocking state [ 1869.698010][T17692] bridge0: port 3(erspan0) entered forwarding state [ 1869.902537][T17693] overlayfs: missing 'lowerdir' [ 1870.984513][T17702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3788'. [ 1871.313704][ T5794] Bluetooth: hci4: command 0x0c1a tx timeout [ 1871.393184][ T5794] Bluetooth: hci5: command 0x0c1a tx timeout [ 1871.393323][T17616] Bluetooth: hci1: command 0x0c1a tx timeout [ 1871.399643][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 1874.899009][T17724] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3794'. [ 1875.094409][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1875.114296][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1875.125301][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1875.144953][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1875.158215][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1875.168204][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1875.274694][T17728] »»»»»» speed is unknown, defaulting to 1000 [ 1875.876990][T17737] overlayfs: missing 'lowerdir' [ 1876.671593][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3797'. [ 1877.943428][ T5794] Bluetooth: hci3: command tx timeout [ 1879.845087][T17745] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1880.034099][ T5794] Bluetooth: hci3: command tx timeout [ 1880.870874][T17728] chnl_net:caif_netlink_parms(): no params data found [ 1880.918247][ T29] audit: type=1326 audit(1734479407.014:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.042225][ T29] audit: type=1326 audit(1734479407.074:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.065749][ T29] audit: type=1326 audit(1734479407.074:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.090278][ T29] audit: type=1326 audit(1734479407.094:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.113662][ T29] audit: type=1326 audit(1734479407.094:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.136789][ T29] audit: type=1326 audit(1734479407.094:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.159773][ T29] audit: type=1326 audit(1734479407.094:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.183888][ T29] audit: type=1326 audit(1734479407.094:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.207181][ T29] audit: type=1326 audit(1734479407.094:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.230191][ T29] audit: type=1326 audit(1734479407.104:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17762 comm="syz.3.3803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f4ea7785d29 code=0x7ffc0000 [ 1881.738701][T17778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3808'. [ 1882.113701][ T5794] Bluetooth: hci3: command tx timeout [ 1882.406544][T17788] atomic_op ffff88804b55d928 conn xmit_atomic 0000000000000000 [ 1882.486385][T17790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3810'. [ 1882.508634][T17791] overlayfs: missing 'lowerdir' [ 1884.562731][ T5794] Bluetooth: hci3: command tx timeout [ 1884.622818][T17728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1884.630891][T17728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1884.639118][T17728] bridge_slave_0: entered allmulticast mode [ 1884.649160][T17728] bridge_slave_0: entered promiscuous mode [ 1885.379776][ T9014] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.647000][T17728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1885.655412][T17728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1885.663514][T17728] bridge_slave_1: entered allmulticast mode [ 1885.673121][T17728] bridge_slave_1: entered promiscuous mode [ 1885.826068][ T9014] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.324465][ T9014] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.920985][ T9014] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.127607][T17728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1888.254990][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1888.331870][T17728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1889.292926][T17728] team0: Port device team_slave_0 added [ 1889.301775][ T9014] bridge_slave_1: left allmulticast mode [ 1889.308545][ T9014] bridge_slave_1: left promiscuous mode [ 1889.315467][ T9014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.405085][ T9014] bridge_slave_0: left allmulticast mode [ 1889.411039][ T9014] bridge_slave_0: left promiscuous mode [ 1889.420895][ T9014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.853206][T12202] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1889.967335][ T9014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1889.971597][T17841] overlayfs: missing 'lowerdir' [ 1889.997140][ T9014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1890.014408][T16835] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1890.028068][ T9014] bond0 (unregistering): Released all slaves [ 1890.055443][T17728] team0: Port