last executing test programs: 24m36.370001479s ago: executing program 32 (id=534): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002580)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000400)='syzkaller\x00', 0x100, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020011b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') syz_fuse_handle_req(r4, &(0x7f00000004c0)="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", 0x2000, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19m44.365110453s ago: executing program 4 (id=1347): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 19m44.072635131s ago: executing program 4 (id=1348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r5, 0x2, 0x0, @void}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 19m39.465355731s ago: executing program 4 (id=1353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2, 0x0, @void}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 19m38.963306388s ago: executing program 0 (id=1354): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 19m37.678844058s ago: executing program 4 (id=1357): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 19m36.889779252s ago: executing program 0 (id=1359): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x400, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe, 0x2, 0x0, 0x8000, 0x0, 0x0, r2, 0x1, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(r3, &(0x7f00000000c0)="f0", 0x1) 19m36.769827274s ago: executing program 0 (id=1360): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 19m36.534826071s ago: executing program 0 (id=1362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) 19m36.434025768s ago: executing program 0 (id=1363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r6, r5, 0x2, 0x0, @void}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 19m34.022404852s ago: executing program 4 (id=1367): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x82) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r4, r3, 0x2, 0x0, @void}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 19m33.745213062s ago: executing program 0 (id=1369): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 19m32.974230618s ago: executing program 4 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r1}, 0x18) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffbd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x11, 0x1, 0x1, "a5ee5c0cf30f000080df48cd09ea4f1922fc336300000000008000", 0x33363248}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2000800) 19m17.743523528s ago: executing program 33 (id=1369): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 19m17.394028834s ago: executing program 34 (id=1371): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1c, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r1}, 0x18) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0xfffffffffffffbd3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x11, 0x1, 0x1, "a5ee5c0cf30f000080df48cd09ea4f1922fc336300000000008000", 0x33363248}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r3, 0x400, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}}, 0x2000800) 18m17.886096383s ago: executing program 3 (id=1532): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) 18m15.585067565s ago: executing program 3 (id=1534): prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00006ec000/0x1000)=nil, &(0x7f00002c7000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000559000/0x4000)=nil, &(0x7f000008d000/0x1000)=nil, &(0x7f00005e2000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000021a000/0x1000)=nil, &(0x7f00005e1000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 18m15.273785364s ago: executing program 3 (id=1536): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, 0xffffffffffffffff}) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) r4 = gettid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r4, 0x2, 0x5004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0)={[{@quota}]}) pipe(&(0x7f0000000100)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) 18m14.218019326s ago: executing program 3 (id=1540): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) socket(0x1f, 0xa, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf, 0x82, 0xbc, 0x40, 0xaf7, 0x101, 0xccda, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9d, 0x0, 0x0, 0xf5, 0xcc, 0x58, 0x8}}]}}]}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x5, 0x6a6, [0x0, 0x200000000800, 0x200000000ab4, 0x200000000ae4], 0x0, &(0x7f00000001c0), 0x0}, 0x794) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x2e, 0x71, 0x0, 0x5f]}}, 0x0, 0x1e, 0x0, 0x0, 0x6abb}, 0x28) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1f, 0x0, 0x4}, 0x2c) socket$inet_sctp(0x2, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f05, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='block_bio_remap\x00', r2}, 0x18) sync() 18m12.403135213s ago: executing program 3 (id=1542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) 18m11.019747627s ago: executing program 3 (id=1549): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 17m55.827650069s ago: executing program 35 (id=1549): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m48.353482808s ago: executing program 7 (id=4261): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xc0202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x48}}, 0x0) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c, 0x1, 0x0, 0x3}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f0000000100)) shutdown(r2, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={@ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @empty, 0x5, 0x8, 0x40, 0x0, 0xd45, 0x400303, r3}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg2\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x1, 0x0, 0x6000) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000740)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x9, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x45b, 0xd616, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0xffffffffffffffff, 0x3ff, 0x1}}, {0x0, 0x10}}}, 0xa0) 9m47.334930932s ago: executing program 7 (id=4262): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x400000000c0001, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="34000f8c", @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x884) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="2d5a8bfaec0503d4ee82255ccc79459d336c02f6846ffa083727a27fef8e41f33ff61428dc81376619b5746876cab40bea6b76e7a18d9f0f45c5f33c3f3e548879927a89cca1b9829ff887d45cae3a0012b8eec038b982c41410eb0cffe4204a0387ae9ad2d2eb6f904feaea4325a355611cfdb7ac6c3495a4bcfa6a2c3285bf50ca4a25c77f383bdb14c2f038ba311fefcbe3d334550fb18a5f462cec0e41bf00e3ef37c78bb0086cbdc72b561eb2e285a15002dbb8b7a858d33bdfef916ce90eca18739db369eb9aa302efdba714da8bbd0baaeb55eb585585542cdfe62755b7dd303c01c44de59f83de2b9edf1e60279b16bc7ee4c277e23701b7d58fdad36e8d91c111be46581f230b4cbbe8b9ad764cd3e067d7b7c5e1082a55c86f7cbc77e049085b2749b2ead86b176e4c8d2498a331f1118c5ed72ab0fc4228c8214e0e48fd1f265ccfd3311eff1f9548d1217c02de43ebc6c896afbf6065592ce3bafbc138524c4ffa429c33265cc8ebfc69e1adf360f97ec2edbab35cdc965dfadfa522a591734e25f91a44023ceeaac091534ec097d7a6f9a8efe84829719e41c101ee103c7b8c6d7fb630da2ffdd692d13e9212539b8484ea7fbccc74ecd6b44e08852505badf79984da7ffd06e78b05b453e89bbeb44fb0e72d527ee63aee52eebf2e4049705c41ead90017d7a512146287226941b20b4a603d1f5d9e6c559d55c5f6de7e9159e121dbbabdcdae8f359f66c218fb24d20c3b56ca3b4a2639b4b54e0775f29c731a3fd33331a76c280df2bea7fb0778648bc55257c42cb1a4ae173a21e33a782943d733e570595aea49f391ced7df117548032f44d611d1fcafe7c08fcca48ef9bb719d41c2cde9eca1727feb7bcc14757316a3fb315eb0adf3b60f5d6cfe231e4dca32f1cd2a74a68e44b1c09471f135d6abf0d7d417a42323923ced88d39902998a177bda4d7ac9e5479f0ae49f5fe51818fa13dd9131d219658ed2de42587f415396aa610998f2b166a053cd272ef751e5447122c03f33800268f63503a237fd62235c65fa995ced4facfc61959a7b64f7ef4bced8cbc10222a18aaee1fcc282163cafc4bf899a7de76ac61499fa1bdf6e6599a9b6e46d202230ee0be421b38ba66b85c7e5cb73e26085f8b62b4141f8728515f12019e1738bc5b278074c56be74033511b21e97a727c8a5f9c186af9777574f52d957082122dcadefe3c376f73a33e41094ad7cd404b50e963a200b57cbf4329e59c5b5a42f8700613e30af94109d5562262792e77df91e7e75c40080f8ca071449bc999762d483c30a4eee68e89be2d138a4b64af3c0211c3540227d85801dc16d1bb669a16b243fa98ef40edb5b5fe05c50f8702434c4d2663e874aec996463c6d946fd1391096b02198e88f5e568300d6c4848b4fe7273af633cc6fbf6a5e37feea56cfc20a0b42a5c6266c805823bac41f8d4eb43c6c4673a4b6a8dd303fe922ade7af649cb21c2919390a9ee62a08131ea21840adc9cc023e2aab908ea6bf2d41e52918ed6423677933cd1729cfda6423e540aae3f043a1296b6eb9350d38e07abed7d1ea7249b1b67d17322050d01589c9787f4e5a904c5cfb25e047f3e46de5222121c2af122bd3a3b2b0f35ea0a81d3a862d77217e992cc74f678617223cad5ba21afdc58e6af17e7b4ee3a506f34069d2931ac62d47f86f1983d7204a32544ae0b738cd5ab3efb940ad752ebbb59cd28d98cd6e0441f020ab2d68cbe90fa44be7f7191c2f5748c418dde668ee87d579baed4358b5c47e03a89ddb98fd4209fda85a277460ca20cc6de67c0f35e39d3fcfc070530140f648b50dbd3236d8e5b5e63be12191cd67b9ef128440d8794dc452b5a16f250c9e378d52b1132efc4b1ec8a7a3fd04ef82154de056ee5054fb15dff8df06bdca1dc8b1c1d4175c967445105954d10f0fc94acf39b68105d188593584333312eb6fad6371cdbbbf16e88bed86600d9dac851661dd3cc64f9bac0b2b81ad2564274b5bcc040f065f3fc055f7e254f8954304140782b9a2390bb61fd82d7a99ddf96468f3ef43113b767552969d71190265b76c1358c4e16a21ff959631a19c6f5a686b7884d75aca2810decbfd9fe0520f3b322a80838a2e633e1c2a79df01786f605750b84e2b04b7204ca6022973fca4ab0c8c67caee2349a6b839aa6bebc862f2f8246fc293e0f14a375581036becf081e4fd6b0cc2f7465fe7f932890884794215838558c0ae6de81efd624c5290bdf52e95e4d5b1eaf280d76eb0ceddf438bcf1d4b83e8eec3aaacbd7ea0421ac84f08a480ae48edb7c23c3f94dc59a44b3c5712800789fa3b2b938bed137505d2b247a4c4a9bd5ceddb900cb9a502d10dbd620a7ef84fbf49081d52419e5d08ddd5a1873f6d3ea6a822400ffdad29899bfaf73ce3d8ff182b3ca8ef1c39fc34b93767b9a13401427c440edd2e5f801655e60dc4c5b4ba84e504421b758e0b4c743fd1a1b6be27702e751960b431f1d7a7fd68a9ab198a5c6dbbee137283e6d6c69eedba5345e551e4421f3dfc1c957bbf413c48f64871521789487707278c69eb71c33a6999d7e497dc3d7d022f008addc112c116637f6d29c9247de134eb860cd3e5af369ee474883e7a20c40ba02160ec19dcb717cd3f4f3f0293195242fa814042ad751c774728a797a8c483e0562a2cca698053c1b66c0310affdb6e5767ab6db583ac415119f1760bed5f405c5cfb63b2ccfd5dc9d119fc82a86f98551d92f02410fdddd450f0a661ce041fa39aaba50cda470d3080dec7345a54abe2a7630a7fac84bf95c30a0dff1225f7b1aebb41daec68ceff2b0f502e7433f395aeea75c1ba88229b44fa5c6fa2647e44db139eca1f2b7142b6c23d4879603bb5617e94de0d5353d1b17dfb960eb1c11c67d0d1e1cae94699cc9397b79150dacbbc7361261d5445f237210d2ab8120fe721072394b77df46894595b8fd56f034318e90e3cad94f1655911b9bcc0bd15c628c0248e134295f3ff69cf8ea536b4b7a6c11b4e04955f9f1d9bac2ad39d81ec929b0d29999ae5a865bcc2cffc8fb42af6e486ca12a4c83461c6a72b3c88e4f3d1a9c1f13adc6defbf0110746e39b1d01a5129f996a2af48bc52f06a32764d8d8dd984c5dc4e8bca0ffbbc7e4cd226cc278b35ed16bed6e8aca4a1c18120eef0966dd5327f252462477d43cbd1497654ddd3358d24883d9ddde40f1bc8c5610370841b1cb13e84162cc6d0818987350c22362b12c0f315dbc5dbc33c224bf8d57410f2621b9c45d6857b0bed5aae750db0dd4c6cf50bfd6d5e0c816a9d8951402a1c50ad8169fd94427b42c58399c6d72b1f213e009af4f650e5ef67d2f48c7dc3ef74a8ee453ab84118f2f0e4ff2b8130169ccac37198b337205cae506e8d70acba86aab28caa8117b1231d9c4b631fa3aeceb3c236182e25299392f1ed986106071097314a9b9bd0f30d853e8b4044c00f04b45b2923b572a6a41cb5293cc8dfdbeff56a1375a33bac7b220056a6f6a292035b17a3c3fd55897548c68ad7886ef432cef353da3da8deaea09df078569c042258dfc0763d54be89302b11a6d24f4086028b82520fb6d967b78b611a7e9661a92b1a8f12d407d2289e85a82bd0b7c742055acd2396ba8d101e91ce2e9f387e909fe6da3109e1937b1e12515f23c8f1b739d4c40a287cae3bf59e901fff2ba0de0a36a304428e9febe42a01dea2eacae9416a72ddabb98d2e69c70ea9edfc57cd81fc4217ec353caf01a1a61b925102f866b4090b6447cfd8eeff2a3a49e30fe0a4fff77fe1a225dbdb2fac338526c7438631b69ead8781b86801f530b04b1544be2c22aff4ac89b0ce4353526905e59e18f7f01c221e42354a5269e0e28afa29f38bcab3923fe8d64fbf81433991b0bb9df6fc4c28ba175871d87bb5ce6cf5bf4572bb873c044f0aeb2981e34a005df55d354db0353f6433f76adde2c124793a1da43aca0e62a744992ed8efa8571a26857aa65a21cfc3507471ab75525cedb559c430b5d03a5c4e923f7fbec50d0eb10fc40b3d7986245f4c6888a53df7fe7fdcc11261e70d8cca04baff938f8446bd9048baba31085f20746c5f0e00d816dca934804ea2877cca51b5c0e31dfeefb9e91e41189d67412a09af16b4cb709e6fee71b2766a71c8397578516b656633bb620dfc8bc15de4ea5f75f6845ea44805442125adef9377e98b5d8e73f3a0bfbd330467daf10d9f7a95cd6fd4827fa1b062898fa454437bf185b9e0d98c9d10a5db80364bca446205739b23a1e7e860647ed30e2b72524da94a5f70dcbcd67d8df08f0d57583011d5487669c5a45905125186590322dbe481e820a6a6c29c136fa4301ade06baddca45f0d5ce913b5b763d293da4afaa450b17ff4933e4478fbba9ad9e6e5eafe9fdeb82b7d65bc92f6690d03a49923810558b5e0f5bf47e7d000a5e132217c174445565d57d29f02e71d7205b8ec10330fea51d972fc5c81b1b36775816082f979b5b1fe3601c9c8e8fa0c3504bfa30e3603d5a0f3a7cbd27d744b27cdbf318acbed70697519605453df106123e1a6148c9146154986e288d8a70b6fed1667cc1e0b199067c704a6d41ba751b53102ebca01b3ce90226847808646c95f3eb231b6af0b0f329bd997db5a4d3ff18edf0203e351fcfa8c8ae2be6953472bbb3f40bb6ab3f8f2128d11a3bba133f0204e2e0df189cc8d2cb8af81d0941a37c2165112ed452008930bcc607fa6fe3ad1def902d89c7330e6042f6f86c3a75665ec603b6e392b417a0d907d42e6534db72adbad4266c6601d7b8bf8d9cde807088f76b07c06840d0806eb89aa545292284bf050e732e547ed54417b3ec7e7a7c5e8454a56f5092ea8cb27e74e0672c2951647e29dadbdea86d2a4d9e53ab01c9d21e902fc9c6ff4c317b3c0398561364e880e2b079d79a27d6dcc3d586abc043477981bd36746f5570840536bef104a158e2461296717d247b6004565ffb8eb9bb5258c65032f0b472c4f3667a17e3ff65b45c91e2411b5990f054e0c2a05fc175d2db7fb32ca32e4c11b46f08bae1614e2add96133ab383c1e78f4e3f21ed3010a35c76ad88714b526d3a5ba799e6f7bf9d5696e7b42c8c264162a28831baaef180f40489ad681af6c0a674cc7b65e8b8ab704d15546f70ed1e67f7643bbc8d0b8482024b8f320b5bdccb1014f5e1a34c6c795428660f026d93dd5dcabf2330dc62894bfe48fde6b931ba55dc2a222a27a3906ba5b98476321b6d27217fd58ad93b616aac91b139729d91de6f8ef49402e2741b8dd821f4cbaf7c4662ac782b255dc438164e54c417044e9bf5e13a8247777726dacea4341d8ba03bad17070dd0f07da13179d29ac00aefa41aaf4688e99eb395205f6d6d71999b3718f7f2d618117334977a92b15ed52e45e7d5df7a22be9cf0e008c41257d99b2426068c48de100b8e3019b624ce2f2849c35b74fe5ecc4478b2968a97cfcb759fc73c8cd21bda084646dadee926a4f606768749a89e11be2a23985631c922a73ba93f3619dcc4621c8da57697420859210aa43ec06feb649b9f1362fe9553f9d552b77203085d9a4da629f03fbf339bd8ccae6c411f6d8f131232575d28af2a2690529080f02a5a74fe59d1255039f09b8d565a4838930f88d6129389f2312a2ebcf0fe7d8b6dea3484cea9a1628349218b8ccefdea2b6c37676acc2a082fb73b19705e98079c1de7776cb830e79c0081a2da4059714f19587d10223fc50ea8434f1c7919a77acd7c5b20ac9fe8ad9d348e2c5bdb57fac1ec0c31a1688e22aab4f1a81826f3a47bd364505d35975c105a152aa8e42b2422a100ad3d3184d286884552143051b79294aba34bfc5cc332f0b6aa3bf186776ceb8861336ed97b85b9a7d548bf7b7a907256c7c6a2427d92aff68ba18544b95a75564029387fd2569943f8d54e64cc621123105eb56bcfaea06e38af31a05ef38302d2b6178121d52309865c5ec1147159c07b4d4e1ece24f6a1f63a492c617870c96dcabf43b73055d749e465cdbb965b18091eee65bd423f249d934ae904c2129b93d116353fe014e1afbcab5f74766a806451855bc28494653b9a863b9707c2a0fce3eb4b55c4220078651a94d3b9c6e92f4995dd56ec17d144b07bfb1b955b557d14774e64f400e0075781381b33d73a60f6b96cddbda0962b2a609e6bca56a109847bc13798be711d3779d5a8c6541bd247fe3b7477a1378cdafece044db3f31810bc95f8fb4ae7a8815303faac03651a13924308c06c8e86506b7d186a717a1bda1d7cdea2b8b682d37f954f488a8e0d65f868a81b1af4b8f7331ba84414a7ada82e81e06e76ddfa0aca0ca9a53a5de0bcdcbb77284bab522ffb6f803e95f116ac1670c50acd36d80f170e8e7e05163f050dc89dd93bf9160a545174472376e1fcbb945e9294f796a09ca78452683b8bd39049d118acc24ef0dc18ef88899dd7c27a3585e914e6f6bc8bb1950c061c722134243cf151785bc19dada45b90d97cb83bc60885a908d0c13be9e54f1929fe1f76fb9886808caf0442aca4539a42078bfee82418d611f4c432fcbc5242c35a396c17c1b93b98b277a9c8ef0143643e120c0de4b7c6beb0a582789b81a9d3a0b8f96a332c89764283d84ec5e6b8350683a2b4eebcb214a7ad430ff9ebcfc1d850717a8d38b8e35e67fea4b8f14938cc3eeacbee30616c09e848ebae3cefb8f2a904f2b3d1252019ec914278942d9b914f95574031cf21f412aa7500f3955db7b9ef9403750058d75e53d16803d4463f7884df1e361d34ce646e20b3427a45cd307283f1ff00cca6c841fb9b06543bf1a254b21ff421331facb2f08a484904ea25e049597c8b0a2140e8ed2906d574e73165ec5591c89b5dc08e5943ff7399f76b1df90947a9479b1aab40abf8ebadfa1455b6dcac672f495a64b6230fd3fe948ce6c16cb87e11ac7affc9047ef33fa64585c1dce3bab4fecc0c7d81b5ea73aed3ef63fafc880b6e2ba09d0df6d626e817075d5f330d91cec4bcf4829c20192bc0ef7f728f52dd3e074bafda4f8cd8465311a9124baad61bd73ca76a0d0d1b80cb7a5e429067ed4707b64d38613008c8af3ffcedfeb8cda26def8bef7cf947af23939d18adbf56715f90c2df716eb037d536cd36bc2b832c57f4a319f392e1ab37e02dfb392bd52b02801665c8ea28edfcb153f267dcfbd671d4eaa0d56335f7ce5eccda6b9f74621a1b322f1f3a60b00196a65327b36419394e776b2e1c1479f5f902c5918adfa5b112bfaf786eeea1abae7c8c9d3e3fe737c23092143376808b5e26cf896fb5202572533facacaac10ec26cab819f74cd372c95d50a9b6560da69c1b22d5c15759b7ab1d8118e672bea9af7e8a30458ccaa1586ed2720d5465e139fe3dfc0bc95107061471cdf28a42aa8149848a147a1710407021d13e611b36ad3624de35c4dc5a02ba8ae724b2d8cd85f15094e1893c98052cee135d0c1c11a73297775fb517abbb471a8b100cb51d8815acac16703b56f8aadae334601a84fc306efa08aeb2afbad94632b5f209603cf5e5ca634bd74ed2e525580ddd2f2ee65241788f5e867b44d7ecd71f5858d269ffda98d93860d8f1c26c47df1199f95991b54808bc26c0ab67b40745b8dfed41838e2c5594413d2c6022abe3c1f132e9f7c8c69e50729325d37e7502519d53d7e1bf0bc8f62d216fc9c88b197cfa1571ce8368cc1b4b625559cab7e8397c6c7bf537bc8b9d604f4bdb04cab86d349e4a33f92eaa07378eac07ed8d51aea9c15ef4c4b0e0a16f9c794701a1b74b58beb15cc165a4dc1a13a0886f55cba2b977447b61c01e1295a4221e19321201f1df0d25c9e14bc4433678e48a5081de7c81f79a6370843bf0d6e3e5192c1ddc0bad14a11ada8006e4f6549da3a877a991351610eb0c5bb6228d266baa27eab2b9bf4455fc54aed3c74c12590835e498c11efdc63dde52a62d8f3a3c978152018182b3e4cbd00fff317d06f8e9475b4c7506dcc5547d8ace2b71024aa0e2220936d2bd05163b8f15bc429378fec52ac39d167200758884056dc14d3329b1d47f477a217eabb651fa97e05451cd6e861996648ab439c9aa6fa032e9083b8c0f87890c88c50dd5a6e6be8c4a4361f3b4c3181c570407dd1d2d835a87dd4b24f55a649c3e478bc002f30894d06411dc4dd8277f796976b8b2884ed371013225bbd95955827741331777da30b1b3370fb4d0bb914d97660f7e06759ba54b5697a4f7cfb67035867f39e53306eb55b31ba660769ce6993b2f44a7173576766ed20992d04e6b4aff20c138102537a142ceeac3804fb0a4eaddeddb6bcc69007c5531f0ba6851854d8d836a51e8d644c7b79e071f19986090d2404b562a17e1ec1da775c171373bcf5d2c3d7dd64a587d66e42b6963d892df898766648f37c8d10ca249e28368c388f4e70a80b2992a0a390a2d51a17a0c1774fec2d399a2b0a99