last executing test programs: 28m27.541761845s ago: executing program 32 (id=7): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0x1, 0x2, 0x4, 0x10001, 0x8, "008ef14ba278887cb0baba08431799317e6324"}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 28m22.095033641s ago: executing program 33 (id=9): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') openat$fb0(0xffffffffffffff9c, 0x0, 0x2100c0, 0x0) r4 = getpid() r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETAW(r5, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) ioctl$TIOCMSET(r5, 0x5418, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xffffffffffffff78}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ptrace(0x10, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x86f, 0x2001) close_range(r6, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) prlimit64(r4, 0x0, &(0x7f0000000000), 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) 27m44.592024747s ago: executing program 34 (id=49): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, 0x0, 0xffdd) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) 27m14.146097543s ago: executing program 35 (id=70): write$tun(0xffffffffffffffff, 0x0, 0xfdef) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x7}, 0x2000000, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x7600) 27m4.860514045s ago: executing program 36 (id=81): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x3, 0xff, 0x8, 0x2, 0x6, 0x0, 0x0, 0x1}}) mkdirat(0xffffffffffffff9c, 0x0, 0x110) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000040)) mount$9p_virtio(0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d61"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000040)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlockall(0x7) 26m8.696075128s ago: executing program 37 (id=88): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000040)=0x54) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) 25m46.82608478s ago: executing program 38 (id=109): sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40954}, 0x20040814) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) gettid() socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) r2 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r2, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) 23m47.249989061s ago: executing program 39 (id=234): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000100)}, 0x20) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="48000000000000000000000000000000000001feb2170bd786ff7288930dc94a66aad82081941d18f853bc14f689772b6672ae468f4cb1c52bc81baaef50d88025b1624b94abc4aaa4b81c1200c3f8ea18adc9aa392247617cb602ebbbd491c51639828dbe155bd11d050cd03eca98ccf632ea86d71d15774f008edc3e028b6e13144ac19c86fe910d9ae9a38fdc7a8f5bc32620a8aacc097b3ed9c88438d0eb2bf8161061110b55be67782c4c5af05efffd54168b1aee8bced210311c017304f93ed0121fb612d16a", @ANYBLOB="ebffffffffffffff28"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r1, &(0x7f00000000c0)="822a9be10deff06e8f650000000000000000006fdb080000", 0x18) r2 = add_key$user(&(0x7f0000000240), &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) r7 = dup(r4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2500000068001a68b230950be969001700ffdccbbdffff0a0000000000a5450fab0b000800010001"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 22m4.434415441s ago: executing program 40 (id=331): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}]}}}}}}}}, 0x0) 20m40.635411459s ago: executing program 41 (id=386): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r0 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) acct(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) openat$drirender128(0xffffffffffffff9c, 0x0, 0x121000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 20m32.726714698s ago: executing program 42 (id=404): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4a, 0x9, 0x8, 0x0, 0x3}, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x4000001f, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x81, 0x0, 0x2, 0x20}, 0xe) 18m18.631799953s ago: executing program 43 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40400c0) rseq(0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x84) clock_settime(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) pipe(0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000a40)={0xa, 0x4e02, 0x6, @remote, 0x9}, 0x1c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "0000000600", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "3ad0b590", "76a586da10f65186"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m45.244108868s ago: executing program 44 (id=710): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4008000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r6, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r7, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpid() mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000b8000/0x2000)=nil], 0x0, 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x40084146, &(0x7f0000000080)) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x2402, 0xf, 0x56555941, 0x3, 0x9, 0x9, 0x3, 0x3, 0x1, 0x8, 0x0, 0x2}}) 15m49.676306247s ago: executing program 45 (id=782): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x400004, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb}, 0x1c, &(0x7f00000002c0)}}], 0x1, 0x40c4) shutdown(0xffffffffffffffff, 0x1) r0 = syz_open_dev$amidi(&(0x7f0000000080), 0x39b437c8, 0x100) fcntl$getownex(r0, 0x10, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$midi(&(0x7f0000000140), 0x68, 0x151800) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045730, &(0x7f0000000180)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r4, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x8000, 0x10003}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1bbd3b3eb838c6ea}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40080d0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) 15m39.466084152s ago: executing program 46 (id=795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) syz_emit_ethernet(0x4c, &(0x7f0000000340)={@broadcast, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x0, @val=0xe000000}, "0a790cc55a8e"}}}}}}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17) 11m47.791536119s ago: executing program 47 (id=1159): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="04000100"], 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000c40)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e22, @local}], 0x20) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) socket(0x2, 0x80805, 0x0) pipe2$watch_queue(0x0, 0x80) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x52b281, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000d4a1ce4e9de42536000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x1003, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x2, 0xfff, 0x6, 0x4, 0x2, 0x5, 0xffffffffffffffff, 0xbc, 0x80000000, 0x102f, 0x5, 0x1, 0x83, 0x1, 0x1, 0x7, 0xda, 0x200, 0x84, 0x7, 0x7, 0x7, 0xc, 0x42, 0xff, 0x7, 0xffffffffffffffff, 0x980, 0x900000001, 0x403, 0x0, 0x800000004, 0x101, 0x3, 0xd, 0x1, 0x2000000, 0x6, 0x9, 0x24, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba5a, 0x4, 0xa, 0x88b, 0x6, 0x4000006, 0xffffffffffffffff, 0x403, 0x2, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x6, 0x82b, 0x8, 0x5, 0xfffffffffffffffe, 0x9, 0xfffffffffffffffa, 0x1, 0x100000000000004, 0x2, 0x2b, 0x1, 0x7, 0x40, 0x80, 0x42843379, 0x1, 0x100000007, 0x200, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x400006, 0x0, 0x7, 0x4, 0x200, 0x6, 0x8, 0x0, 0x5, 0x96, 0x8, 0x401, 0x2, 0x0, 0x680000000000, 0x2, 0x7, 0xe88, 0x80000007, 0x0, 0xfffffffffffffffb, 0xffff, 0x9, 0x8, 0x10000001000, 0x0, 0x5, 0x1, 0xfffffffffffff000, 0x10000, 0x7ffd, 0xffffffffffffff80, 0x6, 0x46b, 0x4, 0x6, 0x6, 0x20000000004, 0x1, 0x7f, 0x3]}) socket$nl_route(0x10, 0x3, 0x0) 11m36.107700364s ago: executing program 48 (id=1175): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64, @ANYBLOB="44a837b4012918a47d0187", @ANYRES16, @ANYRESDEC=r1, @ANYRESOCT=r0], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 10m39.880789498s ago: executing program 49 (id=1275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x220001, 0x54) getdents64(r3, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005e833, 0xffffffffffffffff, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004180)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001fc0)=@ethernet={0x306}, 0x80, 0x0, 0x0, &(0x7f00000026c0)=[@timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x8001}}], 0x30}}, {{&(0x7f0000000300)=@nl=@kern={0x10, 0x0, 0x0, 0x4000000}, 0x80, &(0x7f0000002c00)=[{0x0}, {&(0x7f00000029c0)}, {&(0x7f0000002a00)}, {0x0}], 0x4}}, {{&(0x7f0000002d00)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000002dc0)=[{0x0}], 0x1}}, {{&(0x7f0000002ec0)=@isdn={0x22, 0xfd, 0x5, 0x9, 0xbd}, 0x80, 0x0, 0x0, &(0x7f0000004080)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x818}}, @mark={{0x14, 0x1, 0x24, 0xbfb7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x3ff}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0xa8}}], 0x5, 0x20004040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800"], 0xe0}}, 0x0) ftruncate(0xffffffffffffffff, 0x51a9497) socket$inet_icmp_raw(0x2, 0x3, 0x1) 10m22.770234649s ago: executing program 50 (id=1309): syz_open_dev$vbi(&(0x7f0000000200), 0x0, 0x2) socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m20.330143335s ago: executing program 51 (id=1529): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000580)={0x9, 0x20001000, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) modify_ldt$write2(0x11, &(0x7f00000005c0)={0x4, 0xffffffffffffffff, 0x2000, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) 8m19.628118518s ago: executing program 5 (id=1552): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) fchdir(r0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x991018, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x1) 8m18.745878439s ago: executing program 5 (id=1556): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 8m17.503472925s ago: executing program 5 (id=1558): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x40, 0x8, 0x2, 'wI'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m13.323000815s ago: executing program 52 (id=1558): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)={0x40, 0x8, 0x2, 'wI'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m11.46454733s ago: executing program 53 (id=1628): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x497, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0xfffffffe, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd7}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 5m37.852508872s ago: executing program 54 (id=1814): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x800006, 0x8, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) name_to_handle_at(r2, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, &(0x7f00000000c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_stats}) 4m35.504843717s ago: executing program 1 (id=1938): mkdir(&(0x7f0000000000)='./file0\x00', 0x19) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x401000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 4m34.182828792s ago: executing program 1 (id=1944): mremap(&(0x7f0000a9f000/0x4000)=nil, 0x4000, 0x800000, 0x2, &(0x7f00007fe000/0x800000)=nil) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000180), 0x0, 0x20042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x51, 0x2, 0x9, 0x0, 0x4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000140)={0x8, 0x1, 0xc, 0x5, @vifc_lcl_ifindex, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r5 = dup3(r0, r3, 0x80000) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) write$FUSE_INIT(r7, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x9, 0xdc2655fd31373ef6, 0x8, 0xc, 0x400, 0xfffefffb, 0x0, 0x0, 0x10, 0x9}}, 0x50) socket$kcm(0x10, 0x2, 0x0) r8 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x22, &(0x7f0000000440)=[{&(0x7f0000000600)=""/212, 0xa3}, {&(0x7f0000000500)=""/124, 0x71}, {&(0x7f0000000380)=""/161, 0xb0}, {&(0x7f0000000000)=""/16, 0x10}], 0x4) ioctl$VIDIOC_G_AUDIO(r8, 0x80345621, &(0x7f00000005c0)) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000004c0)={0xc}) 4m32.081243866s ago: executing program 1 (id=1951): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d70a000010000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) 4m31.550910546s ago: executing program 1 (id=1954): mkdir(&(0x7f0000000000)='./file0\x00', 0x19) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) socket(0x1000000000000010, 0x80802, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x401000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x0, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 4m31.528929548s ago: executing program 8 (id=1955): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000100)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x40200, 0x42) 4m30.632431641s ago: executing program 1 (id=1958): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4868b81f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc0d", 0xba}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da7", 0x2d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c40)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337df9305959f", 0x6d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x241}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000400)="d6a88c566f6355f3529aa50f7660854ad611110ba4e500b31f53be564ccfff7a7b0979e893387b33d3bbec3e85aedc22065e0c76852d53f845be5bc222d1421ae7ac9c70054521275e760ba832bd", 0x4e}], 0x1, &(0x7f00000007c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x69, 0x1, 0x2}]}}}], 0x18}}], 0x4, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) shutdown(r0, 0x1) 4m30.552683193s ago: executing program 8 (id=1959): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r3, 0x1000, &(0x7f0000001540)=""/4096}) 4m28.707064905s ago: executing program 8 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x3, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) socket$kcm(0x29, 0x2, 0x0) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4m28.541592208s ago: executing program 1 (id=1962): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x4082) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @string=&(0x7f0000000080)=0x3}}) 4m27.601024919s ago: executing program 8 (id=1964): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000080) 4m26.535398584s ago: executing program 8 (id=1966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m25.948330325s ago: executing program 8 (id=1967): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x66000080) 4m23.594434566s ago: executing program 7 (id=1972): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r1, &(0x7f0000000380)=[{&(0x7f0000000540)="f7", 0x1}], 0x1) 4m22.698901564s ago: executing program 7 (id=1973): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x0, 0x3, 0xa, 0x3, 0x7, 0x6, {0x1, 0x0, 0x7, 0xffffffffffffffff, 0x54a5, 0x1, 0x2, 0x6, 0x4d6, 0x1000, 0x8d, 0x0, r1, 0xfffffffd, 0x5}}}, 0x90) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x39cb, 0x4) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x3, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3f, 0x2}, &(0x7f0000000300)=0x90) 4m19.791707987s ago: executing program 7 (id=1976): syz_80211_inject_frame(&(0x7f0000000140), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000100070000000900020073797a3000000000140007800800124040000000080013400000000014000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) 4m18.428381813s ago: executing program 7 (id=1980): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000380), 0x80000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000003c0)=0x4800) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}}, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x400, &(0x7f0000000280)='-#\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000340)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000140)=0x8) 4m14.9503706s ago: executing program 7 (id=1982): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x0, 0x388, 0x130, 0xffffffff, 0xffffffff, 0x388, 0x388, 0x388, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x5, 0x0, [0xe, 0x8, 0x9, 0x3, 0x5, 0x1, 0x1, 0x3ff, 0x0, 0x40, 0x1, 0x8, 0x9, 0x1, 0x4, 0x9], 0x8}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0x9b, {0x8001}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, [0xff, 0xffffff00, 0x7f800000, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xffffff00], 'pim6reg0\x00', 'syzkaller1\x00', {0xff}, {0xff}, 0x67, 0x2, 0x3, 0x4c}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x84, 0x4, 0x7, 0xa6, 0xd543, @remote, @remote, @loopback, [0x1ffffff01, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xff], 0x11, 0x60d}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8000, 0x1}}}, {{@ipv6={@mcast1, @mcast2, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'erspan0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x1d, 0x4, 0x0, 0x28}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 4m12.353328419s ago: executing program 55 (id=1962): socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x4082) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @string=&(0x7f0000000080)=0x3}}) 4m10.558049519s ago: executing program 56 (id=1967): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) unshare(0x66000080) 4m10.439657047s ago: executing program 7 (id=1988): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 3m55.050451595s ago: executing program 57 (id=1988): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000003680)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 2m58.445917901s ago: executing program 5 (id=1999): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x2000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000000)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000001c0)='./file1\x00', 0x40000400) unlink(&(0x7f0000000080)='./file0\x00') 2m57.545517709s ago: executing program 5 (id=2062): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = memfd_create(&(0x7f0000000580)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xd9\xb5\x00\x00$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xab\x00\xd7pB\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\x00\x00\x00\x00+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEGG\x97&\xef\x8e!