device team_slave_1 added [ 1890.123578][T12202] usb 5-1: not running at top speed; connect to a high speed hub [ 1890.164320][T12202] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1890.176315][T12202] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1890.209970][T12202] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.40 [ 1890.219642][T12202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.228209][T12202] usb 5-1: Product: syz [ 1890.233144][T12202] usb 5-1: Manufacturer: syz [ 1890.238058][T12202] usb 5-1: SerialNumber: syz [ 1890.305162][T16835] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1890.314856][T16835] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.323605][T16835] usb 4-1: Product: syz [ 1890.328046][T16835] usb 4-1: Manufacturer: syz [ 1890.330538][T17728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1890.332938][T16835] usb 4-1: SerialNumber: syz [ 1890.341140][T17833] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1890.345593][T17728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1890.380913][T17728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1890.493882][T17728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1890.501119][T17728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1890.512286][T16835] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1890.528752][T17728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1890.810514][ T8967] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1890.984687][T12202] usbhid 5-1:1.0: can't add hid device: -71 [ 1890.992645][T12202] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1891.134820][T17846] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3825'. [ 1891.864724][T12202] usb 5-1: USB disconnect, device number 11 [ 1891.952779][ T8967] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1891.963896][ T8967] ath9k_htc: Failed to initialize the device [ 1892.286802][ T8967] usb 4-1: ath9k_htc: USB layer deinitialized [ 1892.577943][T12202] usb 4-1: USB disconnect, device number 8 [ 1893.264714][T17728] hsr_slave_0: entered promiscuous mode [ 1893.414587][T17728] hsr_slave_1: entered promiscuous mode [ 1893.473684][T17728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1893.481554][T17728] Cannot create hsr debugfs directory [ 1893.584663][ T9014] hsr_slave_0: left promiscuous mode [ 1893.622440][ T9014] hsr_slave_1: left promiscuous mode [ 1893.899231][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1893.907607][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1894.137057][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1894.145524][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1894.351211][ T9014] veth1_macvtap: left promiscuous mode [ 1894.357281][ T9014] veth0_macvtap: left promiscuous mode [ 1894.363392][ T9014] veth1_vlan: left promiscuous mode [ 1894.369023][ T9014] veth0_vlan: left promiscuous mode [ 1895.740246][T17879] overlayfs: missing 'lowerdir' [ 1896.024373][ T9014] team0 (unregistering): Port device team_slave_1 removed [ 1896.165698][ T9014] team0 (unregistering): Port device team_slave_0 removed [ 1896.908428][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3836'. [ 1898.749655][ T9014] IPVS: stop unused estimator thread 0... [ 1900.112232][T17910] syz.7.3841: attempt to access beyond end of device [ 1900.112232][T17910] nbd7: rw=0, sector=6, nr_sectors = 2 limit=0 [ 1900.125474][T17910] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 1900.805375][T17728] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1901.023914][T17728] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1901.183808][T17728] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1901.348847][T17728] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1906.570012][T17728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1906.907695][T17728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1906.982550][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1906.982645][ T29] audit: type=1326 audit(1734479433.084:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1907.013044][ T29] audit: type=1326 audit(1734479433.094:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1907.035994][ T29] audit: type=1326 audit(1734479433.124:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1907.057552][T14518] bridge0: port 1(bridge_slave_0) entered blocking state [ 1907.058810][ T29] audit: type=1326 audit(1734479433.124:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1907.066234][T14518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1907.089031][ T29] audit: type=1326 audit(1734479433.144:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1907.248715][T17949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3851'. [ 1907.595721][ T29] audit: type=1326 audit(1734479433.684:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1907.619373][ T29] audit: type=1326 