c802012fff6300c4275d1305b9a9d0f8144df64da9016f16369e813dafc7cff55c5a60602141fcaa62d9fc0b93df6524d8692be3c7ded5354b63014686e98ef2b5947eda93e0cd232d3fdea943d3bc92a6f2835c55aca33dcd087b7260bc68def6ce96ef5d536b61006a595219382d8b8365eb92eab44e677109971bc4dfd077a56ff1f27e9b80edffb5ecac7bde5dc2a74c30a24b9cd1b0d4356ec424350e364d0dc929d657a8626a22111d4a0f360fe33be72a1f2c4f5c1b9843145ddff70d583a9b433cab33b10d93531aab7bb8a53c738aae79222481b135eca9441f47068299deabdc9c4f77e5d4ea286e8300eb5956368d0499691dbab1499baef30bb6c4a9bb0159635dc1774203fda828bf804e8f526ffb55abd8700915232964b7f219a7bb221efa6428089263ab753eb421a1952bc780289a85ebb9b510dec67a826ccce1cdfbb29a3a55f4e1068ca2c077544efac686d77c67c927430c3ac78c7c8b1f834be9a689fdab38f1401797dba32a284f5c5f9ed13d34d8a001cfeeeb7de12aaeae7706004f96a293e52106fd945428e7e98915070b1584a323bd8f00b9803ce189c9c0af032752d979df57a5098458c7de034db79f43d27bcb720078b05e5f364f2d789343fb6fc8b2cab810b1745fa36aaccf5d27fc7f06ab821268d83e697870632814319533373f24584b35b2ba9dd9b52a4a2e559c90b1b87549530a64fdbba5587242535fd0d600fa6e8497369a5587627182c62da4a47bc6ea99f7aaa765e3b74b7d9c48e779c8b13a2535d03ef8ac4bf3fc9e6eda5628034e7e453fbd6153b8b8e9f693c5dfa37f6a0a2542e6f86ebd2ae926822d7b31963c8879557dfa2a869ba3c5dc2dfcb60bc0a0c9816c2c4c58bdc09c2d76a007e68c38fd8b88709e5c49341630e333e13413c3e60c0d768d4c98bcb297e819ceb0f8b229d3037ac95639344bf42ee7f77922a6ac039837356dfd7c0ba3c5393548369bd71b4824326eaeb80a9c249504a08bfc164af220047cdf054d928a8d929a2fb621665122062dbd5cdde82b8289e0d510246e0bc30d34d8e96703f75c75328f99437be474315d8cb55066badbc0ee852c8ef28e1de7f5b58dda97742db5f708c6be3279d700ba147f1519485020336c260d825920870739fdb288f22b980fb7bcbf147b1a95fcc3d8d1899749d928eea8d47cccc1fbbdd5729a3f2f73d2ae352eb3e043405bcb7fa12b2a80d6a3f0178a18cbc5794fd65f0caddaff57616dfed94884a48b27b181c55200d9ecdfbb082dcd2952089938e134eecb40c2f95cb7808fc7da09282787edb1939e75bc8e284c01239a895246be025c8e0168ae83f5adc62f4f81ddbf6ba9b5fce3ddd111eb61c42777a8c303abe291aa9ef383ef1d6c26c4f8698375cc76a7e078ac948f2e84de084fdb380d38d2e1810ce8118999554c06f8d583bd37003b407dd7b41a3b14f10a5ae7c2e8fdd087cc322ddc399fe38cc542bc957b38b0fda34a3ee5c6a97d25629d26a75de211fe1cc4ca63880caa8f85f3bd489c39cf30eac81784e4456a775dee3045df2a1875623a4fbf227cf90cd237721a6dff29d26a16306e4033cc644e35cba3cc4e45cfd0cefc9c8d8a0f35bf31a8319b54fb549554c7089b9334a9867d51d71aae1f342d5602ef2d394e6c8a8aa6c15121d8c8b3abe3416367dcc276c048c65311ad70df0ecf0cf817a1a27e1dc50fedea83de8a8bb7746e23be2f335c9cda9a7f08d72b9debc35d49e9ec4c9815040c38c11375dd7f2897b20479343b86b51c317e0e90f9465d8c425857e1831931714284c60f68036134304558e53d2d42813a42a3017ab21feab6132f3a2f8c5670a1076dab6136cd6836b52d7ee54639758085438831dcd8157ccae47784a35364babff9299e4eaa389931199b4901f12185a0d228473d4a147d88e55bd11f8ed2957b7f2f3efb3e444f0aec9bef1f68cffbdac04698cc277706f2ffdd263586b84c645f1721ee3008b398918fdfb9b06b98078447c0edd7c058524825a1124e9af37fa9cb77302aded60eca394c866397c3bc18f8277d9277921abd06b61b1445f43cd7f0b5b2c023832f6d67f86d9b6ff9985edee1ec2572486b43d3be834d5b60d208b1187ca7cc8b17133f55314ee640268d5337d7dcdf1742cb543d63ae3c09e312ac05b5d585d9437bf16bd560ef739f12c878178757e1f675a8671becae2bf03f87de4bc40b4b7a3aa6e2f28f015332b10b9fe426ebd45d7a26e769bb05eb2866bb34c56b079a5bd23352bcb08c379b400512b0d8438ee5371171ccbf2921c1e150fffb5885286f933f4393088ba21c47b15d1a35de27dbd02e58859aa080f87d0a857e92d0f52c549c04cd9368c94a8024e184773cb3431d854c2855e93ac9f24d5e45d11c2acfb03755e7f279b368e2e31b3653a7d7e2e102ac67f363c195272e2896bec544f669f2d25ae8638ac30da6ed52404b32b8ee9f0f2909ef6b4e2db3a6ea88b8a6f2f2c025959efb7b94005eb307aae01af8a19ee6178270be09d93837793b43bcdab98b9c04b6bfea7ac2217c11aeec277bc199b67ac24b7352299e7fec85aa151029d14441b56bb6031cdc72a1a90ef537c6d2bce7ffc7c366a88f8bc87cd8ef4e91b5ad9d85ed84f9b85f029252ad5ff13d564d842ef310feaba90974e40889e7cb753eb44ef96bc4c25b021fe50e9957a9c3cc9904aa920fc8a8e82a826b945559b57591fa1a26c380afe65d930f9bd9a3d93f57324d28c2741e728cbd106dccdf66863e49db8a0df1398ba8594fa5102b8157e4b987f4339820df5a7aa2b1c47ed0211437ee3d81dcbffa500dc4b743d49028581234c7e9db2e951d5bf3e3c448ce58bf94a2f7ef95eda07daae00bef1794d27330927b2460778fdee580efe431ee244aae452cd60100b6c9f0cd5e79e170a7b149abfcc26b77d33c35311c95e3ba0752eabce3d1310a8aa45ecd1659e4e855919d153ebeb434581a6d352508771b030acd3fee51badf6767a7931bbba2cf195bd98fd096a6be14d7172cf1dbe3a82bae73a29223c623c090cbc5fffe8f3291", 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$eventfd(r3, &(0x7f0000000100), 0xfffffd79) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x2, 0x5, 0x4}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000002040)={0xaa, 0x22c}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) timerfd_create(0x8, 0x0) 9m46.307745403s ago: executing program 7 (id=4266): openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$tun(0xffffff9c, &(0x7f0000000180), 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x1e1e, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 9m45.079903235s ago: executing program 7 (id=4269): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008f9000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r4, @ANYBLOB="0000000008000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) 9m42.407872427s ago: executing program 7 (id=4274): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 9m42.088617173s ago: executing program 7 (id=4278): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300), 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 9m26.666328177s ago: executing program 36 (id=4278): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300), 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 6m44.936425794s ago: executing program 6 (id=5424): r0 = io_uring_setup(0x178e, &(0x7f0000000040)={0x0, 0xcc85, 0x400, 0x0, 0x252}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x1) write$sequencer(r1, 0x0, 0xffaa) close_range(r0, 0xffffffffffffffff, 0x0) 6m43.562807803s ago: executing program 6 (id=5438): r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0xffffffff}}, 0x2e) 6m43.448852753s ago: executing program 6 (id=5439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x35451d7003000c0b, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee01) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) setgroups(0x2, &(0x7f0000000140)=[0xee01, 0x0]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) 6m43.048982785s ago: executing program 6 (id=5443): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001900010000000000fbdbdf250a00000000f275a6c5e696d05f424cfccbab72e1fa1e00fe00000000000800170008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4040052}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x4000800) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0xdbcc7a2431de4ec6) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) dup2(r4, r1) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r6, 0x402, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0xfc, 0x1b3}]}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x1100002000f336, 0x5) 6m42.79755221s ago: executing program 6 (id=5446): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f0000000080)=""/169, 0xa9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000740)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000001080)=""/185, 0xb9, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002540)={0x2, 0x0, {&(0x7f00000023c0)=""/128, 0x80, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 6m42.538219219s ago: executing program 6 (id=5448): r0 = io_uring_setup(0x178e, &(0x7f0000000040)={0x0, 0xcc85, 0x400, 0x0, 0x252}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x1) write$sequencer(r1, 0x0, 0xffaa) close_range(r0, 0xffffffffffffffff, 0x0) 6m42.217747609s ago: executing program 37 (id=5448): r0 = io_uring_setup(0x178e, &(0x7f0000000040)={0x0, 0xcc85, 0x400, 0x0, 0x252}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r1 = syz_open_dev$audion(0x0, 0x3, 0x1) write$sequencer(r1, 0x0, 0xffaa) close_range(r0, 0xffffffffffffffff, 0x0) 4m51.831388517s ago: executing program 5 (id=5853): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4m50.582849172s ago: executing program 5 (id=5859): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x1, {@ip4=@loopback, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 4m48.891867991s ago: executing program 5 (id=5867): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$unix(0x1, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) 4m45.667458138s ago: executing program 5 (id=5872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 4m44.644611857s ago: executing program 5 (id=5874): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32, @ANYBLOB="0a003400020202020202000008004a000aac0f0004004900da2b938d892dc7ccde2d587facd3f1d98a9b306c420aa93051a25a7bf1130a8475685dd59c7e9879f9d653de4f66660ecfe9b2dd20f5567177e9bf42e7cc720799c33ce202b24008a235de2f64b76b4b535549c8b79a50a3478dc9ae946bebb31cbad4c7667611ae4005846a163e280f260daac87858b6c803a52974628a"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 4m44.234227646s ago: executing program 5 (id=5877): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000040)) 4m41.906904773s ago: executing program 8 (id=5885): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @initial, @device_a, @device_b, {0x1, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, @a_msdu}}, @NL80211_ATTR_MAC={0xa}]}, 0x48}}, 0x4000) 4m41.309743193s ago: executing program 8 (id=5886): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x45f1, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, &(0x7f00000000c0)=0x2e) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) read$FUSE(r2, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r5, r2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r6, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8427000024010000140003006e657464657673696d3000000000000008002900449d00005c0016805800018028"], 0xa0}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x40004) 4m38.636563707s ago: executing program 8 (id=5895): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x48, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @initial, @device_a, @device_b, {0x1, 0x2}, "", @void, @value=@ver_80211n={0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}}, @a_msdu}}, @NL80211_ATTR_MAC={0xa}]}, 0x48}}, 0x4000) 4m38.157229796s ago: executing program 8 (id=5896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500060000000c0017800400"], 0x30}}, 0x0) 4m37.080806284s ago: executing program 8 (id=5898): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) lseek(r3, 0xfffffffffffffffc, 0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) r7 = syz_open_dev$sg(&(0x7f0000004740), 0x0, 0x200) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) connect$inet(r8, 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000280)={0x53, 0x0, 0x0, 0xe, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0), 0x0, 0xb, 0x10000, 0xffffffffffffffff, 0x0}) r9 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x5, 0x2, 0x2d9b, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x48) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$vim2m(0x0, 0x7, 0x2) 4m32.95024484s ago: executing program 8 (id=5906): syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) openat$full(0xffffff9c, &(0x7f0000000040), 0x10100, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "bc0000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0080) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) close(0xffffffffffffffff) unshare(0x42000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x4}}, 0x1, 0x4}, &(0x7f0000000080)=0x88) 4m17.63778044s ago: executing program 38 (id=5906): syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x80}}}}}}}, 0x0) openat$full(0xffffff9c, &(0x7f0000000040), 0x10100, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x501b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x0, "bc0000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gretap0\x00'}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010104}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x1, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0080) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) close(0xffffffffffffffff) unshare(0x42000000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x4}}, 0x1, 0x4}, &(0x7f0000000080)=0x88) 6.725339268s ago: executing program 9 (id=6409): accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r5, 0x1) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 5.661097012s ago: executing program 9 (id=6413): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.388759076s ago: executing program 2 (id=6417): socket$inet6(0xa, 0x3, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) eventfd2(0x9, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.214885685s ago: executing program 2 (id=6419): accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x1) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 3.20490477s ago: executing program 2 (id=6422): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8f1, 0x1, 0xffffffee, 0x1c3}, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x402, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0xdb, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x80, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x800, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xffffbff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x8, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x9, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x80000000, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x6, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) 3.09008888s ago: executing program 9 (id=6424): socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x40001) ftruncate(0xffffffffffffffff, 0x2007ffb) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005) 1.881163819s ago: executing program 2 (id=6425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000240)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) 1.880487118s ago: executing program 1 (id=6426): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) 1.55095722s ago: executing program 1 (id=6427): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000280)={{0xeb4, 0x200101}, {0xeb4, 0x198f}, 0x1001, 0x7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a00"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.453545758s ago: executing program 9 (id=6428): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x4, 0x5, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa0000000009000000040000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2a, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) 1.343273643s ago: executing program 1 (id=6429): syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, 0x0, 0x4000082) syz_io_uring_setup(0x172, &(0x7f0000000780)={0x0, 0x4f5c, 0x10100, 0xfffffffe, 0x2a0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4000) 1.207001163s ago: executing program 9 (id=6430): accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r4, 0x2) flock(0xffffffffffffffff, 0x1) flock(0xffffffffffffffff, 0x1) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 1.138544824s ago: executing program 1 (id=6431): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsopen(0x0, 0x1) socket$packet(0x11, 0x3, 0x300) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r4 = getegid() keyctl$chown(0x4, 0x0, 0xee01, r4) 357.798784ms ago: executing program 2 (id=6432): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="36e1"], 0x8) 202.178454ms ago: executing program 1 (id=6433): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}]}, 0x38}}, 0x0) 78.305088ms ago: executing program 2 (id=6434): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xb8f1, 0x1, 0xffffffee, 0x1c3}, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r3 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 52.669253ms ago: executing program 9 (id=6435): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xf3}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) ioprio_set$uid(0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8a}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) creat(&(0x7f0000000040)='./file7\x00', 0x1a2) mmap(&(0x7f0000225000/0x3000)=nil, 0x3000, 0x0, 0x40010, 0xffffffffffffffff, 0xfc8cc000) socket$inet6(0xa, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc045, 0x0, 0x0) 0s ago: executing program 1 (id=6436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x8001, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_TAIL={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): t option. [ 1417.453926][T21680] Use struct sctp_sack_info instead [ 1417.804073][T21690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5529'. [ 1417.867899][T21692] fuse: Unknown parameter '0x0000000000000004' [ 1419.956873][T21711] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5539'. [ 1420.912638][ T38] audit: type=1326 audit(6055144284.961:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21714 comm="syz.1.5541" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f629ff749 code=0x0 [ 1421.603569][T15297] team0 (unregistering): Port device team_slave_1 removed [ 1421.812651][T21718] fuse: Unknown parameter '0x0000000000000004' [ 1422.020300][T15297] team0 (unregistering): Port device team_slave_0 removed [ 1425.470683][ T38] audit: type=1326 audit(6055144289.524:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21737 comm="syz.1.5551" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f629ff749 code=0x0 [ 1425.834500][T21741] fuse: Unknown parameter '0x0000000000000004' [ 1425.956756][T21486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.988887][T21486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.284270][T21486] team0: Port device team_slave_0 added [ 1426.293424][T21486] team0: Port device team_slave_1 added [ 1426.627418][T21486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1426.627435][T21486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.627459][T21486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1426.630881][T21486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1426.630901][T21486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1426.630932][T21486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.270077][T21764] fuse: Unknown parameter '0x0000000000000004' [ 1427.437073][T21486] hsr_slave_0: entered promiscuous mode [ 