last executing test programs: 17.237459341s ago: executing program 1 (id=423): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0", 0x8b}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa011}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80) socket(0x10, 0x803, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x48) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0b", 0xc8}], 0x1}, 0x0) 17.111603303s ago: executing program 1 (id=425): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000000095000000000010009c07b346cb5e13f8772644f4971e732de04fedad572bac3404f614c6921cc6566233111a04388a1dd9abd53082a556d3870cc36484b7afd31929aee457d4af6b6ec2d0aec2be5822d676d4d9c11f086b9ee55435fa635bf655e9a79e6ef3c3e8ad04cf1da9c1a928f766b975a31f0c49d8b56581c9304a570a7c27812e5da8d9143ea1ecc8e0f700befc1d70bf4fa9b153672e1e6924fddc5f747e8013"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4040001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000018", @ANYRES32=r0], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001000100ff7f0000020200000100", @ANYRES8=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f7c96811000000000000000000020000000000000000000000008db7"], 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32=0xffffffffffffffff], 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES8=r7, @ANYRES64, @ANYRES32, @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 13.593675498s ago: executing program 1 (id=430): ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000002c0)={[0x2, 0x4, 0xdddd1000, 0xeeee8000], 0x8000000000000000, 0x20, 0xc9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x9, [@const={0x2, 0x0, 0x0, 0xa, 0x3}, @fwd={0x3}, @union={0xa, 0x4, 0x0, 0x5, 0x1, 0x4, [{0x6, 0x5, 0x101}, {0xe, 0x3, 0xff}, {0x1, 0x5, 0x101}, {0x4, 0x0, 0xf}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4}]}]}, {0x0, [0x0, 0x61, 0x61, 0x5f, 0x2e, 0x0, 0x61]}}, &(0x7f0000000140)=""/116, 0x89, 0x74, 0x0, 0x4, 0x10000}, 0x28) socket$nl_route(0x10, 0x3, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xa005, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000100)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYRES8=r4, @ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x890}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000130a01010000000000000000bbf5fea0b381507073797a30000000000800034000000001"], 0x28}}, 0x4040040) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r1, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x43, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}, 0x0, {0x0, r6}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r9, r10, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r11, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r11, r7) write$FUSE_NOTIFY_POLL(r7, 0x0, 0x0) 13.274573349s ago: executing program 2 (id=431): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(0xffffffffffffffff, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r1, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000240)={0x1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x400000000008, 0xfffffffd, 0x3}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRES8=r4, @ANYRES8=r5, @ANYRES8=0x0, @ANYRESOCT=r2], 0x0, 0x8, 0x0, 0x0, 0x8eb2e000f2c28467, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e29}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={'macsec0\x00', {0x2, 0x4e21, @empty}}) ioprio_get$uid(0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa31e3000) madvise(&(0x7f0000988000/0x1000)=nil, 0x1000, 0x12) ioprio_set$uid(0x3, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x200, 0x12) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000000)={0x0, 0x64, 0x81}) 13.076475248s ago: executing program 3 (id=433): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0", 0x8b}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa011}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80) socket(0x10, 0x803, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x48) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0b", 0xc8}], 0x1}, 0x0) 12.414832483s ago: executing program 3 (id=434): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x2}}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) io_uring_setup(0x47b, &(0x7f0000000ac0)={0x0, 0x4655, 0x80, 0x2, 0x4800020}) r3 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x200000, @empty, 0x1}, 0x1c) listen(r5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000c00)=""/113, 0x71}], 0x1, 0x4, 0xb) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r6, 0xffffffffffffffff, 0x0) 11.760122518s ago: executing program 2 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20800}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf, 0x1}, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x28, 0x5}}], 0x58}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3, 0x62}) r8 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8b34, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xd, &(0x7f00000007c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="bb34414d81b9c96a541f81ce31eac4d0c39ea169028e50385c36467bbd84c638adf0bd83e2c63c285508a9fc7c1935f0bfc9ca5a24de4f7fc311205d0d49173c6f6b836158c1bc0ed91850fbf1d1b79de1b29290d5d5a21a50888941c65344f6e50bb5876a8198cbe31d982491c1a229017051cb817e6f4a9f3699aff6dd977cf3f2f8c9f83727a8abc44614647642bc91275ee5947b391f4ef8fc6cdcec96bc307e93a01b3814e44cd5a6fc34a602d58ecce530a99380e67740e2ed7e483e4ebb777c8107f3ffbe2ba043e99b44511b133ae1116fb30698d0c4", @ANYRES32=r9], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r11, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r12, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) connect$rose(r12, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 9.296338189s ago: executing program 3 (id=437): preadv(0xffffffffffffffff, 0x0, 0x0, 0x300, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x28000600) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x800) 9.151637123s ago: executing program 0 (id=438): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20800}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@mask_fadd={0x58, 0x114, 0x8, {{0xf, 0x1}, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0x7, 0x3, 0x28, 0x5}}], 0x58}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3, 0x62}) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xd, &(0x7f00000007c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="bb34414d81b9c96a541f81ce31eac4d0c39ea169028e50385c36467bbd84c638adf0bd83e2c63c285508a9fc7c1935f0bfc9ca5a24de4f7fc311205d0d49173c6f6b836158c1bc0ed91850fbf1d1b79de1b29290d5d5a21a50888941c65344f6e50bb5876a8198cbe31d982491c1a229017051cb817e6f4a9f3699aff6dd977cf3f2f8c9f83727a8abc44614647642bc91275ee5947b391f4ef8fc6cdcec96bc307e93a01b3814e44cd5a6fc34a602d58ecce530a99380e67740e2ed7e483e4ebb777c8107f3ffbe2ba043e99b44511b133ae1116fb30698d0c4", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r9, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r10, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) connect$rose(r10, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 8.824385235s ago: executing program 2 (id=439): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a936", 0x1b}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2062) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32], 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000001000100ff7f0000020200000100", @ANYRES8=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f7c96811000000000000000000020000000000000000000000008db7"], 0x50) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffff1e00ff130012800b00010062617461647600000400028008000a00", @ANYRES32=0xffffffffffffffff], 0x3c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES8=r6, @ANYRES64, @ANYRES32, @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 8.222869244s ago: executing program 3 (id=440): socket$can_raw(0x1d, 0x3, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mq_open(&(0x7f00000007c0)='\r\x00elinu\xef\xe3elinux\x00\x86\xf6\x92\n#*\xac\x02\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a|\x9en\xbd\xeb\x14\x7f\xb9\x83\xfe\nf\xc26\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]G\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8S\\\xec\xa31_\v\x8a\xf2\x18\xa6\xb1\xbb\x8b9\x1e\xff\xf8\xcdX\xf7h\b\xaf\x01\x84\xd4\x06Ml(Bw=\x13\xa1&\xd3\xec\xa9\x8ba\x86\x9d\xf4\x11\n\x89z\xa5\xac\xcbh\xc2\x1b\xeay\xbf\x06\x80\xff\xdf\x93\xef\x7f\xb1\xaf\xa0\xae', 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0x90000) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000580)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) sendfile(r2, r2, 0x0, 0x40008) 7.898411356s ago: executing program 1 (id=441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="800037e9220ca1", 0x7, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x6a, r0, {0x8000}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x800, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFALIASn={0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESDEC=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) 7.502560985s ago: executing program 0 (id=442): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x2, 0x2}, 0x10}, 0x1, 0x7}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000240)="cf9900ffffffff7f00000000000000000000005ac1d932df0d3e5d0142fcd74f6d43c8f9d9025512685c5007fd79d19ef09419ef4d3eca4dc2f10c80aef058c515eaa77423ebd991b2f6c90f32fb9868d6b4a69aa92dc4ed944966910a9ffff5d904cf25051c76b4ee6c775566fe207661aeaaf97479ed85decdcd39a807f123041a359c8f4dc6dda15ef0", 0x8b}], 0x1, 0x0, 0x0, 0x80040000}}], 0x1, 0x20000810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001840)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa011}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200480d4}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x48) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0b", 0xc8}], 0x1}, 0x0) 4.889159141s ago: executing program 0 (id=443): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000680)='sys_exit\x00', r0, 0x0, 0x5}, 0x18) get_robust_list(0x0, 0x0, &(0x7f0000000400)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x2, 0x7ffc1ffb}]}) eventfd(0x3) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x58, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4040890) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r6 = syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0x200fad6, 0x100, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0xdb4, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "00000000020000000000002100", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0211a83be12ff0bff", "0000efffffffffffbfff00"]}) 4.741838475s ago: executing program 1 (id=444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x8000, 0x3, @empty}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x41, 0x0, @fd_index=0x6, 0x10001, 0x0, 0x7, 0x5, 0x1}) io_uring_enter(0xffffffffffffffff, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x82802, 0x100) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='statm\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x10c, 0x150, 0x150, 0x0, 0xf8010000, 0x1d4, 0x238, 0x238, 0x1d4, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'tunl0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [0x0, 0xff], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa4, 0xc8}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) 4.656194593s ago: executing program 2 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.123225533s ago: executing program 0 (id=446): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) setrlimit(0x7, &(0x7f0000000180)={0xfffffffe, 0x6}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000009a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}, {{&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001100)=[@cred={{0x18}}], 0x18, 0x20000084}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x3, 0x4008010) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x2001, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.044598181s ago: executing program 1 (id=447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000480)={0xa, 0x1, 0x7}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000040)={0x8580000000000000, 0xffff1000, 0x8000000000000000, 0x0, 0x11}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x1e, 0x4, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/85, &(0x7f00000000c0)=""/90, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) 