last executing test programs: 19m46.608310948s ago: executing program 32 (id=477): syz_io_uring_setup(0x4ee6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00', 0x3) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x94) socket$inet6(0xa, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = fcntl$dupfd(r3, 0x0, r3) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) 16m36.111066601s ago: executing program 33 (id=1009): truncate(0x0, 0x1fff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x107041, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) unshare(0x22020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)=r5}, 0x20) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r6, 0x1, &(0x7f0000000140)) readv(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f0000000380)=""/38, 0x26}], 0x1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x400, 0x4) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) 14m39.525455465s ago: executing program 1 (id=1389): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x20, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 14m37.457229025s ago: executing program 1 (id=1401): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x4e0, 0x0, 0x0, 0x340, 0x0, 0x0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xffffff00, 0x0, 0xff], [0xffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'veth1_macvtap\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x5e, 0x6e, 0x3}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@loopback, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'lo\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00, 0xff000000], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'macsec0\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x7, 0x7c}, 0x0, 0xa8, 0x410}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xff, 0xffffff00, 0x0, 0xff], [0xff, 0xff000000, 0xff000000], 'veth1_to_hsr\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14m35.980728883s ago: executing program 1 (id=1407): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0}, 0x94) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x601, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[0x0], &(0x7f0000000040)}) 14m34.571417156s ago: executing program 1 (id=1415): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) 14m33.253593009s ago: executing program 1 (id=1419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}}, 0x0) 14m31.768952682s ago: executing program 1 (id=1427): creat(0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) close(r10) 14m16.108182637s ago: executing program 34 (id=1427): creat(0x0, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000200)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x60) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7}, 0xc) close(r10) 11m35.704867759s ago: executing program 4 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x82341, 0x2) r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r1, 0x2007ffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40002}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}}, 0x1c) listen(r2, 0x0) listen(r3, 0x0) 11m34.989545794s ago: executing program 4 (id=2061): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 11m34.158777266s ago: executing program 4 (id=2063): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014900000000009500000000000000ce057a4ff891a16b4a607be9b64d8e7d4e2bd9d83064df2693a8cccd84e7e2adce2710bf26c8d0b2b31b8ef92d5d2ad7bb4d0525385f23"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4140aecd, &(0x7f0000000100)) 11m32.814798753s ago: executing program 4 (id=2067): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0xc, 0xfffffffe, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0x20, 0x600) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x80000, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x10, 0xffffffffffffffff, 0xb091f000) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, 0x0, 0x84) 11m32.020590702s ago: executing program 4 (id=2071): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000001b00106a05310300000000000109022400010000800009040002010300010009210000000122f8040905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x71, &(0x7f00000003c0)=ANY=[@ANYBLOB="12015002000000086b1d010140000102030109025f0003018120bc0904000000010100000a24010d00a002010209040100000102000009040101010102eddb35ea2b92a156ff1951a200"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 11m31.250236349s ago: executing program 4 (id=2074): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 11m27.392554971s ago: executing program 35 (id=2074): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 9m44.889457514s ago: executing program 2 (id=2446): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) 9m44.209651998s ago: executing program 2 (id=2449): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x5fef, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) 9m43.569848316s ago: executing program 2 (id=2452): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000006006600c78800001a0033"], 0x50}}, 0x0) 9m42.82054432s ago: executing program 2 (id=2456): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfea7) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, r3, &(0x7f00000001c0)=0x8dff, 0x281) prlimit64(0x0, 0x7, &(0x7f0000000440)={0x0, 0x4}, 0x0) read$msr(r2, 0x0, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100), 0x1) 9m38.027212797s ago: executing program 2 (id=2464): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) 9m37.318362473s ago: executing program 2 (id=2467): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r3, 0x401) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) keyctl$set_timeout(0xf, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x7738f2b6e2b2e59, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = getpgid(r0) r5 = syz_pidfd_open(r4, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r7 = pidfd_getfd(r5, r6, 0x0) readlinkat(r7, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) 9m21.960472742s ago: executing program 36 (id=2467): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r3, 0x401) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) keyctl$set_timeout(0xf, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x7738f2b6e2b2e59, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = getpgid(r0) r5 = syz_pidfd_open(r4, 0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) r7 = pidfd_getfd(r5, r6, 0x0) readlinkat(r7, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) 3m11.647551935s ago: executing program 9 (id=2651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m37.439938981s ago: executing program 9 (id=2651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m4.069740439s ago: executing program 7 (id=3680): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4, 0x0, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x1, &(0x7f0000001480)={0x77359400}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') pselect6(0x40, &(0x7f0000000000)={0x3, 0x203, 0x8000000000000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10000000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r2}, 0x8) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_POST(r4, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) 2m2.239024426s ago: executing program 7 (id=3684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x66) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 2m1.190211936s ago: executing program 7 (id=3688): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011101000d002043558107000000000001090224000100004009090402040203000200092107008401220700090581030002055105"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220700000092"], 0x0}, 0x0) 1m59.933399972s ago: executing program 7 (id=3693): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b408000000000000610665000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x40}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xf}, 0x10}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24baedcc72d41798c95c01626c311e9f1262dfa4dedd161672c578a7af36c8a95437f295e14a1e0c7245cb53f83cc7b4b9294bb13473331502b7735a955080f7c2fd79d3fe0d", 0x1d9}], 0x2}}], 0x2, 0xc0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x24, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x2c, 0x0, '\x00', [@pad1]}], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) 1m59.177134254s ago: executing program 7 (id=3695): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x20040040}, 0xee) close(r4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=@newtfilter={0x864, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0xf, 0x9}, {0x5}, {0xfff1, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x824, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ff}}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_CGROUP_POLICE={0x80c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe9, 0x1ff, 0x27, 0xb, 0x3, 0x4, 0x5, 0x1, 0x4, 0x8, 0x8, 0x56, 0x1, 0x5f7, 0x3, 0x7ff, 0x6, 0x4, 0x1, 0x16, 0xa, 0x7, 0x6, 0x0, 0x9, 0xffffffff, 0x58866fa2, 0x3, 0x1, 0x3, 0xe000000, 0x7, 0xa3, 0x7, 0x3, 0x48, 0x1000, 0xca, 0x4, 0x6, 0x80000000, 0x7ff, 0x9, 0x80000001, 0x9edc, 0x620, 0x57, 0x7, 0x4, 0x0, 0x3, 0x1, 0x8000, 0x5, 0x7350, 0x5, 0xfffffffe, 0xe1, 0x2, 0x400, 0x1, 0xffff3e22, 0x1, 0x9, 0x6, 0xf, 0x1, 0xa46b, 0xa9, 0x8, 0x7fffffff, 0x2, 0x8, 0x5, 0x1, 0x4, 0x7, 0x2, 0xda13, 0x3, 0x8, 0x9, 0x10001, 0x24f, 0x8000, 0x3, 0xb6, 0x80, 0xf, 0x100, 0x2, 0x3, 0x1000, 0xd, 0x9, 0x2, 0x10000, 0x3ff, 0x1, 0x5, 0x101, 0x5, 0x2c0, 0x374e, 0x40, 0x0, 0x3, 0x1, 0xfffffffe, 0x20, 0xa03f, 0x5, 0x3, 0x1000, 0x93f, 0xd8, 0x6, 0xb13, 0xc, 0x0, 0xc, 0x100, 0x4, 0x5, 0x8, 0x1, 0x2, 0x1, 0xc5, 0x1, 0x8000, 0x4c, 0x4, 0x81, 0xb, 0xfffffff7, 0xdcd, 0x7, 0x9, 0x5, 0x100, 0x3, 0x2, 0xc71, 0x1f63a0db, 0x9, 0xb0, 0x6, 0x8000, 0x7, 0xf0, 0x40005, 0x5, 0x3, 0x3, 0x2, 0x3, 0xb51, 0x7e, 0x4, 0x6, 0x7ff, 0x8, 0x4, 0x200, 0xb5, 0x4, 0x6568, 0xb, 0x5, 0x3, 0x80000000, 0x101, 0x6, 0x7, 0xfffffe01, 0x3, 0x8, 0x3, 0x7ff, 0x6, 0x0, 0x101, 0x81, 0xaace, 0x1, 0xfe7, 0x3, 0xffff0001, 0x8, 0x5, 0x3, 0x55e, 0x0, 0xa94, 0x0, 0x2, 0x9, 0xc7, 0x800, 0x1, 0x6, 0x2, 0x10, 0x401, 0x7f, 0x1, 0x64d, 0x7, 0xa, 0x0, 0x9, 0xe6df, 0xfffff2c5, 0x401, 0x2b, 0xdd8, 0x8, 0x6, 0x3, 0x9, 0x3, 0x200000, 0x2, 0x4, 0x0, 0x9, 0x5, 0x5, 0x40, 0xf, 0xfffffffd, 0x800, 0x4, 0x2, 0x3, 0xd4, 0x7fff, 0x2b9, 0xd8f, 0x6, 0x8, 0x8, 0x0, 0xad, 0x4, 0x10, 0xfffffffd, 0x7, 0xecd0, 0x6, 0x1, 0x4, 0x4, 0x3, 0x3]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x9, 0x8, 0xffffff60, 0x3, 0x8, 0x7fff, 0x7ff, 0x5, 0xa, 0x3, 0x10c, 0x1, 0x6, 0x31f, 0x7fff, 0xffffff00, 0x3, 0x10001, 0xb0, 0x2, 0x0, 0x10003, 0x2, 0x4f, 0x40, 0x15, 0x7, 0xa6, 0x5, 0x1b88, 0x9, 0x4, 0x7a37, 0x7, 0x8, 0x10001, 0x9bf, 0x9, 0xffff8001, 0x1, 0x3ff, 0xee3, 0x10001, 0xf73b, 0xda0, 0x401, 0x9, 0x8001, 0x7fff, 0x7, 0x9, 0x400, 0x1000, 0xfff, 0x8, 0x4, 0xfffffffa, 0x5, 0xffff, 0x2, 0x1ff, 0x7, 0x3, 0x8, 0xa, 0x1, 0x4, 0xfa2f, 0x2, 0x7, 0x200, 0x3, 0x3, 0x3ddf, 0x8, 0x81, 0x0, 0x4, 0xfffffff8, 0x3, 0x5, 0x1000, 0x3, 0x40000000, 0x4, 0x2, 0xc, 0x7, 0x1, 0x1, 0x7, 0x10, 0x10001, 0x240, 0x9, 0x400000, 0x0, 0x41, 0x6, 0x5, 0xd, 0x0, 0xfff, 0x7, 0x9775, 0x6, 0x8, 0xc, 0x81, 0x3, 0x8f5, 0x6, 0x200, 0x80, 0x2, 0x4, 0xfffffe00, 0xc, 0x10, 0x500000, 0xfffffffc, 0x1, 0xe, 0x4, 0x1, 0x800, 0xd, 0x3ff, 0x0, 0xb, 0x9, 0x0, 0x1, 0x1, 0x9, 0x0, 0x7, 0x2, 0x4800000, 0x8, 0x4, 0x3, 0x200, 0xffff, 0x0, 0x5, 0x53ffb6c6, 0x88da, 0xc5a00000, 0x7, 0xffffffff, 0x1, 0xffffffff, 0x1, 0xfffffff7, 0x2, 0x6, 0xff, 0x7ff, 0x1, 0x6, 0x445a75c3, 0x7, 0x3, 0x6, 0xffffff01, 0x99f2, 0x6, 0x2, 0x6, 0x40, 0x4, 0xd, 0x0, 0x400, 0x6, 0x3, 0xee36, 0x2, 0x6, 0x46, 0x42, 0xe3e, 0x1, 0x7442, 0x3, 0x4f68, 0x5, 0xfbc, 0x0, 0x7fff, 0x9, 0x200, 0xfc, 0xfffffffc, 0xf, 0x36, 0x7, 0xfffffffd, 0x7fff, 0x9, 0x0, 0xf, 0x6, 0x80000001, 0xffff7fff, 0x7, 0x81, 0x5, 0x8, 0x9, 0xebda, 0x4, 0x6, 0x9, 0xfffffff6, 0x0, 0x9, 0x8fb, 0xe, 0x8000, 0x2, 0x10000, 0x81, 0x80000001, 0x7c, 0x9, 0x5, 0xb9, 0x5, 0xe, 0x200, 0xd, 0x83, 0x7, 0x100, 0xee, 0xfffffff9, 0x1a, 0x81, 0x9, 0x4f, 0x4f7, 0xab, 0x4, 0x10000, 0xffff, 0x5, 0xe, 0x16, 0x1, 0x40, 0x7, 0x8]}]}]}}]}, 0x864}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 1m58.787283146s ago: executing program 9 (id=2651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m52.479489659s ago: executing program 7 (id=3698): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], &(0x7f0000000200)='GPL\x00', 0x38a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) 1m36.626745475s ago: executing program 37 (id=3698): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], &(0x7f0000000200)='GPL\x00', 0x38a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) 1m25.332276933s ago: executing program 3 (id=3759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r4) fcntl$setstatus(r3, 0x4, 0x42000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3) 1m23.597611996s ago: executing program 3 (id=3762): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xd, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18004000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800002018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c500000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) 1m22.77196758s ago: executing program 3 (id=3765): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffffffffffd98, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1m21.884948016s ago: executing program 3 (id=3767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 1m20.752248436s ago: executing program 3 (id=3770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(0xffffffffffffffff, r4, r5) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@default_permissions}]}}) socket(0x1, 0x803, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'tunl0\x00', @random="ef20342c0280"}) 1m20.003050207s ago: executing program 9 (id=2651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24baedcc72d41798c95c01626c311e9f1262dfa4dedd161672c578a7af36c8a95437f295e14a1e0c7245cb53f83cc7b4b9294bb13473331502b7735a955080f7c2fd79d3fe0d", 0x1d9}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m14.896928792s ago: executing program 3 (id=3774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioprio_get$uid(0x3, 0x0) 59.404271962s ago: executing program 38 (id=3774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioprio_get$uid(0x3, 0x0) 39.316721354s ago: executing program 9 (id=2651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10.361441338s ago: executing program 8 (id=3919): r0 = epoll_create1(0x0) epoll_wait(r0, 0x0, 0x0, 0xfffeffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_pwait(r0, &(0x7f0000000040)=[{}], 0x1, 0xea5, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x9d32f4b220c65367}) 9.827022841s ago: executing program 0 (id=3921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x3f6, 0x100, 0x70bd27, 0x25dfdbfb, {0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x24008040}, 0x4048000) 8.955416294s ago: executing program 0 (id=3923): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 8.953301164s ago: executing program 8 (id=3924): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040), 0x0) 8.346657798s ago: executing program 5 (id=3926): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000001880)=[@acquire, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) 8.294341372s ago: executing program 0 (id=3927): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r3, &(0x7f0000000580)="e1", 0xfffffffffffffef1, 0x40000, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r5}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000800)=""/140, 0x8c}], 0x1}, 0x10000) 7.974593293s ago: executing program 8 (id=3929): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b408000000000000610665000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x40}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xf}, 0x10}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/88, 0x58}], 0x5}, 0xb0}], 0x7, 0x20, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x24, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x2c, 0x0, '\x00', [@pad1]}], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) 7.733374189s ago: executing program 5 (id=3930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.422940961s ago: executing program 6 (id=3931): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/227, 0xe3}, {&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/136, 0x88}, {&(0x7f0000002540)=""/157, 0x9d}, {&(0x7f0000002600)=""/111, 0x6f}], 0x9, &(0x7f0000003f40)=""/253, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000002940), 0x0, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0) 7.331487803s ago: executing program 8 (id=3932): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011101000d0020435581070000000000010902240001000040090904020402030002000921070084"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220700000092"], 0x0}, 0x0) 6.938913975s ago: executing program 5 (id=3933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff00000000711014000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 6.861830475s ago: executing program 6 (id=3934): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001180)=[{{&(0x7f0000000140)={0xa, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x4004851) setsockopt(r1, 0x84, 0x14, &(0x7f0000000040)="020000000980", 0x6) r2 = syz_io_uring_setup(0x88f, 