1427.445618][T21486] hsr_slave_1: entered promiscuous mode [ 1427.465930][T21486] debugfs: 'hsr0' already exists in 'hsr' [ 1427.465987][T21486] Cannot create hsr debugfs directory [ 1427.734785][T21776] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5567'. [ 1427.734828][T21776] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5567'. [ 1428.211862][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.211945][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.349333][ T5792] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1428.656432][ T5792] usb 10-1: Using ep0 maxpacket: 32 [ 1428.940074][ T5792] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.940104][ T5792] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1428.940147][ T5792] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1428.940173][ T5792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1429.012828][ T5792] usb 10-1: config 0 descriptor?? [ 1430.040512][T21797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5575'. [ 1430.932330][T12569] usb 10-1: USB disconnect, device number 22 [ 1432.722885][T21825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1433.213513][T21831] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5586'. [ 1433.235584][T14191] page_pool_release_retry() stalled pool shutdown: id 129, 1 inflight 60 sec [ 1433.354938][T21831] ip6gretap0: entered promiscuous mode [ 1433.445895][T21486] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1433.480197][T21486] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1433.523162][T21486] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1433.592098][T21486] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1433.976931][T21849] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5592'. [ 1433.976974][T21849] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5592'. [ 1434.223519][T21849] bond0: entered promiscuous mode [ 1434.224161][T21849] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1434.803021][T21849] bond0: left promiscuous mode [ 1434.803057][T21849] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 1435.404633][T21486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1435.440543][T21486] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.484369][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.485457][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.577865][T21859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1435.616178][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.616404][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.184357][T21486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1436.184379][T21486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1436.910073][T21872] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5595'. [ 1438.600322][T21486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1439.271209][T21486] veth0_vlan: entered promiscuous mode [ 1439.347569][T21486] veth1_vlan: entered promiscuous mode [ 1439.741311][T21486] veth0_macvtap: entered promiscuous mode [ 1439.776300][T21486] veth1_macvtap: entered promiscuous mode [ 1439.847668][T21486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1439.904244][T21486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1440.003373][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.003418][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.003447][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.003475][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1440.165325][T21886] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5602'. [ 1440.214858][T21886] dummy0: entered promiscuous mode [ 1440.215105][T21886] macvtap1: entered promiscuous mode [ 1440.215358][T21886] macvtap1: entered allmulticast mode [ 1440.215371][T21886] dummy0: entered allmulticast mode [ 1441.225856][T18517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1441.225882][T18517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1441.310607][T14191] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1441.785269][T14191] usb 10-1: Using ep0 maxpacket: 32 [ 1441.845004][T14191] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1441.845033][T14191] usb 10-1: config 0 has no interface number 0 [ 1441.879084][T14191] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1441.879128][T14191] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.879151][T14191] usb 10-1: Product: syz [ 1441.879167][T14191] usb 10-1: Manufacturer: syz [ 1441.879183][T14191] usb 10-1: SerialNumber: syz [ 1441.962721][T21915] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5611'. [ 1441.974972][T14191] usb 10-1: config 0 descriptor?? [ 1442.051594][T14191] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1442.514931][T14191] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1443.132780][T14191] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1443.576165][T18517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1443.576191][T18517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1444.979470][T21923] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5613'. [ 1444.979680][T21923] batman_adv: batadv0: Interface deactivated: dummy0 [ 1445.655733][T21923] batman_adv: batadv0: Removing interface: dummy0 [ 1446.736685][T21931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5615'. [ 1446.736729][T21931] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5615'. [ 1446.794025][T21933] fuse: Unknown parameter '00000000000000000003' [ 1447.030016][T21931] bond0: entered promiscuous mode [ 1447.030043][T21931] bond_slave_0: entered promiscuous mode [ 1447.031590][T21931] bond_slave_1: entered promiscuous mode [ 1447.187431][T21931] bond0: left promiscuous mode [ 1447.187458][T21931] bond_slave_0: left promiscuous mode [ 1447.247517][T21931] bond_slave_1: left promiscuous mode [ 1449.367204][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1449.385472][T14191] usb 10-1: USB disconnect, device number 23 [ 1449.411933][T14191] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1449.438937][T14191] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1449.439970][T14191] quatech2 10-1:0.51: device disconnected [ 1449.662410][ T38] audit: type=1326 audit(6055144313.726:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21948 comm="syz.2.5623" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdfb18f749 code=0x0 [ 1449.867812][T21951] netlink: 'syz.2.5623': attribute type 10 has an invalid length. [ 1450.002292][T21951] team0: Port device dummy0 added [ 1450.806051][T21967] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5630'. [ 1450.870838][T10003] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1450.898036][T10003] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1450.902233][T10003] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1450.924995][T10003] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1450.927429][T10003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1452.516000][T21985] lo speed is unknown, defaulting to 1000 [ 1452.631636][T21968] lo speed is unknown, defaulting to 1000 [ 1453.091126][T20537] Bluetooth: hci5: command tx timeout [ 1453.451260][T21968] chnl_net:caif_netlink_parms(): no params data found [ 1454.363659][T22031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5651'. [ 1455.041956][T21968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1455.042103][T21968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.042425][T21968] bridge_slave_0: entered allmulticast mode [ 1455.058921][T21968] bridge_slave_0: entered promiscuous mode [ 1455.093014][T22037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5654'. [ 1455.143387][T20537] Bluetooth: hci5: command tx timeout [ 1455.213340][T21968] bridge0: port 2(bridge_slave_1) entered blocking state [ 1455.213489][T21968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.213786][T21968] bridge_slave_1: entered allmulticast mode [ 1455.222308][T21968] bridge_slave_1: entered promiscuous mode [ 1455.834138][T21968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1455.871015][T21968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1456.040909][T22045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5657'. [ 1456.472900][T22045] team0: Port device dummy0 removed [ 1456.620298][T21968] team0: Port device team_slave_0 added [ 1456.646442][T21968] team0: Port device team_slave_1 added [ 1456.713918][T22067] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5665'. [ 1456.812644][T22070] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5667'. [ 1457.124357][T22076] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5668'. [ 1457.221759][T20537] Bluetooth: hci5: command tx timeout [ 1457.228980][T21968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1457.229001][T21968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1457.229049][T21968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.646615][T22090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1458.646666][T22090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1459.193371][T21968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1459.193392][T21968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1459.193424][T21968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1459.310486][T20537] Bluetooth: hci5: command tx timeout [ 1459.329226][T22099] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5677'. [ 1459.822693][T21968] hsr_slave_0: entered promiscuous mode [ 1459.824744][T21968] hsr_slave_1: entered promiscuous mode [ 1459.826106][T21968] debugfs: 'hsr0' already exists in 'hsr' [ 1459.826160][T21968] Cannot create hsr debugfs directory [ 1460.437978][T22115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5684'. [ 1460.607185][T22115] team_slave_0: entered promiscuous mode [ 1460.607253][T22115] team_slave_1: entered promiscuous mode [ 1460.607883][T22115] macvtap1: entered promiscuous mode [ 1460.607902][T22115] team0: entered promiscuous mode [ 1460.608723][T22115] macvtap1: entered allmulticast mode [ 1460.608740][T22115] team0: entered allmulticast mode [ 1460.608754][T22115] team_slave_0: entered allmulticast mode [ 1460.608774][T22115] team_slave_1: entered allmulticast mode [ 1460.615567][T22115] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1461.453912][T22124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5688'. [ 1462.123247][T21968] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.935045][T21968] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.719544][T21968] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.614278][T21968] bond0: (slave netdevsim0): Releasing backup interface [ 1467.176044][T21968] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1468.556651][T21968] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1468.661226][T21968] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1468.730528][T21968] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1468.760857][T21968] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1469.051893][T21968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1469.116080][T21968] 8021q: adding VLAN 0 to HW filter on device team0 [ 1469.149192][T19918] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.149347][T19918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1469.177266][T18517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.177494][T18517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1469.566952][T22201] bridge_slave_0: left allmulticast mode [ 1469.566978][T22201] bridge_slave_0: left promiscuous mode [ 1469.567178][T22201] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.832643][T22201] bridge_slave_1: left allmulticast mode [ 1469.832678][T22201] bridge_slave_1: left promiscuous mode [ 1469.832910][T22201] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.963320][T22201] bond0: (slave bond_slave_0): Releasing backup interface [ 1470.018124][T22201] bond0: (slave bond_slave_1): Releasing backup interface [ 1470.130421][T22201] team0: Port device team_slave_0 removed [ 1470.174001][T22201] team0: Port device team_slave_1 removed [ 1470.184742][T22201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1470.184768][T22201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.247575][T22201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1470.247601][T22201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.298952][T22201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1470.587213][T22207] bridge_slave_0: left allmulticast mode [ 1470.587237][T22207] bridge_slave_0: left promiscuous mode [ 1470.587410][T22207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.668935][T22207] bridge_slave_1: left allmulticast mode [ 1470.668961][T22207] bridge_slave_1: left promiscuous mode [ 1470.669154][T22207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1471.137500][T22207] bond0: (slave bond_slave_0): Releasing backup interface [ 1471.238401][T22207] bond0: (slave bond_slave_1): Releasing backup interface [ 1471.318480][ T992] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1471.327564][T22207] team_slave_0: left allmulticast mode [ 1471.356048][T22207] team_slave_0: left promiscuous mode [ 1471.361330][T22207] team0: Port device team_slave_0 removed [ 1471.362482][T22207] team_slave_1: left allmulticast mode [ 1471.429503][T22207] team_slave_1: left promiscuous mode [ 1471.466589][T22207] team0: Port device team_slave_1 removed [ 1471.471388][T22207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1471.471413][T22207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.478255][ T992] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1471.478293][ T992] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1471.478322][ T992] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1471.481769][ T992] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1471.481803][ T992] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1471.481829][ T992] usb 10-1: Product: syz [ 1471.481848][ T992] usb 10-1: Manufacturer: syz [ 1471.481866][ T992] usb 10-1: SerialNumber: syz [ 1471.572017][T22207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1471.572128][T22207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.625703][T22207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1471.946298][ T992] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1472.127900][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5716'. [ 1472.199865][T22214] dummy0: entered promiscuous mode [ 1472.200040][T22214] macvtap2: entered promiscuous mode [ 1472.200216][T22214] macvtap2: entered allmulticast mode [ 1472.200228][T22214] dummy0: entered allmulticast mode [ 1472.504408][T14191] usb 10-1: USB disconnect, device number 24 [ 1472.551098][T22221] tipc: Started in network mode [ 1472.551127][T22221] tipc: Node identity 46, cluster identity 4711 [ 1472.551144][T22221] tipc: Node number set to 70 [ 1472.560050][T14191] usblp0: removed [ 1473.048790][T21968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1473.319292][T22240] 9pnet_fd: Insufficient options for proto=fd [ 1473.331115][T22241] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5723'. [ 1473.678208][T22247] bridge_slave_0: left allmulticast mode [ 1473.678246][T22247] bridge_slave_0: left promiscuous mode [ 1473.678570][T22247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.806902][T22247] bridge_slave_1: left allmulticast mode [ 1473.806937][T22247] bridge_slave_1: left promiscuous mode [ 1473.807408][T22247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.879300][T22258] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5729'. [ 1473.879346][T22258] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5729'. [ 1473.944823][T22247] bond0: (slave bond_slave_0): Releasing backup interface [ 1474.035184][T22247] bond0: (slave bond_slave_1): Releasing backup interface [ 1474.129019][T22247] team0: Port device team_slave_0 removed [ 1474.182309][T22247] team0: Port device team_slave_1 removed [ 1474.185640][T22247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.185679][T22247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.300846][T22247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.300881][T22247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.342099][T22247] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1474.645766][T22249] lo speed is unknown, defaulting to 1000 [ 1475.224333][T22271] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5733'. [ 1475.265821][T21968] veth0_vlan: entered promiscuous mode [ 1475.527419][T21968] veth1_vlan: entered promiscuous mode [ 1475.731038][T21968] veth0_macvtap: entered promiscuous mode [ 1475.776146][T21968] veth1_macvtap: entered promiscuous mode [ 1475.961473][T21968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.015417][T21968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.122764][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.122825][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.122865][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.122905][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.227819][T20537] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 1477.075898][T19918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.075922][T19918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.271826][T22299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1477.529381][T22303] lo speed is unknown, defaulting to 1000 [ 1477.555762][T19918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.555787][T19918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1479.975076][T22337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.578367][T22340] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5756'. [ 1480.728403][T22340] macvtap2: entered promiscuous mode [ 1480.728642][T22340] macvtap2: entered allmulticast mode [ 1482.288534][T22364] 9pnet_fd: Insufficient options for proto=fd [ 1483.359268][T10003] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1483.364202][T10003] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1483.372916][T10003] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1483.394726][T10003] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1483.410136][T10003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1483.509666][T22379] lo speed is unknown, defaulting to 1000 [ 1483.809033][T22387] fuse: Bad value for 'fd' [ 1485.172368][T22379] chnl_net:caif_netlink_parms(): no