2.042004459s ago: executing program 3 (id=448): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x24}, 0x1, 0x0, 0x0, 0x20800}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, 0xffffffffffffffff, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3, 0x62}) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b34, &(0x7f0000000000)={'wlan0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0xd, &(0x7f00000007c0)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="bb34414d81b9c96a541f81ce31eac4d0c39ea169028e50385c36467bbd84c638adf0bd83e2c63c285508a9fc7c1935f0bfc9ca5a24de4f7fc311205d0d49173c6f6b836158c1bc0ed91850fbf1d1b79de1b29290d5d5a21a50888941c65344f6e50bb5876a8198cbe31d982491c1a229017051cb817e6f4a9f3699aff6dd977cf3f2f8c9f83727a8abc44614647642bc91275ee5947b391f4ef8fc6cdcec96bc307e93a01b3814e44cd5a6fc34a602d58ecce530a99380e67740e2ed7e483e4ebb777c8107f3ffbe2ba043e99b44511b133ae1116fb30698d0c4", @ANYRES32=r8], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r10, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r11, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) connect$rose(r11, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x40) 2.041150539s ago: executing program 0 (id=449): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, r1, 0x24}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x100, 0xfc) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000200)={0xf8, 0x0, 0x0, 0x0, 0x12000000}) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x1457c2) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) gettid() acct(&(0x7f0000000140)='./file0\x00') r4 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r4, 0x0) 2.040696059s ago: executing program 2 (id=450): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000280)={0x7, @sliced={0x8, [0x5, 0xfbff, 0x4, 0x7818, 0x5, 0x2, 0x4d, 0x8, 0x8, 0x47, 0xffff, 0x1ec, 0x400, 0x2, 0x0, 0x80, 0xc08c, 0x1a45, 0x1004, 0x9, 0xffff, 0xd, 0x7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x5, 0x428a, 0xb1b, 0xfffe, 0x1, 0x8f5, 0x9, 0x3, 0x9, 0xe0ac, 0x8, 0x4, 0x8, 0x101, 0x8, 0x6, 0xf010, 0xe30d, 0xfff, 0x7ff]}}) r1 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x61, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x13f, 0x4}}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) mknod$loop(0x0, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x121000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000060000000400000000000000000000000800000080000000090000000900000000000000000000000000000001000000"]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) acct(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) 1.708957932s ago: executing program 0 (id=451): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x48880) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r5, 0x409, 0x9) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2, 0x3}]}, @ptr]}}, 0x0, 0x3e}, 0x28) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, &(0x7f0000000540)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r6], &(0x7f00000000c0)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = fsopen(&(0x7f00000001c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v1to_da_alloc', 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000400)=[@acquire_done={0x40106309, 0x3}], 0x31, 0x0, &(0x7f0000000440)="de8ee5ee379a99f63e6e8d7e8b36b8c06aae62ccf2ca6606dbc4956eddfacbbbbe8772a76655dd2ac5fbef870080a71635"}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES32=r10, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x2000c090) sendfile(r4, r3, &(0x7f0000002080)=0x3a, 0x23b) 781.070313ms ago: executing program 3 (id=452): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x141440, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x64, 0x0, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cfa87c7b77e4a2824dc815a8ad"}], @key_params=[@NL80211_ATTR_KEY_IDX={0x5}]]}, 0x64}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r4, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x4000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x0, 0x48) open_by_handle_at(r5, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0xfe, {0x80}}, 0xc80) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) read(r6, &(0x7f0000000200)=""/145, 0x91) r7 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x9000000) 0s ago: executing program 2 (id=453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="800037e9220ca1", 0x7, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x6a, r0, {0x8000}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x800, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFALIASn={0x4}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xfffffffe}]}, 0x2c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRESDEC=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote, r7}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 74.924062][ T5776] cgroup: Unknown subsys name 'net' [ 75.066027][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.853605][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.608959][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.619079][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.628921][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.637197][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.645411][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.653996][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.663660][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.672606][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.682032][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.690274][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.701147][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.709268][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.713135][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.716770][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.727636][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.739067][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.747808][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.755577][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.762903][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.775110][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.789194][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.789379][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.805823][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.814327][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.234344][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 79.403199][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 79.478720][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.486255][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.493963][ T5787] bridge_slave_0: entered allmulticast mode [ 79.501103][ T5787] bridge_slave_0: entered promiscuous mode [ 79.529036][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 79.550981][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.558536][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.565734][ T5787] bridge_slave_1: entered allmulticast mode [ 79.573303][ T5787] bridge_slave_1: entered promiscuous mode [ 79.580558][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 79.673196][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.709530][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.744320][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.751671][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.759724][ T5786] bridge_slave_0: entered allmulticast mode [ 79.766736][ T5786] bridge_slave_0: entered promiscuous mode [ 79.814454][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.822034][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.830374][ T5786] bridge_slave_1: entered allmulticast mode [ 79.837949][ T5786] bridge_slave_1: entered promiscuous mode [ 79.859564][ T5787] team0: Port device team_slave_0 added [ 79.865814][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.873017][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.880329][ T5785] bridge_slave_0: entered allmulticast mode [ 79.888116][ T5785] bridge_slave_0: entered promiscuous mode [ 79.931075][ T5787] team0: Port device team_slave_1 added [ 79.937374][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.944523][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.952003][ T5785] bridge_slave_1: entered allmulticast mode [ 79.959538][ T5785] bridge_slave_1: entered promiscuous mode [ 80.043354][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.052781][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.061029][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.068377][ T5788] bridge_slave_0: entered allmulticast mode [ 80.075497][ T5788] bridge_slave_0: entered promiscuous mode [ 80.085359][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.096098][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.103343][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.129531][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.144566][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.165886][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.173268][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.181044][ T5788] bridge_slave_1: entered allmulticast mode [ 80.188317][ T5788] bridge_slave_1: entered promiscuous mode [ 80.197978][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.207870][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.214856][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.241358][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.321387][ T5785] team0: Port device team_slave_0 added [ 80.331194][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.343888][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.366543][ T5785] team0: Port device team_slave_1 added [ 80.400182][ T5786] team0: Port device team_slave_0 added [ 80.455722][ T5787] hsr_slave_0: entered promiscuous mode [ 80.463055][ T5787] hsr_slave_1: entered promiscuous mode [ 80.473337][ T5786] team0: Port device team_slave_1 added [ 80.508508][ T5788] team0: Port device team_slave_0 added [ 80.515220][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.522547][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.549457][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.562511][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.569797][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.595780][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.621329][ T5788] team0: Port device team_slave_1 added [ 80.658778][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.665870][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.692736][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.705900][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.713132][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.739301][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.791997][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.799254][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.808259][ T5103] Bluetooth: hci3: command tx timeout [ 80.825390][ T5791] Bluetooth: hci2: command tx timeout [ 80.831492][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.849671][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.857678][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.883919][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.896992][ T5791] Bluetooth: hci0: command tx timeout [ 80.902786][ T5791] Bluetooth: hci1: command tx timeout [ 80.964994][ T5785] hsr_slave_0: entered promiscuous mode [ 80.971713][ T5785] hsr_slave_1: entered promiscuous mode [ 80.978994][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.986999][ T5785] Cannot create hsr debugfs directory [ 81.040149][ T5786] hsr_slave_0: entered promiscuous mode [ 81.046548][ T5786] hsr_slave_1: entered promiscuous mode [ 81.053245][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.061327][ T5786] Cannot create hsr debugfs directory [ 81.142594][ T5788] hsr_slave_0: entered promiscuous mode [ 81.149443][ T5788] hsr_slave_1: entered promiscuous mode [ 81.155733][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.164318][ T5788] Cannot create hsr debugfs directory [ 