0x0, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x2002) syz_io_uring_submit(0x0, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000005140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000ffdbdf25010000000c0002000000000000000000340007800c00018008000100", @ANYRES32=r4, @ANYBLOB='\f'], 0x54}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) io_uring_enter(r2, 0x2412, 0x0, 0x36, 0x0, 0x0) 6.165571559s ago: executing program 5 (id=3935): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r1, 0x0, 0x0, 0x1, 0x3000) msgrcv(r1, 0x0, 0x0, 0x1, 0x0) msgsnd(r1, &(0x7f0000000400)={0x1}, 0x8, 0x0) 5.998849558s ago: executing program 6 (id=3936): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327da4b2", 0xb}, 0x1, 0x0, 0x0, 0x20040040}, 0xee) close(r4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=@newtfilter={0x24, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r3, {0xf, 0x9}, {0x5}, {0xfff1, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 5.197485884s ago: executing program 9 (id=2651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf646e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd6424082bcd0864a854e542aacc3201fff776fe1c000000000000000000000000000000002da46e8a95bcead77a244256266fe952d151a841aaa0c9c727bf08c37869c70d6aed073d6bb9fb037a079b697f3ba963ba49b6aecdc3e839ae25d497b0e60408b8e0a9931aeb1be35eea2a22fa50d66a634804121bde6a4a2d7a23c08d8237aac90c577c24f4ec2949d9202659fe626262e0764eed651fe91d276cd8918ba1a079c716281613b127eca886d75e994a1b41314ff21f5a4fd8a7e55c65b2eebabf0db0268c53503bb309959c1c0b222c6fb8310e8f25e7c26e24baedcc72d41798c95c01626c311e9f1262dfa4dedd161672c578a7af36c8a95437f295e14a1e0c7245cb53f83cc7b4b9294bb13473331502b7735a955080f7c2fd79d3fe0d", 0x1d9}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.504560807s ago: executing program 6 (id=3937): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 1.494581156s ago: executing program 0 (id=3938): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xd, 0x10, &(0x7f0000000a40)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) 1.491806683s ago: executing program 5 (id=3939): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt(r0, 0x84, 0x80, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) 1.488291932s ago: executing program 8 (id=3940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81a0}, [@call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="b874386d1929ebfd66cc265d21bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.007085077s ago: executing program 6 (id=3941): msgsnd(0x0, 0x0, 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) 601.443668ms ago: executing program 0 (id=3942): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="b408000000000000610665000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x40}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0xf}, 0x10}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a", 0xe0}, {&(0x7f0000000e80)="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", 0x1d9}], 0x2}}], 0x2, 0xc0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x24, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x2c, 0x0, '\x00', [@pad1]}], @ndisc_ns={0x87, 0x0, 0x0, @mcast2}}}}}}, 0x0) 502.637769ms ago: executing program 5 (id=3943): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 210.934395ms ago: executing program 6 (id=3944): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000100)=""/227, 0xe3}, {&(0x7f0000000200)=""/210, 0xd2}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/136, 0x88}, {&(0x7f0000002540)=""/157, 0x9d}, {&(0x7f0000002600)=""/111, 0x6f}], 0x9, &(0x7f0000003f40)=""/253, 0xfd}}, {{&(0x7f0000002840)=@tipc=@name, 0x80, &(0x7f0000002940), 0x0, &(0x7f0000002980)=""/193, 0xc1}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003b80)=""/215, 0xd7}, {&(0x7f0000003c80)=""/166, 0xa6}], 0x4, &(0x7f0000003ec0)=""/91, 0x5b}}], 0x3, 0x0, 0x0) 210.702375ms ago: executing program 8 (id=3945): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffff4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 0 (id=3946): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): evice loop8): add_dirent_to_buf:2153: inode #2: comm syz.8.3036: mark_inode_dirty error [ 1242.918591][T10362] Bluetooth: hci3: command tx timeout [ 1243.055150][T12226] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1244.607532][ T5853] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1245.082258][ T5853] usb 9-1: Using ep0 maxpacket: 32 [ 1245.167710][ T5853] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 1245.176257][ T5853] usb 9-1: config 0 has no interface number 0 [ 1245.183862][ T5853] usb 9-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1245.197410][ T5853] usb 9-1: config 0 interface 2 has no altsetting 0 [ 1245.204272][ T5853] usb 9-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1245.213954][ T5853] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.576503][ T5853] usb 9-1: config 0 descriptor?? [ 1245.740211][T15493] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1245.933832][T15493] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1246.076838][ T5853] usbhid 9-1:0.2: can't add hid device: -71 [ 1246.084068][ T5853] usbhid 9-1:0.2: probe with driver usbhid failed with error -71 [ 1246.134929][T15493] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1246.188963][ T5853] usb 9-1: USB disconnect, device number 10 [ 1246.263086][T15493] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1247.991282][T15493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.268734][T15493] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.373238][ T4167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.380896][ T4167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.427610][T15622] loop3: detected capacity change from 0 to 1024 [ 1248.484680][ T4167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.492375][ T4167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.551056][T15622] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1248.638909][T15622] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1248.792229][T15622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1249.491314][T15154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.095776][T15493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.407911][T12201] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1252.598973][T12201] usb 4-1: Using ep0 maxpacket: 32 [ 1252.683996][T12201] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1252.692403][T12201] usb 4-1: config 0 has no interface number 0 [ 1252.699096][T12201] usb 4-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1252.712241][T12201] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1252.719361][T12201] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1252.728675][T12201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.941242][T12201] usb 4-1: config 0 descriptor?? [ 1253.453662][T12201] uclogic 0003:5543:0781.0039: unknown main item tag 0x0 [ 1253.461208][T12201] uclogic 0003:5543:0781.0039: unknown main item tag 0x0 [ 1253.468800][T12201] uclogic 0003:5543:0781.0039: unknown main item tag 0x0 [ 1253.476047][T12201] uclogic 0003:5543:0781.0039: item fetching failed at offset 6/7 [ 1253.614128][T12201] uclogic 0003:5543:0781.0039: parse failed [ 1253.621231][T12201] uclogic 0003:5543:0781.0039: probe with driver uclogic failed with error -22 [ 1253.649398][T12201] usb 4-1: USB disconnect, device number 42 [ 1254.468704][T15493] veth0_vlan: entered promiscuous mode [ 1254.654998][T15493] veth1_vlan: entered promiscuous mode [ 1255.119607][T15493] veth0_macvtap: entered promiscuous mode [ 1255.272440][T15493] veth1_macvtap: entered promiscuous mode [ 1255.500411][T15493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.641780][T15493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.766345][T15493] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.775610][T15493] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.784797][T15493] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.793924][T15493] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.049744][T15718] loop8: detected capacity change from 0 to 256 [ 1258.225745][T15718] FAT-fs (loop8): Directory bread(block 64) failed [ 1258.233650][T15718] FAT-fs (loop8): Directory bread(block 65) failed [ 1258.240866][T15718] FAT-fs (loop8): Directory bread(block 66) failed [ 1258.247860][T15718] FAT-fs (loop8): Directory bread(block 67) failed [ 1258.254861][T15718] FAT-fs (loop8): Directory bread(block 68) failed [ 1258.261741][T15718] FAT-fs (loop8): Directory bread(block 69) failed [ 1258.268800][T15718] FAT-fs (loop8): Directory bread(block 70) failed [ 1258.283197][T15718] FAT-fs (loop8): Directory bread(block 71) failed [ 1258.291676][T15718] FAT-fs (loop8): Directory bread(block 72) failed [ 1258.298734][T15718] FAT-fs (loop8): Directory bread(block 73) failed [ 1261.127714][T12201] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1261.398348][T12201] usb 4-1: Using ep0 maxpacket: 32 [ 1261.443933][T12201] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1261.452688][T12201] usb 4-1: config 0 has no interface number 0 [ 1261.459471][T12201] usb 4-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1261.475607][T12201] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1261.483748][T12201] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1261.493284][T12201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.750821][T12201] usb 4-1: config 0 descriptor?? [ 1262.242251][T12201] uclogic 0003:5543:0781.003A: unknown main item tag 0x0 [ 1262.252073][T12201] uclogic 0003:5543:0781.003A: unknown main item tag 0x0 [ 1262.261955][T12201] uclogic 0003:5543:0781.003A: unknown main item tag 0x0 [ 1262.269542][T12201] uclogic 0003:5543:0781.003A: item fetching failed at offset 6/7 [ 1262.402380][T12201] uclogic 0003:5543:0781.003A: parse failed [ 1262.409219][T12201] uclogic 0003:5543:0781.003A: probe with driver uclogic failed with error -22 [ 1262.526867][T12201] usb 4-1: USB disconnect, device number 43 [ 1263.048557][T14891] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1263.271895][T14891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.284055][T14891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.294405][T14891] usb 9-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1263.303909][T14891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.520721][T14891] usb 9-1: config 0 descriptor?? [ 1263.715409][T15769] loop3: detected capacity change from 0 to 512 [ 1263.776198][T15769] EXT4-fs: Ignoring removed nobh option [ 1263.974268][T15769] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3078: iget: bad i_size value: 38620345925642 [ 1264.109734][T14891] sony 0003:054C:024B.003B: unknown main item tag 0x0 [ 1264.116919][T14891] sony 0003:054C:024B.003B: unknown main item tag 0x0 [ 1264.117750][T15769] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3078: couldn't read orphan inode 15 (err -117) [ 1264.124280][T14891] sony 0003:054C:024B.003B: unexpected long global item [ 1264.220875][T15769] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1264.336498][T14891] sony 0003:054C:024B.003B: parse failed [ 1264.345369][T14891] sony 0003:054C:024B.003B: probe with driver sony failed with error -22 [ 1264.474361][T14891] usb 9-1: USB disconnect, device number 11 [ 1265.204926][T15779] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.3078: iget: bad i_size value: 38620345925642 [ 1267.265424][T15784] syz.8.3079 (15784) used greatest stack depth: 4488 bytes left [ 1267.384962][T15154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1268.561505][ T4167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.569812][ T4167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.850372][ T4167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.859042][ T4167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1268.951303][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.958100][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.129849][T10634] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.308677][T12823] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1271.312977][T10634] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.509639][T10634] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.547767][T12823] usb 9-1: Using ep0 maxpacket: 32 [ 1271.575223][T12823] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 1271.583583][T12823] usb 9-1: config 0 has no interface number 0 [ 1271.590422][T12823] usb 9-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1271.604667][T12823] usb 9-1: config 0 interface 2 has no altsetting 0 [ 1271.612074][T12823] usb 9-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1271.621684][T12823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.745248][T10634] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.860481][T12823] usb 9-1: config 0 descriptor?? [ 1272.334539][T12823] uclogic 0003:5543:0781.003C: unknown main item tag 0x0 [ 1272.343667][T12823] uclogic 0003:5543:0781.003C: unknown main item tag 0x0 [ 1272.351272][T12823] uclogic 0003:5543:0781.003C: unknown main item tag 0x0 [ 1272.358853][T12823] uclogic 0003:5543:0781.003C: item fetching failed at offset 6/7 [ 1272.434502][T12823] uclogic 0003:5543:0781.003C: parse failed [ 1272.441338][T12823] uclogic 0003:5543:0781.003C: probe with driver uclogic failed with error -22 [ 1272.486609][T10634] bridge_slave_1: left allmulticast mode [ 1272.492863][T10634] bridge_slave_1: left promiscuous mode [ 1272.499631][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.542201][T12823] usb 9-1: USB disconnect, device number 12 [ 1272.596333][T10634] bridge_slave_0: left allmulticast mode [ 1272.602425][T10634] bridge_slave_0: left promiscuous mode [ 1272.609289][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.129431][T10634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1273.169846][T10634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1273.203111][T10634] bond0 (unregistering): Released all slaves [ 1273.830304][T10634] hsr_slave_0: left promiscuous mode [ 1273.847507][T10634] hsr_slave_1: left promiscuous mode [ 1273.860843][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1273.868754][T10634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1273.900540][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1273.908477][T10634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1273.979373][T10634] veth1_macvtap: left promiscuous mode [ 1273.985170][T10634] veth0_macvtap: left promiscuous mode [ 1273.991504][T10634] veth1_vlan: left promiscuous mode [ 1273.997231][T10634] veth0_vlan: left promiscuous mode [ 1274.929617][T10634] team0 (unregistering): Port device team_slave_1 removed [ 1275.053182][T10634] team0 (unregistering): Port device team_slave_0 removed [ 1276.418082][T13554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1276.432932][T13554] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1276.447011][T13554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1276.474111][T13554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1276.496076][T13554] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1276.522861][T14891] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1276.782214][T14891] usb 9-1: config 0 has no interfaces? [ 1276.788417][T14891] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1276.798034][T14891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.835169][T14891] usb 9-1: config 0 descriptor?? [ 1277.095976][T15842] 8021q: VLANs not supported on nlmon0 [ 1277.239926][T14891] usb 9-1: USB disconnect, device number 13 [ 1277.667958][T15847] chnl_net:caif_netlink_parms(): no params data found [ 1278.602935][T10362] Bluetooth: hci3: command tx timeout [ 1279.502789][T15847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.510891][T15847] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.519011][T15847] bridge_slave_0: entered allmulticast mode [ 1279.528776][T15847] bridge_slave_0: entered promiscuous mode [ 1279.659902][T15847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.667991][T15847] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.675756][T15847] bridge_slave_1: entered allmulticast mode [ 1279.685510][T15847] bridge_slave_1: entered promiscuous mode [ 1280.192377][T15847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.286467][T15847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1280.679062][T10362] Bluetooth: hci3: command tx timeout [ 1280.882335][T15847] team0: Port device team_slave_0 added [ 1280.944872][T15847] team0: Port device team_slave_1 added [ 1281.325468][T15847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.334050][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.360161][ C0] vkms_vblank_simulate: vblank timer overrun [ 1281.375497][T15847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.522839][T15847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.530851][T15847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.556955][ C0] vkms_vblank_simulate: vblank timer overrun [ 1281.564673][T15847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.051646][T12201] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1282.151790][T15847] hsr_slave_0: entered promiscuous mode [ 1282.162459][T15847] hsr_slave_1: entered promiscuous mode [ 1282.270594][T12201] usb 4-1: config 0 has no interfaces? [ 1282.276602][T12201] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1282.286332][T12201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.318602][T12201] usb 4-1: config 0 descriptor?? [ 1282.343216][T15847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1282.352524][T15847] Cannot