params data found [ 1485.527609][T10003] Bluetooth: hci1: command tx timeout [ 1485.651922][ T38] audit: type=1326 audit(6055144349.734:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22415 comm="syz.8.5781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d4211f749 code=0x0 [ 1485.725742][T22417] netlink: 'syz.8.5781': attribute type 10 has an invalid length. [ 1485.851907][T22417] team0: Port device dummy0 added [ 1486.294253][T22421] netlink: 'syz.9.5782': attribute type 12 has an invalid length. [ 1486.298980][T22379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1486.299742][T22379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1486.300115][T22379] bridge_slave_0: entered allmulticast mode [ 1486.316735][T22379] bridge_slave_0: entered promiscuous mode [ 1486.354999][T22379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.355248][T22379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.355785][T22379] bridge_slave_1: entered allmulticast mode [ 1486.377786][T22379] bridge_slave_1: entered promiscuous mode [ 1486.807326][T22428] fuse: Bad value for 'fd' [ 1487.400774][T22379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.456981][T22433] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5787'. [ 1487.606808][T10003] Bluetooth: hci1: command tx timeout [ 1487.759645][T22379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.764844][T22427] lo speed is unknown, defaulting to 1000 [ 1488.287724][T22379] team0: Port device team_slave_0 added [ 1488.330469][T22379] team0: Port device team_slave_1 added [ 1489.219561][T22379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1489.219576][T22379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.219598][T22379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.376692][T22379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.376717][T22379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.376749][T22379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.626714][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.626801][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.721749][T10003] Bluetooth: hci1: command tx timeout [ 1490.238338][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5795'. [ 1490.273147][T22379] hsr_slave_0: entered promiscuous mode [ 1490.291366][T22379] hsr_slave_1: entered promiscuous mode [ 1490.293884][T22379] debugfs: 'hsr0' already exists in 'hsr' [ 1490.293915][T22379] Cannot create hsr debugfs directory [ 1491.668133][ T38] audit: type=1326 audit(6055144355.747:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22474 comm="syz.2.5801" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdfb18f749 code=0x0 [ 1491.765895][T10003] Bluetooth: hci1: command tx timeout [ 1491.800922][T22476] netlink: 'syz.2.5801': attribute type 10 has an invalid length. [ 1493.249085][T22379] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.283076][ T38] audit: type=1326 audit(6055144358.298:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22488 comm="syz.2.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfb18f749 code=0x7ffc0000 [ 1494.283141][ T38] audit: type=1326 audit(6055144358.298:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22488 comm="syz.2.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7efdfb18f749 code=0x7ffc0000 [ 1494.283189][ T38] audit: type=1326 audit(6055144358.298:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22488 comm="syz.2.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfb18f749 code=0x7ffc0000 [ 1494.284114][ T38] audit: type=1326 audit(6055144358.298:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22488 comm="syz.2.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7efdfb18f749 code=0x7ffc0000 [ 1494.285268][ T38] audit: type=1326 audit(6055144358.298:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22488 comm="syz.2.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfb18f749 code=0x7ffc0000 [ 1494.286427][ T38] audit: type=1326 audit(6055144358.298:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22488 comm="syz.2.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efdfb18f749 code=0x7ffc0000 [ 1494.287581][ T38] audit: type=1326 audit(6055144358.298:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22488 comm="syz.2.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfb18f749 code=0x7ffc0000 [ 1494.289855][ T38] audit: type=1326 audit(6055144358.298:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22488 comm="syz.2.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efdfb18f749 code=0x7ffc0000 [ 1494.291006][ T38] audit: type=1326 audit(6055144358.298:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22488 comm="syz.2.5804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdfb18f749 code=0x7ffc0000 [ 1494.667925][T22379] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.117531][T22498] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5807'. [ 1495.505643][T22379] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1495.587571][T22498] lo: entered promiscuous mode [ 1495.635245][T22498] tunl0: entered promiscuous mode [ 1495.656709][T22498] gre0: entered promiscuous mode [ 1496.122356][T22498] gretap0: entered promiscuous mode [ 1496.262383][T22498] erspan0: entered promiscuous mode [ 1496.297097][T22498] ip_vti0: entered promiscuous mode [ 1496.300770][T22498] ip6_vti0: entered promiscuous mode [ 1496.307088][T22498] sit0: entered promiscuous mode [ 1496.478984][T22498] ip6tnl0: entered promiscuous mode [ 1496.503435][T22498] ip6gre0: entered promiscuous mode [ 1496.570135][T22498] ip6gretap0: entered promiscuous mode [ 1496.658997][T22498] bridge0: entered promiscuous mode [ 1496.787812][T22498] bond0: entered promiscuous mode [ 1496.955101][T22498] team0: entered promiscuous mode [ 1497.012311][T22498] nlmon0: entered promiscuous mode [ 1497.027918][T22498] caif0: entered promiscuous mode [ 1497.029192][T22498] batadv0: entered promiscuous mode [ 1497.061339][T22498] vxcan0: entered promiscuous mode [ 1497.075711][T22498] vxcan1: entered promiscuous mode [ 1497.094687][T22498] veth0: entered promiscuous mode [ 1497.126587][T22498] veth1: entered promiscuous mode [ 1497.360077][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5815'. [ 1497.390519][T22498] wg0: entered promiscuous mode [ 1497.517071][T22498] wg1: entered promiscuous mode [ 1497.642506][T22498] wg2: entered promiscuous mode [ 1497.691999][T22498] veth0_to_bridge: entered promiscuous mode [ 1497.707017][T22498] bridge_slave_0: entered promiscuous mode [ 1497.729851][T22498] veth1_to_bridge: entered promiscuous mode [ 1497.749356][T22498] bridge_slave_1: entered promiscuous mode [ 1497.806287][T22498] veth0_to_bond: entered promiscuous mode [ 1497.822195][T22498] bond_slave_0: entered promiscuous mode [ 1497.868449][T22498] veth1_to_bond: entered promiscuous mode [ 1497.883279][T22498] bond_slave_1: entered promiscuous mode [ 1497.933650][T22498] veth0_to_team: entered promiscuous mode [ 1497.961455][T22498] team_slave_0: entered promiscuous mode [ 1497.986033][T22498] veth1_to_team: entered promiscuous mode [ 1497.989748][T22498] team_slave_1: entered promiscuous mode [ 1498.001279][T22498] veth0_to_batadv: entered promiscuous mode [ 1498.035094][T22498] batadv_slave_0: entered promiscuous mode [ 1498.062227][T22498] veth1_to_batadv: entered promiscuous mode [ 1498.126976][T22498] batadv_slave_1: entered promiscuous mode [ 1498.150826][T22498] xfrm0: entered promiscuous mode [ 1498.194969][T22498] veth0_to_hsr: entered promiscuous mode [ 1498.253714][T22498] veth1_to_hsr: entered promiscuous mode [ 1498.295165][T22498] hsr0: entered promiscuous mode [ 1498.323681][T22498] veth1_virt_wifi: entered promiscuous mode [ 1498.358264][T22498] veth0_virt_wifi: entered promiscuous mode [ 1498.381776][T22498] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1498.569641][T22498] macvtap0: entered promiscuous mode [ 1498.583870][T22498] macsec0: entered promiscuous mode [ 1498.681297][T22498] geneve0: entered promiscuous mode [ 1498.791268][T22498] geneve1: entered promiscuous mode [ 1498.851277][T22498] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1498.911582][T22498] netdevsim netdevsim9 netdevsim1: entered promiscuous mode [ 1498.971288][T22498] netdevsim netdevsim9 netdevsim2: entered promiscuous mode [ 1499.031135][T22498] netdevsim netdevsim9 netdevsim3: entered promiscuous mode [ 1499.125823][T22498] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 1499.258399][T22498] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 1499.269635][T22498] dvmrp8: entered promiscuous mode [ 1499.311185][T22498] macvtap1: left allmulticast mode [ 1499.352525][T22498] dummy0: left allmulticast mode [ 1499.391401][T22498] macvtap2: left allmulticast mode [ 1499.413756][T22524] macvtap1: entered promiscuous mode [ 1499.413781][T22524] team0: entered promiscuous mode [ 1499.414030][T22524] macvtap1: entered allmulticast mode [ 1499.414046][T22524] team0: entered allmulticast mode [ 1499.414640][T22524] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1499.446519][T10588] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.703319][T22379] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.910291][T10588] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.910348][T10588] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.910400][T10588] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.634754][T22555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5821'. [ 1501.921699][T22556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5821'. [ 1502.031447][T12569] usb 9-1: new high-speed USB device number 89 using dummy_hcd [ 1502.205601][T12569] usb 9-1: config index 0 descriptor too short (expected 72, got 67) [ 1502.205638][T12569] usb 9-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1502.205701][T12569] usb 9-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 1502.209614][T12569] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1502.209652][T12569] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.209676][T12569] usb 9-1: Product: syz [ 1502.209696][T12569] usb 9-1: Manufacturer: syz [ 1502.209713][T12569] usb 9-1: SerialNumber: syz [ 1502.373513][T12569] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1502.492047][T22379] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1502.560553][T22379] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1502.665441][T14191] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1502.688183][T22379] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1502.835392][T22379] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1503.994218][T14191] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 1503.994380][T14191] ath9k_htc: Failed to initialize the device [ 1504.034667][T12569] usb 9-1: USB disconnect, device number 89 [ 1504.148662][T12569] usb 9-1: ath9k_htc: USB layer deinitialized [ 1504.765475][T22379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.816729][T22379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1504.869846][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.872953][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.925434][T18517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.946443][T18517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1506.153267][T22379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1510.522636][T22379] veth0_vlan: entered promiscuous mode [ 1510.564588][T22379] veth1_vlan: entered promiscuous mode [ 1510.622284][T22616] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1510.663687][T22379] veth0_macvtap: entered promiscuous mode [ 1510.677071][T22379] veth1_macvtap: entered promiscuous mode [ 1510.711788][T22379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1510.727325][T22379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1510.802603][ T3562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.898967][ T3562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.903195][ T3562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.944370][ T3562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.025517][T10205] usb 9-1: new high-speed USB device number 90 using dummy_hcd [ 1511.201478][T10205] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1511.201513][T10205] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.201535][T10205] usb 9-1: Product: syz [ 1511.201551][T10205] usb 9-1: Manufacturer: syz [ 1511.201567][T10205] usb 9-1: SerialNumber: syz [ 1511.419451][T10205] usb 9-1: config 0 descriptor?? [ 1512.178562][T10205] usb 9-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 1512.178593][T10205] f81604 9-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 1512.178636][T10205] f81604 9-1:0.0: probe with driver f81604 failed with error -121 [ 1512.297224][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.297248][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.766214][T10588] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.766240][T10588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1513.156687][T22636] batman_adv: batadv0: Adding interface: dummy0 [ 1513.156710][T22636] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1513.156747][T22636] batman_adv: batadv0: Interface activated: dummy0 [ 1513.923660][T10205] usb 9-1: USB disconnect, device number 90 [ 1514.275419][T22650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1515.019441][T22668] netlink: 'syz.2.5857': attribute type 11 has an invalid length. [ 1519.426764][T22701] JFS: charset not found [ 1519.726085][T10003] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1521.855470][T22729] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5876'. [ 1521.985928][T22732] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1522.415138][T22737] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1523.381544][T22747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5882'. [ 1523.613601][T22748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5883'. [ 1524.061139][T20537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1524.067858][T20537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1524.087577][T20537] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1524.121814][T20537] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1524.150052][T20537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1525.047497][T22751] lo speed is unknown, defaulting to 1000 [ 1525.119994][T22761] lo speed is unknown, defaulting to 1000 [ 1526.308034][T10003] Bluetooth: hci2: command tx timeout [ 1526.548291][T22773] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5888'. [ 1526.689345][T22777] lo speed is unknown, defaulting to 1000 [ 1526.826433][T22751] chnl_net:caif_netlink_parms(): no params data found [ 1526.916992][ T38] kauditd_printk_skb: 5 callbacks suppressed [ 1526.917013][ T38] audit: type=1804 audit(6055144391.004:125): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.8.5886" name="/newroot/29/file1" dev="fuse" ino=1 res=1 errno=0 [ 1526.917064][ T38] audit: type=1800 audit(6055144391.014:126): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.5886" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1527.020857][ T38] audit: type=1800 audit(6055144391.024:127): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.5886" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1528.386842][T10003] Bluetooth: hci2: command tx timeout [ 1528.535311][T22804] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5896'. [ 1529.203136][T22751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.203234][T22751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.203437][T22751] bridge_slave_0: entered allmulticast mode [ 1529.205512][T22751] bridge_slave_0: entered promiscuous mode [ 1529.595963][T22751] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.596123][T22751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.596397][T22751] bridge_slave_1: entered allmulticast mode [ 1529.628151][T22751] bridge_slave_1: entered promiscuous mode [ 1529.879730][T22816] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5898'. [ 1530.466697][T10003] Bluetooth: hci2: command tx timeout [ 1530.473462][T22751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1530.517415][T22751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1530.922335][T22751] team0: Port device team_slave_0 added [ 1530.968052][T22751] team0: Port device team_slave_1 added [ 1532.460791][T22751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1532.460806][T22751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.460827][T22751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1532.462923][T22751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1532.462935][T22751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1532.462955][T22751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1532.544541][T20537] Bluetooth: hci2: command tx timeout [ 1532.624300][T20537] Bluetooth: hci4: command 0x0406 tx timeout [ 1532.939475][T22835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5904'. [ 1534.113252][T15370] usb 9-1: new high-speed USB device number 91 using dummy_hcd [ 1534.343162][T15370] usb 9-1: Using ep0 maxpacket: 32 [ 1534.401233][T15370] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1534.401271][T15370] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1534.401315][T15370] usb 9-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 1534.401338][T15370] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.422200][T15370] usb 9-1: config 0 descriptor?? [ 1534.886629][T15370] kye 0003:0458:501B.