}a\xff\xff\x00\x00\x90\xd7;\x12lE\x0es\xb7\xe9$=\xe0\x98E\xdc\x01\x9f\xb7\x10\xe8\x94\xa8\x9c>\x87\xfd\x864\xfaT!\xdb\x98\xaa\xb1\x8b\x99\x8b\x1e\xd2\xcb\xfduaO\x18\xc6\xc0\xb3hv%\v\x941\xdeL\x92-\xba\x10\x96eA\x11\x1a\x11\xf7q\b]\xe7v\'\xcf\xb9b%\xff\xa8\x99L\xa23N*\x1ag\x99\x8e@\x80-E&\x99\b\xebW\x19WG\xb3\x88\x1e<\\g\x1959\xc9\xfb\x91\xa3\xe0bp', 0x4) fallocate(r3, 0x3, 0x8dc, 0xfffffffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(r2, 0xb, &(0x7f0000001000)={0x600, 0x5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) socket$alg(0x26, 0x5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000540)={{0x4000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x6000, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0xf000, 0x80a0000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0xeeef0000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x2000, 0x0, 0xd, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x0, 0xfd}, {0x80a0000, 0xdddd0000, 0xb, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000, 0x1}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0x7, 0x8800, 0x0, [0x0, 0x1000000000000, 0x9]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m53.40295323s ago: executing program 5 (id=2064): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 2m36.164773439s ago: executing program 58 (id=2064): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 1m36.795600411s ago: executing program 9 (id=2241): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000400)={0x6, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0x6, 0x1}, {0xc0000001, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffffff, 0x5, 0x2}, {0xb, 0x10, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x2, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x3, 0x1, 0x3}]}) 1m32.571182893s ago: executing program 9 (id=2245): syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0x1) 1m30.158299722s ago: executing program 9 (id=2255): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4048aecb, &(0x7f0000000400)={0x6, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x6, 0x6, 0x1}, {0xc0000001, 0x4, 0x0, 0x10, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffffff, 0x5, 0x2}, {0xb, 0x10, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x2, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x3, 0x1, 0x3}]}) 1m29.302759519s ago: executing program 9 (id=2257): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r2 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r2, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1m25.724556324s ago: executing program 9 (id=2260): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000240)="14000000140005b7ffccca38b90000000608", 0x12) 1m24.927296184s ago: executing program 9 (id=2265): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 1m9.554461036s ago: executing program 59 (id=2265): sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 12.830838702s ago: executing program 2 (id=2450): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x4840) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x4010) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x1000) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) 12.48272449s ago: executing program 6 (id=2452): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x80000, 0x120, 0x6000, 0x2, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x90000915, 0x0) 11.616355024s ago: executing program 4 (id=2455): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, 0x0) 11.546722039s ago: executing program 6 (id=2456): syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0x1) 11.46612691s ago: executing program 2 (id=2457): syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{0x14}}}}, 0x7) 11.135026233s ago: executing program 0 (id=2458): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000100)={0x7, [0x1, 0x405, 0x2, 0x1, 0x1, 0x5, 0x0, 0x7ffe, 0x7, 0x10, 0xf9f, 0x2, 0x7, 0x3, 0xf, 0x6, 0x3, 0x232, 0x3, 0xcc, 0x7, 0xa67b, 0x8003, 0xc, 0x3, 0xff00, 0x4, 0x8, 0x0, 0x9, 0x4, 0x5, 0x8000, 0xf, 0xd4b, 0x5, 0x8, 0x3, 0xfff, 0xd, 0x10, 0x7, 0x5, 0x401, 0xffff, 0x0, 0x403, 0x402], 0x4}) 10.989277124s ago: executing program 2 (id=2459): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 10.816604725s ago: executing program 4 (id=2461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x0, 0x260, 0x0, 0x98, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@remote, @multicast2, 0x0, 0x0, 'veth0_to_bridge\x00', 'ipvlan1\x00', {}, {}, 0x6, 0x0, 0x56}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg1\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev, @private, 0x0, 0x0, 'hsr0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fstat(r1, &(0x7f0000000080)) socket$rds(0x15, 0x5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 10.625634345s ago: executing program 0 (id=2462): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9.787547862s ago: executing program 3 (id=2463): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') fanotify_init(0x200, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 8.866981371s ago: executing program 4 (id=2464): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x20000000000006) 8.010220422s ago: executing program 0 (id=2465): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x281ac0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000580)="ee3fcc6d199cc3ae4da567623035edf30095340fbb8fad1763ddce29a3434535397fb9eabeadcecc"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000280)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r8 = socket$inet(0xa, 0x801, 0x84) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r9, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x1, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r10, 0x567, 0x20, 0x0, 0x0, 0x0) close(r9) poll(&(0x7f0000000000)=[{r8, 0x40}], 0x1, 0xa) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) 7.365200458s ago: executing program 3 (id=2466): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x80000, 0x120, 0x6000, 0x2, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x90000915, 0x0) 7.298273842s ago: executing program 6 (id=2467): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x700000000000000) 5.783059151s ago: executing program 4 (id=2468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100009002cbd70020000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) 5.086056081s ago: executing program 3 (id=2469): syz_emit_vhci(0x0, 0x0) 4.926692688s ago: executing program 6 (id=2470): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 4.826899784s ago: executing program 0 (id=2471): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x2) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, 0x0) 4.275166711s ago: executing program 2 (id=2472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FD={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 4.050205231s ago: executing program 4 (id=2473): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f0000000080)={r2}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r3, 0x100000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.884955157s ago: executing program 6 (id=2474): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4000) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5, 0x0, 0xffffffffffffffff}, 0x18) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000d4ed0000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) 3.739141207s ago: executing program 3 (id=2475): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007911c00000000000850000009000000095000000f8000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.680467728s ago: executing program 0 (id=2476): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') fanotify_init(0x200, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 974.897539ms ago: executing program 6 (id=2477): syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)=0x1) 814.919088ms ago: executing program 4 (id=2478): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x60004ce) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r0, r2, 0x0, 0x20000000000006) 814.573674ms ago: executing program 2 (id=2479): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x1, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x80000, 0x120, 0x6000, 0x2, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x90000915, 0x0) 611.740406ms ago: executing program 3 (id=2480): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x80000000, 0x6}, 0x1c) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x700000000000000) 426.282303ms ago: executing program 0 (id=2481): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x281ac0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0xb, 0x20000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000580)="ee3fcc6d199cc3ae4da567623035edf30095340fbb8fad1763ddce29a3434535397fb9eabeadcecc"}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000280)=0x1, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r6, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) syz_kvm_add_vcpu$x86(0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r8 = socket$inet(0xa, 0x801, 0x84) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r9, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0x62}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r10 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x1, 0x10710, 0x1, 0xffffffff}, &(0x7f0000000000), &(0x7f0000000040)) io_uring_enter(r10, 0x567, 0x20, 0x0, 0x0, 0x0) close(r9) poll(&(0x7f0000000000)=[{r8, 0x40}], 0x1, 0xa) ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) 191.25467ms ago: executing program 2 (id=2482): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0xfffffffe, 0x0, 0x54}, 0x9c) 0s ago: executing program 3 (id=2483): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100009002cbd70020000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) kernel console output (not intermixed with test programs): m1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.335514][T13553] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1705.604836][T14040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1706.560292][T13553] bridge_slave_1: left allmulticast mode [ 1706.566420][T13553] bridge_slave_1: left promiscuous mode [ 1706.573366][T13553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.683819][T13553] bridge_slave_0: left allmulticast mode [ 1706.691493][T13553] bridge_slave_0: left promiscuous mode [ 1706.698594][T13553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.008509][T11173] Bluetooth: hci2: command tx timeout [ 1707.639665][T13553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1707.672859][T13553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1707.704209][T13553] bond0 (unregistering): Released all slaves [ 1708.474526][T14143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.482947][T14143] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.498123][T14143] bridge_slave_0: entered allmulticast mode [ 1708.509388][T14143] bridge_slave_0: entered promiscuous mode [ 1708.641151][T14197] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1887'. [ 1708.762620][T14143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.772482][T14143] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.781310][T14143] bridge_slave_1: entered allmulticast mode [ 1708.793261][T14143] bridge_slave_1: entered promiscuous mode [ 1708.848113][T14204] overlayfs: missing 'workdir' [ 1709.055362][T13553] hsr_slave_0: left promiscuous mode [ 1709.088231][T13089] Bluetooth: hci2: command tx timeout [ 1709.108221][T13553] hsr_slave_1: left promiscuous mode [ 1709.116678][T13553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1709.124815][T13553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1709.150825][T13553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1709.159139][T13553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1709.211823][T13553] veth1_macvtap: left promiscuous mode [ 1709.218137][T13553] veth0_macvtap: left promiscuous mode [ 1709.224186][T13553] veth1_vlan: left promiscuous mode [ 1709.230939][T13553] veth0_vlan: left promiscuous mode [ 1710.226815][T13553] team0 (unregistering): Port device team_slave_1 removed [ 1710.259144][T13553] team0 (unregistering): Port device team_slave_0 removed [ 1710.961114][T14216] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1892'. [ 1710.986999][T14143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.093000][T14143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.441747][T14143] team0: Port device team_slave_0 added [ 1711.500445][T14143] team0: Port device team_slave_1 added [ 1711.701210][ T8534] kernel write not supported for file /378/clear_refs (pid: 8534 comm: kworker/1:7) [ 1711.960993][T14143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1711.976772][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.004144][T14143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1712.117933][T14143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.125322][T14143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1712.152810][T14143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1712.348006][T14040] veth0_vlan: entered promiscuous mode [ 1712.602130][T14040] veth1_vlan: entered promiscuous mode [ 1712.634741][T14143] hsr_slave_0: entered promiscuous mode [ 1712.646706][T14143] hsr_slave_1: entered promiscuous mode [ 1712.655978][T14143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1712.664165][T14143] Cannot create hsr debugfs directory [ 1712.717260][T14236] overlayfs: missing 'workdir' [ 1712.915130][T14238] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1901'. [ 1713.832241][T14040] veth0_macvtap: entered promiscuous mode [ 1713.930947][T14040] veth1_macvtap: entered promiscuous mode [ 1714.103374][T14040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1714.348903][T14040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1714.496704][T14040] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.506072][T14040] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.515852][T14040] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1714.525169][T14040] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.071067][T14143] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1715.219009][T14143] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1715.361615][T14143] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1715.429205][T14143] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1716.546691][T14143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1716.738318][T14143] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.819653][ T4172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.827312][ T4172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.918924][ T4172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.926626][ T4172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1720.049849][T14273] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1911'. [ 1720.961703][T14276] overlayfs: missing 'lowerdir' [ 1721.734172][T14290] trusted_key: encrypted_key: insufficient parameters specified [ 1722.186053][T14143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1723.475904][T14316] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1922'. [ 1724.754918][T14323] overlayfs: missing 'lowerdir' [ 1725.812211][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.820693][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1725.953563][T14143] veth0_vlan: entered promiscuous mode [ 1725.969687][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1725.978024][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1726.139457][T14143] veth1_vlan: entered promiscuous mode [ 1726.453890][T14143] veth0_macvtap: entered promiscuous mode [ 1726.526490][T14143] veth1_macvtap: entered promiscuous mode [ 1726.939023][T14143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1727.380071][T14143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1727.594852][T14143] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.605094][T14143] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.614597][T14143] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.624114][T14143] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.424063][T14355] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1933'. [ 1731.209647][T14360] netlink: 'syz.8.1934': attribute type 1 has an invalid length. [ 1734.494073][T14369] overlayfs: missing 'lowerdir' [ 1734.584813][T14370] kvm: pic: non byte write [ 1735.978053][T14397] dvmrp8: entered allmulticast mode [ 1736.062921][T14398] dvmrp8: left allmulticast mode [ 1736.080763][T11854] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 