create hsr debugfs directory [ 1282.710981][T15903] 8021q: VLANs not supported on nlmon0 [ 1282.758728][T10362] Bluetooth: hci3: command tx timeout [ 1282.800807][T12201] usb 4-1: USB disconnect, device number 44 [ 1284.848094][T10362] Bluetooth: hci3: command tx timeout [ 1285.104393][T15847] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1285.239638][T15847] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1285.328665][T15847] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1285.474039][T15847] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1285.738318][T12823] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1285.957658][T12823] usb 9-1: Using ep0 maxpacket: 32 [ 1286.008329][T12823] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 1286.016636][T12823] usb 9-1: config 0 has no interface number 0 [ 1286.024622][T12823] usb 9-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1286.037942][T12823] usb 9-1: config 0 interface 2 has no altsetting 0 [ 1286.045739][T12823] usb 9-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1286.055752][T12823] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.261537][T12823] usb 9-1: config 0 descriptor?? [ 1286.728708][T12823] usbhid 9-1:0.2: can't add hid device: -71 [ 1286.735367][T12823] usbhid 9-1:0.2: probe with driver usbhid failed with error -71 [ 1286.840201][T12823] usb 9-1: USB disconnect, device number 14 [ 1287.120538][T15847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.320898][T15847] 8021q: adding VLAN 0 to HW filter on device team0 [ 1287.390478][T12201] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1287.426065][T10634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.433733][T10634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1287.494579][T10634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.502273][T10634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1287.621082][T12201] usb 4-1: config 0 has no interfaces? [ 1287.626884][T12201] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1287.636841][T12201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.771077][T12201] usb 4-1: config 0 descriptor?? [ 1288.057655][T15953] 8021q: VLANs not supported on nlmon0 [ 1288.160653][T12201] usb 4-1: USB disconnect, device number 45 [ 1289.717515][T15980] netlink: 2116 bytes leftover after parsing attributes in process `syz.8.3136'. [ 1289.995575][T15847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.309357][T15999] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3141'. [ 1293.288073][T15847] veth0_vlan: entered promiscuous mode [ 1293.497881][T12201] hid-generic 0000:0000:0000.003D: unknown main item tag 0x0 [ 1293.513443][T15847] veth1_vlan: entered promiscuous mode [ 1293.569457][T12201] hid-generic 0000:0000:0000.003D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1293.665784][T16022] loop8: detected capacity change from 0 to 1024 [ 1293.814389][T16022] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1293.969217][T16022] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1294.169954][T16022] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1294.235742][T15847] veth0_macvtap: entered promiscuous mode [ 1294.302588][T15847] veth1_macvtap: entered promiscuous mode [ 1294.575802][T15847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.707070][T15847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.788644][T15847] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.802400][T15847] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.811578][T15847] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.820717][T15847] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.917769][T12226] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1295.378663][T16044] netlink: 2116 bytes leftover after parsing attributes in process `syz.7.3151'. [ 1295.921636][T16052] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3153'. [ 1299.500460][T16106] netlink: 2116 bytes leftover after parsing attributes in process `syz.7.3166'. [ 1299.540086][T16104] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3167'. [ 1302.922398][T15721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.924174][T16150] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3179'. [ 1302.930761][T15721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.285509][T15721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.294412][T15721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.799688][T16160] netlink: 2116 bytes leftover after parsing attributes in process `syz.8.3181'. [ 1304.222390][T13525] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.431295][T13525] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.632361][T13525] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.792967][T13525] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1305.336571][T13525] bridge_slave_1: left allmulticast mode [ 1305.342776][T13525] bridge_slave_1: left promiscuous mode [ 1305.349617][T13525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.426347][T13525] bridge_slave_0: left allmulticast mode [ 1305.432584][T13525] bridge_slave_0: left promiscuous mode [ 1305.439455][T13525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.894424][T13525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.936140][T13525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.963659][T13525] bond0 (unregistering): Released all slaves [ 1306.563978][T13525] hsr_slave_0: left promiscuous mode [ 1306.597435][T13525] hsr_slave_1: left promiscuous mode [ 1306.605570][T13525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.613577][T13525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.660108][T13525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1306.668186][T13525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.718062][T13525] veth1_macvtap: left promiscuous mode [ 1306.723870][T13525] veth0_macvtap: left promiscuous mode [ 1306.733690][T13525] veth1_vlan: left promiscuous mode [ 1306.739629][T13525] veth0_vlan: left promiscuous mode [ 1307.476100][T13525] team0 (unregistering): Port device team_slave_1 removed [ 1307.559445][T13525] team0 (unregistering): Port device team_slave_0 removed [ 1309.132028][ T5853] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 1309.141480][T13554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1309.166989][T13554] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1309.177773][T13554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1309.195580][ T5853] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1309.233189][T13554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1309.246700][T13554] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1309.307888][T16203] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3193'. [ 1309.500984][T16199] loop8: detected capacity change from 0 to 1024 [ 1309.680592][T16199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1309.796104][T16199] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1310.037860][T16199] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1310.874216][T12226] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1311.150300][T16202] chnl_net:caif_netlink_parms(): no params data found [ 1311.427855][T13554] Bluetooth: hci3: command tx timeout [ 1312.276083][T16246] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3201'. [ 1313.080570][T16202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.090254][T16202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.098314][T16202] bridge_slave_0: entered allmulticast mode [ 1313.107841][T16202] bridge_slave_0: entered promiscuous mode [ 1313.251816][T16202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.262614][T16202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.270602][T16202] bridge_slave_1: entered allmulticast mode [ 1313.285316][T16202] bridge_slave_1: entered promiscuous mode [ 1313.478416][T13554] Bluetooth: hci3: command tx timeout [ 1313.709292][T16202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.829415][T16202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.105643][T16202] team0: Port device team_slave_0 added [ 1314.212212][T16202] team0: Port device team_slave_1 added [ 1314.434543][T12201] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 1314.540915][T12201] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1314.688749][T16202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.696087][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.728457][T16202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.754954][T16269] loop3: detected capacity change from 0 to 1024 [ 1314.839189][T16269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1314.893328][T16269] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1315.028418][T16269] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1315.055962][T16202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1315.063719][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1315.090429][T16202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1315.229170][T16274] fido_id[16274]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.003F/report_descriptor': No such file or directory [ 1315.559129][T10362] Bluetooth: hci3: command tx timeout [ 1315.750058][T15154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1315.970475][T16202] hsr_slave_0: entered promiscuous mode [ 1315.980969][T16202] hsr_slave_1: entered promiscuous mode [ 1315.990291][T16202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1315.998242][T16202] Cannot create hsr debugfs directory [ 1316.647975][T16301] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3215'. [ 1316.676391][T16298] loop8: detected capacity change from 0 to 128 [ 1316.912413][T16302] syz.8.3217: attempt to access beyond end of device [ 1316.912413][T16302] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1317.006572][T16302] syz.8.3217: attempt to access beyond end of device [ 1317.006572][T16302] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1317.078287][T10362] Bluetooth: hci1: command 0x0406 tx timeout [ 1317.096594][T16302] syz.8.3217: attempt to access beyond end of device [ 1317.096594][T16302] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1317.658146][T13554] Bluetooth: hci3: command tx timeout [ 1318.261690][T16202] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1318.390949][T16202] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1318.531882][T16202] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1318.611934][T16202] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1319.428339][ T5853] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 1319.499350][ T5853] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1319.613862][T16330] loop3: detected capacity change from 0 to 1024 [ 1319.740254][T16330] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1319.898586][T16330] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1320.134226][T16330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1320.424539][T16202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.712670][T16202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.831451][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.839214][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1320.841952][T15154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1320.982606][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.990278][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.834453][T16356] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3231'. [ 1323.620818][T16202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1324.363368][T12823] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 1324.512356][T12823] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1324.583486][T16392] loop3: detected capacity change from 0 to 1024 [ 1324.678200][T16392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1324.701991][T16392] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1324.904951][T16392] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1325.015488][T16401] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3243'. [ 1325.620840][T16399] fido_id[16399]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1325.671548][T15154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1326.645010][T16412] loop3: detected capacity change from 0 to 128 [ 1326.912323][T16202] veth0_vlan: entered promiscuous mode [ 1326.920288][T16414] syz.3.3246: attempt to access beyond end of device [ 1326.920288][T16414] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1326.969490][T16423] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3247'. [ 1327.060170][T16414] syz.3.3246: attempt to access beyond end of device [ 1327.060170][T16414] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1327.082150][T16202] veth1_vlan: entered promiscuous mode [ 1327.511079][T16202] veth0_macvtap: entered promiscuous mode [ 1327.665132][T16202] veth1_macvtap: entered promiscuous mode [ 1327.887047][T16202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.943364][T16202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1328.129095][T16202] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.138296][T16202] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.147480][T16202] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.156547][T16202] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.010021][T16445] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3255'. [ 1330.401380][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.408409][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1331.441950][T16479] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3263'. [ 1333.192657][T16501] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3269'. [ 1333.999741][T14891] hid-generic 0000:0000:0000.0042: unknown main item tag 0x0 [ 1334.073448][T14891] hid-generic 0000:0000:0000.0042: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1334.178880][T16508] loop8: detected capacity change from 0 to 1024 [ 1334.260351][T16508] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1334.316381][T16508] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1334.600600][T16508] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1335.142221][T16514] fido_id[16514]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1335.332194][T12226] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1336.442365][T16545] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3278'. [ 1336.960436][T10634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.968978][T10634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.394157][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1337.402796][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1337.770226][T16555] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3282'. [ 1338.474778][T10634] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.711374][T10634] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.932986][T10634] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.156934][T10634] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.713751][T10634] bridge_slave_1: left allmulticast mode [ 1339.720026][T10634] bridge_slave_1: left promiscuous mode [ 1339.726740][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1339.822513][T10634] bridge_slave_0: left allmulticast mode [ 1339.828851][T10634] bridge_slave_0: left promiscuous mode [ 1339.835547][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.370053][T10634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.391845][T10634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.424867][T10634] bond0 (unregistering): Released all slaves [ 1341.026672][T10634] hsr_slave_0: left promiscuous mode [ 1341.062272][T10634] hsr_slave_1: left promiscuous mode [ 1341.070490][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1341.078429][T10634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1341.120408][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1341.128279][T10634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1341.173659][T10634] veth1_macvtap: left promiscuous mode [ 1341.179892][T10634] veth0_macvtap: left promiscuous mode [ 1341.185834][T10634] veth1_vlan: left promiscuous mode [ 1341.191653][T10634] veth0_vlan: left promiscuous mode [ 1341.855512][T10634] team0 (unregistering): Port device team_slave_1 removed [ 1341.940487][T10634] team0 (unregistering): Port device team_slave_0 removed [ 1342.679826][T16587] netlink: 2116 bytes leftover after parsing attributes in process `syz.8.3292'. [ 1343.804010][T10362] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1343.814421][T10362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1343.871165][T10362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1343.888559][T10362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1343.919024][T10362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1344.486957][T16607] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3296'. [ 1346.050767][T13554] Bluetooth: hci3: command tx timeout [ 1346.948214][T16600] chnl_net:caif_netlink_parms(): no params data found [ 1348.117353][T13554] Bluetooth: hci3: command tx timeout [ 1348.428902][T16638] netlink: 2116 bytes leftover after parsing attributes in process `syz.8.3305'. [ 1349.109767][T16600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.117957][T16600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.130341][T16600] bridge_slave_0: entered allmulticast mode [ 1349.140048][T16600] bridge_slave_0: entered