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1534.887396][T15370] hid_parser_main: 28 callbacks suppressed [ 1534.887410][T15370] kye 0003:0458:501B.000F: unknown main item tag 0x0 [ 1534.887432][T15370] kye 0003:0458:501B.000F: unknown main item tag 0x0 [ 1534.901765][T15370] kye 0003:0458:501B.000F: hidraw0: USB HID v0.04 Device [HID 0458:501b] on usb-dummy_hcd.8-1/input0 [ 1534.901807][T15370] kye 0003:0458:501B.000F: tablet-enabling feature report not found [ 1534.901826][T15370] kye 0003:0458:501B.000F: tablet enabling failed [ 1535.921388][ T68] dvmrp8 (unregistering): left allmulticast mode [ 1537.790272][ T68] bond0 (unregistering): Released all slaves [ 1538.060018][T22853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5907'. [ 1538.497364][T22870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5912'. [ 1539.736574][T22751] hsr_slave_0: entered promiscuous mode [ 1539.748542][T22751] hsr_slave_1: entered promiscuous mode [ 1539.758239][T22751] debugfs: 'hsr0' already exists in 'hsr' [ 1539.758270][T22751] Cannot create hsr debugfs directory [ 1540.295586][T22898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5920'. [ 1540.480128][T15370] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1540.689992][T15370] usb 10-1: Using ep0 maxpacket: 16 [ 1540.696831][T15370] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1540.696868][T15370] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1540.700500][T15370] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1540.700533][T15370] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.700555][T15370] usb 10-1: Product: syz [ 1540.700570][T15370] usb 10-1: Manufacturer: syz [ 1540.700585][T15370] usb 10-1: SerialNumber: syz [ 1540.707191][T15370] usb 10-1: config 0 descriptor?? [ 1540.738484][T15370] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1540.738530][T15370] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1541.009986][ T68] hsr_slave_0: left promiscuous mode [ 1541.050857][ T68] hsr_slave_1: left promiscuous mode [ 1541.171148][ T68] veth1_macvtap: left promiscuous mode [ 1541.171231][ T68] veth0_macvtap: left promiscuous mode [ 1541.171412][ T68] veth1_vlan: left promiscuous mode [ 1541.171545][ T68] veth0_vlan: left promiscuous mode [ 1541.329158][T15370] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1541.334405][T15370] em28xx 10-1:0.0: Config register raw data: 0x2e [ 1541.334434][T15370] em28xx 10-1:0.0: I2S Audio (1 sample rate(s)) [ 1541.334454][T15370] em28xx 10-1:0.0: No AC97 audio processor [ 1542.023919][T22918] delete_channel: no stack [ 1543.318802][ T9069] usb 10-1: USB disconnect, device number 25 [ 1545.037402][ T38] audit: type=1800 audit(6055144409.133:128): pid=22932 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5930" name="nullb0" dev="tmpfs" ino=469 res=0 errno=0 [ 1545.147034][T22930] QAT: failed to copy from user cfg_data. [ 1545.250322][T22935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5931'. [ 1548.693283][T20537] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1548.714138][T20537] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1548.715546][T20537] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1548.722216][T20537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1548.723963][T20537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1550.775313][T20537] Bluetooth: hci3: command tx timeout [ 1551.023123][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.023221][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.056945][T22912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5925'. [ 1551.107796][T22928] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5929'. [ 1552.556677][T15370] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1552.723992][T15370] usb 2-1: Using ep0 maxpacket: 16 [ 1552.726013][T15370] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1552.726037][T15370] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1552.729082][T15370] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1552.729105][T15370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1552.729120][T15370] usb 2-1: Product: syz [ 1552.729130][T15370] usb 2-1: Manufacturer: syz [ 1552.729141][T15370] usb 2-1: SerialNumber: syz [ 1552.733248][T15370] usb 2-1: config 0 descriptor?? [ 1552.942863][T15370] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1552.942891][T15370] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1552.954746][T20537] Bluetooth: hci3: command tx timeout [ 1553.558714][T15370] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1553.559336][T15370] em28xx 2-1:0.0: Config register raw data: 0x2e [ 1553.559352][T15370] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 1553.559364][T15370] em28xx 2-1:0.0: No AC97 audio processor [ 1554.364100][T22937] lo speed is unknown, defaulting to 1000 [ 1554.836863][ T5791] usb 2-1: USB disconnect, device number 46 [ 1555.012897][T20537] Bluetooth: hci3: command tx timeout [ 1556.868714][ T38] audit: type=1800 audit(6055144420.969:129): pid=22969 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.5940" name="nullb0" dev="tmpfs" ino=469 res=0 errno=0 [ 1556.884835][T22972] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5941'. [ 1556.928162][T22751] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.100501][T20537] Bluetooth: hci3: command tx timeout [ 1557.119612][T22974] delete_channel: no stack [ 1557.571516][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.583472][ T5791] usb 9-1: USB disconnect, device number 91 [ 1558.925800][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.168386][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.429478][T22751] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.641442][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.877261][ C0] vkms_vblank_simulate: vblank timer overrun [ 1560.945075][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.506916][ C0] vkms_vblank_simulate: vblank timer overrun [ 1561.966867][ C0] vkms_vblank_simulate: vblank timer overrun [ 1562.162973][T22751] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.682294][T22751] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.426589][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5955'. [ 1564.830314][ T68] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.903508][T22289] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1565.118423][T22289] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1565.118458][T22289] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.118480][T22289] usb 10-1: Product: syz [ 1565.118495][T22289] usb 10-1: Manufacturer: syz [ 1565.118511][T22289] usb 10-1: SerialNumber: syz [ 1565.143779][T22289] usb 10-1: config 0 descriptor?? [ 1565.478466][ T68] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.581253][T23032] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5956'. [ 1567.026472][T22289] usb 10-1: f81604_read: reg: 100f failed: -EREMOTEIO [ 1567.759993][ T68] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.812058][T23037] lo speed is unknown, defaulting to 1000 [ 1568.031470][T22289] usb 10-1: f81604_read: reg: 200e failed: -EPROTO [ 1568.077101][T22289] usb 10-1: USB disconnect, device number 26 [ 1568.113225][T22937] chnl_net:caif_netlink_parms(): no params data found [ 1568.312507][T22289] usb 10-1: f81604_read: reg: 100f failed: -ENODEV [ 1568.898545][ T68] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1569.787922][T22289] usb 10-1: f81604_read: reg: 200f failed: -ENODEV [ 1570.132586][T22751] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1570.264270][T22751] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1570.453098][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5965'. [ 1570.543841][T22751] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1570.754916][T22751] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1570.755275][T10205] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1570.952638][T10205] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1570.952671][T10205] usb 2-1: config 0 has no interface number 0 [ 1570.991407][T10205] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1570.991442][T10205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.991465][T10205] usb 2-1: Product: syz [ 1570.992605][T10205] usb 2-1: Manufacturer: syz [ 1570.993754][T10205] usb 2-1: SerialNumber: syz [ 1571.065448][T10205] usb 2-1: config 0 descriptor?? [ 1571.111711][T22937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.127419][T22937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.128556][T22937] bridge_slave_0: entered allmulticast mode [ 1571.167186][T22937] bridge_slave_0: entered promiscuous mode [ 1571.265212][T22937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.265340][T22937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.265791][T22937] bridge_slave_1: entered allmulticast mode [ 1571.308361][T22937] bridge_slave_1: entered promiscuous mode [ 1571.590004][T10205] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1571.590026][T10205] usb 2-1: Firmware version (0.0) predates our first public release. [ 1571.590040][T10205] usb 2-1: Please update to version 0.2 or newer [ 1571.933152][T22937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.022952][T22937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1572.131885][T10205] usb 2-1: USB disconnect, device number 47 [ 1572.510159][ T68] bridge_slave_1: left allmulticast mode [ 1572.510194][ T68] bridge_slave_1: left promiscuous mode [ 1572.510477][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.889274][ T68] bridge_slave_0: left allmulticast mode [ 1572.889308][ T68] bridge_slave_0: left promiscuous mode [ 1572.889603][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.266740][T23086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1573.267952][T23086] IPv6: NLM_F_CREATE should be set when creating new route [ 1573.271295][T23086] IPv6: NLM_F_CREATE should be set when creating new route [ 1575.072894][T22289] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1575.222912][T22289] usb 10-1: device descriptor read/64, error -71 [ 1575.482756][T22289] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1575.612669][T22289] usb 10-1: device descriptor read/64, error -71 [ 1575.725730][T22289] usb usb10-port1: attempt power cycle [ 1576.112530][T22289] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1576.133129][T22289] usb 10-1: device descriptor read/8, error -71 [ 1576.213138][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1576.273030][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1576.295882][ T68] bond0 (unregistering): Released all slaves [ 1576.372266][T22289] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1576.392989][T22289] usb 10-1: device descriptor read/8, error -71 [ 1576.502574][T22289] usb usb10-port1: unable to enumerate USB device [ 1578.122619][T22937] team0: Port device team_slave_0 added [ 1578.175898][T22937] team0: Port device team_slave_1 added [ 1579.553155][T22937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.553175][T22937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.553206][T22937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.570541][T22937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.570559][T22937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.570590][T22937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.140259][ T9069] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1580.342675][ T9069] usb 10-1: config 0 has an invalid interface number: 128 but max is 0 [ 1580.342713][ T9069] usb 10-1: config 0 has no interface number 0 [ 1580.346224][ T9069] usb 10-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1580.346257][ T9069] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.346280][ T9069] usb 10-1: Product: syz [ 1580.346297][ T9069] usb 10-1: Manufacturer: syz [ 1580.346314][ T9069] usb 10-1: SerialNumber: syz [ 1580.356043][ T9069] usb 10-1: config 0 descriptor?? [ 1580.504393][T22937] hsr_slave_0: entered promiscuous mode [ 1580.513352][T22937] hsr_slave_1: entered promiscuous mode [ 1580.574502][T22937] debugfs: 'hsr0' already exists in 'hsr' [ 1580.574536][T22937] Cannot create hsr debugfs directory [ 1580.750808][ T68] hsr_slave_0: left promiscuous mode [ 1580.802785][ T9069] usb 10-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1580.802820][ T9069] usb 10-1: Firmware version (0.0) predates our first public release. [ 1580.802841][ T9069] usb 10-1: Please update to version 0.2 or newer [ 1580.812517][ T68] hsr_slave_1: left promiscuous mode [ 1580.815109][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1580.815154][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1580.873935][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1580.873969][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1581.063808][ T68] veth1_macvtap: left promiscuous mode [ 1581.063888][ T68] veth0_macvtap: left promiscuous mode [ 1581.064111][ T68] veth1_vlan: left promiscuous mode [ 1581.064236][ T68] veth0_vlan: left promiscuous mode [ 1583.016158][T10003] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1583.027915][T10003] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1583.044310][T10003] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1583.045598][T10003] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1583.046890][T10003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1584.779366][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1585.088576][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1585.161116][T10003] Bluetooth: hci5: command tx timeout [ 1587.208635][ T68] team0 (unregistering): Port device dummy0 removed [ 1587.251991][T10003] Bluetooth: hci5: command tx timeout [ 1588.684609][ T9069] usb 10-1: USB disconnect, device number 31 [ 1588.897995][T23159] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1589.385666][T10003] Bluetooth: hci5: command tx timeout [ 1590.129473][ T5792] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1590.307660][ T5792] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 1590.307693][ T5792] usb 2-1: config 0 has no interface number 0 [ 1590.312999][ T5792] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1590.313032][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.313054][ T5792] usb 2-1: Product: syz [ 1590.313070][ T5792] usb 2-1: Manufacturer: syz [ 1590.313085][ T5792] usb 2-1: SerialNumber: syz [ 1590.394489][ T5792] usb 2-1: config 0 descriptor?? [ 1590.420227][T23152] lo speed is unknown, defaulting to 1000 [ 1590.897702][ T5792] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1590.897725][ T5792] usb 2-1: Firmware version (0.0) predates our first public release. [ 1590.897739][ T5792] usb 2-1: Please update to version 0.2 or newer [ 1591.347869][ T5792] usb 2-1: USB disconnect, device number 48 [ 1591.414674][T10003] Bluetooth: hci5: command tx timeout [ 1594.623959][T23203] batman_adv: batadv0: Interface deactivated: dummy0 [ 1594.623992][T23203] batman_adv: batadv0: Removing interface: dummy0 [ 1594.822379][T23203] bridge_slave_0: left allmulticast mode [ 1594.822424][T23203] bridge_slave_0: left promiscuous mode [ 1594.837431][T23203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.913974][T23203] bridge_slave_1: left allmulticast mode [ 1594.914009][T23203] bridge_slave_1: left promiscuous mode [ 1594.914256][T23203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.055553][T23203] bond0: (slave bond_slave_0): Releasing backup interface [ 1595.930450][T23203] bond0: (slave bond_slave_1): Releasing backup interface [ 1596.271355][T23203] team0: Port device team_slave_0 removed [ 1596.346501][T23203] team0: Port device team_slave_1 removed [ 1596.348761][T23203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1596.348792][T23203] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1596.507316][T23203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1596.507342][T23203] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1596.559298][T23203] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1596.741940][ T5791] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1596.933138][ T5791] usb 10-1: Using ep0 maxpacket: 8 [ 1596.975108][ T5791] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1596.975136][ T5791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1596.978830][ T5791] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1596.978933][ T5791] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.978957][ T5791] usb 10-1: Product: syz [ 1596.978973][ T5791] usb 10-1: Manufacturer: syz [ 1596.978990][ T5791] usb 10-1: SerialNumber: syz [ 1597.038042][ T5791] usb 10-1: config 0 descriptor?? [ 1597.092042][ T5791] streamzap 10-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1598.914477][T23241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6014'. [ 1599.697293][ T5791] usb 10-1: USB disconnect, device number 32 [ 1599.994473][T23258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6019'. [ 1600.189050][T23258] bond1: Invalid ad_actor_system MAC address. [ 1600.189076][T23258] bond1: option ad_actor_system: invalid value (6543) [ 1600.223430][T23258] bond1 (unregistering): Released all slaves [ 1600.446150][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6016'. [ 1600.880895][T23266] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1601.600687][T23152] chnl_net:caif_netlink_parms(): no params data found [ 1605.642784][T22937] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1605.672751][T23152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1605.673363][T23152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1605.673551][T23152] bridge_slave_0: entered allmulticast mode [ 1605.682674][T23152] bridge_slave_0: entered promiscuous mode [ 1605.701888][T22937] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1605.756130][T23152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.756279][T23152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.756538][T23152] bridge_slave_1: entered allmulticast mode [ 1605.770463][T23152] bridge_slave_1: entered promiscuous mode [ 1605.815881][T22937] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1606.265571][T22937] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1607.112552][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6030'. [ 1608.937981][T22937] kthread_run failed with err -4 [ 1608.969646][T23152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.138572][T23152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.465575][T10003] Bluetooth: hci1: command 0x0406 tx timeout [ 1613.914573][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.914657][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.654442][ T68] bridge_slave_1: left allmulticast mode [ 1614.654474][ T68] bridge_slave_1: left promiscuous mode [ 1614.654732][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.706995][T23341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6038'. [ 1614.827654][ T68] bridge_slave_0: left allmulticast mode [ 1614.827687][ T68] bridge_slave_0: left promiscuous mode [ 