81.391909][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.460081][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.475423][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.521299][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.620284][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.638484][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.650241][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.676056][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.749477][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.762181][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.783239][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.793430][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.885011][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.895555][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.918301][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.930256][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.960520][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.071320][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.120224][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.127702][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.190196][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.197444][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.301006][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.366020][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.406683][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.468237][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.508540][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.533798][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.553292][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.560498][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.586165][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.593392][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.624466][ T2909] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.631680][ T2909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.669352][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.676567][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.722148][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.806089][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.839701][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.846971][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.861815][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.869026][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.888688][ T5791] Bluetooth: hci3: command tx timeout [ 82.891088][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.901097][ T5791] Bluetooth: hci2: command tx timeout [ 82.970655][ T5103] Bluetooth: hci0: command tx timeout [ 82.976216][ T5791] Bluetooth: hci1: command tx timeout [ 83.044578][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.094026][ T5787] veth0_vlan: entered promiscuous mode [ 83.135997][ T5787] veth1_vlan: entered promiscuous mode [ 83.229947][ T5787] veth0_macvtap: entered promiscuous mode [ 83.255965][ T5787] veth1_macvtap: entered promiscuous mode [ 83.316049][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.369792][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.405930][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.416210][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.426367][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.436732][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.466462][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.588037][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.614975][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.703507][ T5788] veth0_vlan: entered promiscuous mode [ 83.755615][ T2909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.765643][ T2909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.796663][ T5788] veth1_vlan: entered promiscuous mode [ 83.855893][ T5786] veth0_vlan: entered promiscuous mode [ 83.880571][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.888970][ T5786] veth1_vlan: entered promiscuous mode [ 83.896533][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.949558][ T5785] veth0_vlan: entered promiscuous mode [ 83.982109][ T5788] veth0_macvtap: entered promiscuous mode [ 84.019710][ T5785] veth1_vlan: entered promiscuous mode [ 84.042821][ T5788] veth1_macvtap: entered promiscuous mode [ 84.060440][ T5786] veth0_macvtap: entered promiscuous mode [ 84.088499][ T5786] veth1_macvtap: entered promiscuous mode [ 84.134578][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.151115][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.164195][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.182268][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.195422][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.206461][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.217208][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.229184][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.350061][ T5785] veth0_macvtap: entered promiscuous mode [ 84.393911][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.394019][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.419818][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.473449][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.473507][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.473531][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.473555][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.760450][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.868298][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.941519][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.023747][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.091985][ T5791] Bluetooth: hci2: command tx timeout [ 85.100067][ T5791] Bluetooth: hci3: command tx timeout [ 85.106258][ T5791] Bluetooth: hci1: command tx timeout [ 85.113988][ T5791] Bluetooth: hci0: command tx timeout [ 85.201569][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.262661][ T5785] veth1_macvtap: entered promiscuous mode [ 85.298367][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.310795][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.320042][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.330801][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.378469][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.397066][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.408504][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.427560][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.437503][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.462211][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.474082][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.494966][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.518022][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.528681][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.539554][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.551379][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.551398][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.553153][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.586611][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.586646][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.603059][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.603092][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.636515][ T5887] Zero length message leads to an empty skb [ 85.728513][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.736544][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.817283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.860432][ T5887] befs: (nbd2): No write support. Marking filesystem read-only [ 85.871884][ T5887] syz.2.5: attempt to access beyond end of device [ 85.871884][ T5887] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 85.885338][ T5887] befs: (nbd2): unable to read superblock [ 85.915149][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.991668][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.097134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.427025][ T2909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.494978][ T2909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.588012][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.595977][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.645236][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.663203][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.786117][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.812523][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.054518][ T1821] cfg80211: failed to load regulatory.db [ 87.127455][ T5103] Bluetooth: hci0: command tx timeout [ 87.133019][ T5791] Bluetooth: hci1: command tx timeout [ 87.138690][ T5800] Bluetooth: hci3: command tx timeout [ 87.144563][ T5791] Bluetooth: hci2: command tx timeout [ 87.268503][ T5903] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4'. [ 87.340097][ T5902] binder: 5897:5902 ioctl c018620c 200000000240 returned -1 [ 88.781686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.115928][ T5917] misc userio: Invalid payload size [ 89.527658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.707533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.848331][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.857173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.865427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 89.928053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 89.936298][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 91.056170][ T28] audit: type=1326 audit(1759959187.650:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 92.357714][ T28] audit: type=1326 audit(1759959187.650:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 92.380857][ T28] audit: type=1326 audit(1759959187.650:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 92.403275][ T28] audit: type=1326 audit(1759959187.650:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 92.428738][ T28] audit: type=1326 audit(1759959187.650:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 92.453318][ T28] audit: type=1326 audit(1759959187.650:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 92.477170][ T28] audit: type=1326 audit(1759959187.650:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 92.662608][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 92.671933][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 95.053038][ T28] audit: type=1326 audit(1759959187.660:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 95.161728][ T28] audit: type=1326 audit(1759959187.660:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 95.291500][ T28] audit: type=1326 audit(1759959187.660:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 96.238799][ T28] audit: type=1326 audit(1759959187.670:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 96.262238][ T28] audit: type=1326 audit(1759959187.670:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 96.284852][ T28] audit: type=1326 audit(1759959187.670:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f472c98d710 code=0x7ffc0000 [ 96.312807][ T28] audit: type=1326 audit(1759959187.670:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 96.335629][ T28] audit: type=1326 audit(1759959187.670:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 96.364606][ T28] audit: type=1326 audit(1759959187.670:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 96.443450][ T28] audit: type=1326 audit(1759959187.670:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 96.636941][ T28] audit: type=1326 audit(1759959187.670:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 96.713936][ T28] audit: type=1326 audit(1759959187.690:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 96.738208][ T5940] warning: `syz.2.