promiscuous mode [ 1349.217555][T16600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.230008][T16600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.238295][T16600] bridge_slave_1: entered allmulticast mode [ 1349.248155][T16600] bridge_slave_1: entered promiscuous mode [ 1349.295965][T16655] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3309'. [ 1349.777584][T16600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.918965][T16600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.016980][T12823] hid-generic 0000:0000:0000.0043: unknown main item tag 0x0 [ 1350.141213][T12823] hid-generic 0000:0000:0000.0043: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1350.186089][T16665] loop3: detected capacity change from 0 to 1024 [ 1350.197698][T13554] Bluetooth: hci3: command tx timeout [ 1350.224413][T16665] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1350.308289][T16665] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1350.376682][T16600] team0: Port device team_slave_0 added [ 1350.559886][T16600] team0: Port device team_slave_1 added [ 1350.732454][T16665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1351.052547][T16671] fido_id[16671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1351.079979][T16600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.088407][T16600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.114899][T16600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.314448][T15154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1351.402480][T16600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.410095][T16600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1351.436699][T16600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.086243][T16600] hsr_slave_0: entered promiscuous mode [ 1352.101379][T16600] hsr_slave_1: entered promiscuous mode [ 1352.110274][T16600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1352.118267][T16600] Cannot create hsr debugfs directory [ 1352.277767][T13554] Bluetooth: hci3: command tx timeout [ 1352.840816][T16691] netlink: 2116 bytes leftover after parsing attributes in process `syz.7.3319'. [ 1353.175573][T16697] loop3: detected capacity change from 0 to 128 [ 1353.455567][T16700] syz.3.3321: attempt to access beyond end of device [ 1353.455567][T16700] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1353.470361][T16700] syz.3.3321: attempt to access beyond end of device [ 1353.470361][T16700] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1353.484493][T16700] syz.3.3321: attempt to access beyond end of device [ 1353.484493][T16700] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1353.498820][T16700] syz.3.3321: attempt to access beyond end of device [ 1353.498820][T16700] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1353.753242][T16697] syz.3.3321: attempt to access beyond end of device [ 1353.753242][T16697] loop3: rw=524288, sector=153, nr_sectors = 8 limit=128 [ 1353.767740][T16697] syz.3.3321: attempt to access beyond end of device [ 1353.767740][T16697] loop3: rw=524288, sector=169, nr_sectors = 8 limit=128 [ 1353.781949][T16697] syz.3.3321: attempt to access beyond end of device [ 1353.781949][T16697] loop3: rw=524288, sector=185, nr_sectors = 8 limit=128 [ 1353.787336][T16700] syz.3.3321: attempt to access beyond end of device [ 1353.787336][T16700] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1353.795921][T16697] syz.3.3321: attempt to access beyond end of device [ 1353.795921][T16697] loop3: rw=524288, sector=201, nr_sectors = 8 limit=128 [ 1353.823791][T16697] syz.3.3321: attempt to access beyond end of device [ 1353.823791][T16697] loop3: rw=0, sector=185, nr_sectors = 8 limit=128 [ 1353.970824][T16704] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3323'. [ 1354.905117][T16600] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1355.083510][T16600] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1355.200466][T16600] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1355.442386][T16600] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1357.256205][T16600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1357.470914][T16600] 8021q: adding VLAN 0 to HW filter on device team0 [ 1357.579749][T15721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.587556][T15721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1357.631100][T16744] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3334'. [ 1357.734567][T15721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.742377][T15721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1358.091584][T16749] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3336'. [ 1358.516445][T16756] loop8: detected capacity change from 0 to 128 [ 1358.943364][T16760] bio_check_eod: 493 callbacks suppressed [ 1358.943445][T16760] syz.8.3338: attempt to access beyond end of device [ 1358.943445][T16760] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1359.086846][T16760] syz.8.3338: attempt to access beyond end of device [ 1359.086846][T16760] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1359.203783][T16760] syz.8.3338: attempt to access beyond end of device [ 1359.203783][T16760] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1359.328153][T16760] syz.8.3338: attempt to access beyond end of device [ 1359.328153][T16760] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1359.402471][T16760] syz.8.3338: attempt to access beyond end of device [ 1359.402471][T16760] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1359.478094][T16760] syz.8.3338: attempt to access beyond end of device [ 1359.478094][T16760] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1360.289722][T16600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.634513][T16790] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3347'. [ 1363.112658][T16802] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3350'. [ 1365.024225][T16600] veth0_vlan: entered promiscuous mode [ 1365.115255][ T5853] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 1365.184635][T16600] veth1_vlan: entered promiscuous mode [ 1365.209002][ T5853] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1365.299632][T16816] loop8: detected capacity change from 0 to 1024 [ 1365.348499][T16816] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1365.394873][T16816] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1365.532736][T16816] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1365.546650][T16600] veth0_macvtap: entered promiscuous mode [ 1365.570627][T16600] veth1_macvtap: entered promiscuous mode [ 1365.816706][T16600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.891927][T16827] loop3: detected capacity change from 0 to 128 [ 1366.013700][T16600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1366.158485][T16600] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.167783][T16600] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.176871][T16600] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.186135][T16600] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1366.252747][T16824] fido_id[16824]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1366.340378][T12226] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1366.432964][T16830] syz.3.3356: attempt to access beyond end of device [ 1366.432964][T16830] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1366.529456][T16827] syz.3.3356: attempt to access beyond end of device [ 1366.529456][T16827] loop3: rw=524288, sector=153, nr_sectors = 8 limit=128 [ 1367.792363][T16848] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3362'. [ 1367.861066][T16853] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3361'. [ 1371.586213][T16900] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3375'. [ 1372.133943][T16911] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3376'. [ 1374.790955][T10634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.799548][T10634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.070894][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.079655][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.875749][T16955] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3389'. [ 1376.021513][ T14] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.265913][ T14] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.477533][ T14] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.578589][T16962] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3391'. [ 1376.734225][ T14] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.448576][ T14] bridge_slave_1: left allmulticast mode [ 1377.454507][ T14] bridge_slave_1: left promiscuous mode [ 1377.461734][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.607443][ T14] bridge_slave_0: left allmulticast mode [ 1377.613375][ T14] bridge_slave_0: left promiscuous mode [ 1377.620145][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1378.130757][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.168566][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.192995][ T14] bond0 (unregistering): Released all slaves [ 1378.798530][ T14] hsr_slave_0: left promiscuous mode [ 1378.811596][ T14] hsr_slave_1: left promiscuous mode [ 1378.823990][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1378.833647][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1378.879789][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1378.887639][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1378.937669][ T14] veth1_macvtap: left promiscuous mode [ 1378.943446][ T14] veth0_macvtap: left promiscuous mode [ 1378.949613][ T14] veth1_vlan: left promiscuous mode [ 1378.955199][ T14] veth0_vlan: left promiscuous mode [ 1379.715983][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1379.767755][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1381.195202][ T5853] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1381.341808][ T5853] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1381.484951][T16993] loop3: detected capacity change from 0 to 1024 [ 1381.605691][T16993] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1381.745809][T16993] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1381.798416][T17000] loop8: detected capacity change from 0 to 128 [ 1381.856766][T10362] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1381.868364][T10362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1381.890926][T10362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1381.918824][T10362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1381.947337][T10362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1381.970253][T16993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1382.566908][T16998] fido_id[16998]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1382.586370][T15154] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1382.634248][T17009] syz.8.3399: attempt to access beyond end of device [ 1382.634248][T17009] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1382.698612][T17009] syz.8.3399: attempt to access beyond end of device [ 1382.698612][T17009] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1382.785771][T17009] syz.8.3399: attempt to access beyond end of device [ 1382.785771][T17009] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1382.958327][T17009] syz.8.3399: attempt to access beyond end of device [ 1382.958327][T17009] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1382.972726][T17009] syz.8.3399: attempt to access beyond end of device [ 1382.972726][T17009] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1382.987297][T17009] syz.8.3399: attempt to access beyond end of device [ 1382.987297][T17009] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1383.001441][T17009] syz.8.3399: attempt to access beyond end of device [ 1383.001441][T17009] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 1383.018885][T17009] syz.8.3399: attempt to access beyond end of device [ 1383.018885][T17009] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 1383.033939][T17009] syz.8.3399: attempt to access beyond end of device [ 1383.033939][T17009] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 1383.048141][T17009] syz.8.3399: attempt to access beyond end of device [ 1383.048141][T17009] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 1383.902964][T17002] chnl_net:caif_netlink_parms(): no params data found [ 1384.049520][T10362] Bluetooth: hci3: command tx timeout [ 1384.598906][T17041] netlink: 2116 bytes leftover after parsing attributes in process `syz.7.3403'. [ 1384.799098][T17044] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3404'. [ 1386.117720][T10362] Bluetooth: hci3: command tx timeout [ 1386.423692][T17002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.431572][T17002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.439540][T17002] bridge_slave_0: entered allmulticast mode [ 1386.449460][T17002] bridge_slave_0: entered promiscuous mode [ 1386.650316][T17002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.658312][T17002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.666129][T17002] bridge_slave_1: entered allmulticast mode [ 1386.675963][T17002] bridge_slave_1: entered promiscuous mode [ 1387.357279][T17002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.425506][T17002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.455745][T17076] loop8: detected capacity change from 0 to 128 [ 1387.645282][T17080] bio_check_eod: 23 callbacks suppressed [ 1387.645357][T17080] syz.8.3414: attempt to access beyond end of device [ 1387.645357][T17080] loop8: rw=524288, sector=153, nr_sectors = 8 limit=128 [ 1387.666831][T17080] syz.8.3414: attempt to access beyond end of device [ 1387.666831][T17080] loop8: rw=524288, sector=169, nr_sectors = 8 limit=128 [ 1387.832549][T17076] syz.8.3414: attempt to access beyond end of device [ 1387.832549][T17076] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1387.903253][T17002] team0: Port device team_slave_0 added [ 1387.924459][T17076] syz.8.3414: attempt to access beyond end of device [ 1387.924459][T17076] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1387.964217][T17076] syz.8.3414: attempt to access beyond end of device [ 1387.964217][T17076] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1387.998568][T17002] team0: Port device team_slave_1 added [ 1388.025120][T17076] syz.8.3414: attempt to access beyond end of device [ 1388.025120][T17076] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1388.087986][T17076] syz.8.3414: attempt to access beyond end of device [ 1388.087986][T17076] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1388.189638][T17076] syz.8.3414: attempt to access beyond end of device [ 1388.189638][T17076] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1388.205686][T10362] Bluetooth: hci3: command tx timeout [ 1388.248224][T17076] syz.8.3414: attempt to access beyond end of device [ 1388.248224][T17076] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1388.289650][T17002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.296833][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.324519][T17002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.356488][T17076] syz.8.3414: attempt to access beyond end of device [ 1388.356488][T17076] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1388.409040][T17002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.416321][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.446439][T17002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.700717][T17091] netlink: 2116 bytes leftover after parsing attributes in process `syz.7.3418'. [ 1389.024175][T17095] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3417'. [ 1389.073722][T17002] hsr_slave_0: entered promiscuous mode [ 1389.191689][T17002] hsr_slave_1: entered promiscuous mode [ 1389.271620][T17002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1389.279972][T17002] Cannot create hsr debugfs directory [ 1390.291977][T10362] Bluetooth: hci3: command tx timeout [ 1391.839864][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.846567][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1392.658004][T17002] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1392.824281][T17002] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1392.909391][T17002] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1393.007285][T17002] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1393.661327][T17134] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3431'. [ 1394.120675][T17142] netlink: 2116 bytes leftover after parsing attributes in process `syz.8.3432'. [ 1394.579497][T17002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1394.868979][T17002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1394.976991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.984829][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.119828][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.127497][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.436425][T17002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1397.922058][T17183] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3444'. [ 1397.992766][T17002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.218838][T17187] loop3: detected capacity change from 0 to 128 [ 1399.031760][T17199] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3448'. [ 1401.375185][T17002] veth0_vlan: entered promiscuous mode [ 1401.554404][T17002] veth1_vlan: entered promiscuous mode [ 1402.405832][T17002] veth0_macvtap: entered promiscuous mode [ 