last executing test programs: 6m28.235527299s ago: executing program 32 (id=13): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m26.414437937s ago: executing program 33 (id=22): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x18, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @sctp}]}, 0x18}}, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r3, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x14, r6, 0x800, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x10) 6m22.300836994s ago: executing program 34 (id=28): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_io_uring_setup(0x497, 0x0, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x3, 0xcb9, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffc, 0xb456, 0x8c20, 0x9861}, &(0x7f0000000200)={0x2, 0x400, 0xffffffff, 0x7fff, 0x7, 0x7, 0xffffffffffffffff, 0x2}, &(0x7f0000000340)={0xf, 0x4, 0x1, 0x58, 0xffffffffffffffff, 0x2, 0x9, 0x100}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) 4m51.368139615s ago: executing program 35 (id=154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) 3m30.021657283s ago: executing program 36 (id=314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000001340)={0x0, 0x0, 0x2, 0xffffffffffffffff, 0x2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x203, 0x0, 0x2, 0xffffffffffffffff, 0x6}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) socket$inet(0x2, 0x2, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4, 0x8, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3m27.388555965s ago: executing program 7 (id=358): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 3m25.958190742s ago: executing program 7 (id=361): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa20000000000000702", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x12000, 0x10000004, 0x5, 0xcc7, 0xffd, 0x0, 0x200003, 0x100, 0x2, 0x0, 0x1, 0x1, 0x4, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffa, 0x0, 0x20001e56, 0x9, 0xe69, 0x8003c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) 3m24.660578287s ago: executing program 7 (id=363): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000001400)={0xa, @sliced={0x7, [0xeea4, 0x18, 0x2, 0xff, 0x7fff, 0x1, 0x1, 0x40, 0x7, 0x5, 0x40, 0xfff9, 0x8, 0x200, 0x0, 0x9, 0x8, 0x8, 0x0, 0x4, 0x1, 0x8, 0xba7, 0x0, 0xfffb, 0x41, 0x0, 0x0, 0x3ff, 0xe3e, 0x5, 0xb705, 0x6, 0x711, 0x1ff, 0x5, 0x6, 0x9, 0x401, 0x0, 0x9, 0xfff1, 0x1, 0x3ff, 0x4, 0x0, 0xf, 0x1000], 0x7}}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000010000005a0008", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 3m19.386033312s ago: executing program 7 (id=370): epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) 3m3.254178386s ago: executing program 37 (id=370): epoll_create1(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x2) 2m50.16038081s ago: executing program 5 (id=405): r0 = socket$kcm(0x2, 0x1, 0x84) close(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0018c0fa"], 0x0) 2m49.410459172s ago: executing program 2 (id=406): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) openat$ppp(0xffffffffffffff9c, 0x0, 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa20000000000000702", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x4f27, 0x8, 0x12000, 0x10000004, 0x5, 0xcc7, 0xffd, 0x0, 0x200003, 0x100, 0x2, 0x0, 0x1, 0x1, 0x4, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffa, 0x0, 0x20001e56, 0x9, 0xe69, 0x8003c, 0x8, 0x106, 0x8000000, 0xfffffff8]}) 2m49.14292424s ago: executing program 5 (id=408): socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x101, &(0x7f0000000880)=ANY=[], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x41, &(0x7f00000002c0)="c26b", 0x2, 0x10, 0xd21, 0xfffffffe, 0x5, 0x71ab, 0x0}) write$UHID_INPUT(r3, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000010c0), 0x2503, 0x1) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m48.436562096s ago: executing program 2 (id=409): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)=ANY=[@ANYBLOB="200000000a1401002bbd7000fbdbdf250800150000000000080001"], 0x20}}, 0x20040000) 2m44.523356346s ago: executing program 9 (id=352): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffe27, &(0x7f0000000580)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) 2m44.51166237s ago: executing program 2 (id=419): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x80000000}, 0x50) r0 = gettid() sync() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000240)) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x7, 0xffffffffffffffff}) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000040)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0xf5) 2m44.467791944s ago: executing program 5 (id=420): openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2m42.927203381s ago: executing program 9 (id=412): setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chdir(0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf00000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32], 0x48) r0 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509"], 0x0) write$usbip_server(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 2m42.20911844s ago: executing program 5 (id=414): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000240)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[0x0], 0x1, r2, r3, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 2m41.19648188s ago: executing program 2 (id=415): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000840)={0x0, 0x5, 0x3, "e16b03"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x20, 0x18, 0x8, "2580c6b36bdff893"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m41.096013081s ago: executing program 5 (id=416): r0 = socket$kcm(0x2, 0x1, 0x84) close(r0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x10000000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket(0x10, 0x803, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000a40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0018c0fa"], 0x0) 2m40.133932938s ago: executing program 5 (id=421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESDEC], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mount_setattr(0xffffffffffffff9c, 0x0, 0x9100, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x5, r1}) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) io_uring_enter(0xffffffffffffffff, 0x50d4, 0x4000, 0x50, 0x0, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f0000000380)='exfat\x00', 0x1) 2m37.153520864s ago: executing program 9 (id=422): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x5) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000100)=0x1000) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81) r1 = creat(0x0, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r1, 0x7, 0x0, 0x8a7, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001801000020007064af000000002020207b09f8ffc08f02d066f4d3426722e4859153f9"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a000001072414"], 0x0) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) 2m24.245404997s ago: executing program 38 (id=418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x400, 0x30) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m23.855113641s ago: executing program 39 (id=415): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000840)={0x0, 0x5, 0x3, "e16b03"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000240)={0x20, 0x18, 0x8, "2580c6b36bdff893"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m23.360670102s ago: executing program 40 (id=421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESDEC], &(0x7f0000000380)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) mount_setattr(0xffffffffffffff9c, 0x0, 0x9100, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ffc000/0x2000)=nil, 0x5, r1}) syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) io_uring_enter(0xffffffffffffffff, 0x50d4, 0x4000, 0x50, 0x0, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) acct(0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) kexec_load(0x5, 0x3, &(0x7f0000001080), 0x3e0000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f0000000380)='exfat\x00', 0x1) 2m20.665235887s ago: executing program 41 (id=422): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x5) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000100)=0x1000) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81) r1 = creat(0x0, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r1, 0x7, 0x0, 0x8a7, &(0x7f00000001c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001801000020007064af000000002020207b09f8ffc08f02d066f4d3426722e4859153f9"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = gettid() r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r6, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0x1, &(0x7f0000000000)='\x00', 0x1) write$rfkill(r6, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a4400001020301090263000201000000090480000102090000052406000105240000000d240f0100000000000000000006341a000001072414"], 0x0) splice(r4, 0x0, r7, 0x0, 0x4ffe2, 0x0) 1m26.425694924s ago: executing program 6 (id=462): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 1m25.066782918s ago: executing program 6 (id=466): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 1m24.239670549s ago: executing program 6 (id=468): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "72dc09211489d25f3298701bba621ee9d02097edd4235d00264c82ae5aab913d0d"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x1, 0xfffff010}, {0x6}]}, 0x10) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x20001, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) rt_sigpending(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m24.017075322s ago: executing program 3 (id=469): socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 1m22.349677321s ago: executing program 3 (id=473): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 1m21.992789435s ago: executing program 6 (id=474): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) 1m21.512895975s ago: executing program 3 (id=477): syz_emit_ethernet(0x109, &(0x7f0000000640)={@empty, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0xa, 0x6, "7cc7e5", 0xcb, 0x21, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, {[@routing={0x0, 0x2, 0x1, 0x3, 0x0, [@empty]}, @hopopts={0x3c, 0x8, '\x00', [@pad1, @calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0x2, [0x6, 0x0, 0x72, 0x4, 0xdb62, 0x5, 0x1000]}}]}], {{0x4e21, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x4, 0x3, "2decf9", 0x8f, "6d21b2"}, "8606c4e0ed20e374a6c9483cb69170304d4ac1eab086c6d8f4b137ed1487b9d5e3ce8ce5b2ca0a21e5e040286b58fdcf8cbcc195802faa622c2cf90df46a6869f74aced99928f5da22566efed925775c2977db"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) setgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000000000000000000000200100000040000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="161c00000000000200000000007f"], 0x50) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 1m20.406761722s ago: executing program 3 (id=479): openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 1m20.289122602s ago: executing program 6 (id=480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(&(0x7f0000000180)=@sg0, 0x0, &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6}, 0x7c) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$eJzs3U1rE0Ecx/HfbJI2fSBuH0TwolQLeilWPYgIEcnVuydRmxSKoWJbQb2YikfxBXj3LfgivCi+AT158gX0tjKzk4dNNpsWm6yt3w8kbGZnZv/L7GTnH7ErAP+te7Ufn278si8jFVSQdFsKJJWlouRKrL1mo57VUcG1sC+juKUZqLOx3Uhratu5Fl5oPxU131uG8Yii6O7PvINA7kx3picE0rSfh25/ecJxjUtLupB3DJPWO8DmQAd6qekcwwEA/AP8/T/wt4l5V2QUBNKqv+2fqvv/Qd4BHK+bzYGiKLOBv/9X2plXZOz4nnG7yi+297ZcvudSOLs/aGeJhwmm1Pd5SvGVlVhg9hwlnYslmNncKmptY1/1QG9V9Xpyy2X3Xo8v3bYR0a7056amlXU+w3sr6f5s3IFbUfZrh7S51Wy4lVYn/q6lox3x75kv5pt5aEJ9VF0VPyjFyNhhciMV9o1UULLxXxve45xrZWvJp/3VajVIVFlwBznvj+CNOMtyekai9hW10P3RoNWJICtO12pRyZ8V4rNbH9FqKa1V2Pk0pNVyolXBXwlrG8+amT+ljEf7FM0H88Cs6Lc+q+bmfyyw8a3qMDPT1nE1/ZURn89Ues2iqxkO3Dm60+ViJwKPpGQC3uuJbqmy++r100Kz2dixG49TNp7P7xhfUnonpdYZ/0ZBGXXU6pZE1psoOmzP0TiDv3qsHdrvj06JnT77fih7K9tZ1mkVTGyYTF8Yp3yj9lVZF+TYN+5UjqnDKJKG7Mr5+wkTsWvag+4LZnIOCJNm110mzv/cSj5e1cXLOfu9Hmas07OTTCV6XO9kcMml4KJ7nz1SBjeX8q+Lg0e8nsgZu1zOdemKdLmn0CjziKGP85QwNX3Xo571PwAAAAAAAAAAAAAAAAAAAE6ESfyPhbzPEQAAAAAAAAAAAAAAAAAAAACAk27k83/P6tzA82DS/ka8e/5vyPN/gRPkTwAAAP//r+1ytg==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x22) 1m19.225593265s ago: executing program 3 (id=483): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) close_range(r0, r0, 0x0) 1m18.026484734s ago: executing program 3 (id=487): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kvm_userspace_exit\x00'}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x804) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'hsr0\x00', 0x100}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) sendfile(r1, r0, 0x0, 0x23b) 1m16.873151532s ago: executing program 0 (id=488): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 1m16.024219066s ago: executing program 0 (id=490): gettid() ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xdddd0000, 0x9, 0x0, 0x8, 0x8, 0x3, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080028, 0xdddd0000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0xfe, 0xff}, {0x3000, 0xeeee8000, 0xc, 0x8, 0x47, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x4}, {0x0, 0x8080000, 0x9, 0x0, 0xff, 0x4, 0x7, 0xe, 0x0, 0x3c}, {0x0, 0x1000, 0xd, 0x8, 0x2, 0x4, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x4000, 0x0, 0x4, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x24}, {0x80a0000, 0x100000, 0xb, 0x0, 0x0, 0x1, 0x0, 0x2, 0x26, 0x0, 0x5}, {0x80a0000, 0xf042}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x1, 0xa, 0xf801, 0xeeee0000, [0x0, 0x0, 0xec]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x40000) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) 1m14.59330573s ago: executing program 6 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024) openat$ppp(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m14.304614279s ago: executing program 0 (id=493): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 1m12.868394576s ago: executing program 0 (id=496): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 1m11.894500269s ago: executing program 0 (id=498): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 1m11.236958017s ago: executing program 8 (id=500): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 1m11.153939056s ago: executing program 0 (id=501): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x4, 0x400, 0x10100, 0x1, 0x4, '\x00', r0, r1, 0x3, 0x3, 0x5, 0xe, @void, @value, @value=r1}, 0x50) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r3}, {r3, 0x5b98bd6ff46e1e54}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000280)="df", 0x0, 0x2}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0xfff3}}}, 0x24}}, 0x800) 1m10.449533698s ago: executing program 8 (id=502): syz_emit_ethernet(0x109, &(0x7f0000000640)={@empty, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0xa, 0x6, "7cc7e5", 0xcb, 0x21, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, {[@routing={0x0, 0x2, 0x1, 0x3, 0x0, [@empty]}, @hopopts={0x3c, 0x8, '\x00', [@pad1, @calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0x2, [0x6, 0x0, 0x72, 0x4, 0xdb62, 0x5, 0x1000]}}]}], {{0x4e21, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x4, 0x3, "2decf9", 0x8f, "6d21b2"}, "8606c4e0ed20e374a6c9483cb69170304d4ac1eab086c6d8f4b137ed1487b9d5e3ce8ce5b2ca0a21e5e040286b58fdcf8cbcc195802faa622c2cf90df46a6869f74aced99928f5da22566efed925775c2977db"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) setgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000000000000000000000200100000040000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="161c00000000000200000000007f"], 0x50) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 1m9.462751464s ago: executing program 8 (id=503): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="a95c55bcc7cb4a9362a5ce533229c8ee", 0x18) 1m7.981451899s ago: executing program 8 (id=504): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@nomblk_io_submit}, {@jqfmt_vfsv1}, {@auto_da_alloc}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1m6.195901078s ago: executing program 8 (id=506): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x800) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 1m5.341506921s ago: executing program 8 (id=508): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 1m1.281852056s ago: executing program 42 (id=508): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 59.92315125s ago: executing program 43 (id=487): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kvm_userspace_exit\x00'}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x804) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000001c0)={'hsr0\x00', 0x100}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0}}) sendfile(r1, r0, 0x0, 0x23b) 58.755489507s ago: executing program 44 