audit(1734479433.684:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1907.718080][T14518] bridge0: port 2(bridge_slave_1) entered blocking state [ 1907.726022][T14518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1908.234225][ T29] audit: type=1326 audit(1734479433.994:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1908.257747][ T29] audit: type=1326 audit(1734479433.994:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1908.281247][ T29] audit: type=1326 audit(1734479434.004:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17945 comm="syz.7.3850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb16585d29 code=0x7ffc0000 [ 1908.365994][T17728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1916.359949][T17728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1916.955069][T17728] veth0_vlan: entered promiscuous mode [ 1917.100179][T17728] veth1_vlan: entered promiscuous mode [ 1917.680165][T17728] veth0_macvtap: entered promiscuous mode [ 1917.729939][T17728] veth1_macvtap: entered promiscuous mode [ 1917.943947][T18011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3866'. [ 1918.146345][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.146462][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.146546][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.146648][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.146728][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.146839][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.146920][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.147023][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.147110][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1918.147212][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.152335][T17728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1918.196212][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1918.196327][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.196406][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1918.196506][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.196585][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1918.196685][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.196764][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1918.196872][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.196954][T17728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1918.197053][T17728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1918.203450][T17728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1918.252812][T17728] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.253066][T17728] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.253305][T17728] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1918.253543][T17728] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.108551][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3878'. [ 1927.670229][T18082] vlan2: entered promiscuous mode [ 1927.675845][T18082] team0: entered promiscuous mode [ 1927.681154][T18082] team_slave_0: entered promiscuous mode [ 1927.688531][T18082] team_slave_1: entered promiscuous mode [ 1927.705126][T18082] team0: Device vlan2 is already an upper device of the team interface [ 1927.867601][T18082] team0: left promiscuous mode [ 1927.873153][T18082] team_slave_0: left promiscuous mode [ 1927.880798][T18082] team_slave_1: left promiscuous mode [ 1930.594639][T18111] netlink: 1624 bytes leftover after parsing attributes in process `syz.7.3888'. [ 1932.120783][T18135] overlayfs: missing 'lowerdir' [ 1932.274383][T14573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.284779][T14573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1932.739529][ T4151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1932.748058][ T4151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1936.802931][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1936.812758][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1936.836652][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1936.879659][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1936.901448][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1936.914276][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1937.795883][T18165] team0: Device gtp0 is of different type [ 1938.520946][T18158] »»»»»» speed is unknown, defaulting to 1000 [ 1939.132349][ T5794] Bluetooth: hci1: command tx timeout [ 1940.655765][T18186] overlayfs: missing 'lowerdir' [ 1941.003402][T18158] chnl_net:caif_netlink_parms(): no params data found [ 1941.152574][ T51] Bluetooth: hci1: command tx timeout [ 1941.333232][T18198] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3906'. [ 1941.510664][T18205] netlink: 'syz.3.3908': attribute type 10 has an invalid length. [ 1941.519747][T18205] bridge0: port 3(team0) entered blocking state [ 1941.527023][T18205] bridge0: port 3(team0) entered disabled state [ 1941.534427][T18205] team0: entered