1736.280098][T11854] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1736.290465][T11854] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1736.300098][T11854] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1736.309852][T11854] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1736.321487][T11854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1736.334136][T11854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1736.347301][T11854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1736.542166][T11854] usb 3-1: string descriptor 0 read error: -22 [ 1736.551099][T11854] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1736.562226][T11854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.609331][T11854] usb 3-1: config 0 descriptor?? [ 1736.619133][T14392] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1736.641949][T11854] hub 3-1:0.0: bad descriptor, ignoring hub [ 1736.651284][T11854] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1736.669917][T11854] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input31 [ 1736.958789][T11854] usb 3-1: USB disconnect, device number 18 [ 1737.041208][T14401] sctp: failed to load transform for md5: -2 [ 1737.797113][T14417] overlayfs: failed to clone upperpath [ 1738.511151][T14432] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1738.520695][T14432] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1740.233860][ T30] audit: type=1800 audit(1752291388.164:56): pid=14448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1959" name="nullb0" dev="tmpfs" ino=588 res=0 errno=0 [ 1742.600804][T11854] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1742.809937][T11854] usb 8-1: Using ep0 maxpacket: 16 [ 1742.844483][T11854] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.855508][T11854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1742.866297][T11854] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1743.017930][ T226] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.026497][ T226] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1743.198162][T11854] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1743.210269][T11854] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1743.219918][T11854] usb 8-1: Manufacturer: syz [ 1743.253324][T11854] usb 8-1: config 0 descriptor?? [ 1743.354396][ T6742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1743.362765][ T6742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1744.015114][T14477] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1667'. [ 1744.111593][T14477] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1667'. [ 1744.419431][T14480] lo speed is unknown, defaulting to 1000 [ 1745.978702][T11854] usb 8-1: USB disconnect, device number 8 [ 1748.113757][T14503] can0: slcan on ttyS3. [ 1748.209142][T14503] can0 (unregistered): slcan off ttyS3. [ 1749.943900][T14505] af_packet: tpacket_rcv: packet too big, clamped from 2906 to 4294967272. macoff=96 [ 1750.289659][T14507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1750.498944][ T9] kernel write not supported for file /11/clear_refs (pid: 9 comm: kworker/0:0) [ 1754.798830][T14522] overlayfs: missing 'lowerdir' [ 1755.301075][ T9] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1755.842007][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1755.970641][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1755.983297][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1755.995694][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1756.471308][ T9] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1756.481577][ T9] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1756.491080][ T9] usb 8-1: Manufacturer: syz [ 1757.022413][ T9] usb 8-1: config 0 descriptor?? [ 1759.139142][T11854] usb 8-1: USB disconnect, device number 9 [ 1760.259787][T14546] 9pnet_fd: Insufficient options for proto=fd [ 1760.842095][T11173] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1760.860983][T11173] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1760.898925][T11173] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1760.931623][T11173] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1760.948929][T11173] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1761.098318][T14550] lo speed is unknown, defaulting to 1000 [ 1761.993520][T13089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1762.002381][T13089] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1762.012477][T13089] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1762.024463][T13089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1762.035749][T13089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1762.376017][T14554] lo speed is unknown, defaulting to 1000 [ 1763.007961][T13089] Bluetooth: hci4: command tx timeout [ 1764.127923][T13089] Bluetooth: hci6: command tx timeout [ 1764.169485][T14554] chnl_net:caif_netlink_parms(): no params data found [ 1764.249041][T14550] chnl_net:caif_netlink_parms(): no params data found [ 1765.127843][T13089] Bluetooth: hci4: command tx timeout [ 1765.790484][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1766.234229][T13089] Bluetooth: hci6: command tx timeout [ 1766.966667][T14576] overlayfs: missing 'lowerdir' [ 1767.113887][T14554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.121767][T14554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.131049][T14554] bridge_slave_0: entered allmulticast mode [ 1767.140926][T14554] bridge_slave_0: entered promiscuous mode [ 1767.189756][T14550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.197406][T14550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1767.205542][T14550] bridge_slave_0: entered allmulticast mode [ 1767.215140][T14550] bridge_slave_0: entered promiscuous mode [ 1767.232779][T13089] Bluetooth: hci4: command tx timeout [ 1767.358470][T14550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.366123][T14550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.379880][T14550] bridge_slave_1: entered allmulticast mode [ 1767.389429][T14550] bridge_slave_1: entered promiscuous mode [ 1767.488512][T14554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.496153][T14554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1767.504728][T14554] bridge_slave_1: entered allmulticast mode [ 1767.515276][T14554] bridge_slave_1: entered promiscuous mode [ 1768.240004][T14550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1768.308230][T13089] Bluetooth: hci6: command tx timeout [ 1768.405883][T14550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1768.429373][T14554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1769.025118][T14554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1769.061467][T14550] team0: Port device team_slave_0 added [ 1769.178712][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1769.344939][T14550] team0: Port device team_slave_1 added [ 1769.345948][T13089] Bluetooth: hci4: command tx timeout [ 1769.423069][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1769.442669][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.453516][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1769.465019][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1769.599986][ T9] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1769.609933][ T9] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1769.618526][ T9] usb 10-1: Manufacturer: syz [ 1769.692609][T14554] team0: Port device team_slave_0 added [ 1769.740477][ T9] usb 10-1: config 0 descriptor?? [ 1770.100815][T14554] team0: Port device team_slave_1 added [ 1770.333702][ T4236] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.378801][T13089] Bluetooth: hci6: command tx timeout [ 1770.905611][T14550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.913249][T14550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.940016][T14550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.975561][T14554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.983044][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1771.010664][T14554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1771.113605][ T4236] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.294600][T14550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1771.303114][T14550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1771.331626][T14550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1771.383259][T14554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1771.391120][T14554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1771.418592][T14554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1771.519362][ T4236] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.714882][ T4236] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.338794][T14582] usb 10-1: USB disconnect, device number 11 [ 1772.339758][T14550] hsr_slave_0: entered promiscuous mode [ 1772.355729][T14550] hsr_slave_1: entered promiscuous mode [ 1772.365231][T14550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1772.374057][T14550] Cannot create hsr debugfs directory [ 1772.607109][T14554] hsr_slave_0: entered promiscuous mode [ 1772.618393][T14554] hsr_slave_1: entered promiscuous mode [ 1772.627736][T14554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1772.635740][T14554] Cannot create hsr debugfs directory [ 1772.810581][ T4236] bridge_slave_1: left allmulticast mode [ 1772.816661][ T4236] bridge_slave_1: left promiscuous mode [ 1772.823332][ T4236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.841889][ T4236] bridge_slave_0: left allmulticast mode [ 1772.848193][ T4236] bridge_slave_0: left promiscuous mode [ 1772.854905][ T4236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.092330][ T4236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1774.179384][ T4236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1774.195754][ T4236] bond0 (unregistering): Released all slaves [ 1774.452459][T14591] 9pnet_fd: Insufficient options for proto=fd [ 1774.499094][T14588] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1997'. [ 1775.877877][T14582] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1776.420035][T14582] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1776.428826][T14582] usb 3-1: config 0 has no interface number 0 [ 1776.773116][T14582] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1776.783195][T14582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1776.796945][T14582] usb 3-1: Product: syz [ 1776.803288][T14582] usb 3-1: Manufacturer: syz [ 1776.808485][T14582] usb 3-1: SerialNumber: syz [ 1777.436713][T14582] usb 3-1: config 0 descriptor?? [ 1777.861028][T14582] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1777.889010][T14582] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1777.901000][T14582] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1777.909572][T14582] usb 3-1: media controller created [ 1778.174832][T11173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1778.195525][T11173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1778.266215][T14582] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1778.279701][T11173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1778.422846][T11173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1778.448775][T11173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1778.579325][T14582] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 1778.720842][ T4236] hsr_slave_0: left promiscuous mode [ 1778.775089][ T4236] hsr_slave_1: left promiscuous mode [ 1778.785637][ T4236] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1778.794332][ T4236] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1778.884434][ T4236] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1778.892947][ T4236] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1779.037158][ T4236] veth1_macvtap: left promiscuous mode [ 1779.046171][ T4236] veth0_macvtap: left promiscuous mode [ 1779.052845][ T4236] veth1_vlan: left promiscuous mode [ 1779.058780][ T4236] veth0_vlan: left promiscuous mode [ 1779.934502][T14582] usb 3-1: USB disconnect, device number 19 [ 1780.249254][T14610] overlayfs: missing 'lowerdir' [ 1780.553350][ T4236] team0 (unregistering): Port device team_slave_1 removed [ 1780.618894][T11173] Bluetooth: hci1: command tx timeout [ 1780.631027][ T4236] team0 (unregistering): Port device team_slave_0 removed [ 1781.188333][T14599] lo speed is unknown, defaulting to 1000 [ 1781.467888][ T8534] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1781.482604][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2006'. [ 1781.626448][T14616] bridge0: entered allmulticast mode [ 1781.690226][ T8534] usb 3-1: Using ep0 maxpacket: 16 [ 1781.722987][T14617] bridge_slave_1: left allmulticast mode [ 1781.729477][T14617] bridge_slave_1: left promiscuous mode [ 1781.736592][T14617] bridge0: port 2(bridge_slave_1) entered disabled state [ 1781.750362][ T8534] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1781.761400][ T8534] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1781.773032][ T8534] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1781.800078][T14617] bridge_slave_0: left allmulticast mode [ 1781.814522][T14617] bridge_slave_0: left promiscuous mode [ 1781.821589][T14617] bridge0: port 1(bridge_slave_0) entered disabled state [ 1781.852263][ T8534] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1781.861927][ T8534] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1781.870814][ T8534] usb 3-1: Manufacturer: syz [ 1781.892176][ T8534] usb 3-1: config 0 descriptor?? [ 1781.933127][T14617] bridge0 (unregistering): left allmulticast mode [ 1782.548064][T14076] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.666779][T14076] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.688614][T11173] Bluetooth: hci1: command tx timeout [ 1782.799304][T14076] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1782.974096][T14076] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.524023][T14599] chnl_net:caif_netlink_parms(): no params data found [ 1783.567745][T14076] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.578789][T14076] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1783.744944][T14076] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1783.758845][T14076] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1783.904140][T14550] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1784.671628][T14076] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.692448][T14076] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1784.765263][T14550] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1784.768054][T11173] Bluetooth: hci1: command tx timeout [ 1784.886901][T14550] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1785.008809][T14550] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1785.039567][T14554] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1785.157981][ T9] usb 3-1: USB disconnect, device number 20 [ 1785.284685][T14076] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.298069][T14076] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1785.403024][T14554] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1785.532574][T14554] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1785.565354][T14632] 9pnet_fd: Insufficient options for proto=fd [ 1785.840039][T14554] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1785.950389][T14076] bridge_slave_1: left allmulticast mode [ 1785.956351][T14076] bridge_slave_1: left promiscuous mode [ 1785.964636][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.080338][T14076] bridge_slave_0: left allmulticast mode [ 1786.086370][T14076] bridge_slave_0: left promiscuous mode [ 1786.097043][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.200859][T14076] bridge_slave_1: left allmulticast mode [ 1786.207323][T14076] bridge_slave_1: left promiscuous mode [ 1786.221132][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.300448][T14076] bridge_slave_0: left allmulticast mode [ 1786.306441][T14076] bridge_slave_0: left promiscuous mode [ 1786.317319][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.894222][T11173] Bluetooth: hci1: command tx timeout [ 1787.222496][T14076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1787.279364][T14076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1787.304498][T14076] bond0 (unregistering): Released all slaves [ 1787.403659][T14640] syz.2.2011 (14640) used greatest stack depth: 4664 bytes left [ 1787.607926][T14076] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1787.777941][T14076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1790.023455][T14076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.065333][T14076] bond0 (unregistering): Released all slaves [ 1790.088868][T14076] bond1 (unregistering): Released all slaves [ 1791.522501][T14599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.530759][T14599] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.541470][T14599] bridge_slave_0: entered allmulticast mode [ 1791.551628][T14599] bridge_slave_0: entered promiscuous mode [ 1791.784844][T14599] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.792678][T14599] bridge0: port 2(bridge_slave_1) entered disabled state [ 1791.801103][T14599] bridge_slave_1: entered allmulticast mode [ 1791.811401][T14599] bridge_slave_1: entered promiscuous mode [ 1791.881875][T14652] binder: 14651:14652 ioctl c0306201 2000000003c0 returned -14 [ 1792.037373][T14653] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2015'. [ 1792.509528][T14599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1792.815130][T14599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1792.973313][T14659] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1793.452367][T14662] 