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.820122][ T28] audit: type=1326 audit(1759959187.700:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5923 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f472c98ef03 code=0x7ffc0000 [ 97.082761][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.098447][ T5940] bond0: (slave rose0): Enslaving as an active interface with an up link [ 97.109066][ T5953] netlink: 'syz.2.13': attribute type 10 has an invalid length. [ 97.138789][ T5953] team0: Device hsr_slave_0 failed to register rx_handler [ 97.313949][ T5954] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 97.359193][ T5955] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 97.688902][ T5959] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 98.463986][ T5972] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.826653][ T5985] rtc_cmos 00:00: Alarms can be up to one day in the future [ 98.961623][ T5987] netlink: 3 bytes leftover after parsing attributes in process `syz.1.19'. [ 99.078965][ T5987] batadv1: entered allmulticast mode [ 99.195041][ T5853] rtc_cmos 00:00: Alarms can be up to one day in the future [ 99.429258][ T5853] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.262376][ T5979] syz.0.20 (5979): drop_caches: 1 [ 100.316920][ T5853] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.348803][ T2909] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 100.357385][ T5853] rtc_cmos 00:00: Alarms can be up to one day in the future [ 100.366310][ T5853] rtc rtc0: __rtc_set_alarm: err=-22 [ 102.738373][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 102.738428][ T28] audit: type=1326 audit(1759959199.570:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 103.997031][ T28] audit: type=1326 audit(1759959199.570:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 104.053494][ T28] audit: type=1326 audit(1759959199.570:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 104.172033][ T28] audit: type=1326 audit(1759959199.570:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 104.462989][ T28] audit: type=1326 audit(1759959199.570:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 104.486292][ T28] audit: type=1326 audit(1759959199.570:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 105.432469][ T28] audit: type=1326 audit(1759959199.580:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 105.459698][ T28] audit: type=1326 audit(1759959199.580:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 105.483493][ T28] audit: type=1326 audit(1759959199.580:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 105.506917][ T28] audit: type=1326 audit(1759959199.580:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5996 comm="syz.2.24" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25a9f8eec9 code=0x7ffc0000 [ 106.675478][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27'. [ 107.121422][ T6023] syz.2.28 (6023): drop_caches: 1 [ 107.499793][ T6023] syz.2.28 (6023): drop_caches: 1 [ 108.007192][ T6030] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 108.212249][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 108.224294][ T6039] veth1_macvtap: left promiscuous mode [ 108.329971][ T6035] tipc: Started in network mode [ 108.335210][ T6035] tipc: Node identity 16b5f835b653, cluster identity 4711 [ 108.385176][ T6035] tipc: Enabled bearer , priority 0 [ 108.422777][ T6046] misc userio: Invalid payload size [ 108.473363][ T6035] tipc: Resetting bearer [ 108.521144][ T6034] tipc: Disabling bearer [ 108.698642][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 108.707576][ T6050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 111.885936][ T6064] netlink: 20 bytes leftover after parsing attributes in process `syz.3.36'. [ 112.086620][ T6068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.37'. [ 113.734618][ T6077] syz.2.38 (6077): drop_caches: 1 [ 115.130699][ T6091] netlink: 3 bytes leftover after parsing attributes in process `syz.2.39'. [ 115.203042][ T6091] batadv1: entered allmulticast mode [ 119.388679][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 119.457366][ T6120] veth1_macvtap: left promiscuous mode [ 120.531103][ T6135] syz.1.47 (6135): drop_caches: 1 [ 120.725614][ T6135] syz.1.47 (6135): drop_caches: 1 [ 122.822791][ T6151] misc userio: Invalid payload size [ 123.104804][ T6162] netlink: 64 bytes leftover after parsing attributes in process `syz.1.51'. [ 126.034786][ T6190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 126.044017][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'. [ 130.243103][ T6201] syz.2.60 (6201): drop_caches: 1 [ 131.057557][ T6213] binder: 6212:6213 ioctl c018620c 200000000240 returned -1 [ 131.910013][ T6228] syz.0.64 uses obsolete (PF_INET,SOCK_PACKET) [ 132.098092][ T6233] netlink: 28 bytes leftover after parsing attributes in process `syz.0.64'. [ 132.142972][ T6238] netlink: 48 bytes leftover after parsing attributes in process `syz.1.65'. [ 133.143102][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.152470][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.357825][ T1191] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.803557][ T1191] usb 4-1: Using ep0 maxpacket: 16 [ 137.809565][ T6264] syz.2.71 (6264): drop_caches: 1 [ 138.327146][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 138.587135][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 138.715044][ T1191] usb 4-1: unable to get BOS descriptor or descriptor too short [ 138.762652][ T1191] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 138.799788][ T1191] usb 4-1: can't read configurations, error -71 [ 138.901214][ T6281] netlink: 48 bytes leftover after parsing attributes in process `syz.2.76'. [ 143.954389][ T27] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.197142][ T27] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 144.291921][ T27] usb 2-1: chopping to 0 config(s) [ 144.363000][ T27] usb 2-1: can't read configurations, error -32 [ 144.557776][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.501934][ T6298] netlink: 64 bytes leftover after parsing attributes in process `syz.0.79'. [ 145.657422][ T27] usb 2-1: device descriptor read/64, error -32 [ 145.782849][ T27] usb usb2-port1: attempt power cycle [ 146.267039][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.863921][ T27] usb 2-1: device descriptor read/8, error -32 [ 147.507395][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 147.840954][ T27] usb 2-1: device descriptor read/8, error -32 [ 148.038383][ T27] usb usb2-port1: unable to enumerate USB device [ 148.496096][ T6317] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 148.537376][ T6317] netlink: 'syz.1.83': attribute type 10 has an invalid length. [ 148.670952][ T6317] team0: Device hsr_slave_0 failed to register rx_handler [ 149.232148][ T6317] syz.1.83 (6317) used greatest stack depth: 20520 bytes left [ 149.396979][ T5853] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 149.666928][ T5853] usb 1-1: Using ep0 maxpacket: 16 [ 154.456556][ T6349] netlink: 3 bytes leftover after parsing attributes in process `syz.1.90'. [ 154.544918][ T6349] batadv1: entered allmulticast mode [ 154.635496][ T5853] usb 1-1: device descriptor read/all, error -71 [ 155.384026][ T6354] netlink: 'syz.2.93': attribute type 10 has an invalid length. [ 155.419867][ T6354] team0: Device hsr_slave_0 failed to register rx_handler [ 155.433794][ T6353] netlink: 'syz.3.92': attribute type 10 has an invalid length. [ 155.480084][ T6353] team0: Device hsr_slave_0 failed to register rx_handler [ 155.600409][ T6360] netlink: 48 bytes leftover after parsing attributes in process `syz.0.94'. [ 155.881833][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.94'. [ 158.878968][ T6374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.96'. [ 158.924697][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x0 [ 158.996879][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x1 [ 159.018485][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x0 [ 159.037219][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x0 [ 159.129870][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x0 [ 159.166173][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x0 [ 159.306964][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x0 [ 159.361067][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x2 [ 159.380080][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x0 [ 159.388116][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x0 [ 159.395659][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x4 [ 159.403562][ T27] hid-generic 000F:0004:0000.0001: unknown main item tag 0x0 [ 159.425305][ T27] hid-generic 000F:0004:0000.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 160.036824][ T6386] syz.3.100 (6386): drop_caches: 1 [ 160.273785][ T6386] syz.3.100 (6386): drop_caches: 1 [ 161.078924][ T6383] fido_id[6383]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 163.358279][ T6405] netlink: 20 bytes leftover after parsing attributes in process `syz.0.105'. [ 167.786978][ T6416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.107'. [ 167.800485][ T6416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 168.229660][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 168.375943][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x1 [ 168.840414][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 168.894450][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 168.996228][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 170.635910][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 170.705980][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 170.782399][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x2 [ 170.790695][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 170.808205][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 170.869970][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x4 [ 170.880842][ T5855] hid-generic 000F:0004:0000.0002: unknown main item tag 0x0 [ 170.900582][ T5855] hid-generic 000F:0004:0000.0002: hidraw0: HID v0.02 Device [syz0] on syz1 [ 171.162405][ T6429] fido_id[6429]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 172.517660][ T6447] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 177.238337][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x0 [ 178.858546][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x1 [ 178.905567][ T6467] netlink: 48 bytes leftover after parsing attributes in process `syz.3.119'. [ 178.979112][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x0 [ 179.089273][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.119'. [ 179.406925][ T5103] Bluetooth: hci3: link tx timeout [ 179.406927][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x0 [ 179.412149][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x0 [ 179.412199][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x0 [ 179.421834][ T5103] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.448434][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x0 [ 179.456451][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x2 [ 179.486841][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x0 [ 179.494408][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x0 [ 179.507005][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x4 [ 179.538060][ T5839] hid-generic 000F:0004:0000.0003: unknown main item tag 0x0 [ 179.587807][ T5839] hid-generic 000F:0004:0000.0003: hidraw0: HID v0.02 Device [syz0] on syz1 [ 179.913081][ T6471] fido_id[6471]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 179.977753][ T6475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.122'. [ 180.283451][ T6477] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 180.364107][ T6483] netlink: 'syz.2.121': attribute type 10 has an invalid length. [ 180.395113][ T6483] team0: Device hsr_slave_0 failed to register rx_handler [ 181.532606][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 181.823494][ T6502] netlink: 3 bytes leftover after parsing attributes in process `syz.0.127'. [ 181.941028][ T6502] batadv1: entered allmulticast mode [ 183.138489][ T6514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.129'. [ 185.870468][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 186.169842][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x1 [ 186.242546][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 186.250148][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 186.257775][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 186.265223][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 186.273690][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 186.297157][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x2 [ 186.304632][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 186.383490][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 186.411858][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x4 [ 186.451266][ T5855] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 186.500323][ T5855] hid-generic 000F:0004:0000.0004: hidraw0: HID v0.02 Device [syz0] on