1402.646814][T17002] veth1_macvtap: entered promiscuous mode [ 1403.362428][T17002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.408037][T17002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.430081][T17002] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.439269][T17002] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.449820][T17002] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.458966][T17002] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.608770][T17231] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3458'. [ 1404.766719][T17245] loop3: detected capacity change from 0 to 256 [ 1404.891897][T17245] FAT-fs (loop3): bogus number of FAT sectors [ 1404.898662][T17245] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1405.250545][T17253] netlink: 2116 bytes leftover after parsing attributes in process `syz.7.3464'. [ 1407.003073][T17273] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3472'. [ 1410.276535][T17305] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3480'. [ 1412.020995][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.029297][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.092671][T17325] loop8: detected capacity change from 0 to 128 [ 1412.379080][T17325] syz.8.3488: attempt to access beyond end of device [ 1412.379080][T17325] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1412.572943][T17325] syz.8.3488: attempt to access beyond end of device [ 1412.572943][T17325] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1412.589230][T13524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.597482][T13524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.686162][T17325] syz.8.3488: attempt to access beyond end of device [ 1412.686162][T17325] loop8: rw=524288, sector=153, nr_sectors = 8 limit=128 [ 1412.700520][T17325] syz.8.3488: attempt to access beyond end of device [ 1412.700520][T17325] loop8: rw=524288, sector=169, nr_sectors = 8 limit=128 [ 1412.807636][T17325] syz.8.3488: attempt to access beyond end of device [ 1412.807636][T17325] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1412.927542][T17325] syz.8.3488: attempt to access beyond end of device [ 1412.927542][T17325] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1413.060353][T17325] syz.8.3488: attempt to access beyond end of device [ 1413.060353][T17325] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1413.268140][T17325] syz.8.3488: attempt to access beyond end of device [ 1413.268140][T17325] loop8: rw=0, sector=169, nr_sectors = 8 limit=128 [ 1413.509990][ T4014] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.713083][ T4014] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.931972][ T4014] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.162699][ T4014] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.728397][ T4014] bridge_slave_1: left allmulticast mode [ 1414.734319][ T4014] bridge_slave_1: left promiscuous mode [ 1414.741210][ T4014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.846031][ T4014] bridge_slave_0: left allmulticast mode [ 1414.852243][ T4014] bridge_slave_0: left promiscuous mode [ 1414.859072][ T4014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.314680][ T4014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.334008][ T4014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.349479][ T4014] bond0 (unregistering): Released all slaves [ 1415.925897][ T4014] hsr_slave_0: left promiscuous mode [ 1415.949029][ T4014] hsr_slave_1: left promiscuous mode [ 1415.960526][ T4014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1415.968349][ T4014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.001482][ T4014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.010021][ T4014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.039501][ T4014] veth1_macvtap: left promiscuous mode [ 1416.045268][ T4014] veth0_macvtap: left promiscuous mode [ 1416.051365][ T4014] veth1_vlan: left promiscuous mode [ 1416.056950][ T4014] veth0_vlan: left promiscuous mode [ 1416.743938][ T4014] team0 (unregistering): Port device team_slave_1 removed [ 1416.812759][ T4014] team0 (unregistering): Port device team_slave_0 removed [ 1417.551944][T17364] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3496'. [ 1418.728136][T13554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1418.742687][T13554] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1418.755855][T13554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1418.771945][T13554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1418.799610][T13554] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1419.589445][T17384] loop3: detected capacity change from 0 to 128 [ 1420.169454][T17398] syz.3.3505: attempt to access beyond end of device [ 1420.169454][T17398] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1420.317346][T17398] syz.3.3505: attempt to access beyond end of device [ 1420.317346][T17398] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1420.410587][T17398] syz.3.3505: attempt to access beyond end of device [ 1420.410587][T17398] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1420.425706][T17398] syz.3.3505: attempt to access beyond end of device [ 1420.425706][T17398] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1420.439875][T17398] syz.3.3505: attempt to access beyond end of device [ 1420.439875][T17398] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1420.458715][T17398] syz.3.3505: attempt to access beyond end of device [ 1420.458715][T17398] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1420.609355][T17377] chnl_net:caif_netlink_parms(): no params data found [ 1420.945976][T10362] Bluetooth: hci3: command tx timeout [ 1422.502243][T17425] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3513'. [ 1422.864449][T17377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.872406][T17377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.880508][T17377] bridge_slave_0: entered allmulticast mode [ 1422.890353][T17377] bridge_slave_0: entered promiscuous mode [ 1422.999588][T10362] Bluetooth: hci3: command tx timeout [ 1423.022854][T17377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.035579][T17377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.043630][T17377] bridge_slave_1: entered allmulticast mode [ 1423.055394][T17377] bridge_slave_1: entered promiscuous mode [ 1423.704395][T17377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1423.831529][T17377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1423.917473][T17445] loop3: detected capacity change from 0 to 128 [ 1424.248262][T17445] syz.3.3520: attempt to access beyond end of device [ 1424.248262][T17445] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1424.275259][T17377] team0: Port device team_slave_0 added [ 1424.354194][T17377] team0: Port device team_slave_1 added [ 1424.377681][T17445] syz.3.3520: attempt to access beyond end of device [ 1424.377681][T17445] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1424.393395][T17445] syz.3.3520: attempt to access beyond end of device [ 1424.393395][T17445] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1424.449681][T17445] syz.3.3520: attempt to access beyond end of device [ 1424.449681][T17445] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1424.585282][T17377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.593679][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.620567][T17377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.650872][T17377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.658533][T17377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.684620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.693068][T17377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.077529][T10362] Bluetooth: hci3: command tx timeout [ 1425.287477][T17377] hsr_slave_0: entered promiscuous mode [ 1425.297869][T17377] hsr_slave_1: entered promiscuous mode [ 1425.308909][T17377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1425.316759][T17377] Cannot create hsr debugfs directory [ 1426.992583][T17480] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3530'. [ 1427.158943][T10362] Bluetooth: hci3: command tx timeout [ 1428.256685][T17377] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1428.389441][T17377] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1428.498982][T17377] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1428.610972][T17377] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1428.708021][T17495] loop8: detected capacity change from 0 to 128 [ 1428.969273][T17499] syz.8.3536: attempt to access beyond end of device [ 1428.969273][T17499] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1429.034414][T17499] syz.8.3536: attempt to access beyond end of device [ 1429.034414][T17499] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1429.048710][T17499] syz.8.3536: attempt to access beyond end of device [ 1429.048710][T17499] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1429.062806][T17499] syz.8.3536: attempt to access beyond end of device [ 1429.062806][T17499] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1429.077471][T17499] syz.8.3536: attempt to access beyond end of device [ 1429.077471][T17499] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 1429.108433][T17499] syz.8.3536: attempt to access beyond end of device [ 1429.108433][T17499] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 1430.209554][T17377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.484701][T17377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1430.647607][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.655197][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.784562][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.792234][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1431.255534][T17377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1431.725836][T17529] netlink: 2116 bytes leftover after parsing attributes in process `syz.8.3545'. [ 1433.433778][T17377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.622000][T17553] loop3: detected capacity change from 0 to 128 [ 1433.868984][T17553] syz.3.3552: attempt to access beyond end of device [ 1433.868984][T17553] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1433.967751][T17553] syz.3.3552: attempt to access beyond end of device [ 1433.967751][T17553] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1434.090778][T17561] dummy0: entered promiscuous mode [ 1434.096347][T17561] vlan2: entered promiscuous mode [ 1436.414721][T17592] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3560'. [ 1437.099831][T17377] veth0_vlan: entered promiscuous mode [ 1437.235605][T17377] veth1_vlan: entered promiscuous mode [ 1437.680989][T17377] veth0_macvtap: entered promiscuous mode [ 1437.774913][T17377] veth1_macvtap: entered promiscuous mode [ 1437.991558][T17377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1438.118761][T17377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1438.231772][T17377] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.241912][T17377] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.251098][T17377] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1438.260264][T17377] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.185824][T17646] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3576'. [ 1446.217808][T17710] netlink: 2116 bytes leftover after parsing attributes in process `syz.8.3592'. [ 1446.411267][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.420957][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.780876][ T4238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.789520][ T4238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.729728][T10634] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.044943][T10634] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.394612][T10634] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1448.649486][T10634] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.317904][T10634] bridge_slave_1: left allmulticast mode [ 1449.323821][T10634] bridge_slave_1: left promiscuous mode [ 1449.330687][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.420088][T10634] bridge_slave_0: left allmulticast mode [ 1449.426006][T10634] bridge_slave_0: left promiscuous mode [ 1449.432905][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.963986][T10634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1449.985715][T10634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.013308][T10634] bond0 (unregistering): Released all slaves [ 1450.583754][T10634] hsr_slave_0: left promiscuous mode [ 1450.599189][T10634] hsr_slave_1: left promiscuous mode [ 1450.607314][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.615044][T10634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1450.638321][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1450.646007][T10634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1450.730147][T10634] veth1_macvtap: left promiscuous mode [ 1450.735921][T10634] veth0_macvtap: left promiscuous mode [ 1450.742209][T10634] veth1_vlan: left promiscuous mode [ 1450.748009][T10634] veth0_vlan: left promiscuous mode [ 1451.466493][T10634] team0 (unregistering): Port device team_slave_1 removed [ 1451.515589][T10634] team0 (unregistering): Port device team_slave_0 removed [ 1453.294617][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1453.302141][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1453.972046][T13554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1453.984067][T13554] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1453.993704][T13554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1454.011564][T13554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1454.042511][T13554] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1454.528099][T17786] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3607'. [ 1455.404780][T17795] loop8: detected capacity change from 0 to 128 [ 1455.719708][T17802] syz.8.3611: attempt to access beyond end of device [ 1455.719708][T17802] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 1455.836166][T17802] syz.8.3611: attempt to access beyond end of device [ 1455.836166][T17802] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 1455.867853][T17802] syz.8.3611: attempt to access beyond end of device [ 1455.867853][T17802] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 1455.877878][T17776] chnl_net:caif_netlink_parms(): no params data found [ 1456.073628][T17795] syz.8.3611: attempt to access beyond end of device [ 1456.073628][T17795] loop8: rw=524288, sector=153, nr_sectors = 8 limit=128 [ 1456.087863][T17795] syz.8.3611: attempt to access beyond end of device [ 1456.087863][T17795] loop8: rw=524288, sector=169, nr_sectors = 8 limit=128 [ 1456.101936][T17795] syz.8.3611: attempt to access beyond end of device [ 1456.101936][T17795] loop8: rw=524288, sector=185, nr_sectors = 8 limit=128 [ 1456.116004][T17795] syz.8.3611: attempt to access beyond end of device [ 1456.116004][T17795] loop8: rw=0, sector=185, nr_sectors = 8 limit=128 [ 1456.132388][T13554] Bluetooth: hci3: command tx timeout [ 1456.258338][T17802] syz.8.3611: attempt to access beyond end of device [ 1456.258338][T17802] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 1456.288227][T17795] syz.8.3611: attempt to access beyond end of device [ 1456.288227][T17795] loop8: rw=0, sector=185, nr_sectors = 8 limit=128 [ 1456.337966][T17795] syz.8.3611: attempt to access beyond end of device [ 1456.337966][T17795] loop8: rw=0, sector=185, nr_sectors = 8 limit=128 [ 1458.031278][T17776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.039949][T17776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.047691][T17776] bridge_slave_0: entered allmulticast mode [ 1458.055837][T17776] bridge_slave_0: entered promiscuous mode [ 1458.208223][T13554] Bluetooth: hci3: command tx timeout [ 1458.208541][T17776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1458.222590][T17776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.230612][T17776] bridge_slave_1: entered allmulticast mode [ 1458.240534][T17776] bridge_slave_1: entered promiscuous mode [ 1459.041080][T17776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1459.155892][T17776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1459.429437][T17849] netlink: 2116 bytes leftover after parsing attributes in process `syz.8.3623'. [ 1459.655819][T17776] team0: Port device team_slave_0 added [ 1459.745125][T17776] team0: Port device team_slave_1 added [ 1460.212787][T17776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.220684][T17776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.246796][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.254930][T17776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1460.295307][T13554] Bluetooth: hci3: command tx timeout [ 1460.302278][T17776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1460.309696][T17776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1460.338316][T17776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.064769][T17776] hsr_slave_0: entered promiscuous mode [ 1461.077538][T17776] hsr_slave_1: entered promiscuous mode [ 1461.086270][T17776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1461.094260][T17776] Cannot create hsr debugfs directory [ 1462.357986][T13554] Bluetooth: hci3: command tx timeout [ 