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020}, 0x2024) openat$ppp(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 54.603825888s ago: executing program 45 (id=501): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x4, 0x400, 0x10100, 0x1, 0x4, '\x00', r0, r1, 0x3, 0x3, 0x5, 0xe, @void, @value, @value=r1}, 0x50) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{r3}, {r3, 0x5b98bd6ff46e1e54}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r5, 0x4611, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000280)="df", 0x0, 0x2}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r0, {}, {}, {0xfff3}}}, 0x24}}, 0x800) 6.064096812s ago: executing program 1 (id=546): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 5.880450556s ago: executing program 4 (id=547): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 5.133270522s ago: executing program 4 (id=548): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, 0x0, 0x200ce8c0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0xff, 0x1f}, {0x0, 0xe449, 0x0, 0x4, 0xb6, 0x3, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}], 0x6}) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x200402, &(0x7f0000000200)=ANY=[], 0x1, 0x19c, &(0x7f0000000040)="$eJzsVb1uGkEQ/pbb40iUgjptUCBFwt2RoLxBqFLlAXKCC0E+/MMh2SCKc8WjIPkpXPgdXFhygwsKu8ClJeus3Z07FsmFJdsySPtJt983s7Mzs4s0/I8PYgfA/XLSRhkSDB9wwRg4gCpTvt+O4tui4ibZC67YI/8J8RVxPBojiKJwEI/GO0ExE9EzREqlc8/j0RZeotjbCYaNaMOIrRUlbEQbryPspwSvzF/HBdzIWXa+nLSF+AsgTdNU+DrqY3qMBeBMi/nI5ccspHkMl9MSqAKoD/v79Xg0/trrB92wG+76fqPpfnfdH379Xy8KXbUyrURBDTII/gJADLZ32r4N4JIG7Hu52sjAtNZon+lnxfxdJCqg9glrKGhn9Rwq72megwYtxFP8wWeUABwmTPNWZDYOebUWGCwyPK71qWqW5Ma39l7UmYKBZcdm4HkObw47N3zdaPxMshanxBXiFvGMeE7ssPX/JC4zXJNVS1aXFq6jYDgceEJL5ec+v5zQbyMfTlS9K65fruLAwMDAwMDAwGBL8BAAAP//KbFdPg==") open(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 4.95935325s ago: executing program 1 (id=549): ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x40}], 0x1, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 3.286816221s ago: executing program 1 (id=550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 2.868766709s ago: executing program 4 (id=551): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r1, 0x40047454, 0x0) 2.164567341s ago: executing program 1 (id=552): preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/23, 0x17}], 0x1, 0x100, 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 1.730428322s ago: executing program 4 (id=553): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) close_range(r0, r0, 0x0) 1.339299066s ago: executing program 1 (id=554): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000080)) 1.288170334s ago: executing program 7 (id=509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xd}, @l2cap_cid_signaling={{0x9}, [@l2cap_create_chan_req={{0xc, 0x8, 0x5}, {0xff, 0x0, 0x6}}]}}, 0x12) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000100)={0x1000, 0x1, 0x4, {0xd, @sliced={0xb0f6, [0x100, 0xf, 0x8, 0x0, 0x101, 0x7, 0x1, 0x0, 0x7, 0x3, 0x2, 0x7, 0x40, 0x4, 0xb730, 0x400, 0x1bad, 0x80, 0x1, 0x5, 0x1, 0x7f, 0x2, 0x7ff, 0x84, 0x8, 0x3, 0xa, 0x4, 0x6, 0x1, 0x7, 0xd56, 0x3, 0x6, 0xd, 0x3a5, 0x37, 0x3, 0x2d89, 0x6, 0x6, 0xd, 0x6, 0x1, 0x3, 0x6, 0x10], 0x8}}, 0xffff0001}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r2 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0xa0440, 0x0) ioctl$SNDCTL_FM_4OP_ENABLE(r2, 0x4004510f, &(0x7f0000000200)=0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{}, "ad25dda89a2d6247", "a2d292ffdfbb62a9a753a534ebf222dc", "975c82f5", "56eb855e20aa8db9"}, 0x28) setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000001c0), 0x4) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) 1.184099298s ago: executing program 2 (id=513): syz_emit_ethernet(0x109, &(0x7f0000000640)={@empty, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x7, 0x1, 0x2}}, {@mpls_uc={0x8847, {[], @ipv6=@dccp_packet={0xa, 0x6, "7cc7e5", 0xcb, 0x21, 0x0, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, {[@routing={0x0, 0x2, 0x1, 0x3, 0x0, [@empty]}, @hopopts={0x3c, 0x8, '\x00', [@pad1, @calipso={0x7, 0x40, {0x1, 0xe, 0x0, 0x2, [0x6, 0x0, 0x72, 0x4, 0xdb62, 0x5, 0x1000]}}]}], {{0x4e21, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x4, 0x3, "2decf9", 0x8f, "6d21b2"}, "8606c4e0ed20e374a6c9483cb69170304d4ac1eab086c6d8f4b137ed1487b9d5e3ce8ce5b2ca0a21e5e040286b58fdcf8cbcc195802faa622c2cf90df46a6869f74aced99928f5da22566efed925775c2977db"}}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) select(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x6}, &(0x7f00000000c0)={0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) setgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000000000000000000000200100000040000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="161c00000000000200000000007f"], 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 989.587789ms ago: executing program 4 (id=555): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') link(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file1\x00') 251.237657ms ago: executing program 7 (id=556): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) 202.346537ms ago: executing program 1 (id=557): r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) ppoll(&(0x7f00000000c0)=[{r0, 0x40}], 0x1, 0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x21, 0x2}, &(0x7f0000000000)=0x0) timer_settime(r1, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 11.052085ms ago: executing program 4 (id=558): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x1052c0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x74}}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r9 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r9}, 0x0) sched_setattr(r9, &(0x7f0000000580)={0x38, 0x0, 0x16, 0x3, 0x200, 0x3, 0x9, 0x121, 0x800, 0x2}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000200)={r7, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r11, 0xc04064a0, &(0x7f00000004c0)={&(0x7f0000000100), 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x2, 0x4}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000040)={r12}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=559): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0xd, 0x6f5, &(0x7f0000001f80)="$eJzs3U9oZHcdAPDvm0ySmS1ms+12u0KhsYUqBnfzh1TjZaOIRChSVtBz6Ga7YWf/mKSS9uCmKnj14FWoh3jRkyKCICzUs96KeAmeCoKXnnZ78Mn7N5mJM8lk02Sy+vmU377fe7/3+73v+75/M0PDC+D/1vJ01B9GM5anX9/K5nd35lu7O/N3inqtFRHjEVGLqHf0Sj6IWIqixGezBVVDv+38fG3x+ocf735UzNXLUovin2ZEjPbuWB9kL7bLElMRMVJOj6FrvDefbLzxvWrSzkyWsFeqxMGwZVdd2uX7l/ZaeklHOmb6Xu/A0yMpnpsdiut/MuJcRDSqB9p20Vg7/QgPdaR70fbJxQEAAABnxvlHDyK2YmLYcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDTpHz/f1KWx1V9KpLq/f9jHe/YHxtyuP0dHFmjqjysnUYwAAAAAAAAAHCyXnoUv76ephPVfJpE7bsj5UyznL4dG7Faj7gSW7ESm7EZ6zEbEZMdA41trWxurs/Gy/ncxU/SNI1nip6x3tVzrmfPuQEDrmKK+jH2GgAAAAAAAAD+Z1xbGM+nP4rlmBh2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CmJGCkmeblY1SejVo+IRkSMZettR/y1qp8h9aN2eHgycQAAAMCZcv5RPIqtmKjm0yT/zn8p/97fiLfjbmzGWmxGK1bjRv5bQPGtv7a7M9/a3Zm/k5WIGO0e92v/2qv/buLQMPIRo/jtofeWL+drNONmrOVLrsSbcS9acSNqec/M5Sqejrg6vJfFlFwrpGmMD5KgG+U02/OfldNT0Txshck8I6NZRv4esRozWWxJkccLB2ei8+gMoGNLee5no9b+5edi/y21f4ypcn7twK0k/07TonauWpLGM986MOf5+TJ6pJ05lv2ZmOs4+y4dnPOIz//+N9+71bp7+1ayPX1qp9ETean34vF/VEeoykRhO1ZjviMTL3RnIvpn4ubGGc9EX92/NNbi+XZ9Ob4Z34npmIo3Yj3W4gexEpuxGlPxjby2Up7P2b+TB58zS11zbxwW01h5XEb2xfS588X0oJhezvtOxFp8O+7FjViN1/L/5mI2vhwLsRCLHUf4+QHutLUeV/0f+gf/yhfKSnbj++neDfAUr+5+srxe6Mjr3vU/k+f7QteSWqTlk+XZIzyPDr43VvYeWdmR+HHHNTh87Uw0ov2UqKJ7rsrAaLNXJn6Z31Y2Wndvr99aub9v3GS79/Zeje7dPzs3kux8ebZ9j+g+O7K253q2zeZtF9tttf1tv2q22w67UsfKz3D/PdJc3vZCRPyijDZry2T38Kztcke/7PNWI2/7JE3T4vMWAGfeuS+eG2v+s/mX5vvNnzRvNV9vfH38K+MvjsXon0e/Wp8ZebX2YvLbeD9+GId/QwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA618c67t1dardX1fZU0TR/0aTqRStQjupb86Y8d6+TvGouIwQfM1l6qReRL6lFWjhbYgyfbnfeeNAl/K4/JqST8gEoy8MqNvudPWbn3mXJ3Hqdpeuq7U72r7cjd09LQDsGnXKlekXWUXkO5HQGn6OrmnftXN95590trd1beWn1r9e7iwsLizOLCa/NXb661GsMODzhB+bM+/5wz7EgAAAAAAAAAAACAQQ32xznJ7ZUoltSP+FcE/s9CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4LiWp6P+MJKYnbkyk83v7sy3slLVs+lIvubjiKhFRDIVkXwQsRRFicmO4ZJ+29mOuP7hx7sfFXP1suTr146/F9tliaky3Kne6zV6LUwf9Bsvyce533+8ASVlGWkvWTrWePAp+U8AAAD//7ntC7U=") unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) kernel console output (not intermixed with test programs): 6310] EXT4-fs (loop1): Test dummy encryption mode enabled [ 346.256203][ T6310] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 346.281249][ T6310] System zones: 2-12, 7-7 [ 346.471439][ T6310] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 346.494861][ T6310] EXT4-fs (loop1): 1 truncate cleaned up [ 346.504415][ T6310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.504720][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.597925][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.629047][ T35] bond0 (unregistering): Released all slaves [ 346.827011][ T5814] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.017560][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.104727][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.173463][ T35] bond0 (unregistering): Released all slaves [ 348.918929][ T35] hsr_slave_0: left promiscuous mode [ 348.955360][ T35] hsr_slave_1: left promiscuous mode [ 348.964004][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.971838][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.062427][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.071927][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.255036][ T35] hsr_slave_0: left promiscuous mode [ 349.287168][ T35] hsr_slave_1: left promiscuous mode [ 349.297436][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.305396][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.359231][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.369050][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.518333][ T35] veth1_macvtap: left promiscuous mode [ 349.524305][ T35] veth0_macvtap: left promiscuous mode [ 349.530255][ T35] veth1_vlan: left promiscuous mode [ 349.536096][ T35] veth0_vlan: left promiscuous mode [ 349.583825][ T35] veth1_macvtap: left promiscuous mode [ 349.589674][ T35] veth0_macvtap: left promiscuous mode [ 349.595833][ T35] veth1_vlan: left promiscuous mode [ 349.601443][ T35] veth0_vlan: left promiscuous mode [ 350.756447][ T35] team0 (unregistering): Port device team_slave_1 removed [ 350.815253][ T35] team0 (unregistering): Port device team_slave_0 removed [ 351.520166][ T35] team0 (unregistering): Port device team_slave_1 removed [ 351.558522][ T35] team0 (unregistering): Port device team_slave_0 removed [ 352.498489][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 352.506311][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 354.501835][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.513937][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.698974][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.708351][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.075518][ T6393] usb usb7: usbfs: process 6393 (syz.1.87) did not claim interface 0 before use [ 356.596059][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.605128][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.997031][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.005995][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.434160][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.444248][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.731096][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.740127][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.020875][ T30] audit: type=1804 audit(1753545540.245:4): pid=6420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.90" name="/newroot/2/file0/file1" dev="overlay" ino=28 res=1 errno=0 [ 358.773711][ T5864] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 358.968441][ T5864] usb 8-1: Using ep0 maxpacket: 16 [ 359.069354][ T5864] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 359.081808][ T5864] usb 8-1: config 0 has no interface number 0 [ 359.089526][ T5864] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 359.101084][ T5864] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 359.137898][ T5864] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 359.147981][ T5864] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 359.156616][ T5864] usb 8-1: Product: syz [ 359.161041][ T5864] usb 8-1: SerialNumber: syz [ 359.198871][ T5870] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 359.250204][ T5864] usb 8-1: config 0 descriptor?? [ 359.295794][ T5864] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 359.306407][ T5864] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input6 [ 359.468956][ T5870] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 359.473837][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 359.478593][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.673555][ T5870] usb 7-1: config 0 descriptor?? [ 359.722876][ T5870] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 359.731295][ T6425] loop7: detected capacity change from 0 to 16 [ 359.933621][ T6425] erofs (device loop7): mounted with root inode @ nid 36. [ 360.656739][ T5870] usb 7-1: USB disconnect, device number 2 [ 361.866563][ T5864] usb 8-1: USB disconnect, device number 2 [ 361.937528][ T5864] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 362.146681][ T6455] usb usb7: usbfs: process 6455 (syz.6.97) did not claim interface 0 before use [ 363.082953][ T30] audit: type=1804 audit(1753545545.295:5): pid=6463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.100" name="/newroot/38/file0/file1" dev="overlay" ino=232 res=1 errno=0 [ 365.764271][ T6496] usb usb7: usbfs: process 6496 (syz.7.109) did not claim interface 0 before use [ 366.168040][ T30] audit: type=1326 audit(1753545548.405:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 366.321803][ T30] audit: type=1326 audit(1753545548.435:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 366.346127][ T30] audit: type=1326 audit(1753545548.535:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=309 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 366.374626][ T30] audit: type=1326 audit(1753545548.535:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 366.396510][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.404000][ T30] audit: type=1326 audit(1753545548.535:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 366.526172][ T30] audit: type=1326 audit(1753545548.675:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 366.548241][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.561421][ T30] audit: type=1326 audit(1753545548.675:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 366.583357][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.591206][ T30] audit: type=1326 audit(1753545548.675:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 366.613334][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.620057][ T30] audit: type=1326 audit(1753545548.745:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 367.043642][ T5864] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 367.254710][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 367.319509][ T5864] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 367.328166][ T5864] usb 3-1: config 0 has no interface number 0 [ 367.334815][ T5864] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 367.346091][ T5864] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 367.470247][ T5864] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 367.484232][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 367.492618][ T5864] usb 3-1: Product: syz [ 367.500181][ T5864] usb 3-1: SerialNumber: syz [ 367.604904][ T5864] usb 3-1: config 0 descriptor?? [ 367.712883][ T5864] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 367.723835][ T5864] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7 [ 367.822017][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 368.642376][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 368.642451][ T30] audit: type=1326 audit(1753545550.875:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6498 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 368.850804][ T6516] usb usb7: usbfs: process 6516 (syz.6.116) did not claim interface 0 before use [ 370.276884][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.284849][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.292461][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.300138][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.307551][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.315053][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.322547][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.330543][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.338344][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.348373][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 370.480213][ T5870] usb 3-1: USB