allmulticast mode [ 1941.539927][T18205] team_slave_0: entered allmulticast mode [ 1941.546092][T18205] team_slave_1: entered allmulticast mode [ 1941.558442][T18205] team0: entered promiscuous mode [ 1941.565140][T18205] team_slave_0: entered promiscuous mode [ 1941.574997][T18205] team_slave_1: entered promiscuous mode [ 1941.584934][T18205] bridge0: port 3(team0) entered blocking state [ 1941.592100][T18205] bridge0: port 3(team0) entered forwarding state [ 1942.713397][T18221] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 1942.777326][ T4151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.073199][ T4151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.232654][ T51] Bluetooth: hci1: command tx timeout [ 1943.516727][ T4151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.737685][T18158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1943.751124][T18158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.759366][T18158] bridge_slave_0: entered allmulticast mode [ 1943.769077][T18158] bridge_slave_0: entered promiscuous mode [ 1943.980801][ T4151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1944.061497][T18234] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3915'. [ 1944.079258][T18158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1944.087672][T18158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.095831][T18158] bridge_slave_1: entered allmulticast mode [ 1944.105504][T18158] bridge_slave_1: entered promiscuous mode [ 1944.370204][T18237] overlayfs: failed to resolve './file0': -2 [ 1945.323243][ T5794] Bluetooth: hci1: command tx timeout [ 1945.381213][ T4151] bridge_slave_1: left allmulticast mode [ 1945.387805][ T4151] bridge_slave_1: left promiscuous mode [ 1945.394834][ T4151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.666785][ T4151] bridge_slave_0: left allmulticast mode [ 1945.674038][ T4151] bridge_slave_0: left promiscuous mode [ 1945.681149][ T4151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1946.332782][T18254] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3919'. [ 1946.826741][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1946.879534][ T4151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1947.000113][ T4151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1947.089335][ T4151] bond0 (unregistering): Released all slaves [ 1947.184398][T18158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1947.342534][T18158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1947.801784][T18158] team0: Port device team_slave_0 added [ 1947.907786][T18158] team0: Port device team_slave_1 added [ 1948.100685][T18275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3925'. [ 1948.395784][ T4151] hsr_slave_0: left promiscuous mode [ 1948.477483][ T4151] hsr_slave_1: left promiscuous mode [ 1948.567783][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1948.576357][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1948.673847][ T4151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1948.682190][ T4151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1948.793395][ T4151] veth1_macvtap: left promiscuous mode [ 1948.799240][ T4151] veth0_macvtap: left promiscuous mode [ 1948.805480][ T4151] veth1_vlan: left promiscuous mode [ 1948.811107][ T4151] veth0_vlan: left promiscuous mode [ 1948.857344][T18284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3927'. [ 1949.159512][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3928'. [ 1949.323220][T18289] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1949.334469][T18289] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1949.707811][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1949.813095][ T4151] team0 (unregistering): Port device team_slave_1 removed [ 1949.925072][ T4151] team0 (unregistering): Port device team_slave_0 removed [ 1950.655241][T18294] Process accounting resumed [ 1950.673814][T18158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1950.681142][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1950.707752][T18158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1951.176291][T18158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1951.184468][T18158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.210957][T18158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1952.364990][T18158] hsr_slave_0: entered promiscuous mode [ 1952.599917][T18306] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3933'. [ 1952.617500][T18158] hsr_slave_1: entered promiscuous mode [ 1953.591369][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3936'. [ 1954.092385][T12202] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1954.127118][T18329] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1954.136517][T18329] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1954.301738][T12202] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.313055][T12202] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1954.322498][T12202] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1954.332138][T12202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.396456][T12202] usb 