9pnet_fd: Insufficient options for proto=fd [ 1793.590786][T14599] team0: Port device team_slave_0 added [ 1793.711799][T14599] team0: Port device team_slave_1 added [ 1795.795033][T14599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1795.802442][T14599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1795.830834][T14599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1796.678964][T14599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1796.686204][T14599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1796.715677][T14599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1796.760210][T14076] hsr_slave_0: left promiscuous mode [ 1796.769575][T14076] hsr_slave_1: left promiscuous mode [ 1796.778031][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1796.786009][T14076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.797052][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.804967][T14076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.832729][T14076] hsr_slave_0: left promiscuous mode [ 1796.845199][T14076] hsr_slave_1: left promiscuous mode [ 1796.853706][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1796.864221][T14076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1796.879550][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1796.887692][T14076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.925407][T14076] veth1_macvtap: left promiscuous mode [ 1796.932447][T14076] veth0_macvtap: left promiscuous mode [ 1796.938694][T14076] veth1_vlan: left promiscuous mode [ 1796.944344][T14076] veth0_vlan: left promiscuous mode [ 1797.058296][T14076] veth1_macvtap: left promiscuous mode [ 1797.066475][T14076] veth0_macvtap: left promiscuous mode [ 1797.073075][T14076] veth1_vlan: left promiscuous mode [ 1797.079007][T14076] veth0_vlan: left promiscuous mode [ 1798.220229][T14076] team0 (unregistering): Port device team_slave_1 removed [ 1798.304433][T14076] team0 (unregistering): Port device team_slave_0 removed [ 1798.901727][T14679] binder: 14678:14679 ioctl c0306201 2000000003c0 returned -14 [ 1799.099887][T14682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 1799.180981][T14076] team0 (unregistering): Port device team_slave_1 removed [ 1799.208856][T14076] team0 (unregistering): Port device team_slave_0 removed [ 1799.558103][T14550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1800.051194][T14550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.100730][T14599] hsr_slave_0: entered promiscuous mode [ 1800.111752][T14599] hsr_slave_1: entered promiscuous mode [ 1800.164111][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.171889][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.248030][T14554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1800.290892][T14689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2026'. [ 1800.321660][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.329541][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.418458][T14690] 9pnet_fd: Insufficient options for proto=fd [ 1800.678632][T14554] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.782240][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.790086][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.862171][T14550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1800.939842][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.947665][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.932320][T14599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1802.963978][T14599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1803.119819][T14599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1803.264209][T14599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1804.476989][T14550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.084907][T14554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1805.263782][T14599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.322690][T14550] veth0_vlan: entered promiscuous mode [ 1805.399580][T14599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.515523][T14076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.523602][T14076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.589926][T14550] veth1_vlan: entered promiscuous mode [ 1805.723212][T14076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.731406][T14076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.155642][T14550] veth0_macvtap: entered promiscuous mode [ 1806.245077][T14550] veth1_macvtap: entered promiscuous mode [ 1806.483180][T14550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.646831][T14550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1806.752141][T14550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.762228][T14550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.772568][T14550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1806.782547][T14550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1807.585051][T14720] binder: 14719:14720 ioctl c0306201 2000000003c0 returned -14 [ 1807.846674][T14725] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2033'. [ 1808.875579][T14599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1810.299446][T14742] 9pnet_fd: Insufficient options for proto=fd [ 1811.424617][T14554] veth0_vlan: entered promiscuous mode [ 1811.624020][T14554] veth1_vlan: entered promiscuous mode [ 1812.888425][T14554] veth0_macvtap: entered promiscuous mode [ 1813.001493][T14554] veth1_macvtap: entered promiscuous mode [ 1813.228880][T14554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1813.362636][T14554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1813.497690][T14554] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.507053][T14554] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.516552][T14554] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1813.525813][T14554] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1814.442020][T14599] veth0_vlan: entered promiscuous mode [ 1814.711350][T14599] veth1_vlan: entered promiscuous mode [ 1815.185649][T14599] veth0_macvtap: entered promiscuous mode [ 1815.274705][T14599] veth1_macvtap: entered promiscuous mode [ 1815.301972][T14770] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2041'. [ 1815.504116][T14599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1815.626818][T14599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1815.742308][T14599] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.753089][T14599] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.763052][T14599] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.772299][T14599] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.960132][T14774] binder: 14773:14774 ioctl c0306201 2000000003c0 returned -14 [ 1816.140786][T14779] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2042'. [ 1817.025320][T14791] fuse: Unknown parameter '0x0000000000000003' [ 1818.045329][T14801] netlink: 'syz.2.2045': attribute type 1 has an invalid length. [ 1818.532672][T14801] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1818.754391][T14805] veth3: entered promiscuous mode [ 1818.776103][T14805] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1822.930456][T14825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1822.955825][T14825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1822.979765][T14825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1823.002466][T14825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1823.020203][T14825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1823.110926][T14821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1823.124044][T14821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1823.137967][T14821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1823.311859][T13089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1823.327302][T13089] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1823.461546][T14824] lo speed is unknown, defaulting to 1000 [ 1824.129646][T13089] Bluetooth: hci2: command 0x0406 tx timeout [ 1824.343386][T14828] lo speed is unknown, defaulting to 1000 [ 1825.108176][T11173] Bluetooth: hci3: command tx timeout [ 1825.430703][T11173] Bluetooth: hci5: command tx timeout [ 1825.855435][T14852] binder: 14850:14852 ioctl c0306201 2000000003c0 returned -14 [ 1826.031130][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 1826.709797][T14828] chnl_net:caif_netlink_parms(): no params data found [ 1827.163408][T14824] chnl_net:caif_netlink_parms(): no params data found [ 1827.175917][T11173] Bluetooth: hci3: command tx timeout [ 1827.234385][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1827.259063][T14864] fuse: Unknown parameter '0x0000000000000003' [ 1827.453087][T14076] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.489209][T11173] Bluetooth: hci5: command tx timeout [ 1827.634875][T14076] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.884299][T14076] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.073531][T14076] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.678424][ T6628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1828.686462][ T6628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1828.724336][T14828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.732213][T14828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1828.740410][T14828] bridge_slave_0: entered allmulticast mode [ 1828.750627][T14828] bridge_slave_0: entered promiscuous mode [ 1828.906627][T14828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.917845][T14828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1828.925786][T14828] bridge_slave_1: entered allmulticast mode [ 1828.935968][T14828] bridge_slave_1: entered promiscuous mode [ 1829.034582][T14076] bridge_slave_1: left allmulticast mode [ 1829.041287][T14076] bridge_slave_1: left promiscuous mode [ 1829.048367][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.095686][T14076] bridge_slave_0: left allmulticast mode [ 1829.103107][T14076] bridge_slave_0: left promiscuous mode [ 1829.112025][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.248746][T11173] Bluetooth: hci3: command tx timeout [ 1829.569559][T11173] Bluetooth: hci5: command tx timeout [ 1829.814444][T14076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1829.856977][T14076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1829.873880][T14076] bond0 (unregistering): Released all slaves [ 1830.230659][ T8968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.239108][ T8968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.248816][T14828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1830.479010][T14824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.486767][T14824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.495062][T14824] bridge_slave_0: entered allmulticast mode [ 1830.504737][T14824] bridge_slave_0: entered promiscuous mode [ 1830.588213][T14828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1830.681164][T14824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.689552][T14824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.697728][T14824] bridge_slave_1: entered allmulticast mode [ 1830.708399][T14824] bridge_slave_1: entered promiscuous mode [ 1830.888006][T14076] hsr_slave_0: left promiscuous mode [ 1830.942777][T14076] hsr_slave_1: left promiscuous mode [ 1830.951364][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1830.965089][T14076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1831.064171][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1831.072382][T14076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1831.105300][T14891] binder: 14890:14891 ioctl c0306201 2000000003c0 returned -14 [ 1831.158480][T14076] veth1_macvtap: left promiscuous mode [ 1831.166977][T14076] veth0_macvtap: left promiscuous mode [ 1831.173307][T14076] veth1_vlan: left promiscuous mode [ 1831.179194][T14076] veth0_vlan: left promiscuous mode [ 1831.272562][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2060'. [ 1831.347914][T11173] Bluetooth: hci3: command tx timeout [ 1831.648064][T11173] Bluetooth: hci5: command tx timeout [ 1832.199238][T14076] team0 (unregistering): Port device team_slave_1 removed [ 1832.282227][T14076] team0 (unregistering): Port device team_slave_0 removed [ 1832.361481][ T5868] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 1832.578695][ T5868] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1832.587351][ T5868] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1832.601408][ T5868] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1832.613200][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1832.625400][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1832.637313][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1832.648710][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1833.355267][T14828] team0: Port device team_slave_0 added [ 1833.408513][T14824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1833.448984][T14824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.840546][T14907] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1834.020366][ T5868] usb 3-1: string descriptor 0 read error: -22 [ 1834.027752][ T5868] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1834.040658][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.285118][ T5868] usb 3-1: config 0 descriptor?? [ 1834.480303][T14902] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1834.529855][ T5868] hub 3-1:0.0: bad descriptor, ignoring hub [ 1834.536243][ T5868] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1834.560481][ T5868] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input32 [ 1835.580524][ T5868] usb 3-1: USB disconnect, device number 21 [ 1835.580781][ C1] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 1836.304962][T14828] team0: Port device team_slave_1 added [ 1836.336777][T14824] team0: Port device team_slave_0 added [ 1836.549164][T14824] team0: Port device team_slave_1 added [ 1836.912781][ T14] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1836.933205][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2064'. [ 1837.272805][T14828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.281287][T14828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.310181][T14828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1837.333265][T14824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1837.340750][T14824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1837.367602][T14824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1837.874744][ T14] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.961376][T14828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1837.973791][T14828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1838.001536][T14828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1838.083756][T14824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1838.091223][T14824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1838.117978][T14824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1838.227149][ T14] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1838.369013][ T14] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.085541][T14933] netlink: 'syz.9.2068': attribute type 5 has an invalid length. [ 1839.413314][T14828] hsr_slave_0: entered promiscuous mode [ 1839.424014][T14828] hsr_slave_1: entered promiscuous mode [ 1839.433408][T14828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1839.441537][T14828] Cannot create hsr debugfs directory [ 1839.990660][ T14] bridge_slave_1: left allmulticast mode [ 1839.996883][ T14] bridge_slave_1: left promiscuous mode [ 1840.005666][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.959722][ T14] bridge_slave_0: left allmulticast mode [ 1841.965772][ T14] bridge_slave_0: left promiscuous mode [ 1841.973119][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.132872][T14937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'. [ 1842.671209][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1842.702428][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1842.717816][ T14] bond0 (unregistering): Released all slaves [ 1842.853630][T14824] hsr_slave_0: entered promiscuous mode [ 1842.866150][T14824] hsr_slave_1: entered promiscuous mode [ 1842.875044][T14824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1842.882934][T14824] Cannot create hsr debugfs directory [ 1842.892900][T14937] bridge_slave_1: left allmulticast mode [ 1842.900750][T14937] bridge_slave_1: left promiscuous mode [ 1842.907247][T14937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.956920][T14937] bridge_slave_0: left allmulticast mode [ 1842.963035][T14937] bridge_slave_0: left promiscuous mode [ 1842.970247][T14937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.967273][ T14] hsr_slave_0: left promiscuous mode [ 1843.989291][ T14] hsr_slave_1: left promiscuous mode [ 1843.996695][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1844.005250][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1844.042490][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1844.050586][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1844.173169][ T14] veth1_macvtap: left promiscuous mode [ 1844.179561][ T14] veth0_macvtap: left promiscuous mode [ 1844.185558][ T14] veth1_vlan: left promiscuous mode [ 1844.188238][T14942] binder: 14941:14942 ioctl c0306201 2000000003c0 returned -14 [ 1844.195175][ T14] veth0_vlan: left promiscuous mode [ 1844.340765][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2071'. [ 