syz1 [ 187.303844][ T6525] fido_id[6525]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 188.683925][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 188.693111][ T6539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 191.567706][ T6545] befs: (nbd3): No write support. Marking filesystem read-only [ 191.577143][ T6545] syz.3.136: attempt to access beyond end of device [ 191.577143][ T6545] nbd3: rw=0, sector=0, nr_sectors = 2 limit=0 [ 191.589957][ T6545] befs: (nbd3): unable to read superblock [ 193.495624][ T6559] netlink: 3 bytes leftover after parsing attributes in process `syz.3.139'. [ 193.550026][ T6559] batadv1: entered allmulticast mode [ 194.260482][ T6557] netlink: 'syz.2.140': attribute type 10 has an invalid length. [ 194.269413][ T6557] team0: Device hsr_slave_0 failed to register rx_handler [ 194.700936][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.712065][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.129755][ T6568] netlink: 3 bytes leftover after parsing attributes in process `syz.1.142'. [ 197.145602][ T6568] batadv1: entered allmulticast mode [ 200.080338][ T6578] netlink: 3 bytes leftover after parsing attributes in process `syz.2.143'. [ 200.304151][ T6578] batadv1: entered allmulticast mode [ 201.094517][ T48] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 201.623061][ T6587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 201.633282][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.147'. [ 202.220205][ T5791] Bluetooth: hci2: command 0x0406 tx timeout [ 202.226276][ T5791] Bluetooth: hci1: command 0x0406 tx timeout [ 202.233042][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 204.303536][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 204.313092][ T6590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'. [ 206.809286][ T6594] binder: 6593:6594 ioctl c018620c 200000000240 returned -1 [ 207.847316][ T6599] netlink: 48 bytes leftover after parsing attributes in process `syz.2.151'. [ 207.944371][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.151'. [ 209.568264][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x0 [ 209.577604][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x1 [ 209.585084][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x0 [ 209.681133][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x0 [ 209.716283][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x0 [ 209.785217][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x0 [ 209.850882][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x0 [ 209.867381][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x2 [ 209.874942][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x0 [ 210.106993][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x0 [ 210.114515][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x4 [ 210.122053][ T5853] hid-generic 000F:0004:0000.0005: unknown main item tag 0x0 [ 210.154916][ T5853] hid-generic 000F:0004:0000.0005: hidraw0: HID v0.02 Device [syz0] on syz1 [ 210.303760][ T6613] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 210.361667][ T6616] fido_id[6616]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.435579][ T6618] netlink: 3 bytes leftover after parsing attributes in process `syz.2.154'. [ 210.485609][ T6618] batadv1: entered allmulticast mode [ 210.626127][ T6613] netlink: 'syz.3.155': attribute type 10 has an invalid length. [ 211.347415][ T6613] team0: Device hsr_slave_0 failed to register rx_handler [ 211.516095][ T6622] befs: (nbd0): No write support. Marking filesystem read-only [ 211.524701][ T6622] syz.0.156: attempt to access beyond end of device [ 211.524701][ T6622] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 211.537511][ T6622] befs: (nbd0): unable to read superblock [ 212.332090][ T6626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.157'. [ 212.894317][ T6635] netlink: 48 bytes leftover after parsing attributes in process `syz.0.160'. [ 212.981588][ T6637] netlink: 28 bytes leftover after parsing attributes in process `syz.0.160'. [ 215.075461][ T6636] netlink: 3 bytes leftover after parsing attributes in process `syz.3.158'. [ 215.103611][ T6636] batadv1: entered allmulticast mode [ 215.405366][ T6639] netlink: 'syz.2.159': attribute type 10 has an invalid length. [ 215.418052][ T6639] team0: Device hsr_slave_0 failed to register rx_handler [ 215.786936][ T6647] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 215.980850][ T6651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.023891][ T6652] netlink: 'syz.0.162': attribute type 10 has an invalid length. [ 216.148799][ T6652] team0: Device hsr_slave_0 failed to register rx_handler [ 218.312451][ T6664] netlink: 'syz.0.166': attribute type 10 has an invalid length. [ 218.378012][ T6664] team0: Device hsr_slave_0 failed to register rx_handler [ 223.515174][ T6694] netlink: 'syz.3.174': attribute type 10 has an invalid length. [ 223.525571][ T6694] team0: Device hsr_slave_0 failed to register rx_handler [ 223.929743][ T6704] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.825254][ T6721] netlink: 48 bytes leftover after parsing attributes in process `syz.2.179'. [ 225.442898][ T6735] misc userio: Invalid payload size [ 225.525223][ T6736] netlink: 3 bytes leftover after parsing attributes in process `syz.3.181'. [ 225.607968][ T6736] batadv1: entered allmulticast mode [ 226.777191][ T6741] netlink: 3 bytes leftover after parsing attributes in process `syz.1.184'. [ 227.024301][ T6741] batadv1: entered allmulticast mode [ 228.268848][ T6752] vivid-000: ================= START STATUS ================= [ 228.713201][ T6752] vivid-000: Test Pattern: 75% Colorbar [ 229.276429][ T6752] vivid-000: Fill Percentage of Frame: 100 [ 229.283771][ T6752] vivid-000: Horizontal Movement: No Movement [ 229.290127][ T6752] vivid-000: Vertical Movement: No Movement [ 229.297011][ T6752] vivid-000: OSD Text Mode: All [ 229.302010][ T6752] vivid-000: Show Border: false [ 229.307010][ T6752] vivid-000: Show Square: false [ 229.346855][ T6752] vivid-000: Sensor Flipped Horizontally: true [ 229.353174][ T6752] vivid-000: Sensor Flipped Vertically: false [ 229.395222][ T6752] vivid-000: Insert SAV Code in Image: false [ 229.467858][ T6752] vivid-000: Insert EAV Code in Image: false [ 229.473942][ T6752] vivid-000: Insert Video Guard Band: false [ 229.542813][ T6752] vivid-000: Reduced Framerate: false [ 229.563490][ T6752] vivid-000: Enable Capture Cropping: true grabbed [ 229.592560][ T6752] vivid-000: Enable Capture Composing: true grabbed [ 229.894701][ T6752] vivid-000: Enable Capture Scaler: true grabbed [ 229.903631][ T6752] vivid-000: Timestamp Source: End of Frame [ 229.912035][ T6752] vivid-000: Colorspace: Rec. 709 [ 229.932298][ T6752] vivid-000: Transfer Function: Default [ 229.945510][ T6752] vivid-000: Y'CbCr Encoding: Default [ 229.960165][ T6752] vivid-000: HSV Encoding: Hue 0-179 [ 229.976036][ T6752] vivid-000: Quantization: Default [ 229.995047][ T6752] vivid-000: Apply Alpha To Red Only: false [ 230.026642][ T6752] vivid-000: Standard Aspect Ratio: 4x3 [ 230.052261][ T6752] vivid-000: DV Timings Signal Mode: Current DV Timings [ 230.071045][ T6752] vivid-000: DV Timings: 640x480p59 inactive [ 230.086874][ T6752] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 230.112844][ T6752] vivid-000: Maximum EDID Blocks: 2 [ 230.124327][ T6752] vivid-000: Limited RGB Range (16-235): true [ 230.154433][ T6752] vivid-000: Rx RGB Quantization Range: Automatic [ 230.172604][ T6752] vivid-000: Power Present: 0x00000001 [ 230.189639][ T6752] tpg source WxH: 1280x720 (Y'CbCr) [ 230.208410][ T6752] tpg field: 1 [ 230.221503][ T6752] tpg crop: 1280x720@0x0 [ 230.231539][ T6752] tpg compose: 1280x720@0x0 [ 230.246532][ T6752] tpg colorspace: 3 [ 230.256107][ T6752] tpg transfer function: 0/1 [ 230.268752][ T6752] tpg Y'CbCr encoding: 0/2 [ 230.278927][ T6752] tpg quantization: 0/2 [ 230.290372][ T6752] tpg RGB range: 0/1 [ 230.304674][ T6752] vivid-000: ================== END STATUS ================== [ 231.080548][ T6781] netlink: 48 bytes leftover after parsing attributes in process `syz.0.194'. [ 231.308104][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 231.317160][ T6784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.195'. [ 232.650668][ T6786] befs: (nbd2): No write support. Marking filesystem read-only [ 232.660776][ T6786] syz.2.193: attempt to access beyond end of device [ 232.660776][ T6786] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 232.673730][ T6786] befs: (nbd2): unable to read superblock [ 233.845517][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.194'. [ 235.997609][ T6794] netlink: 48 bytes leftover after parsing attributes in process `syz.2.196'. [ 236.082922][ T6795] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 238.470813][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 238.479775][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.198'. [ 240.920516][ T6815] netlink: 20 bytes leftover after parsing attributes in process `syz.1.201'. [ 241.818844][ T6816] syz.2.202 (6816): drop_caches: 1 [ 241.857457][ T6816] syz.2.202 (6816): drop_caches: 1 [ 242.216838][ T5855] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 243.123097][ T5855] usb 4-1: Using ep0 maxpacket: 16 [ 243.458269][ T6835] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 243.662269][ T6839] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 243.760907][ T6839] team0: Device hsr_slave_0 failed to register rx_handler [ 243.905444][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.1.205'. [ 245.181251][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 245.191212][ T6846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'. [ 246.708594][ T6851] syz.0.209[6851]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 247.139515][ T5855] usb 4-1: device descriptor read/all, error -71 [ 247.513053][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 247.522178][ T6859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 249.776346][ T6862] netlink: 48 bytes leftover after parsing attributes in process `syz.1.212'. [ 250.084888][ T6864] syz.2.211 (6864): drop_caches: 1 [ 250.280687][ T6864] syz.2.211 (6864): drop_caches: 1 [ 250.793848][ T6865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.212'. [ 251.233413][ T6869] netlink: 48 bytes leftover after parsing attributes in process `syz.1.214'. [ 251.356623][ T6872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.214'. [ 252.807147][ T6877] vivid-000: ================= START STATUS ================= [ 252.847388][ T6877] vivid-000: Test Pattern: 75% Colorbar [ 252.863672][ T6877] vivid-000: Fill Percentage of Frame: 100 [ 252.903703][ T6877] vivid-000: Horizontal Movement: No Movement [ 252.916946][ T6885] netlink: 48 bytes leftover after parsing attributes in process `syz.3.217'. [ 252.941726][ T6877] vivid-000: Vertical Movement: No Movement [ 253.016900][ T6877] vivid-000: OSD Text Mode: All [ 253.093529][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.217'. [ 253.148519][ T5103] Bluetooth: hci3: link tx timeout [ 253.153765][ T5103] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 253.164913][ T5103] Bluetooth: hci3: link tx timeout [ 253.170273][ T5103] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 253.178507][ T5103] Bluetooth: hci3: link tx timeout [ 253.187128][ T5103] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 253.194918][ T5103] Bluetooth: hci3: link tx timeout [ 254.616796][ T5103] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 254.624652][ T5103] Bluetooth: hci3: link tx timeout [ 254.630040][ T5103] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 254.675749][ T6877] vivid-000: Show Border: false [ 254.680868][ T6877] vivid-000: Show Square: false [ 254.685782][ T6877] vivid-000: Sensor Flipped Horizontally: true [ 254.692161][ T6877] vivid-000: Sensor Flipped Vertically: false [ 254.698528][ T6877] vivid-000: Insert SAV Code in Image: false [ 254.704719][ T6877] vivid-000: Insert EAV Code in Image: false [ 254.710921][ T6877] vivid-000: Insert Video Guard Band: false [ 254.717118][ T6877] vivid-000: Reduced Framerate: false [ 254.722673][ T6877] vivid-000: Enable Capture Cropping: true grabbed [ 254.729494][ T6877] vivid-000: Enable Capture Composing: true grabbed [ 254.736437][ T6877] vivid-000: Enable Capture Scaler: true grabbed [ 254.743075][ T6877] vivid-000: Timestamp Source: End of Frame [ 254.749206][ T6877] vivid-000: Colorspace: Rec. 