5-1: config 0 descriptor?? [ 1954.439785][T18158] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1954.442977][T12202] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1954.454012][T12202] dvb-usb: bulk message failed: -22 (3/0) [ 1954.478949][T18158] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1954.509895][T12202] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1954.542906][T12202] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1954.550321][T12202] usb 5-1: media controller created [ 1954.551198][T18158] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1954.582907][T12202] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1954.655380][T12202] dvb-usb: bulk message failed: -22 (6/0) [ 1954.661872][T12202] ===================================================== [ 1954.670089][T12202] BUG: KMSAN: uninit-value in dib3000mb_attach+0x2d8/0x3c0 [ 1954.677737][T18158] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1954.677769][T12202] dib3000mb_attach+0x2d8/0x3c0 [ 1954.677940][T12202] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 1954.696337][T12202] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 1954.703681][T12202] dvb_usb_device_init+0x25a8/0x3760 [ 1954.709625][T12202] dibusb_probe+0x18c/0x250 [ 1954.714636][T12202] usb_probe_interface+0xd33/0x12e0 [ 1954.720221][T12202] really_probe+0x4db/0xd90 [ 1954.725338][T12202] __driver_probe_device+0x2ab/0x5d0 [ 1954.730910][T12202] driver_probe_device+0x72/0x890 [ 1954.736339][T12202] __device_attach_driver+0x568/0x9e0 [ 1954.742127][T12202] bus_for_each_drv+0x403/0x620 [ 1954.747300][T12202] __device_attach+0x3c1/0x650 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1954.756948][T12202] device_initial_probe+0x32/0x40 [ 1954.763842][T12202] bus_probe_device+0x3dc/0x5c0 [ 1954.768926][T12202] device_add+0x13aa/0x1ba0 [ 1954.773894][T12202] usb_set_configuration+0x31c9/0x38d0 [ 1954.779703][T12202] usb_generic_driver_probe+0x109/0x2a0 [ 1954.786122][T12202] usb_probe_device+0x3a7/0x690 [ 1954.791248][T12202] really_probe+0x4db/0xd90 [ 1954.796152][T12202] __driver_probe_device+0x2ab/0x5d0 [ 1954.801705][T12202] driver_probe_device+0x72/0x890 [ 1954.808137][T12202] __device_attach_driver+0x568/0x9e0 [ 1954.815402][T12202] bus_for_each_drv+0x403/0x620 [ 1954.820507][T12202] __device_attach+0x3c1/0x650 [ 1954.825707][T12202] device_initial_probe+0x32/0x40 [ 1954.830998][T12202] bus_probe_device+0x3dc/0x5c0 [ 1954.836327][T12202] device_add+0x13aa/0x1ba0 [ 1954.841080][T12202] usb_new_device+0x15f4/0x2470 [ 1954.846647][T12202] hub_event+0x4ffb/0x72d0 [ 1954.851338][T12202] process_scheduled_works+0xae0/0x1c40 [ 1954.857438][T12202] worker_thread+0xea7/0x14f0 [ 1954.862638][T12202] kthread+0x3e2/0x540 [ 1954.867125][T12202] ret_from_fork+0x6d/0x90 [ 1954.871816][T12202] ret_from_fork_asm+0x1a/0x30 [ 1954.877106][T12202] [ 1954.879561][T12202] Local variable rb created at: [ 1954.884735][T12202] dib3000_read_reg+0x86/0x4e0 [ 1954.889762][T12202] dib3000mb_attach+0x123/0x3c0 [ 1954.895050][T12202] [ 1954.897549][T12202] CPU: 0 UID: 0 PID: 12202 Comm: kworker/0:0 Not tainted 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 1954.909697][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1954.920226][T12202] Workqueue: usb_hub_wq hub_event [ 1954.925703][T12202] ===================================================== [ 1954.933123][T12202] Disabling lock debugging due to kernel taint [ 1954.939450][T12202] Kernel panic - not syncing: kmsan.panic set ... [ 1954.946156][T12202] CPU: 0 UID: 0 PID: 12202 Comm: kworker/0:0 Tainted: G B 6.13.0-rc3-syzkaller-00026-g59dbb9d81adf #0 [ 1954.958827][T12202] Tainted: [B]=BAD_PAGE [ 1954.963104][T12202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 1954.973340][T12202] Workqueue: usb_hub_wq hub_event [ 1954.979086][T12202] Call Trace: [ 1954.982505][T12202] [ 1954.985652][T12202] dump_stack_lvl+0x216/0x2d0 [ 1954.990572][T12202] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1954.996598][T12202] dump_stack+0x1e/0x24 [ 1955.000977][T12202] panic+0x4e2/0xcf0 [ 1955.005094][T12202] ? kmsan_get_metadata+0xf1/0x1c0 [ 1955.010426][T12202] kmsan_report+0x2c7/0x2d0 [ 1955.015142][T12202] ? __msan_warning+0x95/0x120 [ 1955.020148][T12202] ? dib3000mb_attach+0x2d8/0x3c0 [ 1955.025436][T12202] ? dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 1955.032124][T12202] ? dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 1955.038480][T12202] ? dvb_usb_device_init+0x25a8/0x3760 [ 1955.044171][T12202] ? dibusb_probe+0x18c/0x250 [ 1955.049060][T12202] ? usb_probe_interface+0xd33/0x12e0 [ 1955.054672][T12202] ? really_probe+0x4db/0xd90 [ 1955.059575][T12202] ? __driver_probe_device+0x2ab/0x5d0 [ 