1614.827966][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.898754][T10003] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1614.902315][T10003] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1614.927169][T10003] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1614.947110][T10003] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1614.967605][T10003] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1616.133470][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1616.272869][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1616.355420][ T68] bond0 (unregistering): Released all slaves [ 1616.395466][T23152] team0: Port device team_slave_0 added [ 1616.768945][T23152] team0: Port device team_slave_1 added [ 1617.062103][T20537] Bluetooth: hci2: command tx timeout [ 1617.132094][ T68] hsr_slave_0: left promiscuous mode [ 1617.161948][ T68] hsr_slave_1: left promiscuous mode [ 1617.162861][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1617.203608][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1618.062040][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1618.252485][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1619.152245][T20537] Bluetooth: hci2: command tx timeout [ 1619.814021][T23152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1619.814041][T23152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.814073][T23152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1619.830726][T23152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.830750][T23152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.830787][T23152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1620.071035][T23344] lo speed is unknown, defaulting to 1000 [ 1620.106979][ T38] audit: type=1326 audit(6055144484.251:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23380 comm="syz.2.6050" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdfb18f749 code=0x0 [ 1620.168311][T23384] netlink: 'syz.2.6050': attribute type 10 has an invalid length. [ 1620.521317][T23152] hsr_slave_0: entered promiscuous mode [ 1620.523706][T23152] hsr_slave_1: entered promiscuous mode [ 1620.525748][T23152] debugfs: 'hsr0' already exists in 'hsr' [ 1620.525768][T23152] Cannot create hsr debugfs directory [ 1621.219747][T20537] Bluetooth: hci2: command tx timeout [ 1622.278810][T23344] chnl_net:caif_netlink_parms(): no params data found [ 1622.636684][T23414] lo speed is unknown, defaulting to 1000 [ 1623.002579][ T38] audit: type=1326 audit(6055144487.152:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23423 comm="syz.2.6063" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdfb18f749 code=0x0 [ 1623.069717][T23429] netlink: 'syz.2.6063': attribute type 10 has an invalid length. [ 1623.298713][T20537] Bluetooth: hci2: command tx timeout [ 1623.694597][T23344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1623.694966][T23344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1623.695286][T23344] bridge_slave_0: entered allmulticast mode [ 1623.699601][T23344] bridge_slave_0: entered promiscuous mode [ 1624.056229][T23344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1624.056376][T23344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1624.056643][T23344] bridge_slave_1: entered allmulticast mode [ 1624.067556][T23344] bridge_slave_1: entered promiscuous mode [ 1624.825494][T23344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1624.851964][T23344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.304468][T23344] team0: Port device team_slave_0 added [ 1627.314458][T23344] team0: Port device team_slave_1 added [ 1628.645551][ T38] audit: type=1326 audit(6055144492.795:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23464 comm="syz.2.6073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdfb18f749 code=0x0 [ 1628.704687][T23468] netlink: 'syz.2.6073': attribute type 10 has an invalid length. [ 1628.858221][T23344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1628.858242][T23344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.858273][T23344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1628.913433][T23344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1628.913453][T23344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.913484][T23344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.215782][T23152] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1629.418617][T23152] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1629.750007][T23152] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1629.821803][T23344] hsr_slave_0: entered promiscuous mode [ 1629.823400][T23344] hsr_slave_1: entered promiscuous mode [ 1629.841035][T23344] debugfs: 'hsr0' already exists in 'hsr' [ 1629.841066][T23344] Cannot create hsr debugfs directory [ 1629.841649][T23152] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1630.001195][T23489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6080'. [ 1630.035329][ T5791] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1630.187564][ T5791] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1630.187588][ T5791] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1630.190300][ T5791] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1630.190323][ T5791] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1630.190339][ T5791] usb 10-1: Product: syz [ 1630.190350][ T5791] usb 10-1: Manufacturer: syz [ 1630.190361][ T5791] usb 10-1: SerialNumber: syz [ 1630.470681][ T68] bridge_slave_1: left allmulticast mode [ 1630.470713][ T68] bridge_slave_1: left promiscuous mode [ 1630.470980][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.536844][ T68] bridge_slave_0: left allmulticast mode [ 1630.536879][ T68] bridge_slave_0: left promiscuous mode [ 1630.537166][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.906060][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1631.026003][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1631.090243][ T68] bond0 (unregistering): Released all slaves [ 1631.774656][ T68] hsr_slave_0: left promiscuous mode [ 1631.794559][ T68] hsr_slave_1: left promiscuous mode [ 1631.795544][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1631.836021][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1632.936630][T23518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6085'. [ 1633.146396][ T191] usb 10-1: USB disconnect, device number 33 [ 1633.745280][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1633.915181][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1635.949490][T23152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1636.028661][T23152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1636.048322][T23538] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6091'. [ 1636.281392][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.281570][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.358973][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.359132][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1637.392155][ T5792] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1637.587141][ T5792] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1637.587175][ T5792] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1637.593415][ T5792] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1637.593449][ T5792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1637.593472][ T5792] usb 10-1: Product: syz [ 1637.593488][ T5792] usb 10-1: Manufacturer: syz [ 1637.593504][ T5792] usb 10-1: SerialNumber: syz [ 1638.348073][T23563] netlink: 'syz.1.6097': attribute type 10 has an invalid length. [ 1638.370315][T23563] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1638.399752][T23344] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1638.756708][T23563] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 1638.771079][T23344] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1638.796137][T23344] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1639.065641][T23344] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1640.534699][ T5791] usb 10-1: USB disconnect, device number 34 [ 1640.580914][T23152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.109339][T23344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.295749][T23344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1641.328747][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.329140][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1641.386603][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.386774][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.920664][T23608] No source specified [ 1646.448897][T20537] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1646.499819][T20537] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1646.502964][T20537] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1646.540672][T20537] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1646.565581][T20537] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1647.445986][T23657] binder: 23654:23657 ioctl c0306201 0 returned -14 [ 1647.508180][T23658] No source specified [ 1648.223628][T23643] batman_adv: batadv0: Adding interface: gretap1 [ 1648.223643][T23643] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1648.225164][T23643] batman_adv: batadv0: Interface activated: gretap1 [ 1648.453544][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6115'. [ 1648.645970][T10003] Bluetooth: hci3: command tx timeout [ 1648.747125][T19918] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.807668][T19918] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.826584][T19918] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1648.882414][T19918] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.274064][T23344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.755327][T10003] Bluetooth: hci3: command tx timeout [ 1650.927180][T23686] syz.2.6122 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1651.235242][T23652] lo speed is unknown, defaulting to 1000 [ 1651.617218][T23693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6125'. [ 1652.804059][T10003] Bluetooth: hci3: command tx timeout [ 1653.306490][T23344] veth0_vlan: entered promiscuous mode [ 1653.758837][T23711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6130'. [ 1654.489769][T23344] veth1_vlan: entered promiscuous mode [ 1654.938511][T10003] Bluetooth: hci3: command tx timeout [ 1655.184675][T23652] chnl_net:caif_netlink_parms(): no params data found [ 1655.325391][ T58] bridge_slave_1: left allmulticast mode [ 1655.325416][ T58] bridge_slave_1: left promiscuous mode [ 1655.325633][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1655.524555][ T58] bridge_slave_0: left allmulticast mode [ 1655.524589][ T58] bridge_slave_0: left promiscuous mode [ 1655.524871][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.467204][T23737] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6135'. [ 1658.671943][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1658.731787][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1658.754679][ T58] bond0 (unregistering): Released all slaves [ 1660.763363][ T58] hsr_slave_0: left promiscuous mode [ 1661.777218][ T58] hsr_slave_1: left promiscuous mode [ 1661.778100][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1661.856859][T23764] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1662.493011][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1664.064359][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.146708][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.208257][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.272876][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.339277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.413642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.478944][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.608951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.706347][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.758920][ C1] vkms_vblank_simulate: vblank timer overrun [ 1664.821274][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1664.926575][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.001466][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.118617][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1665.736776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.810360][ C1] vkms_vblank_simulate: vblank timer overrun [ 1665.879945][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.030811][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.110348][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.251202][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.304749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.398232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.539190][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.605459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.671450][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.764833][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.912893][ C1] vkms_vblank_simulate: vblank timer overrun [ 1666.984126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.070018][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.136082][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.186319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.308763][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.460090][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.583832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.640277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.704688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.776405][ C1] vkms_vblank_simulate: vblank timer overrun [ 1667.929410][ C1] vkms_vblank_simulate: vblank timer overrun [ 1669.651179][T20537] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1669.677740][T20537] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1669.682124][T20537] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1669.693601][T20537] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1669.694515][T20537] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1670.206320][T23768] team0: left allmulticast mode [ 1670.206344][T23768] team0: left promiscuous mode [ 1670.262349][T23768] batman_adv: batadv0: Interface deactivated: gretap1 [ 1670.296317][T23344] veth0_macvtap: entered promiscuous mode [ 1670.405716][T23789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6152'. [ 1670.440965][T13864] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.454702][T13864] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.456770][T23652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.456946][T23652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.457311][T23652] bridge_slave_0: entered allmulticast mode [ 1670.460955][T23652] bridge_slave_0: entered promiscuous mode [ 1670.486320][T13864] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1670.488775][T23652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1670.488943][T23652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.489332][T23652] bridge_slave_1: entered allmulticast mode [ 1670.509813][T23652] bridge_slave_1: entered promiscuous mode [ 1670.517703][T13864] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.549059][T23652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1671.650474][T23652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1671.654102][T23782] lo speed is unknown, defaulting to 1000 [ 1671.755195][T20537] Bluetooth: hci5: command tx timeout [ 1673.888980][T20537] Bluetooth: hci5: command tx timeout [ 1673.889543][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.889625][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1673.979494][T23819] binfmt_misc: register: failed to install interpreter file ./file0 [ 1673.999575][ T38] audit: type=1326 audit(6055144538.128:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1673.999647][ T38] audit: type=1326 audit(6055144538.128:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1673.999696][ T38] audit: type=1326 audit(6055144538.128:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1673.999928][ T38] audit: type=1326 audit(6055144538.128:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1674.000172][ T38] audit: type=1326 audit(6055144538.128:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1674.000535][ T38] audit: type=1326 audit(6055144538.128:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1674.000774][ T38] audit: type=1326 audit(6055144538.128:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1674.000824][ T38] audit: type=1326 audit(6055144538.128:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1674.000873][ T38] audit: type=1326 audit(6055144538.148:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1674.000923][ T38] audit: type=1326 audit(6055144538.148:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23816 comm="syz.9.6159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1674.296833][T23652] team0: Port device team_slave_0 added [ 1674.453422][T23652] team0: Port device team_slave_1 added [ 1674.761069][T23832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6163'. [ 1674.824246][T23652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.824265][T23652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.824296][T23652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1674.904106][T23652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1674.904125][T23652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1674.904158][T23652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.252446][T20537] Bluetooth: hci5: command tx timeout [ 1676.617566][T23854] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6170'. [ 1676.668934][T23652] hsr_slave_0: entered promiscuous mode [ 1676.670686][T23652] hsr_slave_1: entered promiscuous mode [ 1676.685117][T23652] debugfs: 'hsr0' already exists in 'hsr' [ 1676.685138][T23652] Cannot create hsr debugfs directory [ 1678.311803][T10003] Bluetooth: hci5: command tx timeout [ 1678.990091][T23870] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6174'. [ 1679.078094][ C0] vkms_vblank_simulate: vblank timer overrun [ 1681.307464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1681.602950][T23782] chnl_net:caif_netlink_parms(): no params data found [ 1682.280278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1682.862422][ C0] vkms_vblank_simulate: vblank timer overrun [ 1682.979728][ C0] vkms_vblank_simulate: vblank timer overrun [ 1682.998983][T23892] netlink: 