disconnect, device number 4 [ 370.480460][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 370.602406][ T5870] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 374.807003][ T6566] netlink: 'syz.7.131': attribute type 4 has an invalid length. [ 375.009770][ T6566] netlink: 'syz.7.131': attribute type 4 has an invalid length. [ 395.161564][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 395.174994][ T6679] netlink: 'syz.2.162': attribute type 5 has an invalid length. [ 395.188915][ T6679] netlink: 28 bytes leftover after parsing attributes in process `syz.2.162'. [ 395.247479][ T6679] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 395.260331][ T6679] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 395.270004][ T6679] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 395.279039][ T6679] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 395.288195][ T6679] geneve2: entered promiscuous mode [ 395.297611][ T6679] geneve2: entered allmulticast mode [ 399.176846][ T6707] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 400.603511][ T1867] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 401.046033][ T1867] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 401.056101][ T1867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.069339][ T1867] usb 3-1: Product: syz [ 401.075489][ T1867] usb 3-1: Manufacturer: syz [ 401.080374][ T1867] usb 3-1: SerialNumber: syz [ 401.241830][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.279476][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.299910][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.330347][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.348073][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.452034][ T1867] usb 3-1: config 0 descriptor?? [ 402.203544][ T1867] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 402.377206][ T1867] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 403.514052][ T50] Bluetooth: hci0: command tx timeout [ 404.113203][ T5864] usb 3-1: USB disconnect, device number 5 [ 404.730594][ T6740] loop5: detected capacity change from 0 to 2048 [ 404.762489][ T6719] chnl_net:caif_netlink_parms(): no params data found [ 405.242963][ T6740] EXT4-fs error (device loop5): __ext4_fill_super:5500: inode #2: comm syz.5.178: iget: bad extended attribute block 281474976710655 [ 405.311372][ T6740] EXT4-fs (loop5): get root inode failed [ 405.323045][ T6740] EXT4-fs (loop5): mount failed [ 405.580233][ T50] Bluetooth: hci0: command tx timeout [ 407.659084][ T50] Bluetooth: hci0: command tx timeout [ 408.628913][ T6719] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.649798][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.661426][ T6719] bridge_slave_0: entered allmulticast mode [ 408.809670][ T6719] bridge_slave_0: entered promiscuous mode [ 408.969055][ T6719] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.981966][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.995518][ T6719] bridge_slave_1: entered allmulticast mode [ 409.009221][ T6719] bridge_slave_1: entered promiscuous mode [ 409.488920][ T6768] 8021q: VLANs not supported on vcan0 [ 409.751862][ T50] Bluetooth: hci0: command tx timeout [ 409.840721][ T6719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.890850][ T6719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 410.131670][ T5864] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 410.358062][ T6719] team0: Port device team_slave_0 added [ 410.501246][ T5864] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 410.516603][ T5864] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.530981][ T5864] usb 8-1: Product: syz [ 410.539172][ T5864] usb 8-1: Manufacturer: syz [ 410.544715][ T5864] usb 8-1: SerialNumber: syz [ 410.668171][ T6719] team0: Port device team_slave_1 added [ 410.750851][ T5864] usb 8-1: config 0 descriptor?? [ 410.990197][ T5864] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 411.204040][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.211175][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.246735][ T6719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.329183][ T5864] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 411.659682][ T6719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.670527][ T6719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.701098][ T6719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.879906][ T5864] usb 8-1: USB disconnect, device number 3 [ 413.329538][ T6719] hsr_slave_0: entered promiscuous mode [ 413.362534][ T6719] hsr_slave_1: entered promiscuous mode [ 413.931575][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 413.943467][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 416.568391][ T6719] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 416.635336][ T6719] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 416.790908][ T6719] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 417.152560][ T6719] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 417.268637][ T6823] netlink: 96 bytes leftover after parsing attributes in process `syz.1.200'. [ 418.049058][ T4233] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.388663][ T4233] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.723783][ T4233] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.748735][ T5864] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 419.031610][ T5864] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 419.046961][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.060718][ T5864] usb 3-1: Product: syz [ 419.070410][ T5864] usb 3-1: Manufacturer: syz [ 419.080568][ T5864] usb 3-1: SerialNumber: syz [ 419.181164][ T5864] usb 3-1: config 0 descriptor?? [ 419.198045][ T4233] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.550252][ T5864] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 419.717045][ T6842] lo speed is unknown, defaulting to 1000 [ 419.783050][ T6842] lo speed is unknown, defaulting to 1000 [ 419.843555][ T6842] lo speed is unknown, defaulting to 1000 [ 419.864231][ T6842] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 419.916492][ T6842] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 420.021242][ T5864] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 420.092402][ T6842] lo speed is unknown, defaulting to 1000 [ 420.569855][ T4233] bridge_slave_1: left allmulticast mode [ 420.581373][ T4233] bridge_slave_1: left promiscuous mode [ 420.598826][ T4233] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.919742][ T4233] bridge_slave_0: left allmulticast mode [ 420.934545][ T4233] bridge_slave_0: left promiscuous mode [ 420.943599][ T4233] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.156428][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.7.206'. [ 422.148741][ T5872] usb 3-1: USB disconnect, device number 6 [ 422.221584][ T6856] loop5: detected capacity change from 0 to 512 [ 422.276563][ T6856] EXT4-fs: Ignoring removed nomblk_io_submit option [ 422.345276][ T6856] EXT4-fs (loop5): Test dummy encryption mode enabled [ 422.446565][ T6856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 422.472000][ T6856] System zones: 2-12, 7-7 [ 422.585443][ T6856] EXT4-fs (loop5): 1 truncate cleaned up [ 422.594063][ T6856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.889064][ T6860] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 423.092560][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.890278][ T4233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.971587][ T4233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.014264][ T4233] bond0 (unregistering): Released all slaves [ 424.141041][ T6842] lo speed is unknown, defaulting to 1000 [ 424.150941][ T6842] lo speed is unknown, defaulting to 1000 [ 424.161362][ T6842] lo speed is unknown, defaulting to 1000 [ 424.170636][ T6842] lo speed is unknown, defaulting to 1000 [ 424.245577][ T6842] lo speed is unknown, defaulting to 1000 [ 424.324318][ T6719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.833040][ T6719] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.962515][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.970275][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.141834][ T4233] hsr_slave_0: left promiscuous mode [ 425.185138][ T4233] hsr_slave_1: left promiscuous mode [ 425.193793][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.201588][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.297281][ T4233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.305497][ T4233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.483543][ T4233] veth1_macvtap: left promiscuous mode [ 425.489398][ T4233] veth0_macvtap: left promiscuous mode [ 425.497072][ T4233] veth1_vlan: left promiscuous mode [ 425.503037][ T4233] veth0_vlan: left promiscuous mode [ 426.293601][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 426.979296][ T5865] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 427.114745][ T4233] team0 (unregistering): Port device team_slave_1 removed [ 427.232401][ T4233] team0 (unregistering): Port device team_slave_0 removed [ 427.234578][ T5865] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 427.249330][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.257804][ T5865] usb 6-1: Product: syz [ 427.262226][ T5865] usb 6-1: Manufacturer: syz [ 427.267232][ T5865] usb 6-1: SerialNumber: syz [ 427.389604][ T5865] usb 6-1: config 0 descriptor?? [ 427.723861][ T5865] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 428.076536][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.084240][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.338566][ T5865] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 428.378234][ T6904] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 430.102083][ T5872] usb 6-1: USB disconnect, device number 2 [ 431.023639][ T6719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.333118][ T5102] Bluetooth: hci7: command 0x0406 tx timeout [ 432.893866][ T50] Bluetooth: hci7: unexpected cc 0x203e length: 2 > 1 [ 432.900996][ T50] Bluetooth: hci7: unexpected event for opcode 0x203e [ 433.923690][ T1588] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 434.144778][ T6719] veth0_vlan: entered promiscuous mode [ 434.186077][ T1588] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 434.196027][ T1588] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.205049][ T1588] usb 8-1: Product: syz [ 434.209495][ T1588] usb 8-1: Manufacturer: syz [ 434.214560][ T1588] usb 8-1: SerialNumber: syz [ 434.289383][ T6719] veth1_vlan: entered promiscuous mode [ 434.297023][ T1588] usb 8-1: config 0 descriptor?? [ 434.560145][ T1588] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 434.772239][ T6719] veth0_macvtap: entered promiscuous mode [ 434.830951][ T6719] veth1_macvtap: entered promiscuous mode [ 435.088854][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.201705][ T6719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.212208][ T1588] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 435.330355][ T6719] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.339806][ T6719] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.349107][ T6719] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.358438][ T6719] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.983921][ T5872] usb 8-1: USB disconnect, device number 4 [ 440.655278][ T5865] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 440.955000][ T5865] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 440.964724][ T5865] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.973469][ T5865] usb 6-1: Product: syz [ 440.977906][ T5865] usb 6-1: Manufacturer: syz [ 440.982987][ T5865] usb 6-1: SerialNumber: syz [ 441.187595][ T5865] usb 6-1: config 0 descriptor?? [ 441.506779][ T5865] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 442.139737][ T5865] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 442.593454][ T7058] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 443.733187][ T5865] usb 6-1: USB disconnect, device number 3 [ 444.108616][ T6661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.117318][ T6661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.349585][ T6659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.358071][ T6659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.749426][ T7079] overlayfs: missing 'lowerdir' [ 445.240536][ T7081] loop5: detected capacity change from 0 to 512 [ 445.320446][ T7081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 445.375749][ T7081] EXT4-fs (loop5): Test dummy encryption mode enabled [ 445.457254][ T7081] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 445.492930][ T7081] System zones: 2-12, 7-7 [ 445.530597][ T7081] EXT4-fs (loop5): 1 truncate cleaned up [ 445.540597][ T7081] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.096802][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.224661][ T5872] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 447.495152][ T5872] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 447.504791][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.513329][ T5872] usb 8-1: Product: syz [ 447.517740][ T5872] usb 8-1: Manufacturer: syz [ 447.522772][ T5872] usb 8-1: SerialNumber: syz [ 447.704208][ T5872] usb 8-1: config 0 descriptor?? [ 447.936236][ T5872] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 448.131761][ T7114] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 448.635859][ T5872] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 449.845775][ T7128] overlayfs: missing 'lowerdir' [ 450.355915][ T1588] usb 8-1: USB disconnect, device number 5 [ 452.243286][ T5872] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 453.148999][ T7156] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9) [ 453.155886][ T7156] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 453.164235][ T7156] vhci_hcd vhci_hcd.0: Device attached [ 453.227175][ T7158] vhci_hcd: connection closed [ 453.258164][ T4233] vhci_hcd: stop threads [ 453.267709][ T4233] vhci_hcd: release socket [ 453.272357][ T4233] vhci_hcd: disconnect device [ 453.710224][ T5872] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 453.719930][ T5872] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.731225][ T5872] usb 9-1: config 0 has no interface number 0 [ 453.738014][ T5872] usb 9-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 453.749372][ T5872] usb 9-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 453.920780][ T5872] usb 9-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 453.931449][ T5872] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.939993][ T5872] usb 9-1: Product: syz [ 453.944515][ T5872] usb 9-1: Manufacturer: syz [ 453.949361][ T5872] usb 9-1: SerialNumber: syz [ 454.161823][ T5872] usb 9-1: config 0 descriptor?? [ 454.255707][ T5872] HFC-S_USB 9-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 454.486166][ T5872] usb 9-1: USB disconnect, device number 2 [ 456.034738][ T7177] overlayfs: missing 'lowerdir' [ 456.136469][ T7176] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 456.576912][ T5872] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 456.858732][ T5872] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 456.868586][ T5872] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.880285][ T5872] usb 8-1: Product: syz [ 456.885960][ T5872] usb 8-1: Manufacturer: syz [ 456.890831][ T5872] usb 8-1: SerialNumber: syz [ 457.080243][ T5872] usb 8-1: config 0 descriptor?? [ 457.403448][ T5872] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 458.051468][ T5872] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 458.182436][ T7191] loop5: detected capacity change from 0 to 512 [ 458.245356][ T7191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 458.317899][ T7191] EXT4-fs (loop5): Test dummy encryption mode enabled [ 458.453044][ T7191] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 458.512986][ T7191] System zones: 2-12, 7-7 [ 458.578347][ T7191] EXT4-fs (loop5): 1 truncate cleaned up [ 458.586950][ T7191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.999315][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.800878][ T5872] usb 8-1: USB disconnect, device number 6 [ 460.667018][ T7223] overlayfs: missing 'lowerdir' [ 461.391617][ T7230] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 462.781344][ T7241] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 463.195730][ T7248] loop5: detected capacity change from 0 to 512 [ 463.265272][ T7248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 463.405402][ T7248] EXT4-fs (loop5): Test dummy encryption mode enabled [ 463.458969][ T7248] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 463.483470][ T7248] System zones: 2-12, 7-7 [ 463.563854][ T7248] EXT4-fs (loop5): 1 truncate cleaned up [ 463.571951][ T7248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.085806][ T6119] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.067011][ T7264] overlayfs: missing 'lowerdir' [ 