1845.321646][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1845.348140][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1846.547639][T14953] fuse: Unknown parameter 'fd0x0000000000000003' [ 1847.504755][ T5868] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 1848.251132][T14962] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(12) [ 1848.258018][T14962] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1848.270240][T14963] vhci_hcd: connection closed [ 1848.270287][T14962] vhci_hcd vhci_hcd.0: Device attached [ 1848.311584][ T4236] vhci_hcd: stop threads [ 1848.316130][ T4236] vhci_hcd: release socket [ 1848.321284][ T4236] vhci_hcd: disconnect device [ 1848.348320][ T5868] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1848.357044][ T5868] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1848.369159][ T5868] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1848.380490][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1848.391834][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1848.403354][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1848.414507][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1848.705646][ T5868] usb 3-1: string descriptor 0 read error: -22 [ 1848.712771][ T5868] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1848.722353][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1848.838093][ T5868] usb 3-1: config 0 descriptor?? [ 1848.845913][T14955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1848.941522][ T5868] hub 3-1:0.0: bad descriptor, ignoring hub [ 1848.948140][ T5868] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1849.030778][ T5868] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 1849.373755][ T5868] usb 3-1: USB disconnect, device number 22 [ 1849.725088][T14828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1849.797947][T14824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1849.842869][T14828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1849.919412][T14824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1849.984440][T14828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1850.075870][T14828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1850.166719][T14824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1850.239127][T14971] fuse: Bad value for 'group_id' [ 1850.243082][T14824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1850.244367][T14971] fuse: Bad value for 'group_id' [ 1853.984493][T14986] binder: 14984:14986 ioctl c0306201 2000000003c0 returned -14 [ 1854.141498][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2081'. [ 1854.283351][T14828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1854.329391][T14824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1854.624291][T14828] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.684374][T14824] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.758759][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.766428][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.948026][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.955675][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1854.972072][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.979826][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1855.282764][ T6628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1855.290417][ T6628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.577183][T14828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1855.588573][T14828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1855.857027][T14996] fuse: Unknown parameter 'fd0x0000000000000003' [ 1855.883384][T14824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1855.950196][T13089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1855.970199][T13089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1855.986240][T13089] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1856.006779][T13089] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1856.039566][T13089] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1856.442874][T14997] lo speed is unknown, defaulting to 1000 [ 1858.128133][T13089] Bluetooth: hci4: command tx timeout [ 1860.228117][T13089] Bluetooth: hci4: command tx timeout [ 1861.514830][T14824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1861.620974][T14828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1861.651312][T11854] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 1861.727874][ T8968] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.845062][T11854] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1861.854834][T11854] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1861.864114][T11854] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1861.873966][T11854] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1861.888155][T11854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1861.901115][T11854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1861.912903][T11854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1861.942657][ T8968] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.082620][ T8968] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.162283][T11854] usb 3-1: string descriptor 0 read error: -22 [ 1862.169429][T11854] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1862.178893][T11854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.234549][T11854] usb 3-1: config 0 descriptor?? [ 1862.242479][T15018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1862.280901][ T8968] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1862.303931][T13089] Bluetooth: hci4: command tx timeout [ 1862.346427][T14997] chnl_net:caif_netlink_parms(): no params data found [ 1862.409940][T11854] hub 3-1:0.0: bad descriptor, ignoring hub [ 1862.416328][T11854] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1862.431731][T11854] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input34 [ 1862.796832][T14824] veth0_vlan: entered promiscuous mode [ 1862.883716][T11854] usb 3-1: USB disconnect, device number 23 [ 1862.883763][ C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 1863.172937][ T8968] bridge_slave_1: left allmulticast mode [ 1863.179405][ T8968] bridge_slave_1: left promiscuous mode [ 1863.185863][ T8968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1863.259732][ T8968] bridge_slave_0: left allmulticast mode [ 1863.266109][ T8968] bridge_slave_0: left promiscuous mode [ 1863.273399][ T8968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.369443][T13089] Bluetooth: hci4: command tx timeout [ 1864.409381][T15035] binder: 15034:15035 ioctl c0306201 2000000003c0 returned -14 [ 1864.579575][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2090'. [ 1864.590355][ T8968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1864.652198][ T8968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1864.683575][ T8968] bond0 (unregistering): Released all slaves [ 1864.792674][T14824] veth1_vlan: entered promiscuous mode [ 1865.433348][T15049] fuse: Unknown parameter 'fd0x0000000000000003' [ 1865.511478][T14824] veth0_macvtap: entered promiscuous mode [ 1865.735014][T14824] veth1_macvtap: entered promiscuous mode [ 1865.951727][ T8968] hsr_slave_0: left promiscuous mode [ 1866.006123][ T8968] hsr_slave_1: left promiscuous mode [ 1866.015411][ T8968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1866.023963][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1866.051617][T15051] ipt_ECN: cannot use operation on non-tcp rule [ 1866.076854][T15051] loop6: detected capacity change from 0 to 7 [ 1866.092130][T15051] Dev loop6: unable to read RDB block 7 [ 1866.098640][T15051] loop6: AHDI p3 p4 [ 1866.102849][T15051] loop6: partition table partially beyond EOD, truncated [ 1866.111463][T15051] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1866.133723][ T8968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1866.142281][ T8968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1866.249326][ T8968] veth1_macvtap: left promiscuous mode [ 1866.255221][ T8968] veth0_macvtap: left promiscuous mode [ 1866.914259][ T8968] team0 (unregistering): Port device team_slave_1 removed [ 1866.976149][ T8968] team0 (unregistering): Port device team_slave_0 removed [ 1867.606450][T14997] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.614482][T14997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.625463][T14997] bridge_slave_0: entered allmulticast mode [ 1867.635694][T14997] bridge_slave_0: entered promiscuous mode [ 1867.800227][T14824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1867.853056][T14997] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.861342][T14997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.869561][T14997] bridge_slave_1: entered allmulticast mode [ 1867.879803][T14997] bridge_slave_1: entered promiscuous mode [ 1867.938221][T14824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1868.028873][T11697] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 1868.150185][T14828] veth0_vlan: entered promiscuous mode [ 1868.166260][T14824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.176204][T14824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.185853][T14824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.195236][T14824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1868.228509][T14997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1868.282029][T14997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1868.310431][T11697] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1868.319389][T11697] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1868.328574][T11697] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1868.339695][T11697] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1868.352247][T11697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1868.352790][T14828] veth1_vlan: entered promiscuous mode [ 1868.363618][T11697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1868.380626][T11697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1868.590740][T11697] usb 3-1: string descriptor 0 read error: -22 [ 1868.597961][T11697] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1868.607790][T11697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.694684][T14997] team0: Port device team_slave_0 added [ 1868.706459][T11697] usb 3-1: config 0 descriptor?? [ 1868.715139][T15059] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1868.762628][T11697] hub 3-1:0.0: bad descriptor, ignoring hub [ 1868.772548][T11697] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1868.793652][T11697] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 1868.823411][T14997] team0: Port device team_slave_1 added [ 1868.858289][T15065] fuse: Bad value for 'group_id' [ 1868.863929][T15065] fuse: Bad value for 'group_id' [ 1869.119130][ C0] usb_acecad 3-1:0.0: can't resubmit intr, dummy_hcd.2-1/input0, status -1 [ 1869.138304][T11697] usb 3-1: USB disconnect, device number 24 [ 1869.333572][T14828] veth0_macvtap: entered promiscuous mode [ 1869.466920][T14997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1869.475574][T14997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1869.503687][T14997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1869.569806][T14828] veth1_macvtap: entered promiscuous mode [ 1869.660986][T14997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1869.670676][T14997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1869.698586][T14997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.943078][T14828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1870.064817][T14828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1870.199221][T15075] binder: 15073:15075 ioctl c0306201 2000000003c0 returned -14 [ 1870.240590][T14828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.250126][T14828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.259691][T14828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.268981][T14828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1870.356861][T14997] hsr_slave_0: entered promiscuous mode [ 1870.368210][T14997] hsr_slave_1: entered promiscuous mode [ 1870.379204][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2100'. [ 1872.476408][T14997] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1872.507251][T14997] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1872.602978][T14997] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1872.725581][T14997] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1872.999936][T15107] fuse: Bad value for 'group_id' [ 1873.005208][T15107] fuse: Bad value for 'group_id' [ 1873.428827][T14582] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 1873.641838][T14582] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 1873.652583][T14582] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 1873.663895][T14582] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1873.674131][T14582] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1873.685551][T14582] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1873.697336][T14582] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1873.709068][T14582] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1873.879553][T14582] usb 10-1: string descriptor 0 read error: -22 [ 1873.886686][T14582] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1873.898428][T14582] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.931903][T14582] usb 10-1: config 0 descriptor?? [ 1873.969060][T15110] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1874.016674][T14582] hub 10-1:0.0: bad descriptor, ignoring hub [ 1874.023512][T14582] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1874.041508][T14582] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input36 [ 1874.047902][T14997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1874.103575][ C0] usb_acecad 10-1:0.0: can't resubmit intr, dummy_hcd.9-1/input0, status -1 [ 1874.328761][T14997] 8021q: adding VLAN 0 to HW filter on device team0 [ 1874.363810][T14582] usb 10-1: USB disconnect, device number 12 [ 1874.411655][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1874.419622][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1874.530764][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.538511][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1874.853643][T14997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1875.456373][T15133] binder: 15129:15133 ioctl c0306201 2000000003c0 returned -14 [ 1875.571528][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'. [ 1876.274597][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.284228][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.630145][ T6628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.639120][ T6628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.823432][T14997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1878.094231][ T2993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.102532][ T2993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.416293][T13553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.424689][T13553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.938728][ T8534] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 1879.144549][ T8534] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 1879.153803][ T8534] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 1879.162805][ T8534] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1879.172782][ T8534] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1879.184395][ T8534] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1879.200486][ T8534] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1879.213306][ T8534] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1879.426554][ T8534] usb 10-1: string descriptor 0 read error: -22 [ 1879.434128][ T8534] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1879.444144][ T8534] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.537865][ T8534] usb 10-1: config 0 descriptor?? [ 1879.546001][T15169] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1879.623671][T15179] binder: 15178:15179 ioctl c0306201 2000000003c0 returned -14 [ 1879.623994][T14997] veth0_vlan: entered promiscuous mode [ 1879.643628][ T8534] hub 10-1:0.0: bad descriptor, ignoring hub [ 1879.651098][ T8534] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1879.670269][ T8534] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input37 [ 1879.746558][T15179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2121'. [ 1879.943244][ C1] usb_acecad 10-1:0.0: can't resubmit intr, dummy_hcd.9-1/input0, status -19 [ 1879.952639][ T8534] usb 10-1: USB disconnect, device number 13 [ 1880.171726][T14997] veth1_vlan: entered promiscuous mode [ 1880.456947][T14997] veth0_macvtap: entered promiscuous mode [ 1880.628301][T14997] veth1_macvtap: entered promiscuous mode [ 1880.769984][T14997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1880.873930][T14997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1881.018059][T14997] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.028765][T14997] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.045394][T14997] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.054666][T14997] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1881.083063][T15193] syz.0.2126 uses old SIOCAX25GETINFO [ 1883.507064][ T9] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 1883.707084][ T9] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1883.715942][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1883.724835][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1883.734560][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1883.746025][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1883.757773][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1883.768981][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1883.976173][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1883.984326][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1883.994799][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.014544][ T5868] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1884.082560][ T9] usb 1-1: config 0 descriptor?? [ 1884.101015][T15221] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1884.179380][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 1884.185951][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1884.203799][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 1884.230116][ C0] usb_acecad 1-1:0.0: can't resubmit intr, dummy_hcd.0-1/input0, status -1 [ 1884.232236][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.250036][ T5868] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1884.259799][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1884.421153][ T9] usb 1-1: USB disconnect, device number 14 [ 1884.436630][ T5868] usb 3-1: config 0 descriptor?? [ 1884.556462][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 1884.881212][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1884.911253][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 1884.948238][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1884.988496][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 1885.031677][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 1885.065655][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 1885.090634][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 1885.114783][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 1885.158129][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 1885.170896][ T5868] pwc: recv_control_msg error -32 req 02 val 2500 [ 1885.213135][ T5868] pwc: recv_control_msg error -32 req 02 val 2400 [ 1885.252276][ T5868] pwc: recv_control_msg error -32 req 02 val 2600 [ 1885.276033][ T5868] pwc: recv_control_msg error -32 req 02 val 2900 [ 1885.299108][ T5868] pwc: recv_control_msg error -32 req 02 val 2800 [ 1885.329452][ T5868] pwc: recv_control_msg error -32 req 04 val 1100 [ 1885.388030][ T5868] pwc: recv_control_msg error -32 req 04 val 1200 [ 1885.455181][ T5868] pwc: Registered as video103. [ 1885.464238][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 1885.566162][ T5868] usb 3-1: USB disconnect, device number 25 [ 1886.658478][T15256] tipc: Started in network mode [ 1886.667007][T15256] tipc: Node identity d21f2ffccaa4, cluster identity 4711 [ 1886.676582][T15256] tipc: Enabled bearer , priority 0 [ 1886.779353][T15258] syzkaller0: entered promiscuous mode [ 1886.785294][T15258] syzkaller0: entered allmulticast mode [ 1886.905420][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2147'. [ 1886.953632][T15256] tipc: Resetting bearer [ 1887.028756][T15253] tipc: Resetting bearer [ 1887.065682][T15253] tipc: Disabling bearer [ 1888.267891][ T5868] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 1888.522716][ T5868] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1888.531759][ T5868] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1888.541314][ T5868] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1888.550834][ T5868] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1888.562238][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1888.574055][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1888.585161][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1888.643091][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1888.747168][T13553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1888.755604][T13553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1888.803494][ T5868] usb 1-1: string descriptor 0 read error: -22 [ 1888.811185][ T5868] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1888.825515][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.940788][ T5868] usb 1-1: config 0 descriptor?? [ 1888.951243][T15272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1889.016777][ T5868] hub 1-1:0.0: bad descriptor, ignoring hub [ 1889.036147][ T5868] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1889.056048][ T5868] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input40 [ 1889.131769][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1889.140997][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1889.372821][ T5868] usb 1-1: USB disconnect, device number 15 [ 1889.866267][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2079'. [ 1889.877074][T15292] bridge_slave_1: left allmulticast mode [ 1889.885378][T15292] bridge_slave_1: left promiscuous mode [ 1889.899797][T15292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.992579][T15292] bridge_slave_0: left allmulticast mode [ 1889.998876][T15292] bridge_slave_0: left promiscuous mode [ 1890.005809][T15292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.410920][T15298] tipc: Started in network mode [ 1890.416174][T15298] tipc: Node identity 32c8aa7c2059, cluster identity 4711 [ 1890.424760][T15298] tipc: Enabled bearer , priority 0 [ 1890.545195][T15296] syzkaller0: entered promiscuous mode [ 1890.552030][T15296] syzkaller0: entered allmulticast mode [ 1890.681877][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2163'. [ 1890.749639][T15297] tipc: Resetting bearer [ 1890.822151][T15295] tipc: Resetting bearer [ 1890.856841][T15295] tipc: Disabling bearer [ 1890.997726][ T30] audit: type=1326 audit(1752291538.954:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1891.123694][ T30] audit: type=1326 audit(1752291539.044:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1891.146323][ C1] vkms_vblank_simulate: vblank timer overrun [ 1891.153755][ T30] audit: type=1326 audit(1752291539.044:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1891.176447][ C1] vkms_vblank_simulate: vblank timer overrun [ 1891.191697][ T30] audit: type=1326 audit(1752291539.044:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1891.214561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1891.221634][ T30] audit: type=1326 audit(1752291539.044:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1891.244200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1891.251043][ T30] audit: type=1326 audit(1752291539.044:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1891.279802][ T30] audit: type=1326 audit(1752291539.054:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1891.304748][ T30] audit: type=1326 audit(1752291539.054:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1891.327219][ C1] vkms_vblank_simulate: vblank timer overrun [ 1891.337842][ T30] audit: type=1326 audit(1752291539.054:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1891.360590][ C1] vkms_vblank_simulate: vblank timer overrun [ 1891.367326][ T30] audit: type=1326 audit(1752291539.054:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15304 comm="syz.4.2166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7158b8e929 code=0x7ffc0000 [ 1892.247818][ T8534] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1893.213261][ T8534] usb 10-1: Using ep0 maxpacket: 32 [ 1893.262830][ T8534] usb 10-1: config 0 has an invalid interface number: 54 but max is 0 [ 1893.271519][ T8534] usb 10-1: config 0 has no interface number 0 [ 1893.278201][ T8534] usb 10-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1893.289573][ T8534] usb 10-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1893.300216][ T8534] usb 10-1: config 0 interface 54 has no altsetting 0 [ 1893.395590][ T8534] usb 10-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 1893.406028][ T8534] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.416125][ T8534] usb 10-1: Product: syz [ 1893.421383][ T8534] usb 10-1: Manufacturer: syz [ 1893.432430][ T8534] usb 10-1: SerialNumber: syz [ 1893.588577][ T8534] usb 10-1: config 0 descriptor?? [ 1893.597282][T15318] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1893.636341][T15318] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1893.903982][ T8534] ums_eneub6250 10-1:0.54: USB Mass Storage device detected [ 1893.983438][ T8534] scsi host1: usb-storage 10-1:0.54 [ 1894.199828][ T8534] ums_eneub6250 10-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 1894.278700][ T8534] usb 10-1: USB disconnect, device number 14 [ 1894.301524][T15340] tipc: Enabled bearer , priority 0 [ 1894.339482][T15340] syzkaller0: entered promiscuous mode [ 1894.349884][T15340] syzkaller0: entered allmulticast mode [ 1894.426171][T15340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2180'. [ 1894.541056][T15340] tipc: Resetting bearer [ 1894.608648][T15339] tipc: Resetting bearer [ 1894.686504][T15339] tipc: Disabling bearer [ 1897.037219][T15371] tipc: Started in network mode [ 1897.043820][T15371] tipc: Node identity 1e76251b354f, cluster identity 4711 [ 1897.052338][T15371] tipc: Enabled bearer , priority 0 [ 1897.139429][T15371] syzkaller0: entered promiscuous mode [ 1897.145409][T15371] syzkaller0: entered allmulticast mode [ 1897.274742][T15371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2194'. [ 1897.356291][T15376] tipc: Resetting bearer [ 1897.439065][T15369] tipc: Resetting bearer [ 1897.482344][T15369] tipc: Disabling bearer [ 1898.268073][ T9] usb 10-1: new low-speed USB device number 15 using dummy_hcd [ 1898.508338][ T9] usb 10-1: config index 0 descriptor too short (expected 1307, got 27) [ 1898.517535][ T9] usb 10-1: config 0 has an invalid interface number: 0 but max is -1 [ 1898.526138][ T9] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1898.535896][ T9] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1898.550333][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1898.563096][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1898.574410][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1899.557763][ T9] usb 10-1: string descriptor 0 read error: -22 [ 1899.564942][ T9] usb 10-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1899.578535][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.792646][ T9] usb 10-1: config 0 descriptor?? [ 1899.805859][T15385] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1900.050730][ T9] hub 10-1:0.0: bad descriptor, ignoring hub [ 1900.057154][ T9] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1900.075469][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input41 [ 1900.678560][ T9] usb 10-1: USB disconnect, device number 15 [ 1901.565307][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1901.848045][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1901.933251][ T9] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 1901.943177][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.951870][ T9] usb 5-1: Product: syz [ 1901.956463][ T9] usb 5-1: Manufacturer: syz [ 1901.961593][ T9] usb 5-1: SerialNumber: syz [ 1902.079409][T15410] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2211'. [ 1902.110721][ T9] usb 5-1: config 0 descriptor?? [ 1902.428057][T15414] tipc: Started in network mode [ 1902.440664][T15414] tipc: Node identity 9e845f357f27, cluster identity 4711 [ 1902.453386][T15414] tipc: Enabled bearer , priority 0 [ 1902.470489][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1902.529221][T15415] syzkaller0: entered promiscuous mode [ 1902.544286][T15415] syzkaller0: entered allmulticast mode [ 1902.580114][T15414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2213'. [ 1902.698263][T15414] tipc: Resetting bearer [ 1902.712048][ T9] gspca_sunplus: reg_w_riv err -71 [ 1902.718160][ T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 1902.731074][T15413] tipc: Resetting bearer [ 1902.790728][T15413] tipc: Disabling bearer [ 1902.812388][ T9] usb 5-1: USB disconnect, device number 29 [ 1904.360138][ T9] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 1905.155524][ T9] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1905.165401][ T9] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1905.174570][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1905.184494][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1905.196393][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1905.211061][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 39, setting to 8 [ 1905.223623][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1905.802233][ T9] usb 1-1: string descriptor 0 read error: -22 [ 1905.809871][ T9] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1905.824908][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.904584][T13089] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 1905.911575][T13089] Bluetooth: Wrong link type (-22) [ 1906.214037][ T9] usb 1-1: config 0 descriptor?? [ 1906.268479][T15434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1907.234994][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 1907.241558][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1907.269414][ T9] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 1909.449522][ T9] usb 1-1: USB disconnect, device number 16 [ 1910.495479][T15456] tipc: Started in network mode [ 1910.501076][T15456] tipc: Node identity aae37590a50a, cluster identity 4711 [ 1910.509706][T15456] tipc: Enabled bearer , priority 0 [ 1910.544559][T15457] syzkaller0: entered promiscuous mode [ 1910.550633][T15457] syzkaller0: entered allmulticast mode [ 1910.719885][T15456] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2230'. [ 1910.817732][T15456] tipc: Resetting bearer [ 1910.878750][T15455] tipc: Resetting bearer [ 1910.963363][T15455] tipc: Disabling bearer [ 1917.669162][ T8534] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1917.902952][ T8534] usb 10-1: Using ep0 maxpacket: 32 [ 1917.930233][ T8534] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1917.938929][ T8534] usb 10-1: config 0 has no interface number 0 [ 1917.957985][T15501] tipc: Enabled bearer , priority 0 [ 1918.003075][T15501] syzkaller0: entered promiscuous mode [ 1918.009204][T15501] syzkaller0: entered allmulticast mode [ 1918.012047][ T8534] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1918.024636][ T8534] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.033374][ T8534] usb 10-1: Product: syz [ 1918.038278][ T8534] usb 10-1: Manufacturer: syz [ 1918.043349][ T8534] usb 10-1: SerialNumber: syz [ 1918.122040][ T8534] usb 10-1: config 0 descriptor?? [ 1918.161965][ T8534] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1918.167523][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1918.171437][ T8534] usb 10-1: selecting invalid altsetting 1 [ 1918.185493][ T8534] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1918.212436][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2247'. [ 1918.249203][T15501] tipc: Resetting bearer [ 1918.303149][T15500] tipc: Resetting bearer [ 1918.353428][ T8534] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1918.365562][ T8534] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1918.375111][ T8534] usb 10-1: media controller created [ 1918.390869][T15500] tipc: Disabling bearer [ 1918.411634][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1918.465431][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1918.474456][ T9] usb 3-1: config 0 has no interface number 0 [ 1918.481193][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1918.551298][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1918.561072][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.570196][ T9] usb 3-1: Product: syz [ 1918.574659][ T9] usb 3-1: Manufacturer: syz [ 1918.579944][ T9] usb 3-1: SerialNumber: syz [ 1918.580938][ T8534] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1918.753749][ T9] usb 3-1: config 0 descriptor?? [ 1918.810459][ T9] smsc75xx v1.0.0 [ 1919.076950][ T8534] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1919.085194][ T8534] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1919.145123][ T8534] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1919.474830][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1919.486218][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1919.825894][ T8534] usb 10-1: USB disconnect, device number 16 [ 1920.128195][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1920.139687][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1920.153862][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1920.165571][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 1920.595308][T15525] bond0: entered promiscuous mode [ 1920.600945][T15525] bond_slave_0: entered promiscuous mode [ 1920.608243][T15525] bond_slave_1: entered promiscuous mode [ 1922.325995][T15535] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2258'. [ 1924.292542][ T8534] usb 3-1: USB disconnect, device number 26 [ 1924.492563][T15540] overlayfs: failed to resolve './file0': -2 [ 1924.753898][T15544] tipc: Enabled bearer , priority 0 [ 1924.779183][T15544] syzkaller0: entered promiscuous mode [ 1924.779302][T15544] syzkaller0: entered allmulticast mode [ 1924.828940][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2263'. [ 1924.845770][T15544] tipc: Resetting bearer [ 1924.911429][T15541] tipc: Resetting bearer [ 1924.958155][T15541] tipc: Disabling bearer [ 1932.968881][T15581] overlayfs: failed to resolve './file0': -2 [ 1933.822699][T15590] tipc: Enabled bearer , priority 0 [ 1933.896242][T15589] syzkaller0: entered promiscuous mode [ 1933.902493][T15589] syzkaller0: entered allmulticast mode [ 