709 [ 254.758418][ T6877] vivid-000: Transfer Function: Default [ 254.764143][ T6877] vivid-000: Y'CbCr Encoding: Default [ 254.769688][ T6877] vivid-000: HSV Encoding: Hue 0-179 [ 254.775629][ T6877] vivid-000: Quantization: Default [ 254.781865][ T6877] vivid-000: Apply Alpha To Red Only: false [ 254.787980][ T6877] vivid-000: Standard Aspect Ratio: 4x3 [ 254.793673][ T6877] vivid-000: DV Timings Signal Mode: Current DV Timings [ 254.800782][ T6877] vivid-000: DV Timings: 640x480p59 inactive [ 254.807108][ T6877] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 254.814520][ T6877] vivid-000: Maximum EDID Blocks: 2 [ 254.832590][ T6877] vivid-000: Limited RGB Range (16-235): true [ 254.856859][ T6877] vivid-000: Rx RGB Quantization Range: Automatic [ 254.873603][ T6877] vivid-000: Power Present: 0x00000001 [ 254.910184][ T6877] tpg source WxH: 1280x720 (Y'CbCr) [ 254.915478][ T6877] tpg field: 1 [ 254.978961][ T6877] tpg crop: 1280x720@0x0 [ 254.983288][ T6877] tpg compose: 1280x720@0x0 [ 254.997365][ T6877] tpg colorspace: 3 [ 255.006373][ T6877] tpg transfer function: 0/1 [ 255.016523][ T6877] tpg Y'CbCr encoding: 0/2 [ 255.029524][ T6877] tpg quantization: 0/2 [ 255.045374][ T6877] tpg RGB range: 0/1 [ 255.067023][ T6877] vivid-000: ================== END STATUS ================== [ 255.208841][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 256.026860][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.033264][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.387249][ T6907] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 257.934633][ T6913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.222'. [ 258.112076][ T6914] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'. [ 260.080764][ T6917] netlink: 3 bytes leftover after parsing attributes in process `syz.2.221'. [ 260.159003][ T6917] batadv1: entered allmulticast mode [ 260.247195][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 260.422478][ T6919] netlink: 48 bytes leftover after parsing attributes in process `syz.1.223'. [ 261.197782][ T6924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.223'. [ 265.183471][ T6940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.229'. [ 265.207157][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 265.305865][ T6942] netlink: 48 bytes leftover after parsing attributes in process `syz.2.228'. [ 265.564689][ T6951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.228'. [ 267.686848][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 267.897530][ T6950] netlink: 'syz.1.227': attribute type 10 has an invalid length. [ 267.905902][ T6950] team0: Device hsr_slave_0 failed to register rx_handler [ 268.276250][ T6962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 268.285351][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.234'. [ 268.327669][ T6959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.231'. [ 270.890406][ T6963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.231'. [ 274.037268][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 277.408102][ T6997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.237'. [ 277.636591][ T7004] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 279.443841][ T7014] netlink: 'syz.2.244': attribute type 10 has an invalid length. [ 279.454884][ T7014] team0: Device hsr_slave_0 failed to register rx_handler [ 281.722567][ T7036] netlink: 48 bytes leftover after parsing attributes in process `syz.3.250'. [ 281.808124][ T7040] misc userio: Invalid payload size [ 281.838585][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.3.250'. [ 281.922173][ T7041] misc userio: Invalid payload size [ 285.876930][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 286.644435][ T7057] netlink: 48 bytes leftover after parsing attributes in process `syz.1.254'. [ 288.673493][ T7069] binder: 7068:7069 ioctl c018620c 200000000240 returned -1 [ 288.695433][ T7067] netlink: 48 bytes leftover after parsing attributes in process `syz.0.256'. [ 288.784348][ T7071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.256'. [ 290.896982][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 294.432464][ T7119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.266'. [ 294.645754][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.268'. [ 294.654850][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 295.414008][ T7124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.266'. [ 297.110452][ T7128] vivid-000: ================= START STATUS ================= [ 297.203563][ T7128] vivid-000: Test Pattern: 75% Colorbar [ 297.393893][ T7128] vivid-000: Fill Percentage of Frame: 100 [ 297.400310][ T7128] vivid-000: Horizontal Movement: No Movement [ 297.406548][ T7128] vivid-000: Vertical Movement: No Movement [ 297.413107][ T7128] vivid-000: OSD Text Mode: All [ 297.418509][ T7128] vivid-000: Show Border: false [ 297.423431][ T7128] vivid-000: Show Square: false [ 297.428923][ T7128] vivid-000: Sensor Flipped Horizontally: true [ 297.435151][ T7128] vivid-000: Sensor Flipped Vertically: false [ 297.461839][ T7128] vivid-000: Insert SAV Code in Image: false [ 297.495460][ T7128] vivid-000: Insert EAV Code in Image: false [ 297.523860][ T7128] vivid-000: Insert Video Guard Band: false [ 297.563882][ T7128] vivid-000: Reduced Framerate: false [ 297.579800][ T7128] vivid-000: Enable Capture Cropping: true grabbed [ 297.606341][ T7128] vivid-000: Enable Capture Composing: true grabbed [ 297.636157][ T7128] vivid-000: Enable Capture Scaler: true grabbed [ 297.653302][ T7128] vivid-000: Timestamp Source: End of Frame [ 297.659975][ T7128] vivid-000: Colorspace: Rec. 709 [ 297.665236][ T7128] vivid-000: Transfer Function: Default [ 297.727671][ T7145] netlink: 3 bytes leftover after parsing attributes in process `syz.0.270'. [ 297.776571][ T7145] batadv1: entered allmulticast mode [ 297.923535][ T7128] vivid-000: Y'CbCr Encoding: Default [ 298.018778][ T7128] vivid-000: HSV Encoding: Hue 0-179 [ 298.041271][ T7128] vivid-000: Quantization: Default [ 298.148645][ T7128] vivid-000: Apply Alpha To Red Only: false [ 298.154663][ T7128] vivid-000: Standard Aspect Ratio: 4x3 [ 298.371811][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 298.613912][ T7128] vivid-000: DV Timings Signal Mode: Current DV Timings [ 298.647118][ T7128] vivid-000: DV Timings: 640x480p59 inactive [ 298.653471][ T7128] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 298.663039][ T7128] vivid-000: Maximum EDID Blocks: 2 [ 298.670627][ T7128] vivid-000: Limited RGB Range (16-235): true [ 298.702889][ T7128] vivid-000: Rx RGB Quantization Range: Automatic [ 298.738974][ T7128] vivid-000: Power Present: 0x00000001 [ 298.754923][ T7128] tpg source WxH: 1280x720 (Y'CbCr) [ 298.903359][ T7128] tpg field: 1 [ 298.909466][ T7128] tpg crop: 1280x720@0x0 [ 298.915646][ T7128] tpg compose: 1280x720@0x0 [ 298.977433][ T7128] tpg colorspace: 3 [ 298.996817][ T7128] tpg transfer function: 0/1 [ 299.010562][ T7128] tpg Y'CbCr encoding: 0/2 [ 299.025445][ T7128] tpg quantization: 0/2 [ 299.055751][ T7128] tpg RGB range: 0/1 [ 299.066929][ T5884] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 299.074594][ T7128] vivid-000: ================== END STATUS ================== [ 300.110682][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 301.012474][ T7165] netlink: 3 bytes leftover after parsing attributes in process `syz.0.273'. [ 301.105652][ T7165] batadv1: entered allmulticast mode [ 301.916664][ T7171] vivid-000: ================= START STATUS ================= [ 301.971873][ T7171] vivid-000: Test Pattern: 75% Colorbar [ 301.994027][ T7172] netlink: 3 bytes leftover after parsing attributes in process `syz.3.276'. [ 302.026913][ T7171] vivid-000: Fill Percentage of Frame: 100 [ 302.116858][ T7171] vivid-000: Horizontal Movement: No Movement [ 302.247169][ T7172] batadv1: entered allmulticast mode [ 302.284204][ T7171] vivid-000: Vertical Movement: No Movement [ 302.291815][ T7171] vivid-000: OSD Text Mode: All [ 302.297431][ T7171] vivid-000: Show Border: false [ 302.302441][ T7171] vivid-000: Show Square: false [ 302.307622][ T7171] vivid-000: Sensor Flipped Horizontally: true [ 302.315138][ T7171] vivid-000: Sensor Flipped Vertically: false [ 302.323061][ T7171] vivid-000: Insert SAV Code in Image: false [ 302.329407][ T7171] vivid-000: Insert EAV Code in Image: false [ 302.335634][ T7171] vivid-000: Insert Video Guard Band: false [ 302.341886][ T7171] vivid-000: Reduced Framerate: false [ 302.355439][ T7171] vivid-000: Enable Capture Cropping: true grabbed [ 302.371922][ T7171] vivid-000: Enable Capture Composing: true grabbed [ 302.384494][ T7171] vivid-000: Enable Capture Scaler: true grabbed [ 302.399332][ T7171] vivid-000: Timestamp Source: End of Frame [ 302.414325][ T7171] vivid-000: Colorspace: Rec. 709 [ 302.604517][ T7171] vivid-000: Transfer Function: Default [ 302.757332][ T7171] vivid-000: Y'CbCr Encoding: Default [ 302.762865][ T7171] vivid-000: HSV Encoding: Hue 0-179 [ 302.768895][ T7171] vivid-000: Quantization: Default [ 302.786832][ T7171] vivid-000: Apply Alpha To Red Only: false [ 302.798612][ T7171] vivid-000: Standard Aspect Ratio: 4x3 [ 302.804237][ T7171] vivid-000: DV Timings Signal Mode: Current DV Timings [ 302.848042][ T7171] vivid-000: DV Timings: 640x480p59 inactive [ 302.864495][ T7171] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 302.906864][ T7171] vivid-000: Maximum EDID Blocks: 2 [ 302.912214][ T7171] vivid-000: Limited RGB Range (16-235): true [ 302.928628][ T7171] vivid-000: Rx RGB Quantization Range: Automatic [ 302.965820][ T7171] vivid-000: Power Present: 0x00000001 [ 302.971810][ T7171] tpg source WxH: 1280x720 (Y'CbCr) [ 303.006902][ T7171] tpg field: 1 [ 303.010369][ T7171] tpg crop: 1280x720@0x0 [ 303.014651][ T7171] tpg compose: 1280x720@0x0 [ 303.046854][ T7171] tpg colorspace: 3 [ 303.066860][ T7171] tpg transfer function: 0/1 [ 303.081483][ T7171] tpg Y'CbCr encoding: 0/2 [ 303.107079][ T7171] tpg quantization: 0/2 [ 303.126950][ T7171] tpg RGB range: 0/1 [ 303.156892][ T7171] vivid-000: ================== END STATUS ================== [ 303.478141][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short [ 303.515887][ T5884] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 303.535610][ T5884] usb 3-1: can't read configurations, error -71 [ 303.891150][ T7183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 303.900309][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.278'. [ 304.043768][ T7182] netlink: 48 bytes leftover after parsing attributes in process `syz.0.279'. [ 304.628139][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 304.628159][ T28] audit: type=1326 audit(1759959402.350:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 304.662493][ T28] audit: type=1326 audit(1759959402.350:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 304.695599][ T28] audit: type=1326 audit(1759959402.350:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 304.731692][ T28] audit: type=1326 audit(1759959402.350:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 304.822773][ T28] audit: type=1326 audit(1759959402.350:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 304.880080][ T7187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.279'. [ 305.623450][ T28] audit: type=1326 audit(1759959402.350:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 305.660200][ T7192] netlink: 48 bytes leftover after parsing attributes in process `syz.2.282'. [ 305.673045][ T28] audit: type=1326 audit(1759959402.350:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 305.696224][ T28] audit: type=1326 audit(1759959402.350:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 305.720020][ T28] audit: type=1326 audit(1759959402.350:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 305.791709][ T7193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.282'. [ 306.801820][ T28] audit: type=1326 audit(1759959402.350:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7184 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192ab8eec9 code=0x7ffc0000 [ 307.916873][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 307.975074][ T7196] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 308.058341][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.284'. [ 310.006943][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 310.676388][ T7215] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 310.699476][ T7215] netlink: 'syz.2.287': attribute type 10 has