466.353355][ T7273] loop5: detected capacity change from 0 to 1024 [ 466.604230][ T7273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.775609][ T7273] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 466.861100][ T7273] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 466.875491][ T7273] EXT4-fs (loop5): This should not happen!! Data will be lost [ 466.875491][ T7273] [ 466.886573][ T7273] EXT4-fs (loop5): Total free blocks count 0 [ 466.893297][ T7273] EXT4-fs (loop5): Free/Dirty block details [ 466.900125][ T7273] EXT4-fs (loop5): free_blocks=68451041280 [ 466.910444][ T7273] EXT4-fs (loop5): dirty_blocks=32 [ 466.917146][ T7273] EXT4-fs (loop5): Block reservation details [ 466.923801][ T7273] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 467.511559][ T4290] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 28 [ 470.704135][ T7311] overlayfs: missing 'lowerdir' [ 474.316114][ T7340] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 474.322273][ T7340] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 474.427785][ T7340] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 474.434768][ T7340] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 474.449528][ T7340] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 474.455789][ T7340] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 474.598978][ T5870] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 474.857278][ T5870] usb 6-1: config 1 has an invalid interface number: 128 but max is 1 [ 474.866132][ T5870] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 474.876711][ T5870] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 474.885993][ T5870] usb 6-1: config 1 has no interface number 0 [ 474.896651][ T5870] usb 6-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 475.090071][ T5870] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.105145][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.115497][ T5870] usb 6-1: Product: syz [ 475.119935][ T5870] usb 6-1: Manufacturer: syz [ 475.124932][ T5870] usb 6-1: SerialNumber: syz [ 475.236559][ T5870] cdc_wdm 6-1:1.128: skipping garbage [ 475.242320][ T5870] cdc_wdm 6-1:1.128: probe with driver cdc_wdm failed with error -22 [ 475.352356][ T7355] overlayfs: missing 'workdir' [ 475.396368][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 475.406797][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 476.789355][ T7365] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 477.213551][ T7368] syz.2.345 (7368) used obsolete PPPIOCDETACH ioctl [ 477.449151][ T5870] usb 6-1: USB disconnect, device number 4 [ 479.633982][ T7389] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 479.640880][ T7389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 479.649088][ T7389] vhci_hcd vhci_hcd.0: Device attached [ 479.934132][ T5872] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 480.053273][ T5870] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 480.118819][ T5872] usb 6-1: device descriptor read/64, error -71 [ 480.139471][ T7396] overlayfs: missing 'workdir' [ 480.383751][ T5872] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 480.563620][ T5872] usb 6-1: device descriptor read/64, error -71 [ 480.680418][ T5872] usb usb6-port1: attempt power cycle [ 480.773404][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.784157][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.794248][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.811910][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.854870][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.887701][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.910023][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.919739][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.943048][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.955764][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 481.063635][ T7400] lo speed is unknown, defaulting to 1000 [ 481.173203][ T5872] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 481.215715][ T5872] usb 6-1: device descriptor read/8, error -71 [ 481.483645][ T5872] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 481.515643][ T5872] usb 6-1: device descriptor read/8, error -71 [ 481.641572][ T5872] usb usb6-port1: unable to enumerate USB device [ 482.212022][ T7400] chnl_net:caif_netlink_parms(): no params data found [ 482.765383][ T7391] vhci_hcd: connection reset by peer [ 482.796824][ T6659] vhci_hcd: stop threads [ 482.801364][ T6659] vhci_hcd: release socket [ 482.806930][ T6659] vhci_hcd: disconnect device [ 483.022972][ T5102] Bluetooth: hci1: command tx timeout [ 483.723428][ T7425] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 485.093832][ T50] Bluetooth: hci1: command tx timeout [ 485.122284][ T7400] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.129863][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.141462][ T7400] bridge_slave_0: entered allmulticast mode [ 485.151117][ T7400] bridge_slave_0: entered promiscuous mode [ 485.216609][ T5870] vhci_hcd: vhci_device speed not set [ 485.370457][ T7400] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.378576][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.386653][ T7400] bridge_slave_1: entered allmulticast mode [ 485.395453][ T7400] bridge_slave_1: entered promiscuous mode [ 486.002401][ T7400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.072003][ T7443] overlayfs: missing 'workdir' [ 486.276469][ T7400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.885116][ T7400] team0: Port device team_slave_0 added [ 486.984060][ T7400] team0: Port device team_slave_1 added [ 487.184392][ T50] Bluetooth: hci1: command tx timeout [ 487.623089][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.630861][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.657757][ T7400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.769648][ T7400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.778420][ T7400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.807963][ T7400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.554194][ T7400] hsr_slave_0: entered promiscuous mode [ 488.563893][ T7400] hsr_slave_1: entered promiscuous mode [ 488.571861][ T7400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 488.580078][ T7400] Cannot create hsr debugfs directory [ 489.253547][ T50] Bluetooth: hci1: command tx timeout [ 490.094118][ T7400] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 490.295261][ T7400] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 490.464228][ T7400] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 490.546067][ T7462] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 490.553036][ T7462] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 490.566422][ T7462] vhci_hcd vhci_hcd.0: Device attached [ 490.622028][ T7400] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 490.954418][ T5865] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 491.063435][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 491.338462][ T24] usb 3-1: device descriptor read/64, error -71 [ 491.658852][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 491.872992][ T24] usb 3-1: device descriptor read/64, error -71 [ 492.028075][ T24] usb usb3-port1: attempt power cycle [ 492.543533][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 492.665206][ T24] usb 3-1: device descriptor read/8, error -71 [ 492.936689][ T7400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.973539][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 493.106838][ T24] usb 3-1: device descriptor read/8, error -71 [ 493.238780][ T24] usb usb3-port1: unable to enumerate USB device [ 493.276732][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.295218][ T7483] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 493.301520][ T7483] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 493.400058][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.407860][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.665697][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.673354][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.693377][ T5872] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 494.175675][ T5872] usb 6-1: config 1 has an invalid interface number: 128 but max is 1 [ 494.184688][ T5872] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.195231][ T5872] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 494.204492][ T5872] usb 6-1: config 1 has no interface number 0 [ 494.210742][ T5872] usb 6-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 494.360943][ T7489] overlayfs: missing 'lowerdir' [ 494.382322][ T7464] vhci_hcd: connection reset by peer [ 494.418297][ T6659] vhci_hcd: stop threads [ 494.423747][ T6659] vhci_hcd: release socket [ 494.429199][ T6659] vhci_hcd: disconnect device [ 494.645412][ T5872] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 494.659297][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.668441][ T5872] usb 6-1: Product: syz [ 494.672982][ T5872] usb 6-1: Manufacturer: syz [ 494.677744][ T5872] usb 6-1: SerialNumber: syz [ 494.886444][ T5872] cdc_wdm 6-1:1.128: skipping garbage [ 494.892046][ T5872] cdc_wdm 6-1:1.128: probe with driver cdc_wdm failed with error -22 [ 495.199399][ T7403] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 495.568949][ T7403] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 495.584010][ T7403] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.592325][ T7403] usb 3-1: Product: syz [ 495.598227][ T7403] usb 3-1: Manufacturer: syz [ 495.603362][ T7403] usb 3-1: SerialNumber: syz [ 495.896544][ T7403] usb 3-1: config 0 descriptor?? [ 496.117795][ T7403] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 496.146769][ T5865] vhci_hcd: vhci_device speed not set [ 496.809121][ T5872] usb 6-1: USB disconnect, device number 9 [ 497.851659][ T7403] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 497.956265][ T7403] usb 3-1: USB disconnect, device number 11 [ 498.046093][ T7508] loop5: detected capacity change from 0 to 128 [ 498.181559][ T7508] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 498.798673][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.298299][ T4510] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.546236][ T4510] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.241815][ T4510] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.611683][ T4510] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.764830][ T4510] bridge_slave_1: left allmulticast mode [ 501.770802][ T4510] bridge_slave_1: left promiscuous mode [ 501.777632][ T4510] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.915292][ T4510] bridge_slave_0: left allmulticast mode [ 501.921372][ T4510] bridge_slave_0: left promiscuous mode [ 501.934838][ T4510] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.731446][ T4510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.823452][ T4510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.864391][ T5870] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 502.870474][ T4510] bond0 (unregistering): Released all slaves [ 503.136221][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 503.196275][ T5870] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 503.205002][ T5870] usb 3-1: config 0 has no interface number 0 [ 503.211382][ T5870] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 503.221803][ T5870] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 503.232145][ T5870] usb 3-1: config 0 interface 41 has no altsetting 0 [ 503.425780][ T7540] overlayfs: missing 'lowerdir' [ 503.460225][ T5870] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 503.474827][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.485026][ T5870] usb 3-1: Product: syz [ 503.489473][ T5870] usb 3-1: Manufacturer: syz [ 503.494502][ T5870] usb 3-1: SerialNumber: syz [ 503.628743][ T5870] usb 3-1: config 0 descriptor?? [ 503.637305][ T7536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 503.654757][ T7536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 503.988239][ T4510] hsr_slave_0: left promiscuous mode [ 504.030996][ T7536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 504.068517][ T4510] hsr_slave_1: left promiscuous mode [ 504.079301][ T4510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.087305][ T4510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.125337][ T7536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 504.265422][ T4510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.273366][ T4510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.388849][ T5865] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 504.518599][ T4510] veth1_macvtap: left promiscuous mode [ 504.524741][ T4510] veth0_macvtap: left promiscuous mode [ 504.530779][ T4510] veth1_vlan: left promiscuous mode [ 504.538255][ T4510] veth0_vlan: left promiscuous mode [ 504.609487][ T5870] Error reading MAC address [ 504.626955][ T7536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 504.979496][ T7536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 507.366784][ T4510] team0 (unregistering): Port device team_slave_1 removed [ 507.616556][ T5870] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 507.746834][ T4510] team0 (unregistering): Port device team_slave_0 removed [ 508.013268][ T5870] usb 3-1: USB disconnect, device number 12 [ 508.323521][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.333345][ T5102] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.373892][ T5102] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.390414][ T5102] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.405372][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.431691][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 508.441298][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 508.530689][ T7400] veth0_vlan: entered promiscuous mode [ 508.686857][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 508.720220][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 508.737740][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 508.915445][ T7400] veth1_vlan: entered promiscuous mode [ 509.037900][ T7558] lo speed is unknown, defaulting to 1000 [ 509.901828][ T7400] veth0_macvtap: entered promiscuous mode [ 510.003591][ T7400] veth1_macvtap: entered promiscuous mode [ 510.090344][ T7558] chnl_net:caif_netlink_parms(): no params data found [ 510.179245][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.409523][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.662864][ T7400] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.671995][ T7400] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.681229][ T7400] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.695227][ T7400] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.776376][ T5102] Bluetooth: hci0: command tx timeout [ 510.883592][ T7579] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 511.627611][ T7590] overlayfs: missing 'lowerdir' [ 512.518489][ T7558] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.526939][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.534962][ T7558] bridge_slave_0: entered allmulticast mode [ 512.544936][ T7558] bridge_slave_0: entered promiscuous mode [ 512.777522][ T7558] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.793494][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.801375][ T7558] bridge_slave_1: entered allmulticast mode [ 512.811317][ T7558] bridge_slave_1: entered promiscuous mode [ 512.856115][ T5102] Bluetooth: hci0: command tx timeout [ 512.988941][ T5864] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 513.156539][ T7558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.224098][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 513.253921][ T5864] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 513.262457][ T5864] usb 6-1: config 0 has no interface number 0 [ 513.269126][ T5864] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 513.279715][ T5864] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 513.290299][ T5864] usb 6-1: config 0 interface 41 has no altsetting 0 [ 513.376288][ T7558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.552361][ T5864] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 513.563473][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.571647][ T5864] usb 6-1: Product: syz [ 513.576576][ T5864] usb 6-1: Manufacturer: syz [ 513.581352][ T5864] usb 6-1: SerialNumber: syz [ 513.639725][ T7605] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 513.646560][ T7605] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 513.792347][ T5864] usb 6-1: config 0 descriptor?? [ 513.800987][ T7601] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 513.850597][ T7601] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 513.943631][ T5872] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 513.980572][ T7558] team0: Port device team_slave_0 added [ 514.068581][ T7558] team0: Port device team_slave_1 added [ 514.286878][ T5872] usb 3-1: config 1 has an invalid interface number: 128 but max is 1 [ 514.295949][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.306550][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 514.317840][ T5872] usb 3-1: config 1 has no interface number 0 [ 514.325121][ T5872] usb 3-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.370949][ T7601] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 514.451851][ T5872] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 514.462433][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.471071][ T5872] usb 3-1: Product: syz [ 514.475569][ T5872] usb 3-1: Manufacturer: syz [ 514.480402][ T5872] usb 3-1: SerialNumber: syz [ 514.579530][ T7558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.587529][ T7558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.615439][ T7558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.644010][ T7601] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 514.697123][ T5872] cdc_wdm 3-1:1.128: skipping garbage [ 514.703136][ T5872] cdc_wdm 3-1:1.128: probe with driver cdc_wdm failed with error -22 [ 514.759024][ T7558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.767109][ T7558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.794718][ T7558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.095755][ T5864] Error reading MAC address [ 515.104059][ T7601] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 515.116458][ T7601] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 515.476209][ T7558] hsr_slave_0: entered promiscuous mode [ 515.488825][ T7558] hsr_slave_1: entered promiscuous mode [ 516.238229][ T7601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.248666][ T7601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.586813][ T5864] sr9700 6-1:0.41 eth21: register 'sr9700' at usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet, c6:dd:e9:8a:3e:52 [ 516.751119][ T5872] usb 3-1: USB disconnect, device number 13 [ 516.780528][ T5864] usb 6-1: USB disconnect, device number 11 [ 516.789334][ T5864] sr9700 6-1:0.41 eth21: unregister 'sr9700' usb-dummy_hcd.5-1, CoreChip SR9700 USB Ethernet [ 518.169935][ T7625] input: syz0 as /devices/virtual/input/input8 [ 520.136996][ T7558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.289420][ T7558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 520.392297][ T7643] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 520.401793][ T7643] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 520.436865][ T7558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 520.610193][ T7558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 520.753857][ T7647] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 522.643822][ T7558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.834209][ T7558] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.947398][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.954935][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.170088][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.177957][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.427033][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.438716][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.830741][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.841081][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.416221][ T5865] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 525.443407][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.420'. [ 525.456772][ T7674] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.466868][ T7674] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.713321][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 525.748937][ T5865] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 525.847134][ T5865] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 525.856856][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 525.865529][ T5865] usb 3-1: Product: syz [ 525.869978][ T5865] usb 3-1: Manufacturer: syz [ 525.874942][ T5865] usb 3-1: SerialNumber: syz [ 526.016112][ T5865] usb 3-1: config 0 descriptor?? [ 526.023835][ T7668] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 526.137222][ T7558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.954209][ T5865] usb 3-1: USB disconnect, device number 14 [ 526.997922][ T7558] veth0_vlan: entered promiscuous mode [ 527.183776][ T7678] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 527.190638][ T7678] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.199006][ T7678] vhci_hcd vhci_hcd.0: Device attached [ 527.304167][ T7558] veth1_vlan: entered promiscuous mode [ 527.513318][ T5864] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 527.707816][ T4353] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.725000][ T5895] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 527.900180][ T4353] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.973031][ T5895] usb 10-1: Using ep0 maxpacket: 16 [ 527.993354][ T5895] usb 10-1: no configurations [ 527.998449][ T5895] usb 10-1: can't read configurations, error -22 [ 528.109524][ T4353] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.213349][ T5895] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 528.310115][ T4353] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.394161][ T7558] veth0_macvtap: entered promiscuous mode [ 528.402970][ T5895] usb 10-1: Using ep0 maxpacket: 16 [ 528.457982][ T5895] usb 10-1: no configurations [ 528.463122][ T5895] usb 10-1: can't read configurations, error -22 [ 528.492191][ T5895] usb usb10-port1: attempt power cycle [ 528.559243][ T7558] veth1_macvtap: entered promiscuous mode [ 528.673079][ T5865] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 528.894118][ T5895] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 528.925126][ T5865] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 528.934443][ T5865] usb 3-1: config 0 has no interface number 0 [ 528.956928][ T7558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.054920][ T5865] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 529.070373][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.080935][ T5865] usb 3-1: Product: syz [ 529.085512][ T5865] usb 3-1: Manufacturer: syz [ 529.090442][ T5865] usb 3-1: SerialNumber: syz [ 529.099324][ T5895] usb 10-1: Using ep0 maxpacket: 16 [ 529.115524][ T4353] bridge_slave_1: left allmulticast mode [ 529.121432][ T4353] bridge_slave_1: left promiscuous mode [ 529.125139][ T5895] usb 10-1: no configurations [ 529.128478][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.131872][ T5895] usb 10-1: can't read configurations, error -22 [ 529.192795][ T5865] usb 3-1: config 0 descriptor?? [ 529.298926][ T4353] bridge_slave_0: left allmulticast mode [ 529.305354][ T4353] bridge_slave_0: left promiscuous mode [ 529.312974][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.338276][ T5895] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 529.387929][ T5895] usb 10-1: Using ep0 maxpacket: 16 [ 529.404706][ T5895] usb 10-1: no configurations [ 529.410113][ T5895] usb 10-1: can't read configurations, error -22 [ 529.418121][ T5895] usb usb10-port1: unable to enumerate USB device [ 529.629888][ T7693] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 529.639702][ T7693] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 529.823288][ T7694] capability: warning: `syz.5.421' uses deprecated v2 capabilities in a way that may be insecure [ 530.010045][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.038253][ T5865] usb 3-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 530.092968][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.108510][ T4353] bond0 (unregistering): Released all slaves [ 530.231240][ T7558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.283677][ T5865] usb 3-1: no permanent extended address found, random address set [ 530.555614][ T7558] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.564864][ T7558] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.574240][ T7558] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.583469][ T7558] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.853178][ T7679] vhci_hcd: connection reset by peer [ 537.475556][ T7680] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 539.340324][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 539.347179][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 544.398296][ T7696] kexec: Could not allocate control_code_buffer [ 544.492839][ T4290] vhci_hcd: stop threads [ 544.497373][ T4290] vhci_hcd: release socket [ 544.502278][ T4290] vhci_hcd: disconnect device [ 544.672997][ T5864] vhci_hcd: vhci_device speed not set [ 544.875017][ T5865] usb 3-1: USB disconnect, device number 15 [ 546.221554][ T4353] hsr_slave_0: left promiscuous mode [ 546.283695][ T5864] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 546.356079][ T4353] hsr_slave_1: left promiscuous mode [ 546.364846][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 546.376193][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 546.450566][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.458562][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.654555][ T4353] veth1_macvtap: left promiscuous mode [ 546.660612][ T4353] veth0_macvtap: left promiscuous mode [ 546.667719][ T4353] veth1_vlan: left promiscuous mode [ 546.677344][ T4353] veth0_vlan: left promiscuous mode [ 547.633795][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 547.650609][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 547.661991][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 547.676979][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 547.704263][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 548.021823][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 548.034944][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 548.048308][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 548.123086][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 548.317516][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 548.326956][ T5102] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 548.446903][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 548.457761][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 548.507224][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 548.534904][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 548.658455][ T5811] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 548.716208][ T5102] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 548.738807][ T5102] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 548.804751][ T5102] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 548.817790][ T5102] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 549.205333][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 549.415808][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 549.871217][ T5872] lo speed is unknown, defaulting to 1000 [ 549.878093][ T5872] infiniband syz1: ib_query_port failed (-19) [ 550.715523][ T5102] Bluetooth: hci2: command tx timeout [ 550.775794][ T5102] Bluetooth: hci6: command tx timeout [ 550.933334][ T50] Bluetooth: hci7: command tx timeout [ 550.973910][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 550.992244][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 551.017064][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 551.081068][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 551.113840][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 552.832984][ T50] Bluetooth: hci2: command tx timeout [ 552.839814][ T4353] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.863320][ T50] Bluetooth: hci6: command tx timeout [ 552.869878][ T7716] chnl_net:caif_netlink_parms(): no params data found [ 553.012839][ T50] Bluetooth: hci7: command tx timeout [ 553.122221][ T7713] chnl_net:caif_netlink_parms(): no params data found [ 553.166932][ T4353] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.262936][ T50] Bluetooth: hci8: command tx timeout [ 553.424753][ T4353] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.874635][ T4353] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.950221][ T7711] chnl_net:caif_netlink_parms(): no params data found [ 554.658254][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 554.775647][ T4353] bridge_slave_1: left allmulticast mode [ 554.781605][ T4353] bridge_slave_1: left promiscuous mode [ 554.788611][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.853821][ T50] Bluetooth: hci2: command tx timeout [ 554.914956][ T4353] bridge_slave_0: left allmulticast mode [ 554.920920][ T4353] bridge_slave_0: left promiscuous mode [ 554.927837][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.933316][ T50] Bluetooth: hci6: command tx timeout [ 555.133722][ T50] Bluetooth: hci7: command tx timeout [ 555.337732][ T50] Bluetooth: hci8: command tx timeout [ 555.555613][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.573113][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.608791][ T4353] bond0 (unregistering): Released all slaves [ 556.547529][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.555420][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.563490][ T7713] bridge_slave_0: entered allmulticast mode [ 556.573541][ T7713] bridge_slave_0: entered promiscuous mode [ 556.749737][ T7716] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.758956][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.767010][ T7716] bridge_slave_0: entered allmulticast mode [ 556.783782][ T7716] bridge_slave_0: entered promiscuous mode [ 556.893209][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.900838][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.908915][ T7713] bridge_slave_1: entered allmulticast mode [ 556.923268][ T7713] bridge_slave_1: entered promiscuous mode [ 556.933185][ T50] Bluetooth: hci2: command tx timeout [ 556.979848][ T7716] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.987817][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.995915][ T7716] bridge_slave_1: entered allmulticast mode [ 557.006016][ T7716] bridge_slave_1: entered promiscuous mode [ 557.033212][ T50] Bluetooth: hci6: command tx timeout [ 557.039431][ T7711] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.047340][ T7711] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.056181][ T7711] bridge_slave_0: entered allmulticast mode [ 557.066652][ T7711] bridge_slave_0: entered promiscuous mode [ 557.172986][ T50] Bluetooth: hci7: command tx timeout [ 557.198824][ T4353] hsr_slave_0: left promiscuous mode [ 557.215372][ T4353] hsr_slave_1: left promiscuous mode [ 557.227561][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.235604][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.281174][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.289363][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.343341][ T4353] veth1_macvtap: left promiscuous mode [ 557.349168][ T4353] veth0_macvtap: left promiscuous mode [ 557.355329][ T4353] veth1_vlan: left promiscuous mode [ 557.360964][ T4353] veth0_vlan: left promiscuous mode [ 557.413719][ T50] Bluetooth: hci8: command tx timeout [ 558.082027][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 558.109413][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 558.433360][ T7711] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.441014][ T7711] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.449098][ T7711] bridge_slave_1: entered allmulticast mode [ 558.463315][ T7711] bridge_slave_1: entered promiscuous mode [ 558.599432][ T7716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.695709][ T7716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.070322][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.080850][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.088954][ T7721] bridge_slave_0: entered allmulticast mode [ 559.098987][ T7721] bridge_slave_0: entered promiscuous mode [ 559.124920][ T7711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.149976][ T7713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.159938][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.171918][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.181188][ T7721] bridge_slave_1: entered allmulticast mode [ 559.191026][ T7721] bridge_slave_1: entered promiscuous mode [ 559.265058][ T7716] team0: Port device team_slave_0 added [ 559.348332][ T7711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.369552][ T7713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.494839][ T50] Bluetooth: hci8: command tx timeout [ 559.521777][ T7716] team0: Port device team_slave_1 added [ 559.538029][ T7711] team0: Port device team_slave_0 added [ 559.725249][ T7711] team0: Port device team_slave_1 added [ 559.746996][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.810690][ T6657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.820093][ T6657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.925405][ T7713] team0: Port device team_slave_0 added [ 559.997526][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.084877][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.095091][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.123764][ T7711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.180858][ T7713] team0: Port device team_slave_1 added [ 560.198147][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.205552][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.232249][ T7716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.362197][ T7721] team0: Port device team_slave_0 added [ 560.376700][ T7711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.384269][ T7711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.414070][ T7711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.555245][ T7716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.562871][ T7716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.589659][ T7716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.642758][ T7721] team0: Port device team_slave_1 added [ 560.713365][ T4353] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.734702][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.741918][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.768819][ T7713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.786544][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.794059][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.824347][ T7713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.932870][ T6661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.941077][ T6661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.041140][ T4353] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.109852][ T7716] hsr_slave_0: entered promiscuous mode [ 561.133978][ T7716] hsr_slave_1: entered promiscuous mode [ 561.143289][ T7716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.151097][ T7716] Cannot create hsr debugfs directory [ 561.183140][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.190386][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.222338][ T7721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.304231][ T4353] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.416415][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.427616][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.455980][ T7721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.707109][ T4353] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.860355][ T7711] hsr_slave_0: entered promiscuous mode [ 561.876563][ T7711] hsr_slave_1: entered promiscuous mode [ 561.887123][ T7711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 561.895183][ T7711] Cannot create hsr debugfs directory [ 561.977565][ T7713] hsr_slave_0: entered promiscuous mode [ 561.990023][ T7713] hsr_slave_1: entered promiscuous mode [ 561.999380][ T7713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.007426][ T7713] Cannot create hsr debugfs directory [ 562.013682][ T5865] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 562.237521][ T5865] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 562.249561][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.259114][ T5865] usb 4-1: Product: syz [ 562.263720][ T5865] usb 4-1: Manufacturer: syz [ 562.268586][ T5865] usb 4-1: SerialNumber: syz [ 562.280540][ T5865] usb 4-1: config 0 descriptor?? [ 562.516330][ T7721] hsr_slave_0: entered promiscuous mode [ 562.527027][ T7721] hsr_slave_1: entered promiscuous mode [ 562.536137][ T7721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.544051][ T7721] Cannot create hsr debugfs directory [ 562.576358][ T5865] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 563.394710][ T4353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.405753][ T4353] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 563.621040][ T4353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.631908][ T4353] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 563.871816][ T5865] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 563.931352][ T5865] usb 4-1: USB disconnect, device number 3 [ 563.975848][ T4353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.991226][ T4353] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 564.313490][ T4353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.324433][ T4353] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 565.165046][ T4353] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.404296][ T4353] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.661252][ T4353] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.895822][ T4353] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.015930][ T4353] bridge_slave_1: left allmulticast mode [ 567.021924][ T4353] bridge_slave_1: left promiscuous mode [ 567.028964][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.076190][ T4353] bridge_slave_0: left allmulticast mode [ 567.082169][ T4353] bridge_slave_0: left promiscuous mode [ 567.089147][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.243188][ T4353] bridge_slave_1: left allmulticast mode [ 567.249186][ T4353] bridge_slave_1: left promiscuous mode [ 567.262846][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.316897][ T4353] bridge_slave_0: left allmulticast mode [ 567.323129][ T4353] bridge_slave_0: left promiscuous mode [ 567.329785][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.389221][ T4353] bridge_slave_1: left allmulticast mode [ 567.396374][ T4353] bridge_slave_1: left promiscuous mode [ 567.403440][ T4353] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.451627][ T4353] bridge_slave_0: left allmulticast mode [ 567.458147][ T4353] bridge_slave_0: left promiscuous mode [ 567.471185][ T4353] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.538170][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.559976][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.593486][ T4353] bond0 (unregistering): Released all slaves [ 568.837319][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.010645][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.026045][ T4353] bond0 (unregistering): Released all slaves [ 569.325322][ T4353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.375048][ T4353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.401202][ T4353] bond0 (unregistering): Released all slaves [ 570.478606][ T7716] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 570.565257][ T7716] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 570.654593][ T7716] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 570.873733][ T7716] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 570.925962][ T7711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 571.096885][ T7711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 571.281897][ T7711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 571.318989][ T7713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 571.502477][ T7713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 571.530617][ T7711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 571.569470][ T7713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 571.773389][ T7713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 571.924769][ T4353] hsr_slave_0: left promiscuous mode [ 571.964475][ T4353] hsr_slave_1: left promiscuous mode [ 571.979550][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.987865][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.071007][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.080665][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.203009][ T4353] hsr_slave_0: left promiscuous mode [ 572.232249][ T4353] hsr_slave_1: left promiscuous mode [ 572.241629][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.249763][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.307054][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.315131][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.414101][ T4353] hsr_slave_0: left promiscuous mode [ 572.426555][ T4353] hsr_slave_1: left promiscuous mode [ 572.435355][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.443269][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.475819][ T4353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.484183][ T4353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.587070][ T4353] veth1_macvtap: left promiscuous mode [ 572.593079][ T4353] veth0_macvtap: left promiscuous mode [ 572.599135][ T4353] veth1_vlan: left promiscuous mode [ 572.604944][ T4353] veth0_vlan: left promiscuous mode [ 572.673125][ T4353] veth1_macvtap: left promiscuous mode [ 572.678973][ T4353] veth0_macvtap: left promiscuous mode [ 572.685235][ T4353] veth1_vlan: left promiscuous mode [ 572.690867][ T4353] veth0_vlan: left promiscuous mode [ 572.713150][ T4353] veth1_macvtap: left promiscuous mode [ 572.719069][ T4353] veth0_macvtap: left promiscuous mode [ 572.725465][ T4353] veth1_vlan: left promiscuous mode [ 572.731158][ T4353] veth0_vlan: left promiscuous mode [ 574.375454][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 574.413338][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 575.323282][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 575.419477][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 576.068355][ T4353] team0 (unregistering): Port device team_slave_1 removed [ 576.194395][ T4353] team0 (unregistering): Port device team_slave_0 removed [ 576.589492][ T7721] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 576.664429][ T7721] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 576.764057][ T7721] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 576.865657][ T7721] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 577.790252][ T7713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.977206][ T7713] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.040137][ T7716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.108596][ T4290] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.116371][ T4290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.307994][ T7711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.332724][ T4290] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.340830][ T4290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.560659][ T7716] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.737207][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.745212][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.815869][ T7711] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.924935][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.932776][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.057686][ T7713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.234641][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.286304][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.294067][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.331891][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.339748][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.726413][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.938961][ T4393] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.946716][ T4393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.969801][ T4393] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.977533][ T4393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.578935][ T7713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.140130][ T7713] veth0_vlan: entered promiscuous mode [ 582.270902][ T7716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.361624][ T7713] veth1_vlan: entered promiscuous mode [ 582.429742][ T7711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.896211][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.921804][ T7713] veth0_macvtap: entered promiscuous mode [ 583.021046][ T7713] veth1_macvtap: entered promiscuous mode [ 583.278373][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.366942][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 583.406117][ T7713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.542444][ T7713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.551724][ T7713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.561148][ T7713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.570587][ T7713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.584869][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.595478][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.606946][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 583.617141][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 583.630715][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 583.642062][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.906990][ T9] usb 4-1: config 0 descriptor?? [ 584.359655][ T9] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 584.475419][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input9 [ 584.695093][ T9] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 584.864895][ T9] usb 4-1: USB disconnect, device number 4 [ 585.719615][ T7892] fido_id[7892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 585.978075][ T7716] veth0_vlan: entered promiscuous mode [ 586.190043][ T7711] veth0_vlan: entered promiscuous mode [ 586.204401][ T7716] veth1_vlan: entered promiscuous mode [ 586.365389][ T7711] veth1_vlan: entered promiscuous mode [ 586.834465][ T7721] veth0_vlan: entered promiscuous mode [ 586.920101][ T7716] veth0_macvtap: entered promiscuous mode [ 586.968354][ T7711] veth0_macvtap: entered promiscuous mode [ 587.015207][ T7721] veth1_vlan: entered promiscuous mode [ 587.038349][ T7716] veth1_macvtap: entered promiscuous mode [ 587.077992][ T7711] veth1_macvtap: entered promiscuous mode [ 587.377458][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.411445][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.432108][ T7721] veth0_macvtap: entered promiscuous mode [ 587.502978][ T7716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.557985][ T7721] veth1_macvtap: entered promiscuous mode [ 587.586515][ T7711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.632918][ T7716] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.644449][ T7716] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.656791][ T7716] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.668612][ T7716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.771456][ T7711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.782277][ T7711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.793004][ T7711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.802064][ T7711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.876996][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.947371][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.105613][ T7721] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.114925][ T7721] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.124170][ T7721] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.133462][ T7721] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.381778][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.390219][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.580932][ T3637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.589255][ T3637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 593.689812][ T5895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 593.901076][ T5895] usb 1-1: Using ep0 maxpacket: 16 [ 593.954984][ T5895] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 593.963683][ T5895] usb 1-1: config 0 has no interface number 0 [ 593.970088][ T5895] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 593.980449][ T5895] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 593.991725][ T5895] usb 1-1: config 0 interface 41 has no altsetting 0 [ 594.149212][ T5895] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 594.158878][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.167481][ T5895] usb 1-1: Product: syz [ 594.171949][ T5895] usb 1-1: Manufacturer: syz [ 594.177099][ T5895] usb 1-1: SerialNumber: syz [ 594.266003][ T5895] usb 1-1: config 0 descriptor?? [ 594.286520][ T7987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.358655][ T7987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.704758][ T7987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 594.743962][ T7987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 595.195731][ T5895] Error reading MAC address [ 595.204723][ T7987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 595.226085][ T7987] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 595.920131][ T3625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.931800][ T3625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.407151][ T5895] sr9700 1-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet, fa:bb:71:4d:21:90 [ 596.415659][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.427681][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.492463][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.500948][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.525063][ T5895] usb 1-1: USB disconnect, device number 3 [ 596.535769][ T5895] sr9700 1-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet [ 596.667903][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.676362][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.982523][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.991467][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.047716][ T6657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.062490][ T6657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.240268][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.247346][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.828709][ T8032] bridge0: entered allmulticast mode [ 598.885598][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 598.895094][ T8032] bridge_slave_1: left allmulticast mode [ 598.905054][ T8032] bridge_slave_1: left promiscuous mode [ 598.912053][ T8032] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.105482][ T8032] bridge_slave_0: left allmulticast mode [ 599.112768][ T8032] bridge_slave_0: left promiscuous mode [ 599.119757][ T8032] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.185370][ T8025] loop6: detected capacity change from 0 to 4096 [ 599.263923][ T8025] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512). [ 599.316873][ T8032] bridge0 (unregistering): left allmulticast mode [ 599.973721][ T8025] mmap: syz.6.425 (8025) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 600.574710][ T5895] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 600.816365][ T5895] usb 9-1: Using ep0 maxpacket: 8 [ 600.914855][ T5895] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 600.924499][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.933158][ T5895] usb 9-1: Product: syz [ 600.937578][ T5895] usb 9-1: Manufacturer: syz [ 600.942369][ T5895] usb 9-1: SerialNumber: syz [ 601.136263][ T5895] usb 9-1: config 0 descriptor?? [ 601.523661][ T5895] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 603.138868][ T5895] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 603.170812][ T5895] usb 9-1: USB disconnect, device number 3 [ 605.626794][ T8083] loop6: detected capacity change from 0 to 1024 [ 606.114359][ T8083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.156110][ T8080] loop4: detected capacity change from 0 to 8192 [ 607.218817][ T7716] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.254881][ T8148] hsr0: entered promiscuous mode [ 613.534201][ T8145] loop8: detected capacity change from 0 to 8192 [ 621.775515][ T8218] loop8: detected capacity change from 0 to 512 [ 621.825580][ T8218] EXT4-fs: Ignoring removed orlov option [ 621.831821][ T8218] EXT4-fs: Ignoring removed nomblk_io_submit option [ 621.903245][ T8218] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 622.062297][ T8218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 622.217901][ T8218] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.504: corrupted in-inode xattr: e_value size too large [ 622.281552][ T8218] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.504: couldn't read orphan inode 15 (err -117) [ 622.387285][ T8218] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.527305][ T8218] overlayfs: upper fs needs to support d_type. [ 623.027481][ T7721] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 623.102313][ T7721] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 623.618757][ T6657] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.658520][ T7721] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.834406][ T6657] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.173393][ T6657] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.480191][ T6657] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.023423][ T6657] bridge_slave_1: left allmulticast mode [ 625.029647][ T6657] bridge_slave_1: left promiscuous mode [ 625.036197][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.154152][ T6657] bridge_slave_0: left allmulticast mode [ 625.160066][ T6657] bridge_slave_0: left promiscuous mode [ 625.167013][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.083473][ T6657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.158783][ T6657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.179346][ T6657] bond0 (unregistering): Released all slaves [ 626.997759][ T6657] hsr_slave_0: left promiscuous mode [ 627.015058][ T6657] hsr_slave_1: left promiscuous mode [ 627.024006][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.031659][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.112849][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.120564][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.216887][ T6657] veth1_macvtap: left promiscuous mode [ 627.222899][ T6657] veth0_macvtap: left promiscuous mode [ 627.228862][ T6657] veth1_vlan: left promiscuous mode [ 627.234627][ T6657] veth0_vlan: left promiscuous mode [ 628.489267][ T6657] team0 (unregistering): Port device team_slave_1 removed [ 628.577410][ T6657] team0 (unregistering): Port device team_slave_0 removed [ 629.287937][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 629.297630][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 629.320174][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 629.339286][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 629.370476][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 631.413008][ T50] Bluetooth: hci1: command tx timeout [ 631.966112][ T5102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 631.994226][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 632.006416][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 632.025274][ T8261] syz.4.514 uses obsolete (PF_INET,SOCK_PACKET) [ 632.056142][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 632.080856][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 632.398181][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 632.410692][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 632.421684][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 632.438711][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 632.467789][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.494709][ T50] Bluetooth: hci1: command tx timeout [ 633.911586][ T8241] chnl_net:caif_netlink_parms(): no params data found [ 634.144775][ T50] Bluetooth: hci3: command tx timeout [ 634.353288][ T8262] chnl_net:caif_netlink_parms(): no params data found [ 634.882215][ T50] Bluetooth: hci4: command tx timeout [ 635.423221][ T8285] loop4: detected capacity change from 0 to 2048 [ 635.584000][ T50] Bluetooth: hci1: command tx timeout [ 635.669271][ T8285] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz.4.517: iget: bad extended attribute block 281474976710655 [ 635.696637][ T8285] EXT4-fs (loop4): get root inode failed [ 635.702737][ T8285] EXT4-fs (loop4): mount failed [ 636.215446][ T50] Bluetooth: hci3: command tx timeout [ 636.661535][ T8241] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.669498][ T8241] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.677678][ T8241] bridge_slave_0: entered allmulticast mode [ 636.690545][ T8241] bridge_slave_0: entered promiscuous mode [ 636.949580][ T50] Bluetooth: hci4: command tx timeout [ 637.265971][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 637.273835][ T8257] chnl_net:caif_netlink_parms(): no params data found [ 637.275837][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 637.313313][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 637.325559][ T8241] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.333392][ T8241] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.341010][ T8241] bridge_slave_1: entered allmulticast mode [ 637.349833][ T8241] bridge_slave_1: entered promiscuous mode [ 637.384899][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 637.397899][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 637.663596][ T5816] Bluetooth: hci1: command tx timeout [ 638.320376][ T5816] Bluetooth: hci3: command tx timeout [ 638.414965][ T8241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.600425][ T8262] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.610507][ T8262] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.618543][ T8262] bridge_slave_0: entered allmulticast mode [ 638.627651][ T8262] bridge_slave_0: entered promiscuous mode [ 638.660568][ T8241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.013281][ T5816] Bluetooth: hci4: command tx timeout [ 639.035436][ T8262] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.051463][ T8262] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.059572][ T8262] bridge_slave_1: entered allmulticast mode [ 639.068512][ T8262] bridge_slave_1: entered promiscuous mode [ 639.133158][ T8241] team0: Port device team_slave_0 added [ 639.158452][ T8241] team0: Port device team_slave_1 added [ 639.496346][ T5816] Bluetooth: hci5: command tx timeout [ 639.628946][ T8262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.846833][ T8262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.884679][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.891948][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.918918][ T8241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.145673][ T8241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.153244][ T8241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.184761][ T8241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.238456][ T8262] team0: Port device team_slave_0 added [ 640.308691][ T8262] team0: Port device team_slave_1 added [ 640.401622][ T5816] Bluetooth: hci3: command tx timeout [ 640.904016][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.911158][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 640.937947][ T8262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.096316][ T5816] Bluetooth: hci4: command tx timeout [ 641.146175][ T8262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.153569][ T8262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.180668][ T8262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.307076][ T8241] hsr_slave_0: entered promiscuous mode [ 641.317952][ T8241] hsr_slave_1: entered promiscuous mode [ 641.327185][ T8241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.335424][ T8241] Cannot create hsr debugfs directory [ 641.583492][ T5816] Bluetooth: hci5: command tx timeout [ 641.737977][ T8296] chnl_net:caif_netlink_parms(): no params data found [ 641.870228][ T8262] hsr_slave_0: entered promiscuous mode [ 641.879459][ T8262] hsr_slave_1: entered promiscuous mode [ 641.887666][ T8262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.895548][ T8262] Cannot create hsr debugfs directory [ 641.946053][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.953677][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.961323][ T8257] bridge_slave_0: entered allmulticast mode [ 641.970561][ T8257] bridge_slave_0: entered promiscuous mode [ 642.180600][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.188638][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.196652][ T8257] bridge_slave_1: entered allmulticast mode [ 642.205666][ T8257] bridge_slave_1: entered promiscuous mode [ 642.465149][ T8323] loop4: detected capacity change from 0 to 1024 [ 642.545014][ T8323] EXT4-fs: Ignoring removed bh option [ 642.550960][ T8323] EXT4-fs: inline encryption not supported [ 642.759719][ T8323] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 642.820299][ T8323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 642.991433][ T8323] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.522: lblock 2 mapped to illegal pblock 2 (length 1) [ 643.029787][ T8323] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 643.044663][ T8323] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.522: lblock 0 mapped to illegal pblock 48 (length 1) [ 643.103637][ T8323] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 643.113007][ T8323] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.522: Failed to acquire dquot type 0 [ 643.235543][ T8323] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 643.338170][ T8323] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.522: mark_inode_dirty error [ 643.398448][ T8323] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 643.409576][ T8323] EXT4-fs (loop4): 1 orphan inode deleted [ 643.418545][ T8323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.465427][ T3625] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 643.524228][ T3625] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 643.535186][ T3625] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 643.658282][ T5816] Bluetooth: hci5: command tx timeout [ 643.805280][ T8257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.918913][ T8257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.031388][ T8323] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 644.318982][ T7711] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.387122][ T8257] team0: Port device team_slave_0 added [ 644.548210][ T8257] team0: Port device team_slave_1 added [ 645.044092][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.051264][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.078190][ T8257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.266586][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.273899][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.304903][ T8257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.734138][ T5816] Bluetooth: hci5: command tx timeout [ 646.094632][ T8257] hsr_slave_0: entered promiscuous mode [ 646.111470][ T8257] hsr_slave_1: entered promiscuous mode [ 646.119828][ T8257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 646.127712][ T8257] Cannot create hsr debugfs directory [ 646.171148][ T8333] loop4: detected capacity change from 0 to 2048 [ 646.508902][ T8333] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz.4.524: iget: bad extended attribute block 281474976710655 [ 646.534816][ T8333] EXT4-fs (loop4): get root inode failed [ 646.540917][ T8333] EXT4-fs (loop4): mount failed [ 646.739385][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.748658][ T8296] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.757733][ T8296] bridge_slave_0: entered allmulticast mode [ 646.769931][ T8296] bridge_slave_0: entered promiscuous mode [ 646.920027][ T8296] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.936485][ T8296] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.944751][ T8296] bridge_slave_1: entered allmulticast mode [ 646.954424][ T8296] bridge_slave_1: entered promiscuous mode [ 647.795948][ T8296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.291265][ T8296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.038653][ T8296] team0: Port device team_slave_0 added [ 649.079946][ T8241] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 649.183309][ T8262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 649.245512][ T8241] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 649.348682][ T8262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 649.432987][ T8241] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 649.474952][ T8262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 649.549609][ T8296] team0: Port device team_slave_1 added [ 649.560949][ T8241] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 649.630511][ T8262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 650.137313][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.144737][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.172226][ T8296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.262785][ T8257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 650.415972][ T8257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 650.483702][ T8296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.490905][ T8296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.527420][ T8296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.598942][ T8257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 650.783819][ T8257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 651.449029][ T8296] hsr_slave_0: entered promiscuous mode [ 651.458523][ T8296] hsr_slave_1: entered promiscuous mode [ 651.466816][ T8296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 651.474875][ T8296] Cannot create hsr debugfs directory [ 652.142393][ T8262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.484021][ T8262] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.618797][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.626385][ T6657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.984437][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.992080][ T6657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.230717][ T8241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.503791][ T8257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.662135][ T8241] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.968143][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.975725][ T6657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.995048][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.002479][ T6657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.457236][ T8257] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.629334][ T6657] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.636945][ T6657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.760653][ T6657] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.768204][ T6657] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.895792][ T8296] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 655.110925][ T8296] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 655.318046][ T8296] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 655.513789][ T8296] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 657.508744][ T8241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.324566][ T8262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.708404][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.715628][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 660.308393][ T8262] veth0_vlan: entered promiscuous mode [ 660.520441][ T8262] veth1_vlan: entered promiscuous mode [ 660.617758][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.655867][ T8296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.257036][ T8262] veth0_macvtap: entered promiscuous mode [ 661.391905][ T8296] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.520364][ T8262] veth1_macvtap: entered promiscuous mode [ 661.764588][ T8257] veth0_vlan: entered promiscuous mode [ 661.813086][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.820816][ T6659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.853166][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.860879][ T6659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.125104][ T8257] veth1_vlan: entered promiscuous mode [ 662.231359][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.481296][ T8262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.722395][ T8241] veth0_vlan: entered promiscuous mode [ 662.749730][ T8262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.759581][ T8262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.769095][ T8262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.779206][ T8262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.396510][ T8241] veth1_vlan: entered promiscuous mode [ 663.490517][ T8257] veth0_macvtap: entered promiscuous mode [ 663.679847][ T8257] veth1_macvtap: entered promiscuous mode [ 664.227281][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.580576][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.692090][ T8241] veth0_macvtap: entered promiscuous mode [ 664.765193][ T8257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.785827][ T8257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.797221][ T8257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.806351][ T8257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.039302][ T8241] veth1_macvtap: entered promiscuous mode [ 665.404502][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.607309][ T8241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.941698][ T8241] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.951127][ T8241] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.960469][ T8241] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.972488][ T8241] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.698513][ T8296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.507375][ T4290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.805880][ T4290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.098122][ T4290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.341993][ T4290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.406766][ T4290] bridge_slave_1: left allmulticast mode [ 670.412926][ T4290] bridge_slave_1: left promiscuous mode [ 670.419707][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.704089][ T4290] bridge_slave_0: left allmulticast mode [ 670.710050][ T4290] bridge_slave_0: left promiscuous mode [ 670.720903][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.607435][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.677005][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.717263][ T4290] bond0 (unregistering): Released all slaves [ 672.134451][ T5816] Bluetooth: hci2: command 0x0406 tx timeout [ 672.139515][ T5811] Bluetooth: hci6: command 0x0406 tx timeout [ 672.977129][ T4290] hsr_slave_0: left promiscuous mode [ 673.014113][ T4290] hsr_slave_1: left promiscuous mode [ 673.022150][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 673.034523][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.150495][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 673.158475][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.313847][ T4290] veth1_macvtap: left promiscuous mode [ 673.319706][ T4290] veth0_macvtap: left promiscuous mode [ 673.326173][ T4290] veth1_vlan: left promiscuous mode [ 673.331837][ T4290] veth0_vlan: left promiscuous mode [ 674.354670][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 674.490062][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 675.848720][ T4290] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.105991][ T4290] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.204132][ T8296] veth0_vlan: entered promiscuous mode [ 676.310811][ T4290] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.549143][ T4290] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.714022][ T8296] veth1_vlan: entered promiscuous mode [ 677.537473][ T4290] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.739315][ T4290] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.833722][ T8296] veth0_macvtap: entered promiscuous mode [ 677.938730][ T4290] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.145091][ T4290] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.224873][ T8296] veth1_macvtap: entered promiscuous mode [ 678.552065][ T8296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.802142][ T8296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.943705][ T8296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.953425][ T8296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.962692][ T8296] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.971808][ T8296] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.035189][ T4290] bridge_slave_1: left allmulticast mode [ 679.041171][ T4290] bridge_slave_1: left promiscuous mode [ 679.048686][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.103503][ T4290] bridge_slave_0: left allmulticast mode [ 679.109575][ T4290] bridge_slave_0: left promiscuous mode [ 679.116731][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.031902][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.055994][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.078872][ T4290] bond0 (unregistering): Released all slaves [ 680.475847][ T4290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.505479][ T8514] loop4: detected capacity change from 0 to 4096 [ 680.541948][ T4290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.589927][ T4290] bond0 (unregistering): Released all slaves [ 680.668227][ T8518] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 681.301081][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.309500][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.719394][ T3692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.728594][ T3692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.503010][ T3692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.511432][ T3692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.633909][ T4290] hsr_slave_0: left promiscuous mode [ 682.669783][ T4290] hsr_slave_1: left promiscuous mode [ 682.679041][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.687195][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 682.752441][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.760566][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 682.942223][ T4290] hsr_slave_0: left promiscuous mode [ 682.993093][ T4290] hsr_slave_1: left promiscuous mode [ 683.001169][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 683.009313][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 683.068132][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 683.076642][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 683.264005][ T4290] veth1_macvtap: left promiscuous mode [ 683.269878][ T4290] veth0_macvtap: left promiscuous mode [ 683.280318][ T4290] veth1_vlan: left promiscuous mode [ 683.286180][ T4290] veth0_vlan: left promiscuous mode [ 683.357497][ T4290] veth1_macvtap: left promiscuous mode [ 683.363656][ T4290] veth0_macvtap: left promiscuous mode [ 683.369652][ T4290] veth1_vlan: left promiscuous mode [ 683.377257][ T4290] veth0_vlan: left promiscuous mode [ 684.359263][ T8549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 684.472286][ T8549] loop4: detected capacity change from 0 to 8 [ 684.624689][ T8549] SQUASHFS error: Failed to read block 0xdfa: -5 [ 684.631352][ T8549] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 684.705536][ T8549] SQUASHFS error: Failed to read block 0x4e8: -5 [ 684.835309][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.842441][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.850661][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.858841][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.867445][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.876305][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.885301][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.892277][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.900292][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.908342][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.920061][ T8549] SQUASHFS error: Failed to read block 0x4de: -5 [ 684.930007][ T8549] SQUASHFS error: Failed to read block 0x4e8: -5 [ 684.968769][ T30] audit: type=1800 audit(1753545867.175:29): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.548" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 685.098739][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 685.147858][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 686.218852][ T4290] team0 (unregistering): Port device team_slave_1 removed [ 686.279086][ T4290] team0 (unregistering): Port device team_slave_0 removed [ 686.700873][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.709317][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.157876][ T6659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.167013][ T6659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.339921][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.348461][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.915924][ T8596] loop2: detected capacity change from 0 to 1024 [ 690.198845][ T8596] ===================================================== [ 690.206371][ T8596] BUG: KMSAN: uninit-value in hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 690.215099][ T8596] hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 690.220907][ T8596] __hfsplus_brec_find+0x271/0x840 [ 690.226685][ T8596] hfsplus_brec_find+0x4df/0x9f0 [ 690.231962][ T8596] hfsplus_delete_all_attrs+0x255/0x420 [ 690.237976][ T8596] hfsplus_delete_cat+0x1302/0x13d0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 690.246003][ T8596] hfsplus_unlink+0x526/0xd70 [ 690.251626][ T8596] vfs_unlink+0x616/0xab0 [ 690.256385][ T8596] do_unlinkat+0x6e6/0xe50 [ 690.261051][ T8596] __ia32_sys_unlinkat+0x1a5/0x210 [ 690.266775][ T8596] ia32_sys_call+0x3d22/0x42c0 [ 690.271790][ T8596] __do_fast_syscall_32+0xb0/0x150 [ 690.277338][ T8596] do_fast_syscall_32+0x38/0x80 [ 690.282892][ T8596] do_SYSENTER_32+0x1f/0x30 [ 690.288678][ T8596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 690.295657][ T8596] [ 690.298121][ T8596] Uninit was created at: [ 690.302850][ T8596] __kmalloc_noprof+0x95f/0x1310 [ 690.308046][ T8596] hfsplus_find_init+0x90/0x1d0 [ 690.313318][ T8596] hfsplus_delete_all_attrs+0xc0/0x420 [ 690.319042][ T8596] hfsplus_delete_cat+0x1302/0x13d0 [ 690.324727][ T8596] hfsplus_unlink+0x526/0xd70 [ 690.329636][ T8596] vfs_unlink+0x616/0xab0 [ 690.334351][ T8596] do_unlinkat+0x6e6/0xe50 [ 690.338950][ T8596] __ia32_sys_unlinkat+0x1a5/0x210 [ 690.346477][ T8596] ia32_sys_call+0x3d22/0x42c0 [ 690.351469][ T8596] __do_fast_syscall_32+0xb0/0x150 [ 690.357421][ T8596] do_fast_syscall_32+0x38/0x80 [ 690.362438][ T8596] do_SYSENTER_32+0x1f/0x30 [ 690.367333][ T8596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 690.374045][ T8596] [ 690.376525][ T8596] CPU: 1 UID: 0 PID: 8596 Comm: syz.2.559 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(none) [ 690.388812][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.399347][ T8596] ===================================================== [ 690.406761][ T8596] Disabling lock debugging due to kernel taint [ 690.413341][ T8596] Kernel panic - not syncing: kmsan.panic set ... [ 690.419945][ T8596] CPU: 1 UID: 0 PID: 8596 Comm: syz.2.559 Tainted: G B 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(none) [ 690.433593][ T8596] Tainted: [B]=BAD_PAGE [ 690.437855][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 690.448088][ T8596] Call Trace: [ 690.451549][ T8596] [ 690.454638][ T8596] __dump_stack+0x26/0x30 [ 690.459242][ T8596] dump_stack_lvl+0x53/0x270 [ 690.464118][ T8596] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 690.470193][ T8596] dump_stack+0x1e/0x25 [ 690.474612][ T8596] panic+0x4bd/0xd50 [ 690.478846][ T8596] kmsan_report+0x31c/0x320 [ 690.483601][ T8596] ? __msan_warning+0x1b/0x30 [ 690.488483][ T8596] ? hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 690.494397][ T8596] ? __hfsplus_brec_find+0x271/0x840 [ 690.499903][ T8596] ? hfsplus_brec_find+0x4df/0x9f0 [ 690.505171][ T8596] ? hfsplus_delete_all_attrs+0x255/0x420 [ 690.511054][ T8596] ? hfsplus_delete_cat+0x1302/0x13d0 [ 690.516630][ T8596] ? hfsplus_unlink+0x526/0xd70 [ 690.521697][ T8596] ? vfs_unlink+0x616/0xab0 [ 690.526464][ T8596] ? do_unlinkat+0x6e6/0xe50 [ 690.531287][ T8596] ? __ia32_sys_unlinkat+0x1a5/0x210 [ 690.536822][ T8596] ? ia32_sys_call+0x3d22/0x42c0 [ 690.541982][ T8596] ? __do_fast_syscall_32+0xb0/0x150 [ 690.547520][ T8596] ? do_fast_syscall_32+0x38/0x80 [ 690.552791][ T8596] ? do_SYSENTER_32+0x1f/0x30 [ 690.557712][ T8596] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 690.564474][ T8596] ? kmsan_get_metadata+0xfb/0x160 [ 690.569800][ T8596] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 690.575826][ T8596] ? kmsan_get_metadata+0xfb/0x160 [ 690.581234][ T8596] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 690.587755][ T8596] ? kmsan_get_metadata+0xfb/0x160 [ 690.593074][ T8596] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 690.599606][ T8596] ? kmsan_get_metadata+0xfb/0x160 [ 690.604929][ T8596] __msan_warning+0x1b/0x30 [ 690.609617][ T8596] hfs_find_1st_rec_by_cnid+0x212/0x3d0 [ 690.615448][ T8596] __hfsplus_brec_find+0x271/0x840 [ 690.620776][ T8596] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 690.627095][ T8596] hfsplus_brec_find+0x4df/0x9f0 [ 690.632265][ T8596] ? __pfx_hfs_find_1st_rec_by_cnid+0x10/0x10 [ 690.638609][ T8596] hfsplus_delete_all_attrs+0x255/0x420 [ 690.644416][ T8596] hfsplus_delete_cat+0x1302/0x13d0 [ 690.649953][ T8596] hfsplus_unlink+0x526/0xd70 [ 690.654857][ T8596] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 690.660894][ T8596] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 690.667030][ T8596] ? __pfx_hfsplus_unlink+0x10/0x10 [ 690.672430][ T8596] vfs_unlink+0x616/0xab0 [ 690.677007][ T8596] do_unlinkat+0x6e6/0xe50 [ 690.681681][ T8596] __ia32_sys_unlinkat+0x1a5/0x210 [ 690.687133][ T8596] ia32_sys_call+0x3d22/0x42c0 [ 690.692119][ T8596] __do_fast_syscall_32+0xb0/0x150 [ 690.697481][ T8596] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 690.703425][ T8596] do_fast_syscall_32+0x38/0x80 [ 690.708493][ T8596] do_SYSENTER_32+0x1f/0x30 [ 690.713249][ T8596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 690.719842][ T8596] RIP: 0023:0xf702e539 [ 690.724075][ T8596] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 690.743937][ T8596] RSP: 002b:00000000f501e55c EFLAGS: 00000206 ORIG_RAX: 000000000000012d [ 690.752589][ T8596] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800000c0 [ 690.760771][ T8596] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 690.768915][ T8596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 690.777052][ T8596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 690.785193][ T8596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 690.793361][ T8596] [ 690.796882][ T8596] Kernel Offset: disabled [ 690.801316][ T8596] Rebooting in 86400 seconds..