'syz.2.6178': attribute type 13 has an invalid length. [ 1686.287384][T23782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.287545][T23782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1686.287863][T23782] bridge_slave_0: entered allmulticast mode [ 1686.296825][T23782] bridge_slave_0: entered promiscuous mode [ 1686.363285][T23782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.374348][T23782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1686.374622][T23782] bridge_slave_1: entered allmulticast mode [ 1686.376678][T23782] bridge_slave_1: entered promiscuous mode [ 1687.303879][ T58] bridge_slave_1: left allmulticast mode [ 1687.303912][ T58] bridge_slave_1: left promiscuous mode [ 1687.304204][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.568228][ T58] bridge_slave_0: left allmulticast mode [ 1687.568261][ T58] bridge_slave_0: left promiscuous mode [ 1687.568540][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.659747][ T38] audit: type=1326 audit(6055144553.846:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23929 comm="syz.2.6188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdfb18f749 code=0x0 [ 1689.731148][T23931] 9pnet_fd: Insufficient options for proto=fd [ 1691.225627][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.663655][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.789486][ T58] bond0 (unregistering): Released all slaves [ 1691.942618][T23782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.048249][T23782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1693.331684][T23782] team0: Port device team_slave_0 added [ 1693.464651][ T58] hsr_slave_0: left promiscuous mode [ 1693.513521][ T58] hsr_slave_1: left promiscuous mode [ 1693.514400][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1693.544957][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1693.815233][ T58] veth0_macvtap: left promiscuous mode [ 1693.815438][ T58] veth1_vlan: left promiscuous mode [ 1693.815567][ T58] veth0_vlan: left promiscuous mode [ 1694.638388][ T38] audit: type=1326 audit(6055144558.818:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23960 comm="syz.9.6197" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97d88cf749 code=0x0 [ 1694.687191][T23963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6198'. [ 1694.704922][T23964] 9pnet_fd: Insufficient options for proto=fd [ 1698.142659][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1698.414881][ T38] audit: type=1326 audit(6055144562.600:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23997 comm="syz.9.6209" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97d88cf749 code=0x0 [ 1698.462053][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1698.482665][T23999] 9pnet_fd: Insufficient options for proto=fd [ 1700.651132][ C1] vkms_vblank_simulate: vblank timer overrun [ 1700.751232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1700.808634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1700.874776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.145168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.356912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.439016][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.508911][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.558216][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.858855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.929006][ C1] vkms_vblank_simulate: vblank timer overrun [ 1701.989885][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.117346][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.358686][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.424561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.471986][T23782] team0: Port device team_slave_1 added [ 1702.642071][ C1] vkms_vblank_simulate: vblank timer overrun [ 1702.880675][ C1] vkms_vblank_simulate: vblank timer overrun [ 1703.097180][ C1] vkms_vblank_simulate: vblank timer overrun [ 1703.304051][ C1] vkms_vblank_simulate: vblank timer overrun [ 1703.672289][T23782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1703.672308][T23782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1703.672336][T23782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1703.732230][T23782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1703.732249][T23782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1703.732280][T23782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1703.873929][ C1] vkms_vblank_simulate: vblank timer overrun [ 1703.930364][T24024] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1703.954051][T24024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1704.053801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1704.062680][T20537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1704.108846][T20537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1704.115358][T20537] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1704.117017][T20537] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1704.148201][T20537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1704.237093][ C1] vkms_vblank_simulate: vblank timer overrun [ 1704.322659][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.101459][ C1] vkms_vblank_simulate: vblank timer overrun [ 1705.225374][ T38] audit: type=1326 audit(6055144569.414:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24032 comm="syz.9.6219" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97d88cf749 code=0x0 [ 1705.282120][T24035] 9pnet_fd: Insufficient options for proto=fd [ 1705.529190][T23782] hsr_slave_0: entered promiscuous mode [ 1705.530876][T23782] hsr_slave_1: entered promiscuous mode [ 1705.532044][T23782] debugfs: 'hsr0' already exists in 'hsr' [ 1705.532071][T23782] Cannot create hsr debugfs directory [ 1705.959347][T24022] lo speed is unknown, defaulting to 1000 [ 1706.245840][T20537] Bluetooth: hci2: command tx timeout [ 1708.298038][T20537] Bluetooth: hci2: command tx timeout [ 1708.782841][T24075] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6233'. [ 1708.801344][ T38] audit: type=1326 audit(6055144572.995:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24076 comm="syz.1.6234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8cbce9f749 code=0x0 [ 1708.846928][T24078] 9pnet_fd: Insufficient options for proto=fd [ 1709.218597][T24083] binder: 24079:24083 ioctl c0306201 0 returned -14 [ 1709.222698][T24083] No source specified [ 1710.166461][T24022] chnl_net:caif_netlink_parms(): no params data found [ 1710.378073][T20537] Bluetooth: hci2: command tx timeout [ 1710.989845][T24108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1711.023646][T24103] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6238'. [ 1711.200528][T24022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1711.200751][T24022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1711.201088][T24022] bridge_slave_0: entered allmulticast mode [ 1711.223255][T24022] bridge_slave_0: entered promiscuous mode [ 1711.265485][T24022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1711.265905][T24022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1711.266201][T24022] bridge_slave_1: entered allmulticast mode [ 1711.269293][T24022] bridge_slave_1: entered promiscuous mode [ 1711.615478][T24022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.651320][T24022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.939777][T24022] team0: Port device team_slave_0 added [ 1711.950764][T24022] team0: Port device team_slave_1 added [ 1712.349391][T23782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1712.388520][ T58] bridge_slave_1: left allmulticast mode [ 1712.388552][ T58] bridge_slave_1: left promiscuous mode [ 1712.388803][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1712.495261][T20537] Bluetooth: hci2: command tx timeout [ 1713.379546][ T58] bridge_slave_0: left allmulticast mode [ 1713.379570][ T58] bridge_slave_0: left promiscuous mode [ 1713.379775][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.263504][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1715.414771][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1715.504216][ T58] bond0 (unregistering): Released all slaves [ 1716.169216][T24140] fuse: Unknown parameter '0x0000000000000003' [ 1716.587140][T23782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1716.670167][T24022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.670187][T24022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.670217][T24022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.671218][T23782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1717.231674][ T58] hsr_slave_0: left promiscuous mode [ 1717.251817][ T58] hsr_slave_1: left promiscuous mode [ 1717.253053][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1717.302481][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.328910][T24150] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1719.001500][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1719.181604][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1719.859283][T24022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1719.859304][T24022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1719.859337][T24022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1719.904720][T23782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1720.073251][T24165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1720.477397][T24022] hsr_slave_0: entered promiscuous mode [ 1720.479038][T24022] hsr_slave_1: entered promiscuous mode [ 1720.492065][T24022] debugfs: 'hsr0' already exists in 'hsr' [ 1720.492096][T24022] Cannot create hsr debugfs directory [ 1721.370968][T24184] bridge0: port 1(gretap0) entered blocking state [ 1721.371061][T24184] bridge0: port 1(gretap0) entered disabled state [ 1721.374555][T24184] gretap0: entered allmulticast mode [ 1721.377620][T24184] gretap0: entered promiscuous mode [ 1722.283272][T23782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1722.365237][T23782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1722.479261][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 1722.479425][T10588] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1722.554572][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1722.554815][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1722.980773][T24198] netlink: 'syz.2.6268': attribute type 10 has an invalid length. [ 1722.990232][T24198] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1724.598675][T24211] netlink: 'syz.1.6272': attribute type 10 has an invalid length. [ 1724.629404][T24211] 8021q: adding VLAN 0 to HW filter on device team0 [ 1724.649638][T24211] bond0: (slave team0): Enslaving as an active interface with an up link [ 1725.095104][T24216] bridge0: port 1(gretap0) entered blocking state [ 1725.095200][T24216] bridge0: port 1(gretap0) entered disabled state [ 1725.095555][T24216] gretap0: entered allmulticast mode [ 1725.130284][T24216] gretap0: entered promiscuous mode [ 1725.396593][T24022] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1725.450405][T23782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1725.459314][T24022] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1725.629438][T24022] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1725.714554][T24022] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1725.987686][T23650] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1725.996927][T23782] veth0_vlan: entered promiscuous mode [ 1726.045431][T23782] veth1_vlan: entered promiscuous mode [ 1726.152774][T23650] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1726.152808][T23650] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1726.152835][T23650] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1726.201168][T23650] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1726.201203][T23650] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1726.201226][T23650] usb 2-1: Product: syz [ 1726.201243][T23650] usb 2-1: Manufacturer: syz [ 1726.201259][T23650] usb 2-1: SerialNumber: syz [ 1726.355988][T24022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1726.387880][T23782] veth0_macvtap: entered promiscuous mode [ 1726.998646][T23782] veth1_macvtap: entered promiscuous mode [ 1727.018176][T23650] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1727.262925][T24022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1728.802469][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1728.814087][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1728.832963][T22564] usb 2-1: USB disconnect, device number 49 [ 1728.845286][T22564] usblp0: removed [ 1728.870271][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 1728.870420][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1728.919063][T23782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1728.979720][T23782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1729.062191][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.158552][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.174737][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.177356][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1729.231943][T24257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6286'. [ 1732.660007][T24022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1732.880810][T10003] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1733.033493][T10003] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1733.070118][T10003] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1733.119143][T10003] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1733.140544][T10003] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1733.863316][ C0] vkms_vblank_simulate: vblank timer overrun [ 1733.949453][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.289931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.382761][T24289] lo speed is unknown, defaulting to 1000 [ 1734.481195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.644567][ C0] vkms_vblank_simulate: vblank timer overrun [ 1734.803807][ C0] vkms_vblank_simulate: vblank timer overrun [ 1735.263473][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.263569][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.357453][ C0] vkms_vblank_simulate: vblank timer overrun [ 1735.844268][T10003] Bluetooth: hci3: command tx timeout [ 1736.243017][ C0] vkms_vblank_simulate: vblank timer overrun [ 1736.398855][T24323] pimreg: entered allmulticast mode [ 1737.670087][ C0] vkms_vblank_simulate: vblank timer overrun [ 1738.051012][T10003] Bluetooth: hci3: command tx timeout [ 1738.816327][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.885051][ T38] audit: type=1326 audit(6055144603.090:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24349 comm="syz.9.6306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97d88cf749 code=0x0 [ 1738.961354][T24351] netlink: 'syz.9.6306': attribute type 10 has an invalid length. [ 1738.966565][T24351] dummy0: left promiscuous mode [ 1738.969320][T24351] team0: Device dummy0 failed to register rx_handler [ 1739.397590][T24355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6307'. [ 1739.397618][T24355] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6307'. [ 1739.494581][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.863909][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.346950][T10003] Bluetooth: hci3: command tx timeout [ 1740.535557][T24022] veth0_vlan: entered promiscuous mode [ 1740.968482][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.041064][T24289] chnl_net:caif_netlink_parms(): no params data found [ 1741.088409][T24022] veth1_vlan: entered promiscuous mode [ 1741.569520][T24385] trusted_key: encrypted_key: key user:syz not found [ 1741.670870][ T38] audit: type=1326 audit(6055144605.882:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24387 comm="syz.9.6317" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97d88cf749 code=0x0 [ 1742.385659][T10003] Bluetooth: hci3: command tx timeout [ 1743.046207][T24289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.046355][T24289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.046687][T24289] bridge_slave_0: entered allmulticast mode [ 1743.056996][T24289] bridge_slave_0: entered promiscuous mode [ 1743.717119][T24289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.717283][T24289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.717635][T24289] bridge_slave_1: entered allmulticast mode [ 1743.741549][T24289] bridge_slave_1: entered promiscuous mode [ 1744.346384][T24289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.370934][T24289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.410533][T24022] veth0_macvtap: entered promiscuous mode [ 1744.674781][ T58] bridge_slave_1: left allmulticast mode [ 1744.674813][ T58] bridge_slave_1: left promiscuous mode [ 1744.675096][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.763565][ T58] bridge_slave_0: left allmulticast mode [ 1744.763600][ T58] bridge_slave_0: left promiscuous mode [ 1744.763861][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.910457][T23649] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1745.078535][T23649] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.078588][T23649] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1745.078612][T23649] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.098930][T23649] usb 10-1: config 0 descriptor?? [ 1745.749476][T23649] usbhid 10-1:0.0: can't add hid device: -71 [ 1745.749623][T23649] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1745.761131][T23649] usb 10-1: USB disconnect, device number 35 [ 1746.057319][T23649] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1746.207327][T23649] usb 10-1: Using ep0 maxpacket: 32 [ 1746.209725][T23649] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1746.209778][T23649] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1746.209804][T23649] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.267905][T23649] usb 10-1: config 0 descriptor?? [ 1746.274008][T23649] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1746.299782][T23649] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1746.737625][T23649] usb 10-1: USB disconnect, device number 36 [ 1746.741771][T23649] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1747.393066][ T38] audit: type=1326 