1955.065258][T12202] ? driver_probe_device+0x72/0x890 [ 1955.070691][T12202] ? __device_attach_driver+0x568/0x9e0 [ 1955.076476][T12202] ? bus_for_each_drv+0x403/0x620 [ 1955.081691][T12202] ? __device_attach+0x3c1/0x650 [ 1955.086857][T12202] ? device_initial_probe+0x32/0x40 [ 1955.092276][T12202] ? bus_probe_device+0x3dc/0x5c0 [ 1955.097502][T12202] ? device_add+0x13aa/0x1ba0 [ 1955.102384][T12202] ? usb_set_configuration+0x31c9/0x38d0 [ 1955.108289][T12202] ? usb_generic_driver_probe+0x109/0x2a0 [ 1955.114227][T12202] ? usb_probe_device+0x3a7/0x690 [ 1955.119569][T12202] ? really_probe+0x4db/0xd90 [ 1955.124524][T12202] ? __driver_probe_device+0x2ab/0x5d0 [ 1955.130225][T12202] ? driver_probe_device+0x72/0x890 [ 1955.135740][T12202] ? __device_attach_driver+0x568/0x9e0 [ 1955.141514][T12202] ? bus_for_each_drv+0x403/0x620 [ 1955.146751][T12202] ? __device_attach+0x3c1/0x650 [ 1955.151906][T12202] ? device_initial_probe+0x32/0x40 [ 1955.157342][T12202] ? bus_probe_device+0x3dc/0x5c0 [ 1955.162555][T12202] ? device_add+0x13aa/0x1ba0 [ 1955.167441][T12202] ? usb_new_device+0x15f4/0x2470 [ 1955.172661][T12202] ? hub_event+0x4ffb/0x72d0 [ 1955.177478][T12202] ? process_scheduled_works+0xae0/0x1c40 [ 1955.183547][T12202] ? worker_thread+0xea7/0x14f0 [ 1955.188641][T12202] ? kthread+0x3e2/0x540 [ 1955.193076][T12202] ? ret_from_fork+0x6d/0x90 [ 1955.197878][T12202] ? ret_from_fork_asm+0x1a/0x30 [ 1955.203155][T12202] ? rt_mutex_unlock+0x2a/0x50 [ 1955.208246][T12202] ? kmsan_get_metadata+0x13e/0x1c0 [ 1955.213661][T12202] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1955.219689][T12202] ? dib3000_read_reg+0x32b/0x4e0 [ 1955.224963][T12202] __msan_warning+0x95/0x120 [ 1955.229796][T12202] dib3000mb_attach+0x2d8/0x3c0 [ 1955.234888][T12202] ? __pfx_dib3000mb_attach+0x10/0x10 [ 1955.240512][T12202] dibusb_dib3000mb_frontend_attach+0x155/0x2f0 [ 1955.247009][T12202] ? __pfx_dibusb_dib3000mb_frontend_attach+0x10/0x10 [ 1955.254032][T12202] dvb_usb_adapter_frontend_init+0xed/0x9a0 [ 1955.260197][T12202] dvb_usb_device_init+0x25a8/0x3760 [ 1955.265757][T12202] dibusb_probe+0x18c/0x250 [ 1955.270478][T12202] ? __pfx_dibusb_probe+0x10/0x10 [ 1955.275899][T12202] usb_probe_interface+0xd33/0x12e0 [ 1955.281350][T12202] ? __pfx_usb_probe_interface+0x10/0x10 [ 1955.287220][T12202] really_probe+0x4db/0xd90 [ 1955.291956][T12202] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1955.298000][T12202] __driver_probe_device+0x2ab/0x5d0 [ 1955.303523][T12202] driver_probe_device+0x72/0x890 [ 1955.308782][T12202] ? kmsan_get_metadata+0x13e/0x1c0 [ 1955.314200][T12202] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1955.320224][T12202] __device_attach_driver+0x568/0x9e0 [ 1955.325851][T12202] bus_for_each_drv+0x403/0x620 [ 1955.330885][T12202] ? __pfx___device_attach_driver+0x10/0x10 [ 1955.337027][T12202] __device_attach+0x3c1/0x650 [ 1955.342033][T12202] device_initial_probe+0x32/0x40 [ 1955.347296][T12202] bus_probe_device+0x3dc/0x5c0 [ 1955.352360][T12202] device_add+0x13aa/0x1ba0 [ 1955.357097][T12202] usb_set_configuration+0x31c9/0x38d0 [ 1955.362801][T12202] ? usb_set_configuration+0x961/0x38d0 [ 1955.368702][T12202] usb_generic_driver_probe+0x109/0x2a0 [ 1955.374459][T12202] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1955.380484][T12202] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 1955.386769][T12202] usb_probe_device+0x3a7/0x690 [ 1955.391863][T12202] ? __pfx_usb_probe_device+0x10/0x10 [ 1955.397487][T12202] really_probe+0x4db/0xd90 [ 1955.402222][T12202] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1955.408250][T12202] __driver_probe_device+0x2ab/0x5d0 [ 1955.413779][T12202] driver_probe_device+0x72/0x890 [ 1955.419028][T12202] ? kmsan_get_metadata+0x13e/0x1c0 [ 1955.424463][T12202] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1955.430489][T12202] __device_attach_driver+0x568/0x9e0 [ 1955.436111][T12202] bus_for_each_drv+0x403/0x620 [ 1955.441153][T12202] ? __pfx___device_attach_driver+0x10/0x10 [ 1955.447391][T12202] __device_attach+0x3c1/0x650 [ 1955.452407][T12202] device_initial_probe+0x32/0x40 [ 1955.457663][T12202] bus_probe_device+0x3dc/0x5c0 [ 1955.462714][T12202] device_add+0x13aa/0x1ba0 [ 1955.467447][T12202] usb_new_device+0x15f4/0x2470 [ 1955.473028][T12202] hub_event+0x4ffb/0x72d0 [ 1955.477724][T12202] ? __pfx_hub_event+0x10/0x10 [ 1955.482698][T12202] process_scheduled_works+0xae0/0x1c40 [ 1955.488535][T12202] worker_thread+0xea7/0x14f0 [ 1955.493466][T12202] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1955.499506][T12202] kthread+0x3e2/0x540 [ 1955.503771][T12202] ? __pfx_worker_thread+0x10/0x10 [ 1955.509137][T12202] ? __pfx_kthread+0x10/0x10 [ 1955.514007][T12202] ret_from_fork+0x6d/0x90 [ 1955.518633][T12202] ? __pfx_kthread+0x10/0x10 [ 1955.523429][T12202] ret_from_fork_asm+0x1a/0x30 [ 1955.528538][T12202] [ 1955.532056][T12202] Kernel Offset: disabled [ 1955.536512][T12202] Rebooting in 86400 seconds..