1934.012839][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2278'. [ 1934.043528][T15589] tipc: Resetting bearer [ 1934.204066][T15585] tipc: Resetting bearer [ 1934.291398][T15585] tipc: Disabling bearer [ 1934.888914][ T9] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 1935.169820][ T9] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1935.179234][ T9] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1935.189922][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1935.199793][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1935.213925][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1935.225129][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1935.493136][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1935.500695][ T9] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1935.513132][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1935.649121][ T9] usb 5-1: config 0 descriptor?? [ 1935.687946][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 1935.694274][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1936.053084][ T9] usb 5-1: USB disconnect, device number 30 [ 1936.971312][T15614] overlayfs: failed to resolve './file0': -2 [ 1937.198980][ T8534] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1937.389754][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1937.430837][ T8534] usb 1-1: Using ep0 maxpacket: 32 [ 1937.471637][ T8534] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1937.483281][ T8534] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1937.563099][ T8534] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1937.572760][ T8534] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1937.579453][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1937.581653][ T8534] usb 1-1: Product: syz [ 1937.591607][ T8534] usb 1-1: Manufacturer: syz [ 1937.596560][ T8534] usb 1-1: SerialNumber: syz [ 1937.614956][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1937.624361][ T9] usb 5-1: config 0 has no interface number 0 [ 1937.630920][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1937.683380][T15622] tipc: Enabled bearer , priority 0 [ 1937.693795][T15622] syzkaller0: entered promiscuous mode [ 1937.699977][T15622] syzkaller0: entered allmulticast mode [ 1937.721946][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1937.732049][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1937.740461][ T9] usb 5-1: Product: syz [ 1937.744920][ T9] usb 5-1: Manufacturer: syz [ 1937.750094][ T9] usb 5-1: SerialNumber: syz [ 1937.772948][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2294'. [ 1937.791843][T15622] tipc: Resetting bearer [ 1937.803211][ T9] usb 5-1: config 0 descriptor?? [ 1937.846782][ T8534] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input43 [ 1937.857271][ T9] smsc75xx v1.0.0 [ 1937.924876][T15620] tipc: Resetting bearer [ 1937.990530][T15620] tipc: Disabling bearer [ 1938.157616][ T8534] usb 1-1: USB disconnect, device number 17 [ 1938.302382][ T8534] appletouch 1-1:1.0: input: appletouch disconnected [ 1938.444973][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1938.457169][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1939.140008][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1939.151877][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1939.162371][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1939.173208][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 1941.062230][T15648] overlayfs: failed to resolve './file1': -2 [ 1941.128275][ T9] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1941.382082][ T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1941.390970][ T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1941.399937][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1941.409238][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1941.420457][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1941.430587][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1941.524785][T11173] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1941.534809][T11173] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1941.545848][T11173] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1941.572683][T11173] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1941.636426][T11173] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1941.688548][ T8534] usb 5-1: USB disconnect, device number 31 [ 1941.772812][T15652] lo speed is unknown, defaulting to 1000 [ 1942.161737][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1942.170878][ T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1942.181569][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1942.356223][ T9] usb 3-1: config 0 descriptor?? [ 1942.602356][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 1942.608946][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1942.684543][T15658] tipc: Enabled bearer , priority 0 [ 1942.752616][T15658] syzkaller0: entered promiscuous mode [ 1942.759291][T15658] syzkaller0: entered allmulticast mode [ 1942.935021][T15658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2305'. [ 1943.013689][T15659] tipc: Resetting bearer [ 1943.030236][ T8534] usb 3-1: USB disconnect, device number 27 [ 1943.183552][T15657] tipc: Resetting bearer [ 1943.294700][T15657] tipc: Disabling bearer [ 1943.711689][T15662] kvm: kvm [15661]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1943.727970][T11173] Bluetooth: hci1: command tx timeout [ 1943.892308][T15662] kvm: kvm [15661]: vcpu1, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1944.706247][T15652] chnl_net:caif_netlink_parms(): no params data found [ 1945.807908][T15675] Bluetooth: hci1: command tx timeout [ 1945.884861][T15683] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1945.894043][T15683] overlayfs: missing 'lowerdir' [ 1947.013111][T13089] Bluetooth: hci5: command 0x0406 tx timeout [ 1947.021078][T13089] Bluetooth: hci3: command 0x0406 tx timeout [ 1947.901799][T13089] Bluetooth: hci1: command tx timeout [ 1948.935937][T15692] overlayfs: failed to resolve './file1': -2 [ 1949.148640][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1949.362560][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1949.429087][ T9] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1949.440215][ T9] usb 1-1: config 0 has no interface number 0 [ 1949.446498][ T9] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1949.468623][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1949.478224][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.486409][ T9] usb 1-1: Product: syz [ 1949.491476][ T9] usb 1-1: Manufacturer: syz [ 1949.496572][ T9] usb 1-1: SerialNumber: syz [ 1949.650704][ T9] usb 1-1: config 0 descriptor?? [ 1949.696631][ T9] smsc75xx v1.0.0 [ 1949.870033][T15697] tipc: Enabled bearer , priority 0 [ 1949.883978][T15697] syzkaller0: entered promiscuous mode [ 1949.890774][T15697] syzkaller0: entered allmulticast mode [ 1949.973657][T13089] Bluetooth: hci1: command tx timeout [ 1950.036149][T15697] tipc: Resetting bearer [ 1950.081016][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1950.124433][T15696] tipc: Resetting bearer [ 1950.204491][T15696] tipc: Disabling bearer [ 1950.349307][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1950.365129][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1950.435209][T15652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.443484][T15652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.451766][T15652] bridge_slave_0: entered allmulticast mode [ 1950.467072][T15652] bridge_slave_0: entered promiscuous mode [ 1950.670639][T15652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.678545][T15652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.686694][T15652] bridge_slave_1: entered allmulticast mode [ 1950.697807][T15652] bridge_slave_1: entered promiscuous mode [ 1951.059384][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1951.070595][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1951.083697][ T9] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1951.094845][ T9] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 1951.205959][T15652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1951.260769][T15652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1951.439005][T15652] team0: Port device team_slave_0 added [ 1951.460729][T15652] team0: Port device team_slave_1 added [ 1951.666927][T15652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1951.674262][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.703656][T15652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1951.788053][ T8534] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 1951.852188][T15652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1951.860080][T15652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1951.887218][T15652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1952.169907][ T8534] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1952.179496][ T8534] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1952.188272][ T8534] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1952.197626][ T8534] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1952.215919][ T8534] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1952.228281][ T8534] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1952.270688][T15652] hsr_slave_0: entered promiscuous mode [ 1952.281739][T15652] hsr_slave_1: entered promiscuous mode [ 1952.291013][T15652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1952.299235][T15652] Cannot create hsr debugfs directory [ 1952.336708][ T8534] usb 5-1: string descriptor 0 read error: -22 [ 1952.344169][ T8534] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1952.353935][ T8534] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.517693][ T8534] usb 5-1: config 0 descriptor?? [ 1952.601897][ T8534] hub 5-1:0.0: bad descriptor, ignoring hub [ 1952.609491][ T8534] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1952.974805][ T9] usb 5-1: USB disconnect, device number 32 [ 1953.014622][T14582] usb 1-1: USB disconnect, device number 18 [ 1953.375719][T15720] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1953.404290][T15720] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1953.698991][T15711] sctp: failed to load transform for md5: -2 [ 1957.835515][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2326'. [ 1958.079612][T15737] overlayfs: failed to resolve './file1': -2 [ 1958.289234][T15652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1958.435697][T15652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1958.516824][T15739] tipc: Enabled bearer , priority 0 [ 1958.530822][T15652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1958.613405][T15743] syzkaller0: entered promiscuous mode [ 1958.619458][T15743] syzkaller0: entered allmulticast mode [ 1958.678088][T15652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1958.816746][T15739] tipc: Resetting bearer [ 1959.100063][T15738] tipc: Resetting bearer [ 1959.263961][T15738] tipc: Disabling bearer [ 1960.375068][T15752] loop2: detected capacity change from 0 to 7 [ 1960.436714][T15752] loop2: [ 1960.440220][T15752] loop2: partition table partially beyond EOD, truncated [ 1960.576721][T15652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1960.901924][T15652] 8021q: adding VLAN 0 to HW filter on device team0 [ 1960.958074][ T5868] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 1961.096020][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1961.103631][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1961.225994][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1961.233809][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1961.298130][ T5868] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1961.307051][ T5868] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1961.321631][ T5868] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1961.333013][ T5868] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1961.344720][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1961.355209][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1961.692439][ T5868] usb 5-1: string descriptor 0 read error: -22 [ 1961.700443][ T5868] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1961.710159][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.784921][T15652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1961.903087][ T5868] usb 5-1: config 0 descriptor?? [ 1962.021197][ T5868] hub 5-1:0.0: bad descriptor, ignoring hub [ 1962.027824][ T5868] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1962.226468][ T5868] usb 5-1: USB disconnect, device number 33 [ 1962.892420][ T2120] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.040531][T15766] 9pnet_fd: Insufficient options for proto=fd [ 1963.151819][ T2120] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.323026][ T2120] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1963.543442][T15772] overlayfs: failed to resolve './file1': -2 [ 1963.583473][ T2120] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1964.047798][T15780] tipc: Enabled bearer , priority 0 [ 1964.209306][T15777] syzkaller0: entered promiscuous mode [ 1964.215116][T15777] syzkaller0: entered allmulticast mode [ 1964.421186][T15780] tipc: Resetting bearer [ 1964.573890][T15787] loop2: detected capacity change from 0 to 7 [ 1964.648022][T15787] loop2: [ 1964.651450][T15787] loop2: partition table partially beyond EOD, truncated [ 1965.120207][T14582] tipc: Node number set to 3785580341 [ 1965.471074][ T2120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1965.563476][ T2120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1965.603969][ T2120] bond0 (unregistering): Released all slaves [ 1965.687159][T15776] tipc: Resetting bearer [ 1965.688318][ T5868] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1965.714711][T15776] tipc: Disabling bearer [ 1965.913239][ T2120] tipc: Left network mode [ 1965.920016][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 1965.979965][T15652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1965.998104][ T5868] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1966.006663][ T5868] usb 1-1: config 0 has no interface number 0 [ 1966.014041][ T5868] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1966.115728][ T5868] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1966.131503][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.144724][ T5868] usb 1-1: Product: syz [ 1966.151114][ T5868] usb 1-1: Manufacturer: syz [ 1966.156895][ T5868] usb 1-1: SerialNumber: syz [ 1966.271862][ T5868] usb 1-1: config 0 descriptor?? [ 1966.286306][ T5868] smsc75xx v1.0.0 [ 1966.519837][ T9] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 1966.820209][T15803] 9pnet_fd: Insufficient options for proto=fd [ 1966.955939][ T5868] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1966.968572][ T5868] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1967.185015][ T9] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1967.195988][ T9] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1967.206339][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1967.220164][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1967.233289][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1967.245258][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1967.378164][ T2120] hsr_slave_0: left promiscuous mode [ 1967.419120][ T2120] hsr_slave_1: left promiscuous mode [ 1967.428333][ T2120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1967.436299][ T2120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1967.551252][ T2120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1967.566863][ T2120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1967.621683][ T5868] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1967.633519][ T5868] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1967.643673][ T5868] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1967.654671][ T5868] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 1967.746550][ T2120] veth1_macvtap: left promiscuous mode [ 1967.753169][ T2120] veth0_macvtap: left promiscuous mode [ 1967.759710][ T2120] veth1_vlan: left promiscuous mode [ 1967.770919][ T2120] veth0_vlan: left promiscuous mode [ 1967.808228][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1967.815377][ T9] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1967.825100][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1967.878821][T15806] overlayfs: failed to resolve './file1': -2 [ 1967.936558][ T9] usb 5-1: config 0 descriptor?? [ 1968.249516][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 1968.255806][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1968.628439][ T9] usb 5-1: USB disconnect, device number 34 [ 1968.992196][ T2120] team0 (unregistering): Port device team_slave_1 removed [ 1969.040175][ T2120] team0 (unregistering): Port device team_slave_0 removed [ 1969.319043][ T5868] usb 1-1: USB disconnect, device number 19 [ 1969.905713][T15652] veth0_vlan: entered promiscuous mode [ 1970.029367][T15819] loop2: detected capacity change from 0 to 7 [ 1970.092997][T15819] loop2: [ 1970.096297][T15819] loop2: partition table partially beyond EOD, truncated [ 1970.135018][T15652] veth1_vlan: entered promiscuous mode [ 1970.497948][T15823] tipc: Enabled bearer , priority 0 [ 1970.519205][T15823] syzkaller0: entered promiscuous mode [ 1970.525005][T15823] syzkaller0: entered allmulticast mode [ 1970.681965][T15823] tipc: Resetting bearer [ 1970.703787][T15652] veth0_macvtap: entered promiscuous mode [ 1970.776436][T15822] tipc: Resetting