an invalid length. [ 310.708543][ T7215] team0: Device hsr_slave_0 failed to register rx_handler [ 310.787274][ T7225] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 310.836255][ T7225] netlink: 'syz.3.288': attribute type 10 has an invalid length. [ 310.847614][ T7225] team0: Device hsr_slave_0 failed to register rx_handler [ 313.854111][ T7269] netlink: 3 bytes leftover after parsing attributes in process `syz.0.294'. [ 313.912596][ T7269] batadv1: entered allmulticast mode [ 315.878054][ T7279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.299'. [ 316.019647][ T7282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.299'. [ 316.939478][ T7281] netlink: 48 bytes leftover after parsing attributes in process `syz.1.300'. [ 317.125713][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.1.300'. [ 317.464146][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.872476][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.096043][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.302'. [ 319.105359][ T7296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.302'. [ 320.263449][ T7299] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.291470][ T7305] netlink: 48 bytes leftover after parsing attributes in process `syz.1.308'. [ 320.301334][ T7307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.306'. [ 320.418655][ T7310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.308'. [ 321.792739][ T7316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'. [ 325.455631][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.316'. [ 325.464840][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.316'. [ 326.561522][ T7350] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 326.781440][ T7350] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 326.827826][ T7350] team0: Device hsr_slave_0 failed to register rx_handler [ 328.005590][ T7368] netlink: 3 bytes leftover after parsing attributes in process `syz.3.320'. [ 328.059493][ T7368] batadv1: entered allmulticast mode [ 328.193481][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.322'. [ 329.687268][ T7377] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 329.768651][ T7384] netlink: 20 bytes leftover after parsing attributes in process `syz.0.323'. [ 329.787428][ T7377] netlink: 'syz.1.324': attribute type 10 has an invalid length. [ 329.901520][ T7377] team0: Device hsr_slave_0 failed to register rx_handler [ 329.966995][ T7385] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 330.117730][ T7382] netlink: 'syz.3.325': attribute type 10 has an invalid length. [ 330.125997][ T7382] team0: Device hsr_slave_0 failed to register rx_handler [ 330.882709][ T7396] netlink: 64 bytes leftover after parsing attributes in process `syz.3.327'. [ 331.957005][ T7398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.256383][ T7418] netlink: 3 bytes leftover after parsing attributes in process `syz.1.331'. [ 334.308751][ T7418] batadv1: entered allmulticast mode [ 335.181719][ T7416] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 335.227412][ T7416] netlink: 'syz.3.333': attribute type 10 has an invalid length. [ 335.235632][ T7416] team0: Device hsr_slave_0 failed to register rx_handler [ 335.655590][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 335.673921][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'. [ 336.155708][ T7425] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 336.232145][ T7436] netlink: 'syz.0.334': attribute type 10 has an invalid length. [ 336.241433][ T7436] team0: Device hsr_slave_0 failed to register rx_handler [ 337.667941][ T7452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.918913][ T7466] vivid-000: ================= START STATUS ================= [ 338.952617][ T7466] vivid-000: Test Pattern: 75% Colorbar [ 338.965754][ T7463] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 339.014099][ T7466] vivid-000: Fill Percentage of Frame: 100 [ 339.036653][ T7466] vivid-000: Horizontal Movement: No Movement [ 339.043014][ T7466] vivid-000: Vertical Movement: No Movement [ 339.050391][ T7466] vivid-000: OSD Text Mode: All [ 339.055503][ T7466] vivid-000: Show Border: false [ 339.060586][ T7466] vivid-000: Show Square: false [ 339.065678][ T7466] vivid-000: Sensor Flipped Horizontally: true [ 339.072047][ T7466] vivid-000: Sensor Flipped Vertically: false [ 339.078531][ T7466] vivid-000: Insert SAV Code in Image: false [ 339.086658][ T7466] vivid-000: Insert EAV Code in Image: false [ 339.107549][ T7466] vivid-000: Insert Video Guard Band: false [ 339.127139][ T7466] vivid-000: Reduced Framerate: false [ 339.184463][ T7466] vivid-000: Enable Capture Cropping: true grabbed [ 339.213663][ T7466] vivid-000: Enable Capture Composing: true grabbed [ 339.220522][ T7466] vivid-000: Enable Capture Scaler: true grabbed [ 339.226989][ T7466] vivid-000: Timestamp Source: End of Frame [ 339.233136][ T7466] vivid-000: Colorspace: Rec. 709 [ 339.238286][ T7466] vivid-000: Transfer Function: Default [ 339.244071][ T7466] vivid-000: Y'CbCr Encoding: Default [ 339.249654][ T7466] vivid-000: HSV Encoding: Hue 0-179 [ 339.255970][ T7466] vivid-000: Quantization: Default [ 339.261203][ T7466] vivid-000: Apply Alpha To Red Only: false [ 339.267341][ T7466] vivid-000: Standard Aspect Ratio: 4x3 [ 339.272967][ T7466] vivid-000: DV Timings Signal Mode: Current DV Timings [ 339.280226][ T7466] vivid-000: DV Timings: 640x480p59 inactive [ 339.286301][ T7466] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 339.293903][ T7466] vivid-000: Maximum EDID Blocks: 2 [ 339.299252][ T7466] vivid-000: Limited RGB Range (16-235): true [ 339.305633][ T7466] vivid-000: Rx RGB Quantization Range: Automatic [ 339.312277][ T7466] vivid-000: Power Present: 0x00000001 [ 339.359164][ T7466] tpg source WxH: 1280x720 (Y'CbCr) [ 339.671518][ T7466] tpg field: 1 [ 339.695495][ T7466] tpg crop: 1280x720@0x0 [ 340.059572][ T7466] tpg compose: 1280x720@0x0 [ 340.064134][ T7466] tpg colorspace: 3 [ 340.068038][ T7466] tpg transfer function: 0/1 [ 340.073074][ T7466] tpg Y'CbCr encoding: 0/2 [ 340.077984][ T7466] tpg quantization: 0/2 [ 340.082197][ T7466] tpg RGB range: 0/1 [ 340.086127][ T7466] vivid-000: ================== END STATUS ================== [ 340.318960][ T7478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.346'. [ 340.397950][ T7482] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.599634][ T7499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 342.857021][ T5853] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 342.991862][ T7504] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 343.012547][ T7504] netlink: 'syz.2.352': attribute type 10 has an invalid length. [ 343.022357][ T7504] team0: Device hsr_slave_0 failed to register rx_handler [ 343.116802][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 344.020758][ T7512] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 346.705136][ T5853] usb 4-1: unable to get BOS descriptor or descriptor too short [ 346.748778][ T5853] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 346.756517][ T5853] usb 4-1: can't read configurations, error -71 [ 346.809900][ T7527] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 351.122201][ T7545] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 352.372563][ T7552] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 352.590041][ T7562] netlink: 28 bytes leftover after parsing attributes in process `syz.1.368'. [ 354.527511][ T7558] netlink: 48 bytes leftover after parsing attributes in process `syz.1.368'. [ 354.620998][ T7552] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 354.729414][ T7552] team0: Device hsr_slave_0 failed to register rx_handler [ 354.880519][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 356.389521][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 356.398719][ T7577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 357.237101][ T7583] binder: 7582:7583 ioctl c018620c 200000000240 returned -1 [ 357.630695][ T7592] vivid-000: ================= START STATUS ================= [ 357.659009][ T7592] vivid-000: Test Pattern: 75% Colorbar [ 357.664688][ T7592] vivid-000: Fill Percentage of Frame: 100 [ 357.727054][ T7592] vivid-000: Horizontal Movement: No Movement [ 357.733245][ T7592] vivid-000: Vertical Movement: No Movement [ 357.754588][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 357.766850][ T7592] vivid-000: OSD Text Mode: All [ 357.771818][ T7592] vivid-000: Show Border: false [ 357.786913][ T7592] vivid-000: Show Square: false [ 357.796352][ T7592] vivid-000: Sensor Flipped Horizontally: true [ 357.825107][ T7592] vivid-000: Sensor Flipped Vertically: false [ 357.975553][ T7592] vivid-000: Insert SAV Code in Image: false [ 358.068980][ T7592] vivid-000: Insert EAV Code in Image: false [ 358.134690][ T7592] vivid-000: Insert Video Guard Band: false [ 358.205053][ T7592] vivid-000: Reduced Framerate: false [ 358.261567][ T7592] vivid-000: Enable Capture Cropping: true grabbed [ 358.328821][ T7592] vivid-000: Enable Capture Composing: true grabbed [ 358.392073][ T7592] vivid-000: Enable Capture Scaler: true grabbed [ 358.493526][ T7592] vivid-000: Timestamp Source: End of Frame [ 358.558041][ T7592] vivid-000: Colorspace: Rec. 709 [ 358.610145][ T7592] vivid-000: Transfer Function: Default [ 358.661273][ T7592] vivid-000: Y'CbCr Encoding: Default [ 358.714445][ T7592] vivid-000: HSV Encoding: Hue 0-179 [ 358.736106][ T7592] vivid-000: Quantization: Default [ 358.741487][ T7592] vivid-000: Apply Alpha To Red Only: false [ 358.747604][ T7592] vivid-000: Standard Aspect Ratio: 4x3 [ 358.753314][ T7592] vivid-000: DV Timings Signal Mode: Current DV Timings [ 358.760483][ T7592] vivid-000: DV Timings: 640x480p59 inactive [ 358.766626][ T7592] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 358.774296][ T7592] vivid-000: Maximum EDID Blocks: 2 [ 358.779700][ T7592] vivid-000: Limited RGB Range (16-235): true [ 358.785926][ T7592] vivid-000: Rx RGB Quantization Range: Automatic [ 358.792588][ T7592] vivid-000: Power Present: 0x00000001 [ 358.798238][ T7592] tpg source WxH: 1280x720 (Y'CbCr) [ 358.806969][ T7592] tpg field: 1 [ 358.811576][ T7592] tpg crop: 1280x720@0x0 [ 358.815873][ T7592] tpg compose: 1280x720@0x0 [ 358.820583][ T7592] tpg colorspace: 3 [ 358.824522][ T7592] tpg transfer function: 0/1 [ 358.829239][ T7592] tpg Y'CbCr encoding: 0/2 [ 358.833789][ T7592] tpg quantization: 0/2 [ 358.838108][ T7592] tpg RGB range: 0/1 [ 358.842048][ T7592] vivid-000: ================== END STATUS ================== [ 360.019285][ T7603] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.589576][ T7638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.387'. [ 363.617170][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 363.648506][ T5839] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 363.745222][ T7641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.387'. [ 364.062002][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 365.736790][ T5839] usb 3-1: Using ep0 maxpacket: 16 [ 366.526814][ T7648] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 366.539949][ T7648] netlink: 'syz.1.389': attribute type 10 has an invalid length. [ 366.548693][ T7648] team0: Device hsr_slave_0 failed to register rx_handler [ 367.444526][ T27] usb 4-1: device descriptor read/all, error -71 [ 368.294007][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 368.882819][ T7661] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 368.917217][ T7661] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 368.926017][ T7661] team0: Device hsr_slave_0 failed to register rx_handler [ 369.026051][ T7665] netlink: 48 bytes leftover after parsing attributes in process `syz.1.394'. [ 369.216587][ T7666] netlink: 28 bytes leftover after parsing attributes in process `syz.1.394'. [ 370.272681][ T5839] usb 3-1: unable to get BOS descriptor or descriptor too short [ 370.336246][ T5839] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 370.512146][ T5839] usb 3-1: can't read configurations, error -71 [ 371.423186][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 371.801003][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 375.270592][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.402'. [ 375.367691][ T7703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.402'. [ 376.940644][ T7713] netlink: 48 bytes leftover after parsing attributes in process `syz.1.404'. [ 377.033397][ T7715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.404'. [ 