1463.969929][T17776] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1464.076112][T17776] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1464.239069][T17776] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1464.361235][T17776] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1465.258757][T17905] netlink: 2116 bytes leftover after parsing attributes in process `syz.7.3639'. [ 1465.617932][T12201] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1465.859253][T12201] usb 4-1: Using ep0 maxpacket: 32 [ 1465.921724][T12201] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1465.930543][T12201] usb 4-1: config 0 has no interface number 0 [ 1465.936903][T12201] usb 4-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1465.950796][T12201] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1465.961119][T12201] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1465.971517][T12201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.252670][T17776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1466.282677][T12201] usb 4-1: config 0 descriptor?? [ 1466.626080][T17776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.768468][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.776045][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1466.833555][T12201] uclogic 0003:5543:0781.0046: unknown main item tag 0x0 [ 1466.841323][T12201] uclogic 0003:5543:0781.0046: unknown main item tag 0x0 [ 1466.848982][T12201] uclogic 0003:5543:0781.0046: unknown main item tag 0x0 [ 1466.856377][T12201] uclogic 0003:5543:0781.0046: unknown main item tag 0x0 [ 1466.921713][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.929468][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.036855][T17914] netlink: 'syz.7.3643': attribute type 4 has an invalid length. [ 1467.104127][T12201] uclogic 0003:5543:0781.0046: No inputs registered, leaving [ 1467.193238][T12201] uclogic 0003:5543:0781.0046: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.3-1/input2 [ 1467.309858][T12201] usb 4-1: USB disconnect, device number 46 [ 1468.263671][T17915] fido_id[17915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1468.536234][T17925] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3645'. [ 1468.779354][T17924] bond_slave_0: entered promiscuous mode [ 1468.785411][T17924] bond_slave_1: entered promiscuous mode [ 1468.791664][T17924] vxlan0: entered promiscuous mode [ 1468.799798][T17924] vlan2: entered promiscuous mode [ 1468.805058][T17924] bond0: entered promiscuous mode [ 1469.823976][T17776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1472.751603][T17960] netlink: 2116 bytes leftover after parsing attributes in process `syz.8.3653'. [ 1473.468081][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1473.689117][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1473.768115][ T9] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1473.776479][ T9] usb 4-1: config 0 has no interface number 0 [ 1473.783141][ T9] usb 4-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1473.796440][ T9] usb 4-1: config 0 interface 2 has no altsetting 0 [ 1473.803624][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1473.813057][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.991584][ T9] usb 4-1: config 0 descriptor?? [ 1474.488464][ T9] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 1474.496040][ T9] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 1474.503798][ T9] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 1474.511454][ T9] uclogic 0003:5543:0781.0047: unknown main item tag 0x0 [ 1474.624018][T17776] veth0_vlan: entered promiscuous mode [ 1474.653069][ T9] uclogic 0003:5543:0781.0047: No inputs registered, leaving [ 1474.769776][ T9] uclogic 0003:5543:0781.0047: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.3-1/input2 [ 1474.805679][T17776] veth1_vlan: entered promiscuous mode [ 1474.903776][ T9] usb 4-1: USB disconnect, device number 47 [ 1475.075556][T17981] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3659'. [ 1475.200230][T17776] veth0_macvtap: entered promiscuous mode [ 1475.298466][T17776] veth1_macvtap: entered promiscuous mode [ 1475.525930][T17776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1475.629253][T17980] fido_id[17980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1475.684596][T17776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.799497][T17776] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.808916][T17776] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.818099][T17776] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1475.827239][T17776] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.090396][T17985] vlan2: entered promiscuous mode [ 1478.344974][T18017] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3667'. [ 1479.268836][T18030] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3671'. [ 1480.257088][T18044] team_slave_0: entered promiscuous mode [ 1480.263120][T18044] team_slave_1: entered promiscuous mode [ 1480.270307][T18044] vlan2: entered promiscuous mode [ 1480.275563][T18044] team0: entered promiscuous mode [ 1481.516352][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3681'. [ 1482.694302][T18070] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3682'. [ 1483.757428][T18088] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3685'. [ 1483.994699][T18092] loop3: detected capacity change from 0 to 256 [ 1484.112141][T18092] FAT-fs (loop3): bogus number of FAT sectors [ 1484.119343][T18092] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1485.123489][T18106] vlan2: entered promiscuous mode [ 1485.203341][ T3820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.212457][ T3820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.513390][T10634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.524556][T10634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.792886][ T966] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.331994][T18126] netlink: 2116 bytes leftover after parsing attributes in process `syz.7.3695'. [ 1487.478814][ T966] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.041094][ T966] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1488.417168][ T966] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.324563][ T966] bridge_slave_1: left allmulticast mode [ 1489.330881][ T966] bridge_slave_1: left promiscuous mode [ 1489.337774][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.413306][ T966] bridge_slave_0: left allmulticast mode [ 1489.419497][ T966] bridge_slave_0: left promiscuous mode [ 1489.426143][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.130740][ T966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.200234][ T966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.224262][ T966] bond0 (unregistering): Released all slaves [ 1490.799288][ T966] hsr_slave_0: left promiscuous mode [ 1490.817246][ T966] hsr_slave_1: left promiscuous mode [ 1490.825311][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1490.833443][ T966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.895695][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.903582][ T966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.989775][ T966] veth1_macvtap: left promiscuous mode [ 1490.995571][ T966] veth0_macvtap: left promiscuous mode [ 1491.001784][ T966] veth1_vlan: left promiscuous mode [ 1491.007505][ T966] veth0_vlan: left promiscuous mode [ 1491.801796][ T966] team0 (unregistering): Port device team_slave_1 removed [ 1491.846813][ T966] team0 (unregistering): Port device team_slave_0 removed [ 1493.028455][T18158] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3699'. [ 1493.588324][T18162] loop8: detected capacity change from 0 to 256 [ 1493.662283][T18162] FAT-fs (loop8): bogus number of FAT sectors [ 1493.668895][T18162] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1493.808591][T10362] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1493.821974][T10362] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1493.854751][T10362] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1493.872868][T10362] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1493.918722][T10362] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1494.677766][T18171] bond_slave_0: entered promiscuous mode [ 1494.683826][T18171] bond_slave_1: entered promiscuous mode [ 1494.690021][T18171] vxlan0: entered promiscuous mode [ 1494.695747][T18171] vlan2: entered promiscuous mode [ 1494.701259][T18171] bond0: entered promiscuous mode [ 1496.038430][T10362] Bluetooth: hci3: command tx timeout [ 1496.208662][T18166] chnl_net:caif_netlink_parms(): no params data found [ 1496.276030][T18193] netlink: 2116 bytes leftover after parsing attributes in process `syz.6.3708'. [ 1498.141234][T10362] Bluetooth: hci3: command tx timeout [ 1499.384210][T18166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.392497][T18166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.400489][T18166] bridge_slave_0: entered allmulticast mode [ 1499.408838][T18166] bridge_slave_0: entered promiscuous mode [ 1499.430555][T18166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.439057][T18166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.451727][T18166] bridge_slave_1: entered allmulticast mode [ 1499.461410][T18166] bridge_slave_1: entered promiscuous mode [ 1499.532764][T18215] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3713'. [ 1499.678798][T18166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1499.812797][T18166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.204787][T10362] Bluetooth: hci3: command tx timeout [ 1500.227694][T18166] team0: Port device team_slave_0 added [ 1500.258875][T18166] team0: Port device team_slave_1 added [ 1500.529826][T18166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.537126][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.563727][T18166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1500.683537][T18166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1500.690941][T18166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1500.718114][T18166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1501.344984][T18230] vlan2: entered promiscuous mode [ 1501.663344][T18166] hsr_slave_0: entered promiscuous mode [ 1501.673709][T18166] hsr_slave_1: entered promiscuous mode [ 1501.682039][T18166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1501.689794][T18166] Cannot create hsr debugfs directory [ 1502.284542][T10362] Bluetooth: hci3: command tx timeout [ 1502.871745][T18248] netlink: 2116 bytes leftover after parsing attributes in process `syz.3.3721'. [ 1504.323187][T18166] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1504.419377][T18166] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1504.550982][T18166] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1504.648783][T18166] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1505.370801][T18272] loop3: detected capacity change from 0 to 256 [ 1505.420727][T18272] FAT-fs (loop3): bogus number of FAT sectors [ 1505.427383][T18272] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1506.176222][T18166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1506.435767][T18166] 8021q: adding VLAN 0 to HW filter on device team0 [ 1506.528610][T10634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1506.536185][T10634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1506.581783][T18278] vlan2: entered promiscuous mode [ 1506.690782][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1506.698495][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.834170][T18166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.352275][T13554] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1510.418179][T13554] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1510.442583][T13554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1510.483344][T13554] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1510.499743][T13554] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1511.587847][T18324] loop3: detected capacity change from 0 to 256 [ 1511.675817][T18324] FAT-fs (loop3): bogus number of FAT sectors [ 1511.682557][T18324] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1512.630177][T10362] Bluetooth: hci4: command tx timeout [ 1512.692917][T18166] veth0_vlan: entered promiscuous mode [ 1512.931829][T18166] veth1_vlan: entered promiscuous mode [ 1513.473101][T18311] chnl_net:caif_netlink_parms(): no params data found [ 1513.668790][T18337] vlan2: entered promiscuous mode [ 1514.187027][T18166] veth0_macvtap: entered promiscuous mode [ 1514.330882][T18166] veth1_macvtap: entered promiscuous mode [ 1514.575484][T18166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1514.718977][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.725868][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1514.751626][T18166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1514.759331][T10362] Bluetooth: hci4: command tx timeout [ 1514.926022][T18166] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.935393][T18166] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.944601][T18166] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1514.953698][T18166] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1515.894828][T18311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.902711][T18311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.910641][T18311] bridge_slave_0: entered allmulticast mode [ 1515.920346][T18311] bridge_slave_0: entered promiscuous mode [ 1516.110302][T18311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.118039][T18311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.125904][T18311] bridge_slave_1: entered allmulticast mode [ 1516.137636][T18311] bridge_slave_1: entered promiscuous mode [ 1516.686206][T18311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.764438][T18311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.837687][T10362] Bluetooth: hci4: command tx timeout [ 1516.894906][T18367] loop3: detected capacity change from 0 to 256 [ 1516.956831][T18367] FAT-fs (loop3): bogus number of FAT sectors [ 1516.963383][T18367] FAT-fs (loop3): Can't find a valid FAT filesystem [ 1517.072924][T18311] team0: Port device team_slave_0 added [ 1517.190156][T18311] team0: Port device team_slave_1 added [ 1517.601511][T18311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.610129][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.637079][T18311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.850478][T18311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.857794][T18311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1517.888435][T18311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.512823][T18378] bond_slave_0: entered promiscuous mode [ 1518.518972][T18378] bond_slave_1: entered promiscuous mode [ 1518.525005][T18378] vxlan0: entered promiscuous mode [ 1518.531141][T18378] vlan2: entered promiscuous mode [ 1518.536420][T18378] bond0: entered promiscuous mode [ 1518.748588][T18311] hsr_slave_0: entered promiscuous mode [ 1518.760947][T18311] hsr_slave_1: entered promiscuous mode [ 1518.770145][T18311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1518.778037][T18311] Cannot create hsr debugfs directory [ 1518.927198][T10362] Bluetooth: hci4: command tx timeout [ 1522.323068][T18311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1522.448701][T18311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1522.549527][T18311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1522.636755][T18311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1523.703871][T13525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1523.713307][T13525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1523.852857][T18421] vlan2: entered promiscuous mode [ 1523.993659][T10634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1524.002079][T10634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1524.257072][T18311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.510664][T18311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.648309][ T4014] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.655917][ T4014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1524.830403][ T4014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.838068][ T4014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.162959][ T3820] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.628184][ T3820] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1525.801938][ T3820] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.091818][ T3820] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.872532][ T3820] bridge_slave_1: left allmulticast mode [ 1526.882302][ T3820] bridge_slave_1: left promiscuous mode [ 1526.893059][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.985183][ T3820] bridge_slave_0: left allmulticast mode [ 1526.994900][ T3820] bridge_slave_0: left promiscuous mode [ 1527.002668][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.045043][ T3820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1528.122853][ T3820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1528.173340][ T3820] bond0 (unregistering): Released all slaves [ 1528.467427][T18311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.960138][ T3820] hsr_slave_0: left promiscuous mode [ 1528.987172][ T3820] hsr_slave_1: left promiscuous mode [ 1528.995200][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1529.003369][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1529.060087][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.067889][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.153788][ T3820] veth1_macvtap: left promiscuous mode [ 1529.159747][ T3820] veth0_macvtap: left promiscuous mode [ 1529.165667][ T3820] veth1_vlan: left promiscuous mode [ 1529.171563][ T3820] veth0_vlan: left promiscuous mode [ 1529.978780][ T3820] team0 (unregistering): Port device team_slave_1 removed [ 1530.014231][ T3820] team0 (unregistering): Port device team_slave_0 removed [ 1530.761450][T18444] loop8: detected capacity change from 0 to 256 [ 1530.862815][T18311] veth0_vlan: entered promiscuous mode [ 1530.918723][T18444] FAT-fs (loop8): bogus number of FAT sectors [ 1530.925119][T18444] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1530.955163][T18311] veth1_vlan: entered promiscuous mode [ 1531.435216][T18311] veth0_macvtap: entered promiscuous mode [ 1531.549299][T18311] veth1_macvtap: entered promiscuous mode [ 1531.833001][T18311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1532.008593][T18311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1532.115971][T18311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.125280][T18311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.134551][T18311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.143665][T18311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1532.289014][T13554] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1532.299374][T13554] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1532.312061][T13554] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1532.326885][T13554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1532.340758][T13554] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1533.330929][T18463] team_slave_0: entered promiscuous mode [ 1533.337237][T18463] team_slave_1: entered promiscuous mode [ 1533.344812][T18463] vlan2: entered promiscuous mode [ 1533.353793][T18463] team0: entered promiscuous mode [ 1534.437432][T13554] Bluetooth: hci3: command tx timeout [ 1534.717403][T18452] chnl_net:caif_netlink_parms(): no params data found [ 1536.468502][T18492] loop8: detected capacity change from 0 to 256 [ 1536.489762][T18452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1536.497521][T18452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.505269][T18452] bridge_slave_0: entered allmulticast mode [ 1536.516311][T18452] bridge_slave_0: entered promiscuous mode [ 1536.531120][T13554] Bluetooth: hci3: command tx timeout [ 1536.540460][T18452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.548421][T18452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.556216][T18452] bridge_slave_1: entered allmulticast mode [ 1536.565825][T18452] bridge_slave_1: entered promiscuous mode [ 1536.696017][T18492] FAT-fs (loop8): bogus number of FAT sectors [ 1536.703750][T18492] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1536.868796][T18452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.990046][T18452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.454044][T18452] team0: Port device team_slave_0 added [ 1537.568042][T18452] team0: Port device team_slave_1 added [ 1537.919435][T18452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.926689][T18452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1537.954627][T18452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1538.192507][T18452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1538.200083][T18452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1538.226178][ C0] vkms_vblank_simulate: vblank timer overrun [ 1538.233028][T18452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1538.595574][T18507] vlan2: entered promiscuous mode [ 1538.623038][T13554] Bluetooth: hci3: command tx timeout [ 1538.800441][T18452] hsr_slave_0: entered promiscuous mode [ 1538.810783][T18452] hsr_slave_1: entered promiscuous mode [ 1538.819567][T18452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1538.827586][T18452] Cannot create hsr debugfs directory [ 1539.873634][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.881974][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.375492][T10634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1540.384014][T10634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1540.684506][T13554] Bluetooth: hci3: command tx timeout [ 1541.126004][T18452] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1541.248760][T18452] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1541.348659][T18452] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1541.449009][T18452] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1541.515956][T18525] netlink: 2116 bytes leftover after parsing attributes in process `syz.0.3735'. [ 1542.877410][T18452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.083105][T18452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.216696][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.224387][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.391637][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.399329][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1543.599930][T18542] vlan2: entered promiscuous mode [ 1545.488023][ T30] audit: type=1326 audit(1750850657.310:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18556 comm="syz.8.3807" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0 [ 1545.989230][T18452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1547.682028][T10362] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1547.700601][T10362] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1547.711507][T10362] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1547.727228][T10362] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1547.741407][T10362] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1549.562689][T18583] chnl_net:caif_netlink_parms(): no params data found [ 1549.888599][T10362] Bluetooth: hci6: command tx timeout [ 1550.022575][T18452] veth0_vlan: entered promiscuous mode [ 1550.156189][T18452] veth1_vlan: entered promiscuous mode [ 1550.662187][T18452] veth0_macvtap: entered promiscuous mode [ 1550.763499][T18452] veth1_macvtap: entered promiscuous mode [ 1551.093246][T18452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.206601][T18452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.674905][T18452] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.684185][T18452] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.693403][T18452] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.702559][T18452] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.729749][T18583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1551.737509][T18583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.745280][T18583] bridge_slave_0: entered allmulticast mode [ 1551.755305][T18583] bridge_slave_0: entered promiscuous mode [ 1551.900911][T18583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1551.908834][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1551.916641][T18583] bridge_slave_1: entered allmulticast mode [ 1551.929527][T18583] bridge_slave_1: entered promiscuous mode [ 1551.964103][T10362] Bluetooth: hci6: command tx timeout [ 1552.224712][T18583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1552.345087][T18583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1552.811430][T18583] team0: Port device team_slave_0 added [ 1552.921904][T18583] team0: Port device team_slave_1 added [ 1553.437790][T18583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1553.444983][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1553.471173][ C0] vkms_vblank_simulate: vblank timer overrun [ 1553.479547][T18583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1553.748503][T18583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1553.755771][T18583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1553.782561][T18583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1554.048438][T10362] Bluetooth: hci6: command tx timeout [ 1554.261009][T18583] hsr_slave_0: entered promiscuous mode [ 1554.271504][T18583] hsr_slave_1: entered promiscuous mode [ 1554.280614][T18583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1554.288511][T18583] Cannot create hsr debugfs directory [ 1556.120042][T10362] Bluetooth: hci6: command tx timeout [ 1558.307892][T18583] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1558.424034][T18583] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1558.599422][T18583] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1558.748902][T18583] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1559.323933][ T3820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.560443][ T3820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.761178][ T3820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1559.952325][ T3820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.605561][ T3820] bridge_slave_1: left allmulticast mode [ 1560.611841][ T3820] bridge_slave_1: left promiscuous mode [ 1560.618869][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.720858][ T3820] bridge_slave_0: left allmulticast mode [ 1560.726789][ T3820] bridge_slave_0: left promiscuous mode [ 1560.733946][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.449064][ T3820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.502202][ T3820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.535523][ T3820] bond0 (unregistering): Released all slaves [ 1561.990464][ T4238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.999046][ T4238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.374671][T18583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.671467][T13525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.682374][T13525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.795790][ T3820] hsr_slave_0: left promiscuous mode [ 1562.834241][ T3820] hsr_slave_1: left promiscuous mode [ 1562.843365][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1562.851400][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1562.974302][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1562.982366][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1563.141856][ T3820] veth1_macvtap: left promiscuous mode [ 1563.147774][ T3820] veth0_macvtap: left promiscuous mode [ 1563.153755][ T3820] veth1_vlan: left promiscuous mode [ 1563.159699][ T3820] veth0_vlan: left promiscuous mode [ 1564.235224][ T3820] team_slave_1 (unregistering): left promiscuous mode [ 1564.260456][ T3820] team0 (unregistering): Port device team_slave_1 removed [ 1564.323185][ T3820] team_slave_0 (unregistering): left promiscuous mode [ 1564.393986][ T3820] team0 (unregistering): Port device team_slave_0 removed [ 1564.870789][T18583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.002773][T10634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.010438][T10634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.115506][T10634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.123198][T10634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.922430][ T3820] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.174363][ T3820] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.416017][ T3820] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1566.644199][ T3820] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.488284][ T3820] bridge_slave_1: left allmulticast mode [ 1567.494322][ T3820] bridge_slave_1: left promiscuous mode [ 1567.501364][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.599925][ T3820] bridge_slave_0: left allmulticast mode [ 1567.605835][ T3820] bridge_slave_0: left promiscuous mode [ 1567.613348][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.213223][ T3820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1568.293460][ T3820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.333535][ T3820] bond0 (unregistering): Released all slaves [ 1568.824266][T18583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1568.967474][ T3820] hsr_slave_0: left promiscuous mode [ 1568.987445][ T3820] hsr_slave_1: left promiscuous mode [ 1568.995496][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1569.005129][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.060676][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1569.068953][ T3820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.159155][ T3820] veth1_macvtap: left promiscuous mode [ 1569.164936][ T3820] veth0_macvtap: left promiscuous mode [ 1569.172656][ T3820] veth1_vlan: left promiscuous mode [ 1569.179937][ T3820] veth0_vlan: left promiscuous mode [ 1570.129389][ T3820] team0 (unregistering): Port device team_slave_1 removed [ 1570.169550][ T3820] team0 (unregistering): Port device team_slave_0 removed [ 1571.977419][T18583] veth0_vlan: entered promiscuous mode [ 1572.101501][T18583] veth1_vlan: entered promiscuous mode [ 1572.414635][T18583] veth0_macvtap: entered promiscuous mode [ 1572.505412][T18583] veth1_macvtap: entered promiscuous mode [ 1572.557877][ T1638] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1572.657750][T13554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1572.669685][T13554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1572.688185][T13554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1572.702500][T13554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1572.714403][T13554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1572.721927][T18583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1572.748260][ T1638] usb 1-1: device descriptor read/64, error -71 [ 1572.810102][T18583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1572.838885][T18583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.848041][T18583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.857316][T18583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1572.868231][T18583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.040671][ T1638] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1573.308361][ T1638] usb 1-1: device descriptor read/64, error -71 [ 1573.428606][ T1638] usb usb1-port1: attempt power cycle [ 1573.888465][ T1638] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1573.953826][ T1638] usb 1-1: device descriptor read/8, error -71 [ 1574.237224][ T1638] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1574.310416][ T1638] usb 1-1: device descriptor read/8, error -71 [ 1574.448997][ T1638] usb usb1-port1: unable to enumerate USB device [ 1574.548255][T18748] chnl_net:caif_netlink_parms(): no params data found [ 1574.838246][T13554] Bluetooth: hci1: command tx timeout [ 1576.159682][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1576.166665][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 1576.778485][T18748] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.786144][T18748] bridge0: port 1(bridge_slave_0) entered disabled state [ 1576.797316][T18748] bridge_slave_0: entered allmulticast mode [ 1576.807828][T18748] bridge_slave_0: entered promiscuous mode [ 1576.922806][T13554] Bluetooth: hci1: command tx timeout [ 1576.949659][T18748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.958010][T18748] bridge0: port 2(bridge_slave_1) entered disabled state [ 1576.967963][T18748] bridge_slave_1: entered allmulticast mode [ 1576.977690][T18748] bridge_slave_1: entered promiscuous mode [ 1577.170662][T18748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.222720][T18748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.523130][T18748] team0: Port device team_slave_0 added [ 1577.541723][T18748] team0: Port device team_slave_1 added [ 1577.757700][T18748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.764895][T18748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.793241][T18748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1577.951754][T18748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1577.960050][T18748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.988689][T18748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.544216][T15721] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.555229][T15721] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.901948][T15721] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1578.914926][T15721] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.998395][T13554] Bluetooth: hci1: command tx timeout [ 1579.181506][T15721] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1579.192404][T15721] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.310382][T18748] hsr_slave_0: entered promiscuous mode [ 1579.323868][T18748] hsr_slave_1: entered promiscuous mode [ 1579.332739][T18748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1579.340680][T18748] Cannot create hsr debugfs directory [ 1579.605901][T15721] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1579.617125][T15721] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.701200][ T1638] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1579.927318][ T1638] usb 1-1: Using ep0 maxpacket: 32 [ 1580.000878][ T1638] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.011492][ T1638] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1580.023737][ T1638] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1580.034627][ T1638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.071018][ T1638] usb 1-1: config 0 descriptor?? [ 1580.476598][T15721] bridge_slave_1: left allmulticast mode [ 1580.482926][T15721] bridge_slave_1: left promiscuous mode [ 1580.489838][T15721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.567565][T15721] bridge_slave_0: left allmulticast mode [ 1580.573607][T15721] bridge_slave_0: left promiscuous mode [ 1580.581145][T15721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.077341][T13554] Bluetooth: hci1: command tx timeout [ 1581.288178][T15721] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1581.331577][T15721] vxlan0 (unregistering): left promiscuous mode [ 1581.540918][T15721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.571511][T15721] bond_slave_0: left promiscuous mode [ 1581.594636][T15721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.606168][T15721] bond_slave_1: left promiscuous mode [ 1581.617856][T15721] bond0 (unregistering): Released all slaves [ 1581.950941][T13524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.959250][T13524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.260377][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.269566][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1582.332205][T15721] hsr_slave_0: left promiscuous mode [ 1582.349275][T15721] hsr_slave_1: left promiscuous mode [ 1582.360868][T15721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1582.368714][T15721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1582.394220][T15721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1582.402210][T15721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1582.436104][T15721] veth1_macvtap: left promiscuous mode [ 1582.442249][T15721] veth0_macvtap: left promiscuous mode [ 1582.448385][T15721] veth1_vlan: left promiscuous mode [ 1582.453969][T15721] veth0_vlan: left promiscuous mode [ 1582.572008][ T8552] usb 1-1: USB disconnect, device number 11 [ 1583.434865][T15721] team0 (unregistering): Port device team_slave_1 removed [ 1583.462440][T15721] team0 (unregistering): Port device team_slave_0 removed [ 1584.702001][T18847] loop5: detected capacity change from 0 to 256 [ 1584.836125][T18748] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1584.870415][T18847] FAT-fs (loop5): bogus number of FAT sectors [ 1584.876746][T18847] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1584.978700][T18748] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1585.075714][T18748] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1585.193556][T18748] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1586.151509][T18748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.404944][T18748] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.456685][ T966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.464339][ T966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.523543][ T1638] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1586.571028][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.578742][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.717512][ T1638] usb 1-1: Using ep0 maxpacket: 32 [ 1586.731676][ T1638] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.742716][ T1638] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1586.752299][ T1638] usb 1-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1586.761762][ T1638] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.885226][ T1638] usb 1-1: config 0 descriptor?? [ 1588.313787][T18748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.319146][ T8552] usb 1-1: USB disconnect, device number 12 [ 1591.009002][T18748] veth0_vlan: entered promiscuous mode [ 1591.161171][T18748] veth1_vlan: entered promiscuous mode [ 1591.529025][T18748] veth0_macvtap: entered promiscuous mode [ 1591.586179][T18748] veth1_macvtap: entered promiscuous mode [ 1591.758785][T18748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.848682][T18748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1591.942649][T18748] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.953134][T18748] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.962427][T18748] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1591.971585][T18748] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.761064][ T5418] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1592.969824][ T5418] usb 6-1: Using ep0 maxpacket: 32 [ 1593.009519][ T5418] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1593.020629][ T5418] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1593.030216][ T5418] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1593.041937][ T5418] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.221519][ T5418] usb 6-1: config 0 descriptor?? [ 1593.921540][T18936] bridge0: entered promiscuous mode [ 1593.939999][T18936] batman_adv: batadv0: Adding interface: macsec1 [ 1593.946598][T18936] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1593.972255][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.983929][T18936] batman_adv: batadv0: Interface activated: macsec1 [ 1595.662298][T14891] usb 6-1: USB disconnect, device number 10 [ 1596.328760][T18969] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3922'. [ 1596.715641][T18974] loop8: detected capacity change from 0 to 256 [ 1596.774738][T18974] FAT-fs (loop8): bogus number of FAT sectors [ 1596.784932][T18974] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1598.487673][ T8552] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1598.644158][T18998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1598.652114][T18998] batadv_slave_0: entered promiscuous mode [ 1598.658315][T18998] batadv_slave_0: entered allmulticast mode [ 1598.687927][ T8552] usb 9-1: Using ep0 maxpacket: 32 [ 1598.747751][ T8552] usb 9-1: config 0 has an invalid interface number: 2 but max is 0 [ 1598.756135][ T8552] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1598.767311][ T8552] usb 9-1: config 0 has no interface number 0 [ 1598.775136][ T8552] usb 9-1: config 0 interface 2 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1598.788766][ T8552] usb 9-1: config 0 interface 2 has no altsetting 0 [ 1598.795536][ T8552] usb 9-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1598.804907][ T8552] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.964425][T13525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.972685][T13525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.055980][ T8552] usb 9-1: config 0 descriptor?? [ 1599.127073][ T8552] usbhid 9-1:0.2: couldn't find an input interrupt endpoint [ 1599.175709][T10634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.186816][T10634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.478538][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3936'. [ 1599.971187][T10634] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.150921][T10634] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.317519][T10634] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.490096][T10634] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1601.015657][T10634] bridge_slave_1: left allmulticast mode [ 1601.022071][T10634] bridge_slave_1: left promiscuous mode [ 1601.034365][T10634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.115651][T10634] bridge_slave_0: left allmulticast mode [ 1601.122933][T10634] bridge_slave_0: left promiscuous mode [ 1601.135136][T10634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.287451][ T9] usb 9-1: USB disconnect, device number 15 [ 1601.819453][T10634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1601.839863][T10634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1601.876743][T10634] bond0 (unregistering): Released all slaves [ 1602.280546][T10634] hsr_slave_0: left promiscuous mode [ 1602.288972][T10634] hsr_slave_1: left promiscuous mode [ 1602.297750][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.306076][T10634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.319489][T10634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.327738][T10634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.351478][T10634] veth1_macvtap: left promiscuous mode [ 1602.364664][T10634] veth0_macvtap: left promiscuous mode [ 1602.370877][T10634] veth1_vlan: left promiscuous mode [ 1602.376446][T10634] veth0_vlan: left promiscuous mode [ 1602.987809][T10634] team0 (unregistering): Port device team_slave_1 removed [ 1603.025571][T10634] team0 (unregistering): Port device team_slave_0 removed [ 1603.879186][T19016] loop5: detected capacity change from 0 to 256 [ 1604.077679][T19016] FAT-fs (loop5): bogus number of FAT sectors [ 1604.084035][T19016] FAT-fs (loop5): Can't find a valid FAT filesystem [ 1605.001562][T10362] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1605.011005][T10362] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1605.023097][T10362] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1605.044593][T10362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1605.056037][T10362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1605.475656][T19030] ===================================================== [ 1605.483231][T19030] BUG: KMSAN: uninit-value in erspan_build_header+0x167/0x2f0 [ 1605.491111][T19030] erspan_build_header+0x167/0x2f0 [ 1605.496467][T19030] erspan_xmit+0x10b0/0x1ce0 [ 1605.501517][T19030] dev_hard_start_xmit+0x22f/0xa30 [ 1605.506832][T19030] sch_direct_xmit+0x3b2/0xcf0 [ 1605.511941][T19030] __dev_queue_xmit+0x35e6/0x5e20 [ 1605.517304][T19030] __bpf_redirect+0x162d/0x1760 [ 1605.522353][T19030] bpf_clone_redirect+0x366/0x530 [ 1605.527843][T19030] ___bpf_prog_run+0x1297/0xeba0 [ 1605.533044][T19030] __bpf_prog_run512+0xc5/0x100 [ 1605.538190][T19030] bpf_test_run+0x54a/0xd20 [ 1605.542876][T19030] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 1605.548720][T19030] bpf_prog_test_run+0x5c2/0xa40 [ 1605.553929][T19030] __sys_bpf+0x6ca/0xe60 [ 1605.558543][T19030] __ia32_sys_bpf+0xa4/0xf0 [ 1605.563230][T19030] ia32_sys_call+0x2544/0x42c0 [ 1605.568333][T19030] __do_fast_syscall_32+0xb0/0x150 [ 1605.573652][T19030] do_fast_syscall_32+0x38/0x80 [ 1605.578888][T19030] do_SYSENTER_32+0x1f/0x30 [ 1605.583653][T19030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1605.590393][T19030] [ 1605.592825][T19030] Uninit was created at: [ 1605.597461][T19030] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1605.603629][T19030] kmalloc_reserve+0x13c/0x4b0 [ 1605.608814][T19030] pskb_expand_head+0x1fc/0x1610 [ 1605.613963][T19030] erspan_xmit+0x952/0x1ce0 [ 1605.618923][T19030] dev_hard_start_xmit+0x22f/0xa30 [ 1605.624230][T19030] sch_direct_xmit+0x3b2/0xcf0 [ 1605.629413][T19030] __dev_queue_xmit+0x35e6/0x5e20 [ 1605.634695][T19030] __bpf_redirect+0x162d/0x1760 [ 1605.639851][T19030] bpf_clone_redirect+0x366/0x530 [ 1605.645072][T19030] ___bpf_prog_run+0x1297/0xeba0 [ 1605.650358][T19030] __bpf_prog_run512+0xc5/0x100 [ 1605.655434][T19030] bpf_test_run+0x54a/0xd20 [ 1605.660240][T19030] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 1605.665955][T19030] bpf_prog_test_run+0x5c2/0xa40 [ 1605.671281][T19030] __sys_bpf+0x6ca/0xe60 [ 1605.675712][T19030] __ia32_sys_bpf+0xa4/0xf0 [ 1605.680506][T19030] ia32_sys_call+0x2544/0x42c0 [ 1605.685527][T19030] __do_fast_syscall_32+0xb0/0x150 [ 1605.690970][T19030] do_fast_syscall_32+0x38/0x80 [ 1605.696018][T19030] do_SYSENTER_32+0x1f/0x30 [ 1605.700920][T19030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1605.707588][T19030] [ 1605.710075][T19030] CPU: 0 UID: 0 PID: 19030 Comm: syz.8.3945 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 1605.722690][T19030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1605.733061][T19030] ===================================================== [ 1605.740241][T19030] Disabling lock debugging due to kernel taint [ 1605.746536][T19030] Kernel panic - not syncing: kmsan.panic set ... [ 1605.753136][T19030] CPU: 0 UID: 0 PID: 19030 Comm: syz.8.3945 Tainted: G B 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(undef) [ 1605.767113][T19030] Tainted: [B]=BAD_PAGE [ 1605.771408][T19030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1605.781655][T19030] Call Trace: [ 1605.785080][T19030] [ 1605.788143][T19030] __dump_stack+0x26/0x30 [ 1605.792700][T19030] dump_stack_lvl+0x53/0x270 [ 1605.797503][T19030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1605.803566][T19030] dump_stack+0x1e/0x25 [ 1605.807931][T19030] panic+0x4bd/0xd50 [ 1605.812090][T19030] kmsan_report+0x31c/0x320 [ 1605.816822][T19030] ? __msan_warning+0x1b/0x30 [ 1605.821713][T19030] ? erspan_build_header+0x167/0x2f0 [ 1605.827222][T19030] ? erspan_xmit+0x10b0/0x1ce0 [ 1605.832191][T19030] ? dev_hard_start_xmit+0x22f/0xa30 [ 1605.837669][T19030] ? sch_direct_xmit+0x3b2/0xcf0 [ 1605.842841][T19030] ? __dev_queue_xmit+0x35e6/0x5e20 [ 1605.848228][T19030] ? __bpf_redirect+0x162d/0x1760 [ 1605.853435][T19030] ? bpf_clone_redirect+0x366/0x530 [ 1605.858817][T19030] ? ___bpf_prog_run+0x1297/0xeba0 [ 1605.864117][T19030] ? __bpf_prog_run512+0xc5/0x100 [ 1605.869337][T19030] ? bpf_test_run+0x54a/0xd20 [ 1605.874193][T19030] ? bpf_prog_test_run_skb+0x19f8/0x26c0 [ 1605.880012][T19030] ? bpf_prog_test_run+0x5c2/0xa40 [ 1605.885318][T19030] ? __sys_bpf+0x6ca/0xe60 [ 1605.889906][T19030] ? __ia32_sys_bpf+0xa4/0xf0 [ 1605.894753][T19030] ? ia32_sys_call+0x2544/0x42c0 [ 1605.899868][T19030] ? __do_fast_syscall_32+0xb0/0x150 [ 1605.905344][T19030] ? do_fast_syscall_32+0x38/0x80 [ 1605.910551][T19030] ? do_SYSENTER_32+0x1f/0x30 [ 1605.915413][T19030] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1605.922146][T19030] ? kfree+0x3a8/0xec0 [ 1605.926378][T19030] ? skb_free_head+0x1b5/0x3a0 [ 1605.931354][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1605.936697][T19030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1605.942759][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1605.948110][T19030] __msan_warning+0x1b/0x30 [ 1605.952830][T19030] erspan_build_header+0x167/0x2f0 [ 1605.958189][T19030] erspan_xmit+0x10b0/0x1ce0 [ 1605.962992][T19030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1605.969040][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1605.974411][T19030] ? __pfx_erspan_xmit+0x10/0x10 [ 1605.979566][T19030] dev_hard_start_xmit+0x22f/0xa30 [ 1605.984902][T19030] sch_direct_xmit+0x3b2/0xcf0 [ 1605.989900][T19030] ? kmsan_get_metadata+0x150/0x160 [ 1605.995338][T19030] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1606.001917][T19030] __dev_queue_xmit+0x35e6/0x5e20 [ 1606.007134][T19030] ? skb_release_data+0xa12/0xac0 [ 1606.012342][T19030] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1606.018822][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1606.024168][T19030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1606.030218][T19030] ? __dev_queue_xmit+0x30c/0x5e20 [ 1606.035561][T19030] __bpf_redirect+0x162d/0x1760 [ 1606.040625][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1606.046013][T19030] bpf_clone_redirect+0x366/0x530 [ 1606.051267][T19030] ___bpf_prog_run+0x1297/0xeba0 [ 1606.056645][T19030] __bpf_prog_run512+0xc5/0x100 [ 1606.061736][T19030] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1606.068312][T19030] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 1606.074426][T19030] ? kmsan_internal_poison_memory+0x4a/0xa0 [ 1606.080532][T19030] ? kmsan_slab_alloc+0xde/0x160 [ 1606.085685][T19030] ? kmem_cache_alloc_noprof+0x81b/0xec0 [ 1606.091507][T19030] ? slab_build_skb+0x5c/0x590 [ 1606.096505][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1606.101861][T19030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1606.107920][T19030] ? bpf_test_run+0x71/0xd20 [ 1606.112687][T19030] ? filter_irq_stacks+0x49/0x190 [ 1606.117894][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1606.123239][T19030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1606.129282][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1606.134628][T19030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1606.140672][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1606.146016][T19030] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1606.152601][T19030] ? kmsan_get_metadata+0x150/0x160 [ 1606.158038][T19030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1606.164080][T19030] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1606.169749][T19030] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1606.175433][T19030] bpf_test_run+0x54a/0xd20 [ 1606.180147][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1606.185492][T19030] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1606.192072][T19030] ? kmsan_get_metadata+0xfb/0x160 [ 1606.197435][T19030] ? bpf_test_run+0x39e/0xd20 [ 1606.202333][T19030] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1606.208399][T19030] bpf_prog_test_run_skb+0x19f8/0x26c0 [ 1606.214105][T19030] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1606.220116][T19030] bpf_prog_test_run+0x5c2/0xa40 [ 1606.225283][T19030] __sys_bpf+0x6ca/0xe60 [ 1606.229756][T19030] __ia32_sys_bpf+0xa4/0xf0 [ 1606.234455][T19030] ia32_sys_call+0x2544/0x42c0 [ 1606.239401][T19030] __do_fast_syscall_32+0xb0/0x150 [ 1606.244735][T19030] do_fast_syscall_32+0x38/0x80 [ 1606.249796][T19030] do_SYSENTER_32+0x1f/0x30 [ 1606.254494][T19030] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1606.261059][T19030] RIP: 0023:0xf709e539 [ 1606.265273][T19030] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1606.285106][T19030] RSP: 002b:00000000f508e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1606.293727][T19030] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000900 [ 1606.301873][T19030] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 1606.309992][T19030] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1606.318111][T19030] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1606.326228][T19030] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1606.334379][T19030] [ 1606.337783][T19030] Kernel Offset: disabled [ 1606.342192][T19030] Rebooting in 86400 seconds..