audit(6055144611.605:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24429 comm="syz.9.6329" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97d88cf749 code=0x0 [ 1747.967182][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1748.026913][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1748.049558][ T58] bond0 (unregistering): Released all slaves [ 1748.088377][T24022] veth1_macvtap: entered promiscuous mode [ 1748.222787][T24289] team0: Port device team_slave_0 added [ 1748.403962][T24289] team0: Port device team_slave_1 added [ 1750.001334][T24289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1750.001352][T24289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1750.001381][T24289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1750.216086][ T58] hsr_slave_0: left promiscuous mode [ 1750.256106][ T58] hsr_slave_1: left promiscuous mode [ 1750.265992][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.266025][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.586915][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1750.586947][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.759870][ T58] veth1_macvtap: left promiscuous mode [ 1751.759993][ T58] veth0_macvtap: left promiscuous mode [ 1751.761512][ T58] veth1_vlan: left promiscuous mode [ 1751.761716][ T58] veth0_vlan: left promiscuous mode [ 1752.328797][T24474] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6342'. [ 1757.362340][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1757.614549][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1760.732368][T24289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1760.732389][T24289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1760.732421][T24289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1760.826082][T24490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6347'. [ 1760.892859][T24022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1760.907969][T24494] gretap0: left allmulticast mode [ 1760.908000][T24494] gretap0: left promiscuous mode [ 1760.908212][T24494] bridge0: port 1(gretap0) entered disabled state [ 1761.054215][ T38] audit: type=1800 audit(6055144625.271:151): pid=24501 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.6350" name="nullb0" dev="tmpfs" ino=469 res=0 errno=0 [ 1761.091390][T24494] bond0: (slave team0): Releasing backup interface [ 1761.181211][ T38] audit: type=1326 audit(6055144625.372:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24495 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1761.181260][ T38] audit: type=1326 audit(6055144625.372:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24495 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1761.181296][ T38] audit: type=1326 audit(6055144625.382:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24495 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1761.181329][ T38] audit: type=1326 audit(6055144625.382:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24495 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1761.181362][ T38] audit: type=1326 audit(6055144625.382:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24495 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1761.181395][ T38] audit: type=1326 audit(6055144625.392:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24495 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1761.181429][ T38] audit: type=1326 audit(6055144625.392:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24495 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1761.183802][ T38] audit: type=1326 audit(6055144625.392:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24495 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1761.189665][T24494] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1761.385438][T24498] binfmt_misc: register: failed to install interpreter file ./file0 [ 1761.386316][ T38] audit: type=1326 audit(6055144625.602:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24495 comm="syz.9.6349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d88cf749 code=0x7ffc0000 [ 1761.433081][T24022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.776746][T24289] hsr_slave_0: entered promiscuous mode [ 1761.778430][T24289] hsr_slave_1: entered promiscuous mode [ 1761.819384][T24289] debugfs: 'hsr0' already exists in 'hsr' [ 1761.819427][T24289] Cannot create hsr debugfs directory [ 1761.909503][ T1292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.916585][ T1292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.261347][ T1292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.339096][ T1292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1764.733326][T24527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6357'. [ 1765.918766][T20537] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1765.939048][T20537] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1765.962790][T20537] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1765.963909][T20537] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1765.965211][T20537] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1766.269505][T24537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6358'. [ 1768.109853][T20537] Bluetooth: hci2: command tx timeout [ 1768.283979][ T68] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.393182][T24533] lo speed is unknown, defaulting to 1000 [ 1768.940192][ T68] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.198056][T20537] Bluetooth: hci2: command tx timeout [ 1770.337535][T24568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6366'. [ 1771.254524][ T68] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.811742][ T68] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.069841][T24289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1772.161031][T24289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1772.274315][T20537] Bluetooth: hci2: command tx timeout [ 1772.326899][T24289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1772.429142][T24289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1772.852083][ T68] bridge_slave_1: left allmulticast mode [ 1772.852116][ T68] bridge_slave_1: left promiscuous mode [ 1772.852370][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.945718][ T68] bridge_slave_0: left allmulticast mode [ 1772.945751][ T68] bridge_slave_0: left promiscuous mode [ 1772.951954][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.343372][T20537] Bluetooth: hci2: command tx timeout [ 1774.433135][T23649] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1774.652903][T23649] usb 10-1: Using ep0 maxpacket: 8 [ 1774.655060][T23649] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1774.655092][T23649] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1774.655111][T23649] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1774.655128][T23649] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1774.655159][T23649] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1774.655177][T23649] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.924884][T24615] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6376'. [ 1775.816922][T23649] usb 10-1: GET_CAPABILITIES returned 0 [ 1775.816974][T23649] usbtmc 10-1:16.0: can't read capabilities [ 1776.083302][ C0] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1776.083704][T24608] usbtmc 10-1:16.0: Unable to send data, error -71 [ 1776.089491][T23649] usb 10-1: USB disconnect, device number 37 [ 1778.432221][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1778.492042][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1778.515280][ T68] bond0 (unregistering): Released all slaves [ 1778.868115][T24533] chnl_net:caif_netlink_parms(): no params data found [ 1779.409396][T24640] netlink: 'syz.2.6384': attribute type 10 has an invalid length. [ 1779.440588][ T68] hsr_slave_0: left promiscuous mode [ 1779.485434][ T68] hsr_slave_1: left promiscuous mode [ 1779.488521][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1779.488552][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1779.521900][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1779.521933][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1779.721252][ T68] veth1_macvtap: left promiscuous mode [ 1779.721374][ T68] veth0_macvtap: left promiscuous mode [ 1779.721658][ T68] veth1_vlan: left promiscuous mode [ 1779.721860][ T68] veth0_vlan: left promiscuous mode [ 1780.156141][T10205] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1780.415384][T10205] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1780.415437][T10205] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1780.415456][T10205] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1780.456906][T10205] usb 10-1: config 0 descriptor?? [ 1780.679965][T10205] usbhid 10-1:0.0: can't add hid device: -71 [ 1780.680077][T10205] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1780.688994][T10205] usb 10-1: USB disconnect, device number 38 [ 1781.118265][T24655] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6388'. [ 1781.209731][T10205] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1781.369503][T10205] usb 10-1: Using ep0 maxpacket: 32 [ 1781.371874][T10205] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.371922][T10205] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1781.371941][T10205] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.376192][T10205] usb 10-1: config 0 descriptor?? [ 1781.385362][T10205] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1781.392944][T10205] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1782.967144][ T992] usb 10-1: USB disconnect, device number 39 [ 1782.980409][ T992] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 1785.522551][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1785.798040][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1789.639637][T24640] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1789.907570][T24533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.909520][T24533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.909819][T24533] bridge_slave_0: entered allmulticast mode [ 1789.919755][T24533] bridge_slave_0: entered promiscuous mode [ 1789.932712][T24533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.937726][T24533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.938124][T24533] bridge_slave_1: entered allmulticast mode [ 1789.950584][T24533] bridge_slave_1: entered promiscuous mode [ 1790.429740][T24533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1790.497039][T24533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1790.721998][T10003] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1790.731560][T10003] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1790.748213][T10003] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1790.756399][T10003] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1790.760322][T10003] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1795.769336][T20537] Bluetooth: hci5: command tx timeout [ 1796.693219][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.693315][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.391491][ T5792] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1797.595873][ T5792] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1797.595898][ T5792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1797.595912][ T5792] usb 2-1: Product: syz [ 1797.595923][ T5792] usb 2-1: Manufacturer: syz [ 1797.595934][ T5792] usb 2-1: SerialNumber: syz [ 1797.599926][ T5792] usb 2-1: config 0 descriptor?? [ 1797.646709][T24533] team0: Port device team_slave_0 added [ 1797.693878][T24533] team0: Port device team_slave_1 added [ 1797.783135][T20537] Bluetooth: hci5: command tx timeout [ 1798.027712][T24533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.027731][T24533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.027762][T24533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.032437][T24692] lo speed is unknown, defaulting to 1000 [ 1798.290874][T24533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.299661][T24533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.299691][T24533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.408757][T24533] hsr_slave_0: entered promiscuous mode [ 1799.411617][T24533] hsr_slave_1: entered promiscuous mode [ 1799.412939][T24533] debugfs: 'hsr0' already exists in 'hsr' [ 1799.412971][T24533] Cannot create hsr debugfs directory [ 1799.860327][T20537] Bluetooth: hci5: command tx timeout [ 1800.271982][T23649] usb 2-1: USB disconnect, device number 50 [ 1801.929263][T20537] Bluetooth: hci5: command tx timeout [ 1802.471940][T24770] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6421'. [ 1803.801355][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 1803.801377][ T38] audit: type=1804 audit(6055144668.023:162): pid=24776 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.6424" name="bus" dev="ramfs" ino=98325 res=1 errno=0 [ 1804.355161][T24788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6427'. [ 1804.576213][T24792] batman_adv: batadv0: Adding interface: dummy0 [ 1804.576234][T24792] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.576265][T24792] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1805.613502][T24692] chnl_net:caif_netlink_parms(): no params data found [ 1807.060378][ T5972] ------------[ cut here ]------------ [ 1807.060404][ T5972] WARNING: CPU: 1 PID: 5972 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 1807.060456][ T5972] Modules linked in: [ 1807.060497][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1807.060522][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1807.060539][ T5972] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1807.060577][ T5972] Code: c7 c7 90 45 c5 8e 48 c7 c6 ab 27 da 8c 48 c7 c2 8a fd d8 8c 4c 89 f9 e8 32 4b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 2e 04 09 0f 1f 40 00 90 90 [ 1807.060600][ T5972] RSP: 0018:ffffc9000522fbc0 EFLAGS: 00010206 [ 1807.060619][ T5972] RAX: b80387ebc8e5f000 RBX: ffff8880314e4600 RCX: 0000000000000000 [ 1807.060636][ T5972] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1807.060652][ T5972] RBP: ffffc9000522fd38 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 1807.060667][ T5972] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: dffffc0000000000 [ 1807.060684][ T5972] R13: 0000000000000000 R14: ffff8880314e4608 R15: ffff888024e0da00 [ 1807.060709][ T5972] FS: 0000000000000000(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 1807.060727][ T5972] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1807.060742][ T5972] CR2: 0000200000034000 CR3: 000000000d3a6000 CR4: 00000000003526f0 [ 1807.060761][ T5972] Call Trace: [ 1807.060775][ T5972] [ 1807.060789][ T5972] do_exit+0x105/0x2300 [ 1807.060837][ T5972] ? worker_thread+0xcf7/0xda0 [ 1807.060868][ T5972] ? __pfx_do_exit+0x10/0x10 [ 1807.060923][ T5972] kthread_exit+0x22c/0x280 [ 1807.060955][ T5972] kthread+0x72f/0x8a0 [ 1807.060991][ T5972] ? __pfx_worker_thread+0x10/0x10 [ 1807.061016][ T5972] ? __pfx_kthread+0x10/0x10 [ 1807.061047][ T5972] ? rt_spin_unlock+0x150/0x200 [ 1807.061075][ T5972] ? rt_spin_unlock+0x161/0x200 [ 1807.061095][ T5972] ? __pfx_kthread+0x10/0x10 [ 1807.061123][ T5972] ret_from_fork+0x4bc/0x870 [ 1807.061148][ T5972] ? __pfx_ret_from_fork+0x10/0x10 [ 1807.061177][ T5972] ? __switch_to_asm+0x39/0x70 [ 1807.061197][ T5972] ? __switch_to_asm+0x33/0x70 [ 1807.061214][ T5972] ? __pfx_kthread+0x10/0x10 [ 1807.061243][ T5972] ret_from_fork_asm+0x1a/0x30 [ 1807.061275][ T5972] [ 1807.061290][ T5972] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1807.061304][ T5972] CPU: 1 UID: 0 PID: 5972 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1807.061324][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1807.061336][ T5972] Call Trace: [ 1807.061344][ T5972] [ 1807.061352][ T5972] dump_stack_lvl+0x99/0x250 [ 1807.061384][ T5972] ? __asan_memcpy+0x40/0x70 [ 1807.061406][ T5972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1807.061436][ T5972] ? __pfx__printk+0x10/0x10 [ 1807.061474][ T5972] vpanic+0x237/0x6d0 [ 1807.061492][ T5972] ? __pfx_vpanic+0x10/0x10 [ 1807.061518][ T5972] panic+0xb9/0xc0 [ 1807.061534][ T5972] ? __pfx_panic+0x10/0x10 [ 1807.061564][ T5972] __warn+0x31b/0x4b0 [ 1807.061579][ T5972] ? kcov_task_exit+0x13c/0x150 [ 1807.061605][ T5972] ? kcov_task_exit+0x13c/0x150 [ 1807.061627][ T5972] report_bug+0x2be/0x4f0 [ 1807.061652][ T5972] ? kcov_task_exit+0x13c/0x150 [ 1807.061676][ T5972] ? kcov_task_exit+0x13c/0x150 [ 1807.061706][ T5972] ? kcov_task_exit+0x13e/0x150 [ 1807.061729][ T5972] handle_bug+0x84/0x160 [ 1807.061749][ T5972] exc_invalid_op+0x1a/0x50 [ 1807.061767][ T5972] asm_exc_invalid_op+0x1a/0x20 [ 1807.061785][ T5972] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1807.061808][ T5972] Code: c7 c7 90 45 c5 8e 48 c7 c6 ab 27 da 8c 48 c7 c2 8a fd d8 8c 4c 89 f9 e8 32 4b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 2e 04 09 0f 1f 40 00 90 90 [ 1807.061824][ T5972] RSP: 0018:ffffc9000522fbc0 EFLAGS: 00010206 [ 1807.061840][ T5972] RAX: b80387ebc8e5f000 RBX: ffff8880314e4600 RCX: 0000000000000000 [ 1807.061853][ T5972] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1807.061866][ T5972] RBP: ffffc9000522fd38 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 1807.061878][ T5972] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: dffffc0000000000 [ 1807.061892][ T5972] R13: 0000000000000000 R14: ffff8880314e4608 R15: ffff888024e0da00 [ 1807.061911][ T5972] ? rt_spin_lock+0x1c1/0x3e0 [ 1807.061941][ T5972] do_exit+0x105/0x2300 [ 1807.061977][ T5972] ? worker_thread+0xcf7/0xda0 [ 1807.062000][ T5972] ? __pfx_do_exit+0x10/0x10 [ 1807.062042][ T5972] kthread_exit+0x22c/0x280 [ 1807.062070][ T5972] kthread+0x72f/0x8a0 [ 1807.062105][ T5972] ? __pfx_worker_thread+0x10/0x10 [ 1807.062128][ T5972] ? __pfx_kthread+0x10/0x10 [ 1807.062154][ T5972] ? rt_spin_unlock+0x150/0x200 [ 1807.062182][ T5972] ? rt_spin_unlock+0x161/0x200 [ 1807.062204][ T5972] ? __pfx_kthread+0x10/0x10 [ 1807.062232][ T5972] ret_from_fork+0x4bc/0x870 [ 1807.062259][ T5972] ? __pfx_ret_from_fork+0x10/0x10 [ 1807.062291][ T5972] ? __switch_to_asm+0x39/0x70 [ 1807.062311][ T5972] ? __switch_to_asm+0x33/0x70 [ 1807.062329][ T5972] ? __pfx_kthread+0x10/0x10 [ 1807.062356][ T5972] ret_from_fork_asm+0x1a/0x30 [ 1807.062389][ T5972] [ 1807.062738][ T5972] Kernel Offset: disabled