378.353536][ T7723] netlink: 48 bytes leftover after parsing attributes in process `syz.3.406'. [ 378.376540][ T7718] vivid-000: ================= START STATUS ================= [ 378.470260][ T7724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 380.541057][ T7718] vivid-000: Test Pattern: 75% Colorbar [ 380.546881][ T7718] vivid-000: Fill Percentage of Frame: 100 [ 380.552823][ T7718] vivid-000: Horizontal Movement: No Movement [ 380.559038][ T7718] vivid-000: Vertical Movement: No Movement [ 380.565062][ T7718] vivid-000: OSD Text Mode: All [ 380.570079][ T7718] vivid-000: Show Border: false [ 380.575081][ T7718] vivid-000: Show Square: false [ 380.580073][ T7718] vivid-000: Sensor Flipped Horizontally: true [ 380.586334][ T7718] vivid-000: Sensor Flipped Vertically: false [ 380.592572][ T7718] vivid-000: Insert SAV Code in Image: false [ 380.602594][ T7718] vivid-000: Insert EAV Code in Image: false [ 380.609233][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 380.617640][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.624948][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.648352][ T7718] vivid-000: Insert Video Guard Band: false [ 380.654373][ T7718] vivid-000: Reduced Framerate: false [ 380.720132][ T7718] vivid-000: Enable Capture Cropping: true grabbed [ 380.728106][ T7718] vivid-000: Enable Capture Composing: true grabbed [ 380.734813][ T7718] vivid-000: Enable Capture Scaler: true grabbed [ 380.741601][ T7718] vivid-000: Timestamp Source: End of Frame [ 380.747836][ T7718] vivid-000: Colorspace: Rec. 709 [ 380.753051][ T7718] vivid-000: Transfer Function: Default [ 380.759212][ T7718] vivid-000: Y'CbCr Encoding: Default [ 380.764805][ T7718] vivid-000: HSV Encoding: Hue 0-179 [ 380.770729][ T7718] vivid-000: Quantization: Default [ 380.776092][ T7718] vivid-000: Apply Alpha To Red Only: false [ 380.782559][ T7718] vivid-000: Standard Aspect Ratio: 4x3 [ 380.797192][ T7718] vivid-000: DV Timings Signal Mode: Current DV Timings [ 380.807348][ T7718] vivid-000: DV Timings: 640x480p59 inactive [ 380.813604][ T7718] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 380.887850][ T7718] vivid-000: Maximum EDID Blocks: 2 [ 380.893172][ T7718] vivid-000: Limited RGB Range (16-235): true [ 380.956743][ T7718] vivid-000: Rx RGB Quantization Range: Automatic [ 380.976635][ T7718] vivid-000: Power Present: 0x00000001 [ 380.983185][ T7718] tpg source WxH: 1280x720 (Y'CbCr) [ 381.072853][ T7718] tpg field: 1 [ 381.076279][ T7718] tpg crop: 1280x720@0x0 [ 381.124533][ T7718] tpg compose: 1280x720@0x0 [ 381.155975][ T7718] tpg colorspace: 3 [ 381.160029][ T7718] tpg transfer function: 0/1 [ 381.166013][ T7718] tpg Y'CbCr encoding: 0/2 [ 381.170797][ T7718] tpg quantization: 0/2 [ 381.175170][ T7718] tpg RGB range: 0/1 [ 381.179445][ T7718] vivid-000: ================== END STATUS ================== [ 382.570445][ T7745] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 382.590121][ T7745] netlink: 'syz.3.411': attribute type 10 has an invalid length. [ 382.661313][ T5791] Bluetooth: hci3: command 0x0406 tx timeout [ 382.696802][ T7745] team0: Device hsr_slave_0 failed to register rx_handler [ 382.711092][ T7748] vivid-000: ================= START STATUS ================= [ 382.796867][ T7748] vivid-000: Test Pattern: 75% Colorbar [ 382.802564][ T7748] vivid-000: Fill Percentage of Frame: 100 [ 382.808884][ T7748] vivid-000: Horizontal Movement: No Movement [ 382.815112][ T7748] vivid-000: Vertical Movement: No Movement [ 382.821229][ T7748] vivid-000: OSD Text Mode: All [ 382.826147][ T7748] vivid-000: Show Border: false [ 382.831192][ T7748] vivid-000: Show Square: false [ 382.836208][ T7748] vivid-000: Sensor Flipped Horizontally: true [ 382.842740][ T7748] vivid-000: Sensor Flipped Vertically: false [ 382.848981][ T7748] vivid-000: Insert SAV Code in Image: false [ 382.855018][ T7748] vivid-000: Insert EAV Code in Image: false [ 382.861519][ T7748] vivid-000: Insert Video Guard Band: false [ 382.867933][ T7748] vivid-000: Reduced Framerate: false [ 382.873561][ T7748] vivid-000: Enable Capture Cropping: true grabbed [ 382.888449][ T7748] vivid-000: Enable Capture Composing: true grabbed [ 382.957602][ T7748] vivid-000: Enable Capture Scaler: true grabbed [ 382.969718][ T7748] vivid-000: Timestamp Source: End of Frame [ 383.214568][ T7748] vivid-000: Colorspace: Rec. 709 [ 383.219946][ T7748] vivid-000: Transfer Function: Default [ 383.225604][ T7748] vivid-000: Y'CbCr Encoding: Default [ 383.231229][ T7748] vivid-000: HSV Encoding: Hue 0-179 [ 383.236596][ T7748] vivid-000: Quantization: Default [ 383.241916][ T7748] vivid-000: Apply Alpha To Red Only: false [ 383.248040][ T7748] vivid-000: Standard Aspect Ratio: 4x3 [ 383.253687][ T7748] vivid-000: DV Timings Signal Mode: Current DV Timings [ 383.261071][ T7748] vivid-000: DV Timings: 640x480p59 inactive [ 383.267330][ T7748] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 383.274843][ T7748] vivid-000: Maximum EDID Blocks: 2 [ 383.280536][ T7748] vivid-000: Limited RGB Range (16-235): true [ 384.796952][ T7748] vivid-000: Rx RGB Quantization Range: Automatic [ 384.803491][ T7748] vivid-000: Power Present: 0x00000001 [ 384.964164][ T7748] tpg source WxH: 1280x720 (Y'CbCr) [ 384.972390][ T7748] tpg field: 1 [ 384.976022][ T7748] tpg crop: 1280x720@0x0 [ 384.981728][ T7748] tpg compose: 1280x720@0x0 [ 384.986405][ T7748] tpg colorspace: 3 [ 384.990730][ T7748] tpg transfer function: 0/1 [ 384.995369][ T7748] tpg Y'CbCr encoding: 0/2 [ 385.000218][ T7748] tpg quantization: 0/2 [ 385.007215][ T7748] tpg RGB range: 0/1 [ 385.011398][ T7748] vivid-000: ================== END STATUS ================== [ 386.559894][ T7768] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 386.734919][ T7770] syz.0.419 (7770): drop_caches: 1 [ 387.171739][ T7770] syz.0.419 (7770): drop_caches: 1 [ 387.188457][ T7768] netlink: 'syz.2.418': attribute type 10 has an invalid length. [ 387.197804][ T7768] team0: Device hsr_slave_0 failed to register rx_handler [ 387.334010][ T7779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 387.523663][ T7781] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 389.301546][ T7798] binder: 7796:7798 ioctl c018620c 200000000240 returned -1 [ 389.649787][ T7802] netlink: 3 bytes leftover after parsing attributes in process `syz.1.425'. [ 389.723048][ T7802] batadv1: entered allmulticast mode [ 391.345249][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.1.430'. [ 391.524296][ T7816] binder: 7815:7816 ioctl c018620c 200000000240 returned -1 [ 392.110393][ T7826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 395.433294][ T7837] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 395.453761][ T7837] netlink: 'syz.2.435': attribute type 10 has an invalid length. [ 395.463875][ T7837] team0: Device hsr_slave_0 failed to register rx_handler [ 396.002503][ T7851] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 396.249874][ T7856] netlink: 'syz.0.438': attribute type 10 has an invalid length. [ 396.268419][ T7856] team0: Device hsr_slave_0 failed to register rx_handler [ 396.579189][ T7858] netlink: 3 bytes leftover after parsing attributes in process `syz.2.439'. [ 396.664159][ T7858] batadv1: entered allmulticast mode [ 397.228245][ T7865] netlink: 48 bytes leftover after parsing attributes in process `syz.1.441'. [ 399.847085][ T5103] Bluetooth: hci3: command 0x0406 tx timeout [ 400.169633][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 400.169684][ T28] audit: type=1326 audit(1759959497.920:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 401.184767][ T28] audit: type=1326 audit(1759959497.950:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 401.301868][ T28] audit: type=1326 audit(1759959497.950:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 401.394915][ T28] audit: type=1326 audit(1759959497.950:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 401.420169][ T28] audit: type=1326 audit(1759959497.950:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 401.442947][ T28] audit: type=1326 audit(1759959497.960:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 401.466568][ T28] audit: type=1326 audit(1759959497.960:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 401.495300][ T28] audit: type=1326 audit(1759959497.960:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 401.520126][ T28] audit: type=1326 audit(1759959497.960:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 401.551065][ T28] audit: type=1326 audit(1759959497.960:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f472c98eec9 code=0x7ffc0000 [ 402.976537][ T7893] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 404.464457][ T7901] syz.0.451 (7901): drop_caches: 1 [ 404.805232][ T7901] syz.0.451 (7901): drop_caches: 1 [ 404.847202][ T7909] netlink: 48 bytes leftover after parsing attributes in process `syz.2.453'. [ 406.690854][ T5791] list_del corruption, ffff88801a688000->next is LIST_POISON1 (dead000000000100) [ 406.718872][ T5791] ------------[ cut here ]------------ [ 406.724531][ T5791] kernel BUG at lib/list_debug.c:58! [ 406.756770][ T5791] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 406.762942][ T5791] CPU: 0 PID: 5791 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 406.770524][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.780726][ T5791] Workqueue: hci3 hci_conn_timeout [ 406.785938][ T5791] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 406.792918][ T5791] Code: 48 89 de e8 d9 2e 3d 06 0f 0b 48 c7 c7 40 67 fc 8a 48 89 de e8 c8 2e 3d 06 0f 0b 48 c7 c7 a0 67 fc 8a 48 89 de e8 b7 2e 3d 06 <0f> 0b 48 c7 c7 00 68 fc 8a 48 89 de e8 a6 2e 3d 06 0f 0b 48 c7 c7 [ 406.812675][ T5791] RSP: 0018:ffffc9000453fac8 EFLAGS: 00010246 [ 406.818790][ T5791] RAX: 000000000000004e RBX: ffff88801a688000 RCX: edfbe0038c61af00 [ 406.826828][ T5791] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 406.834804][ T5791] RBP: ffffffff89814ae0 R08: ffffc9000453f7c7 R09: 1ffff920008a7ef8 [ 406.842789][ T5791] R10: dffffc0000000000 R11: fffff520008a7ef9 R12: dffffc0000000000 [ 406.850775][ T5791] R13: 1ffff110034d1000 R14: dead000000000100 R15: dead000000000122 [ 406.858772][ T5791] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 406.867729][ T5791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 406.874321][ T5791] CR2: 0000200000031000 CR3: 000000007ef23000 CR4: 00000000003506f0 [ 406.882299][ T5791] Call Trace: [ 406.885584][ T5791] [ 406.888533][ T5791] hci_cmd_sync_dequeue_once+0x244/0x370 [ 406.894271][ T5791] hci_cancel_connect_sync+0xc8/0x120 [ 406.899676][ T5791] hci_abort_conn+0x18c/0x330 [ 406.904386][ T5791] ? process_scheduled_works+0x957/0x15b0 [ 406.910141][ T5791] process_scheduled_works+0xa45/0x15b0 [ 406.915714][ T5791] ? assign_work+0x400/0x400 [ 406.920333][ T5791] ? assign_work+0x39e/0x400 [ 406.924935][ T5791] worker_thread+0xa55/0xfc0 [ 406.929536][ T5791] kthread+0x2fa/0x390 [ 406.933609][ T5791] ? pr_cont_work+0x560/0x560 [ 406.938296][ T5791] ? kthread_blkcg+0xd0/0xd0 [ 406.942919][ T5791] ret_from_fork+0x48/0x80 [ 406.947356][ T5791] ? kthread_blkcg+0xd0/0xd0 [ 406.951953][ T5791] ret_from_fork_asm+0x11/0x20 [ 406.956741][ T5791] [ 406.959788][ T5791] Modules linked in: [ 406.976754][ T5791] ---[ end trace 0000000000000000 ]--- [ 406.982297][ T5791] RIP: 0010:__list_del_entry_valid_or_report+0xe9/0x130 [ 406.993053][ T5791] Code: 48 89 de e8 d9 2e 3d 06 0f 0b 48 c7 c7 40 67 fc 8a 48 89 de e8 c8 2e 3d 06 0f 0b 48 c7 c7 a0 67 fc 8a 48 89 de e8 b7 2e 3d 06 <0f> 0b 48 c7 c7 00 68 fc 8a 48 89 de e8 a6 2e 3d 06 0f 0b 48 c7 c7 [ 407.012868][ T5791] RSP: 0018:ffffc9000453fac8 EFLAGS: 00010246 [ 407.018984][ T5791] RAX: 000000000000004e RBX: ffff88801a688000 RCX: edfbe0038c61af00 [ 407.026991][ T5791] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 407.034968][ T5791] RBP: ffffffff89814ae0 R08: ffffc9000453f7c7 R09: 1ffff920008a7ef8 [ 407.043694][ T5791] R10: dffffc0000000000 R11: fffff520008a7ef9 R12: dffffc0000000000 [ 407.051773][ T5791] R13: 1ffff110034d1000 R14: dead000000000100 R15: dead000000000122 [ 407.059901][ T5791] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 407.068986][ T5791] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.075630][ T5791] CR2: 0000200000031000 CR3: 000000007ef23000 CR4: 00000000003506f0 [ 407.084328][ T5791] Kernel panic - not syncing: Fatal exception [ 407.090770][ T5791] Kernel Offset: disabled [ 407.095102][ T5791] Rebooting in 86400 seconds..