bearer [ 1970.816189][T15822] tipc: Disabling bearer [ 1970.919624][T15652] veth1_macvtap: entered promiscuous mode [ 1971.189103][T15652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1971.255215][T15831] 9pnet_fd: Insufficient options for proto=fd [ 1971.317796][T15652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1971.448685][T15652] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1971.463618][T15652] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1971.475473][T15652] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1971.484934][T15652] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1971.899714][T15838] overlayfs: failed to resolve './file1': -2 [ 1972.487657][ T8534] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1972.698228][ T8534] usb 1-1: Using ep0 maxpacket: 32 [ 1972.728568][ T8534] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1972.737113][ T8534] usb 1-1: config 0 has no interface number 0 [ 1972.743886][ T8534] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1972.851936][ T8534] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1972.862125][ T8534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.870846][ T8534] usb 1-1: Product: syz [ 1972.875495][ T8534] usb 1-1: Manufacturer: syz [ 1972.880570][ T8534] usb 1-1: SerialNumber: syz [ 1972.922800][ T5868] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 1972.995756][ T8534] usb 1-1: config 0 descriptor?? [ 1973.054225][ T8534] smsc75xx v1.0.0 [ 1973.169847][ T5868] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 1973.178805][ T5868] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 1973.188071][ T5868] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1973.201919][ T5868] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1973.215112][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1973.225955][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1973.433726][T15857] fuse: Unknown parameter 'grou00000000000000000000' [ 1973.544385][ T5868] usb 3-1: string descriptor 0 read error: -22 [ 1973.552025][ T5868] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1973.561978][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.682557][ T5868] usb 3-1: config 0 descriptor?? [ 1973.723253][ T5868] hub 3-1:0.0: bad descriptor, ignoring hub [ 1973.729761][ T5868] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1973.750510][ T8534] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1973.762132][ T8534] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1974.109489][ T5868] usb 3-1: USB disconnect, device number 28 [ 1974.394371][ T8534] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1974.409483][ T8534] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1974.426206][ T8534] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1974.439113][ T8534] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 1974.506199][T15862] tipc: Enabled bearer , priority 0 [ 1974.545518][T15862] syzkaller0: entered promiscuous mode [ 1974.551915][T15862] syzkaller0: entered allmulticast mode [ 1974.642019][T15866] tipc: Resetting bearer [ 1974.698258][T15861] tipc: Resetting bearer [ 1974.745873][T15861] tipc: Disabling bearer [ 1975.884500][T15881] overlayfs: failed to resolve './file0': -2 [ 1975.922064][ T8534] usb 1-1: USB disconnect, device number 20 [ 1976.649483][T15891] fuse: Unknown parameter 'group_i00000000000000000000' [ 1977.238499][T15027] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 1977.542824][T15027] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1977.551848][T15027] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1977.560699][T15027] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1977.570222][T15027] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1977.581584][T15027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1977.593116][T15027] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1977.605974][T15027] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1977.633693][T15902] tipc: Enabled bearer , priority 0 [ 1977.718855][T15908] syzkaller0: entered promiscuous mode [ 1977.724938][T15908] syzkaller0: entered allmulticast mode [ 1977.795017][T15902] tipc: Resetting bearer [ 1977.876367][T15901] tipc: Resetting bearer [ 1977.897790][T15027] usb 5-1: string descriptor 0 read error: -22 [ 1977.908559][T15027] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1977.919355][T15027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.976065][T15901] tipc: Disabling bearer [ 1978.021784][T15027] usb 5-1: config 0 descriptor?? [ 1978.077140][T15027] hub 5-1:0.0: bad descriptor, ignoring hub [ 1978.086751][T15027] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1978.225571][T15027] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input44 [ 1978.302298][T15027] input: failed to attach handler mousedev to device input44, error: -5 [ 1978.407975][T15027] usb 5-1: USB disconnect, device number 35 [ 1978.453662][T15913] ipt_ECN: cannot use operation on non-tcp rule [ 1978.524795][T15913] loop6: detected capacity change from 0 to 7 [ 1978.561259][T15913] Dev loop6: unable to read RDB block 7 [ 1978.567717][T15913] loop6: unable to read partition table [ 1978.588596][T15913] loop6: partition table beyond EOD, truncated [ 1978.595401][T15913] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1979.725287][T15919] binder: 15917:15919 ioctl c0306201 2000000003c0 returned -14 [ 1979.751606][T13089] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 1980.092420][T15925] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2391'. [ 1980.318307][T15926] binder: 15917:15926 ioctl c0306201 0 returned -14 [ 1980.512300][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'. [ 1981.840298][ T3896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.848927][ T3896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1982.092788][T15934] fuse: Unknown parameter 'group_i00000000000000000000' [ 1982.182769][T14076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1982.191225][T14076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1982.553636][T15940] bridge_slave_0: default FDB implementation only supports local addresses [ 1982.858833][T13089] Bluetooth: hci4: command 0x0406 tx timeout [ 1983.075236][T15945] tipc: Enabled bearer , priority 0 [ 1983.147920][T15947] syzkaller0: entered promiscuous mode [ 1983.153980][T15947] syzkaller0: entered allmulticast mode [ 1983.196415][T15945] tipc: Resetting bearer [ 1983.256663][T15944] tipc: Resetting bearer [ 1983.319997][T15944] tipc: Disabling bearer [ 1984.160128][T15965] binder: 15964:15965 ioctl c0306201 2000000003c0 returned -14 [ 1984.183520][T15965] binder: 15964:15965 ioctl c0306201 0 returned -14 [ 1984.226458][T15965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2407'. [ 1985.169963][T15972] fuse: Unknown parameter 'group_i00000000000000000000' [ 1985.446105][T15977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2408'. [ 1985.661343][T15975] fuse: Bad value for 'fd' [ 1987.309991][T15987] tipc: Started in network mode [ 1987.315527][T15987] tipc: Node identity aa474b0835fd, cluster identity 4711 [ 1987.328301][T15987] tipc: Enabled bearer , priority 0 [ 1987.506928][T15989] syzkaller0: entered promiscuous mode [ 1987.513614][T15989] syzkaller0: entered allmulticast mode [ 1987.870886][T15987] tipc: Resetting bearer [ 1987.965163][T15986] tipc: Resetting bearer [ 1987.986881][T15675] Bluetooth: hci4: unexpected event for opcode 0x0c1a [ 1988.072626][T15986] tipc: Disabling bearer [ 1988.901373][T16003] fuse: Unknown parameter 'group_id00000000000000000000' [ 1989.128186][T16008] fuse: Bad value for 'fd' [ 1990.144807][T15675] Bluetooth: hci3: unexpected event for opcode 0x0c1a [ 1990.796448][T16027] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2429'. [ 1991.115546][T16028] tipc: Enabled bearer , priority 0 [ 1991.159643][T16028] syzkaller0: entered promiscuous mode [ 1991.165661][T16028] syzkaller0: entered allmulticast mode [ 1991.227239][T16028] tipc: Resetting bearer [ 1991.271938][T16026] tipc: Resetting bearer [ 1991.296380][T16026] tipc: Disabling bearer [ 1994.261982][T16039] fuse: Unknown parameter 'group_id00000000000000000000' [ 1994.551936][T16043] fuse: Bad value for 'fd' [ 1995.734245][T15675] Bluetooth: hci5: unexpected event for opcode 0x0c1a [ 1997.171840][T16064] tipc: Enabled bearer , priority 0 [ 1997.240246][T16064] syzkaller0: entered promiscuous mode [ 1997.246069][T16064] syzkaller0: entered allmulticast mode [ 1997.392031][T16064] tipc: Resetting bearer [ 1997.488695][T16063] tipc: Resetting bearer [ 1997.544679][T16072] binder: 16069:16072 ioctl c0306201 2000000003c0 returned -14 [ 1997.601967][T16063] tipc: Disabling bearer [ 1997.683529][T16074] fuse: Unknown parameter 'group_id00000000000000000000' [ 1998.278300][T16079] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2454'. [ 1998.394160][T15675] Bluetooth: hci0: unexpected event for opcode 0x0c1a [ 1999.240259][T16095] ipt_ECN: cannot use operation on non-tcp rule [ 1999.378342][T16095] loop6: detected capacity change from 0 to 7 [ 1999.450097][T16095] Dev loop6: unable to read RDB block 7 [ 1999.456274][T16095] loop6: AHDI p3 p4 [ 1999.461219][T16095] loop6: partition table partially beyond EOD, truncated [ 1999.471425][T16095] loop6: p3 start 1886353253 is beyond EOD, truncated [ 1999.916914][T16098] tipc: Enabled bearer , priority 0 [ 2000.057033][T16099] syzkaller0: entered promiscuous mode [ 2000.063879][T16099] syzkaller0: entered allmulticast mode [ 2000.150319][T16098] tipc: Resetting bearer [ 2000.448983][T16097] tipc: Resetting bearer [ 2000.487213][T16097] tipc: Disabling bearer [ 2000.862963][T16101] 9pnet_fd: Insufficient options for proto=fd [ 2002.720291][T16106] binder: 16105:16106 ioctl c0306201 2000000003c0 returned -14 [ 2002.922203][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2465'. [ 2003.240472][T16112] fuse: Bad value for 'user_id' [ 2003.245763][T16112] fuse: Bad value for 'user_id' [ 2004.774106][T16118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2468'. [ 2008.751130][T16145] 9pnet_fd: Insufficient options for proto=fd [ 2009.099324][T16151] fuse: Bad value for 'user_id' [ 2009.104633][T16151] fuse: Bad value for 'user_id' [ 2009.562067][T16157] binder: 16156:16157 ioctl c0306201 2000000003c0 returned -14 [ 2009.679259][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2481'. [ 2009.883530][T16160] ===================================================== [ 2009.891095][T16160] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 2009.898856][T16160] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 2009.904066][T16160] sctp_inq_push+0x2a6/0x350 [ 2009.909075][T16160] sctp_backlog_rcv+0x3c7/0xda0 [ 2009.914198][T16160] sk_backlog_rcv+0x142/0x420 [ 2009.919263][T16160] __release_sock+0x1d3/0x330 [ 2009.924260][T16160] release_sock+0x6b/0x270 [ 2009.929257][T16160] sctp_wait_for_connect+0x458/0x820 [ 2009.935016][T16160] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2009.941083][T16160] sctp_sendmsg+0x3910/0x49f0 [ 2009.946059][T16160] inet_sendmsg+0x269/0x2a0 [ 2009.951274][T16160] __sock_sendmsg+0x278/0x3d0 [ 2009.960401][T16160] __sys_sendto+0x593/0x720 [ 2009.965208][T16160] __x64_sys_sendto+0x130/0x200 [ 2009.971605][T16160] x64_sys_call+0x3c0b/0x3db0 [ 2009.976742][T16160] do_syscall_64+0xd9/0x210 [ 2009.981775][T16160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2009.988135][T16160] [ 2009.990613][T16160] Uninit was created at: [ 2009.995169][T16160] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 2010.002364][T16160] kmalloc_reserve+0x22f/0x4b0 [ 2010.007776][T16160] __alloc_skb+0x347/0x7d0 [ 2010.012729][T16160] sctp_packet_transmit+0x18a1/0x46d0 [ 2010.018515][T16160] sctp_outq_flush+0x1c7d/0x67c0 [ 2010.023725][T16160] sctp_outq_uncork+0x9e/0xc0 [ 2010.028903][T16160] sctp_do_sm+0x8c8e/0x9720 [ 2010.033675][T16160] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 2010.039154][T16160] sctp_inq_push+0x2a6/0x350 [ 2010.044000][T16160] sctp_backlog_rcv+0x3c7/0xda0 [ 2010.050066][T16160] sk_backlog_rcv+0x142/0x420 [ 2010.058318][T16160] __release_sock+0x1d3/0x330 [ 2010.063253][T16160] release_sock+0x6b/0x270 [ 2010.069298][T16160] sctp_wait_for_connect+0x458/0x820 [ 2010.074843][T16160] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2010.080767][T16160] sctp_sendmsg+0x3910/0x49f0 [ 2010.086010][T16160] inet_sendmsg+0x269/0x2a0 [ 2010.091147][T16160] __sock_sendmsg+0x278/0x3d0 [ 2010.096093][T16160] __sys_sendto+0x593/0x720 [ 2010.101132][T16160] __x64_sys_sendto+0x130/0x200 [ 2010.106285][T16160] x64_sys_call+0x3c0b/0x3db0 [ 2010.111494][T16160] do_syscall_64+0xd9/0x210 [ 2010.116289][T16160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2010.122682][T16160] [ 2010.125184][T16160] CPU: 0 UID: 0 PID: 16160 Comm: syz.2.2482 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(none) [ 2010.137949][T16160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2010.148373][T16160] ===================================================== [ 2010.155570][T16160] Disabling lock debugging due to kernel taint [ 2010.165282][T16160] Kernel panic - not syncing: kmsan.panic set ... [ 2010.171940][T16160] CPU: 0 UID: 0 PID: 16160 Comm: syz.2.2482 Tainted: G B 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(none) [ 2010.185879][T16160] Tainted: [B]=BAD_PAGE [ 2010.190213][T16160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2010.200490][T16160] Call Trace: [ 2010.203940][T16160] [ 2010.207040][T16160] __dump_stack+0x26/0x30 [ 2010.211658][T16160] dump_stack_lvl+0x53/0x270 [ 2010.216535][T16160] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2010.222680][T16160] dump_stack+0x1e/0x25 [ 2010.227112][T16160] panic+0x4bd/0xd50 [ 2010.231358][T16160] kmsan_report+0x31c/0x320 [ 2010.236172][T16160] ? __msan_warning+0x1b/0x30 [ 2010.241143][T16160] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 2010.246519][T16160] ? sctp_inq_push+0x2a6/0x350 [ 2010.251537][T16160] ? sctp_backlog_rcv+0x3c7/0xda0 [ 2010.256799][T16160] ? sk_backlog_rcv+0x142/0x420 [ 2010.261888][T16160] ? __release_sock+0x1d3/0x330 [ 2010.266984][T16160] ? release_sock+0x6b/0x270 [ 2010.271804][T16160] ? sctp_wait_for_connect+0x458/0x820 [ 2010.277575][T16160] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2010.283469][T16160] ? sctp_sendmsg+0x3910/0x49f0 [ 2010.288612][T16160] ? inet_sendmsg+0x269/0x2a0 [ 2010.293644][T16160] ? __sock_sendmsg+0x278/0x3d0 [ 2010.298714][T16160] ? __sys_sendto+0x593/0x720 [ 2010.303704][T16160] ? __x64_sys_sendto+0x130/0x200 [ 2010.309163][T16160] ? x64_sys_call+0x3c0b/0x3db0 [ 2010.314386][T16160] ? do_syscall_64+0xd9/0x210 [ 2010.319323][T16160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2010.325652][T16160] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2010.331754][T16160] ? kmsan_get_metadata+0xfb/0x160 [ 2010.337203][T16160] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2010.343292][T16160] ? kmsan_get_metadata+0xfb/0x160 [ 2010.348662][T16160] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2010.354742][T16160] ? sctp_inq_pop+0x15ea/0x19e0 [ 2010.359813][T16160] ? kmsan_get_metadata+0xfb/0x160 [ 2010.365193][T16160] __msan_warning+0x1b/0x30 [ 2010.369962][T16160] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 2010.375216][T16160] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 2010.381208][T16160] sctp_inq_push+0x2a6/0x350 [ 2010.386131][T16160] sctp_backlog_rcv+0x3c7/0xda0 [ 2010.391230][T16160] ? kmsan_get_metadata+0xfb/0x160 [ 2010.396611][T16160] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 2010.402387][T16160] sk_backlog_rcv+0x142/0x420 [ 2010.407313][T16160] __release_sock+0x1d3/0x330 [ 2010.412261][T16160] release_sock+0x6b/0x270 [ 2010.416988][T16160] sctp_wait_for_connect+0x458/0x820 [ 2010.422490][T16160] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2010.428857][T16160] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 2010.434502][T16160] ? kmsan_get_metadata+0xfb/0x160 [ 2010.439963][T16160] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2010.446110][T16160] sctp_sendmsg+0x3910/0x49f0 [ 2010.451069][T16160] ? kmsan_save_stack_with_flags+0x60/0x60 [ 2010.457209][T16160] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2010.462532][T16160] inet_sendmsg+0x269/0x2a0 [ 2010.467439][T16160] __sock_sendmsg+0x278/0x3d0 [ 2010.472510][T16160] __sys_sendto+0x593/0x720 [ 2010.477265][T16160] ? do_futex+0x3a1/0x480 [ 2010.481848][T16160] ? kmsan_get_metadata+0xfb/0x160 [ 2010.487268][T16160] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2010.493390][T16160] __x64_sys_sendto+0x130/0x200 [ 2010.498611][T16160] x64_sys_call+0x3c0b/0x3db0 [ 2010.503538][T16160] do_syscall_64+0xd9/0x210 [ 2010.508307][T16160] ? irqentry_exit+0x16/0x60 [ 2010.513132][T16160] ? clear_bhb_loop+0x40/0x90 [ 2010.518049][T16160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2010.524166][T16160] RIP: 0033:0x7f772658e929 [ 2010.528752][T16160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2010.548595][T16160] RSP: 002b:00007f772732f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2010.557250][T16160] RAX: ffffffffffffffda RBX: 00007f77267b5fa0 RCX: 00007f772658e929 [ 2010.565503][T16160] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 2010.573669][T16160] RBP: 00007f7726610b39 R08: 000020000005ffe4 R09: 000000000000001c [ 2010.581968][T16160] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000000 [ 2010.590121][T16160] R13: 0000000000000000 R14: 00007f77267b5fa0 R15: 00007ffdee8793a8 [ 2010.598314][T16160] [ 2010.601879][T16160] Kernel Offset: disabled [ 2010.606336][T16160] Rebooting in 86400 seconds..