last executing test programs: 2.167885306s ago: executing program 2 (id=55): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x10) 2.167455148s ago: executing program 2 (id=57): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0xff, 0x0, @void}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000013c0)=""/49, 0x31}], 0x1}, 0x5}], 0x1, 0x40000000, 0x0) 1.975048711s ago: executing program 4 (id=66): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.834884242s ago: executing program 3 (id=69): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x7fff, 0x3fb}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fanotify_init(0x225, 0x0) 1.834694484s ago: executing program 3 (id=70): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r2, r1}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) r4 = socket$kcm(0x2, 0x3, 0x2) syz_emit_ethernet(0x82, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) recvmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 1.778687179s ago: executing program 3 (id=72): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x8, 0x6, @remote}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x2c, 0x0, 0xe000, 0x2, 0x11, 0x0, @private=0xa010101, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x1}}}}}}, 0x0) 1.603327908s ago: executing program 3 (id=76): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) io_setup(0x2007, &(0x7f0000000980)=0x0) io_pgetevents(r4, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x4, 0x2}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 1.603043755s ago: executing program 1 (id=78): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e"], 0x9) 1.581457832s ago: executing program 1 (id=79): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000005c0)={'nat\x00', 0x0, 0x0, 0x0, [0xecd, 0x8, 0x40100000009bc6, 0x8, 0x9bbc, 0x4], 0x0, 0x0}, 0x78) 1.422908628s ago: executing program 0 (id=80): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) lseek(r3, 0x8, 0x4) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) shutdown(r4, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000200)='./file0/file0\x00', 0x100000, &(0x7f0000000900)=ANY=[@ANYBLOB="f6", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="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"], 0x1, 0x0, &(0x7f0000000400)="b185ba8e419bfd3e3cee373102e2fdcdb303fa7dbf45cdeacae80fdc4c1437c8028f9afcc21bdbfb7553f603f98d603727991568bc8852ff6e2ed26e46ecf5b4f92f481b02de67c57d577f99156614fdb7fdcf1a7852a8c3ba29db9bc0b14f02afa41a0b8b4828c99e9b9d6f14a43fac90feb63606fb6e21b925b4b84bf77ee713d3aecf9c8fb16df4ed01282787cfd9629be37c96cb6a975b19b43aa9214d928a416277ce886706a56cf3a335a4154052d437e266cd33c85e785106b7f5c8558db03942bd72029325b3e2f22943bd5183f35ab018ca233a32820e82c684e9fb4ac422b5742307b155d3873953fadc5410f92df8") statx(r5, 0x0, 0x6000, 0x7ff, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f00000002c0)}) r6 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @dev={0xac, 0x14, 0x14, 0x1a}, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x8f) openat(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0x10582, 0x120) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000000f00015b097ead85847817353d2dbad05d", 0x1b, 0xfffffffffffffffd) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x70, 0x12, 0x905, 0x70bd26, 0x25dfdbfb, {0xa, 0x7, 0x4, 0x0, {0x4e22, 0x4e66, [0xfffffffb, 0x923, 0x6, 0x9], [0xfffffffd, 0x9, 0x21, 0x2], 0x0, [0xa, 0x8ffe]}, 0x6, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x21, 0x1, "09911c000a1f4914aafaafc08ed49534e802df481da5d6ab7a4f8c950f"}]}, 0x70}, 0x1, 0x0, 0x0, 0x26000001}, 0x800) 1.422766434s ago: executing program 4 (id=81): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600040000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000804) 1.3474335s ago: executing program 4 (id=82): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close(0xffffffffffffffff) fstat(0xffffffffffffffff, &(0x7f0000001700)) 1.347199925s ago: executing program 4 (id=83): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x48, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x320, 0x25, 0x148, 0x320, 0x60, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xa214}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11, 0x20, 0x20, 0x1]}}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffc}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x560) socket$netlink(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, 0x0) semget(0x1, 0x0, 0x0) 1.346917076s ago: executing program 1 (id=84): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x80801, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe662, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x4, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x7fffffff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0xffffffff, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x918) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) ioctl$USBDEVFS_SETINTERFACE(r0, 0x8008550e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x45) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x10000000000002f1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 1.304563133s ago: executing program 2 (id=85): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getcwd(&(0x7f00000000c0)=""/52, 0x34) 1.29083358s ago: executing program 1 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 848.284892ms ago: executing program 1 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="4e0a45bf0a0001"], 0x30}}, 0x80c0) 791.410453ms ago: executing program 1 (id=88): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x1f, 0x56, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r3, &(0x7f0000000000)=""/31, 0x39, 0x2002, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x1e, 0x21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 791.180438ms ago: executing program 2 (id=89): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000010000002900000002000000", 0xfe60) 791.094845ms ago: executing program 2 (id=90): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000003c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0}) 684.682686ms ago: executing program 3 (id=91): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0}) 511.250031ms ago: executing program 4 (id=92): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="6916000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9ea4318123341cf9d90a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a22a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a19eed87b277be335c75e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436e101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521bc9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d2502000000d9051f22614d1f62734d678039a97d2b74f9e8e97f4e8e7025123e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f23128d743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069f6f24e1e1bc976d965ddabb01085f16bff63a06578d6d184f5de7bfb6aaa75f16996d8d60bd0111a8a237a1536256c02284cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798bbe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e2005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9cde5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde330289d6348d183ed9d3dae3cccf109f7c78e8479a345e805e47dfa82cafc6b64b1f4659834aecbeded44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1b7d5f80c580dc31b0963ff953ce09148e8dfea9d03a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e96c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20c290a1f6c09272dbc3b2c0ab2b5baa1b07b16e81f278e54a479f1a06bc06e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4d57b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce788c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f709294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b132876159972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0598700130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80014ff11d9dbceba41d8dfce410333a054e82b1d050331ce0aeacb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6bb956fac1ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a8263e9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dd18f6148354df7e60a489dc543ccdee1fff9d8f8d78844de27a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d64100cc000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2ceae70922989f66827fe9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168e32d7bd6800000000a21008b8d26dabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2935d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95badaf8ed85cd5b03a7352a0fb83398566d1bc133582ce2d9f601cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353c959fd965702f1cd5bcb3c16d4b8bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef07b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c3355fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538b011cb3928b430630b8ccc800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b314bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c921b090000000000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da22ee9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45b4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d5027e81ceec1a6d7441d0b538d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656d9a28f81f6a9465aec94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be184d4ebb942f99581a6fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bbb4ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855cb18b23517ca935a0fa1b630d70c4ca9acbaf0f08910f327fba506d834029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17ecd996d7dea947ee8ce55fa2dea5a000000000000000000000000006f0143d8d4038ef9f57d9e9336f3559558710d1febe7394cf8b02f59dab24d07db3d3c1ebff58f973ba3fc0c3e2fb2c2a674a188614520ecb1d22b49e3550263bf9d669fba198b65ee3512db0e710d2070b5847face7ada12c83f0aea3a8c9e84e6c7406732c952c5695d43bca33d481ef9d442697875e114f4c759af306b3fc8224fdec89bf199234bff488b81438cbe89e4cabdc007139352b5cb69d7987cdf37ab549b7639eeadafd5315d9c9f0e8c9223102e6deaca4ae9cb943a3ad188bcad95e8f97d7fee7c47ea50d222fe67085b4fb3fecfb67dec23b6ab5ee19a5ca5367bff058149a"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 455.289086ms ago: executing program 4 (id=93): socket(0x11, 0x6, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) io_setup(0x2007, &(0x7f0000000980)=0x0) eventfd2(0x9, 0x0) io_pgetevents(r4, 0x2, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x40, 0x0, 0x46}) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x4, 0x2}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 384.831631ms ago: executing program 0 (id=94): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) socket$nl_crypto(0x10, 0x3, 0x15) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00"], 0xd) 365.232662ms ago: executing program 0 (id=95): syz_mount_image$fuse(0x0, &(0x7f0000000600)='./file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x9801) move_mount(r0, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x21060e2, &(0x7f0000001640)=ANY=[@ANYBLOB="c1a7f72915e94967cbab914284de93096131c9d7b13ec29f8d7e1a2f33b4d46d4783112c"], 0x1, 0x0, 0x0) 271.407969ms ago: executing program 0 (id=96): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e00010027bd7000fcdbdf250a000000", @ANYRES32=r1, @ANYBLOB="00000800140001"], 0x30}}, 0x20000000) 271.132444ms ago: executing program 0 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x8}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xffffffff}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 270.925195ms ago: executing program 2 (id=98): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x208001, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r5, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 218.43258ms ago: executing program 0 (id=99): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000100)=0xb) 0s ago: executing program 3 (id=100): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue1\x00', 0x10000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socket$nl_xfrm(0x10, 0x3, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000001, &(0x7f0000000a00)=[{&(0x7f00000004c0)=""/192, 0xc0}, {&(0x7f0000000580)=""/152, 0x98}, {&(0x7f0000000b80)=""/220, 0xdc}, {0x0}, {&(0x7f0000000800)=""/203, 0xcb}, {&(0x7f0000000900)=""/182, 0xb6}, {&(0x7f0000000140)=""/125, 0x7d}, {&(0x7f00000009c0)=""/44, 0x2c}], 0x8, 0x12}) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) write$cgroup_int(r5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r6], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts. [ 26.001339][ T6538] cgroup: Unknown subsys name 'net' [ 26.171146][ T6538] cgroup: Unknown subsys name 'cpuset' [ 26.173212][ T6538] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 26.358389][ T6538] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 27.553607][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 27.555421][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 27.560457][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 27.560676][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 27.564163][ T6555] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 27.564622][ T6555] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 27.564826][ T6555] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 27.565727][ T6555] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 27.567370][ T6555] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 27.570646][ T6555] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 27.576106][ T6555] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 27.578028][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 27.579510][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 27.580998][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 27.583336][ T6549] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 27.584884][ T6549] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 27.586734][ T6549] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 27.588141][ T6549] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 27.588248][ T6549] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 27.590796][ T6549] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 27.593060][ T6554] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 27.597303][ T6554] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 27.598948][ T6549] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 27.600759][ T6549] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 27.600990][ T6549] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 27.743040][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 27.774742][ T6559] chnl_net:caif_netlink_parms(): no params data found [ 27.777814][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 27.812038][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 27.834073][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.835769][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.837036][ T6551] bridge_slave_0: entered allmulticast mode [ 27.838542][ T6551] bridge_slave_0: entered promiscuous mode [ 27.853382][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.853461][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.853580][ T6551] bridge_slave_1: entered allmulticast mode [ 27.854030][ T6551] bridge_slave_1: entered promiscuous mode [ 27.875834][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.875900][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.875972][ T6559] bridge_slave_0: entered allmulticast mode [ 27.876412][ T6559] bridge_slave_0: entered promiscuous mode [ 27.877167][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.877184][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.877227][ T6559] bridge_slave_1: entered allmulticast mode [ 27.877664][ T6559] bridge_slave_1: entered promiscuous mode [ 27.878098][ T6558] chnl_net:caif_netlink_parms(): no params data found [ 27.888353][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.888437][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.888496][ T6548] bridge_slave_0: entered allmulticast mode [ 27.888897][ T6548] bridge_slave_0: entered promiscuous mode [ 27.893673][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.894912][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.898668][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.899870][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.901135][ T6548] bridge_slave_1: entered allmulticast mode [ 27.902619][ T6548] bridge_slave_1: entered promiscuous mode [ 27.904101][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.904149][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.904221][ T6556] bridge_slave_0: entered allmulticast mode [ 27.904654][ T6556] bridge_slave_0: entered promiscuous mode [ 27.907786][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.907807][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.907862][ T6556] bridge_slave_1: entered allmulticast mode [ 27.908337][ T6556] bridge_slave_1: entered promiscuous mode [ 27.918008][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.919491][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.934182][ T6551] team0: Port device team_slave_0 added [ 27.934976][ T6551] team0: Port device team_slave_1 added [ 27.946191][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.950466][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.959352][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.965715][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.967680][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.967703][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.967716][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.968678][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.968685][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.968698][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.976654][ T6559] team0: Port device team_slave_0 added [ 27.977518][ T6559] team0: Port device team_slave_1 added [ 27.985076][ T6556] team0: Port device team_slave_0 added [ 27.999079][ T6556] team0: Port device team_slave_1 added [ 28.021758][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.022982][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.027267][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.029467][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.030936][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.032378][ T6558] bridge_slave_0: entered allmulticast mode [ 28.033986][ T6558] bridge_slave_0: entered promiscuous mode [ 28.036011][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.036036][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.036050][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.036596][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.036603][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.036613][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.044986][ T6548] team0: Port device team_slave_0 added [ 28.045769][ T6548] team0: Port device team_slave_1 added [ 28.052671][ T6551] hsr_slave_0: entered promiscuous mode [ 28.053471][ T6551] hsr_slave_1: entered promiscuous mode [ 28.057611][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.057634][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.057646][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.060584][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.060623][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.060677][ T6558] bridge_slave_1: entered allmulticast mode [ 28.061125][ T6558] bridge_slave_1: entered promiscuous mode [ 28.071633][ T6559] hsr_slave_0: entered promiscuous mode [ 28.071964][ T6559] hsr_slave_1: entered promiscuous mode [ 28.072178][ T6559] debugfs: 'hsr0' already exists in 'hsr' [ 28.072219][ T6559] Cannot create hsr debugfs directory [ 28.084004][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.085245][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.085276][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.100782][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.101997][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.105490][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.105515][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.105529][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.124757][ T6556] hsr_slave_0: entered promiscuous mode [ 28.125117][ T6556] hsr_slave_1: entered promiscuous mode [ 28.125305][ T6556] debugfs: 'hsr0' already exists in 'hsr' [ 28.125317][ T6556] Cannot create hsr debugfs directory [ 28.133022][ T6548] hsr_slave_0: entered promiscuous mode [ 28.134295][ T6548] hsr_slave_1: entered promiscuous mode [ 28.135443][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 28.136372][ T6548] Cannot create hsr debugfs directory [ 28.143457][ T6558] team0: Port device team_slave_0 added [ 28.144255][ T6558] team0: Port device team_slave_1 added [ 28.153661][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.155050][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.159522][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.166543][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.166567][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.166587][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.225276][ T6558] hsr_slave_0: entered promiscuous mode [ 28.225602][ T6558] hsr_slave_1: entered promiscuous mode [ 28.225786][ T6558] debugfs: 'hsr0' already exists in 'hsr' [ 28.225796][ T6558] Cannot create hsr debugfs directory [ 28.297484][ T6559] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.301667][ T6559] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.304626][ T6559] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.308910][ T6559] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.326107][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.326158][ T6559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.326412][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.326453][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.331126][ T6551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.332821][ T6551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.336865][ T6551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.344158][ T6551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.372025][ T6556] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.375557][ T6556] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.379429][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.381948][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.381985][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.382049][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.382073][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.387573][ T6556] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.394730][ T6559] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.401447][ T229] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.403631][ T229] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.416038][ T6556] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.420846][ T6548] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.423071][ T6548] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.426174][ T6548] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.438790][ T6559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.441910][ T6559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.449402][ T6548] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.482462][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.499552][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.511594][ T6558] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.513981][ T6558] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.519240][ T6558] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.522842][ T6558] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.527317][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.527375][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.538798][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.538837][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.543659][ T6559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.563991][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.577915][ T6559] veth0_vlan: entered promiscuous mode [ 28.579487][ T6559] veth1_vlan: entered promiscuous mode [ 28.585801][ T6551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.595883][ T6559] veth0_macvtap: entered promiscuous mode [ 28.610854][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.614182][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.617617][ T6559] veth1_macvtap: entered promiscuous mode [ 28.623043][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.628493][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.633795][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.635414][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.635462][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.635547][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.635611][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.641184][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.649264][ T696] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.649301][ T696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.649628][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.649647][ T696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.651639][ T696] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.651657][ T696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.651950][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.651966][ T696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.659715][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.681261][ T6548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.683083][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.696797][ T696] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.696846][ T696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.697140][ T696] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.697154][ T696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.737313][ T6556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.737354][ T6556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.754318][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.763733][ T4856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.765149][ T4856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.787370][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.789697][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.807985][ T6551] veth0_vlan: entered promiscuous mode [ 28.811646][ T6551] veth1_vlan: entered promiscuous mode [ 28.827999][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.832917][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.834111][ T6548] veth0_vlan: entered promiscuous mode [ 28.843745][ T6551] veth0_macvtap: entered promiscuous mode [ 28.852104][ T6548] veth1_vlan: entered promiscuous mode [ 28.854469][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.856704][ T6551] veth1_macvtap: entered promiscuous mode [ 28.863952][ T6558] veth0_vlan: entered promiscuous mode [ 28.866558][ T6558] veth1_vlan: entered promiscuous mode [ 28.875269][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.881691][ T6559] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.891951][ T6558] veth0_macvtap: entered promiscuous mode [ 28.894392][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.903516][ T6548] veth0_macvtap: entered promiscuous mode [ 28.905068][ T6548] veth1_macvtap: entered promiscuous mode [ 28.914699][ T6558] veth1_macvtap: entered promiscuous mode [ 28.927265][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.942103][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.943295][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.943317][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.943333][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.950193][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.970505][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.970562][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.970583][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.970597][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.983983][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.991497][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.019331][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.019384][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.023577][ T42] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.023623][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.023654][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.023672][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.048424][ T696] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.048459][ T696] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.084293][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.084320][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.098004][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.098034][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.103537][ T6674] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 29.111127][ T6556] veth0_vlan: entered promiscuous mode [ 29.112913][ T6556] veth1_vlan: entered promiscuous mode [ 29.128834][ T229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.128863][ T229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.132724][ T6676] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 29.143660][ T6556] veth0_macvtap: entered promiscuous mode [ 29.148776][ T6556] veth1_macvtap: entered promiscuous mode [ 29.164462][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.164489][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.187780][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.188805][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.236357][ T229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.236413][ T229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.236435][ T229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.236450][ T229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.265795][ T6686] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 29.309468][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.309500][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.310718][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.310732][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.366907][ T6692] netlink: 'syz.3.10': attribute type 4 has an invalid length. [ 29.627770][ T53] Bluetooth: hci2: command tx timeout [ 29.627927][ T53] Bluetooth: hci0: command tx timeout [ 29.628007][ T53] Bluetooth: hci1: command tx timeout [ 29.692308][ T6549] Bluetooth: hci3: command tx timeout [ 29.692316][ T53] Bluetooth: hci4: command tx timeout [ 29.756376][ T6698] binder: 6697:6698 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 29.756420][ T6698] binder: 6698 RLIMIT_NICE not set [ 29.806879][ T6702] binder: 6697:6702 tried to acquire reference to desc 0, got 1 instead [ 29.807787][ T6552] binder: undelivered TRANSACTION_COMPLETE [ 29.838704][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.838898][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.914309][ T6709] tipc: Started in network mode [ 29.914352][ T6709] tipc: Node identity 5e2c3a19bc4b, cluster identity 4711 [ 29.914434][ T6709] tipc: Enabled bearer , priority 0 [ 29.921152][ T6708] tipc: Disabling bearer [ 30.026579][ T6711] loop3: detected capacity change from 0 to 7 [ 30.031411][ T6711] Dev loop3: unable to read RDB block 7 [ 30.031446][ T6711] loop3: unable to read partition table [ 30.031912][ T6711] loop3: partition table beyond EOD, truncated [ 30.031927][ T6711] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 30.329926][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.499946][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 30.502494][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.502532][ T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.502542][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 30.502556][ T24] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 30.502563][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.511596][ T24] usb 1-1: config 0 descriptor?? [ 30.634271][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.634449][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.917161][ T24] hid (null): report_id 478693179 is invalid [ 30.917200][ T24] hid (null): unknown global tag 0xc [ 30.918771][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.918784][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.918792][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.918800][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.918807][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.918815][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.918822][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.918829][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.918836][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.918843][ T24] cougar 0003:060B:500A.0001: unknown main item tag 0x0 [ 30.920717][ T24] cougar 0003:060B:500A.0001: unexpected long global item [ 30.920876][ T24] cougar 0003:060B:500A.0001: parse failed [ 30.920902][ T24] cougar 0003:060B:500A.0001: probe with driver cougar failed with error -22 [ 30.946709][ T6743] __vm_enough_memory: pid: 6743, comm: syz.3.29, bytes: 140736934735872 not enough memory for the allocation [ 30.974745][ T6745] netlink: 'syz.3.30': attribute type 9 has an invalid length. [ 30.974836][ T6745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.30'. [ 31.249478][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.253987][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.399811][ T6552] usb 1-1: USB disconnect, device number 2 [ 31.425275][ T26] IPVS: starting estimator thread 0... [ 31.509749][ T6771] IPVS: using max 68 ests per chain, 163200 per kthread [ 31.690268][ T53] Bluetooth: hci1: command tx timeout [ 31.690306][ T53] Bluetooth: hci0: command tx timeout [ 31.690334][ T53] Bluetooth: hci2: command tx timeout [ 31.770152][ T53] Bluetooth: hci4: command tx timeout [ 31.771299][ T6549] Bluetooth: hci3: command tx timeout [ 32.000529][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.000708][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.301991][ T6811] Zero length message leads to an empty skb [ 32.393327][ T6812] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 32.395081][ T6812] netlink: 20 bytes leftover after parsing attributes in process `syz.1.53'. [ 32.537870][ T6816] netlink: 'syz.2.55': attribute type 10 has an invalid length. [ 32.546508][ T6816] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 32.747368][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.751023][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.982538][ T6858] tipc: Started in network mode [ 32.982578][ T6858] tipc: Node identity 52cbb7fdf3a5, cluster identity 4711 [ 32.982627][ T6858] tipc: Enabled bearer , priority 0 [ 32.987577][ T6857] tipc: Disabling bearer [ 33.047657][ T6862] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 33.455131][ T6887] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.461525][ T6887] Cannot find set identified by id 0 to match [ 33.480442][ T6890] tipc: Started in network mode [ 33.481315][ T6890] tipc: Node identity 3e0133822df4, cluster identity 4711 [ 33.482699][ T6890] tipc: Enabled bearer , priority 0 [ 33.501231][ T6888] tipc: Disabling bearer [ 33.821365][ T6549] Bluetooth: hci2: command tx timeout [ 33.821407][ T6549] Bluetooth: hci0: command tx timeout [ 33.851861][ T53] Bluetooth: hci3: command tx timeout [ 33.851901][ T53] Bluetooth: hci4: command tx timeout [ 33.865477][ T24] IPVS: starting estimator thread 0... [ 33.883926][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.87'. [ 33.939433][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.941063][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.950180][ T6896] IPVS: using max 47 ests per chain, 112800 per kthread [ 34.055042][ T6908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.055669][ T6908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.352202][ T6549] Bluetooth: unknown link type 41 [ 34.352242][ T6549] Bluetooth: hci4: connection err: -111 [ 34.390500][ T6918] ======================================================= [ 34.390500][ T6918] WARNING: The mand mount option has been deprecated and [ 34.390500][ T6918] and is ignored by this kernel. Remove the mand [ 34.390500][ T6918] option from the mount to silence this warning. [ 34.390500][ T6918] ======================================================= [ 34.390623][ T6918] tmpfs: Unknown parameter ')Ig˫Bޓ a1ױ>Ÿ~/3mG' [ 34.460016][ T6922] tipc: Enabled bearer , priority 0 [ 34.471182][ T6921] tipc: Disabling bearer [ 34.755116][ T6927] ------------[ cut here ]------------ [ 34.755132][ T6927] WARNING: CPU: 1 PID: 6927 at mm/page_alloc.c:5154 __alloc_frozen_pages_noprof+0xd0/0x318 [ 34.757810][ T6927] Modules linked in: [ 34.758470][ T6927] CPU: 1 UID: 0 PID: 6927 Comm: syz.0.99 Not tainted syzkaller #0 PREEMPT [ 34.759810][ T6927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 34.761328][ T6927] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 34.762520][ T6927] pc : __alloc_frozen_pages_noprof+0xd0/0x318 [ 34.763439][ T6927] lr : __alloc_frozen_pages_noprof+0xac/0x318 [ 34.764317][ T6927] sp : ffff80009e217760 [ 34.764949][ T6927] x29: ffff80009e217820 x28: dfff800000000000 x27: 0000000000000003 [ 34.766146][ T6927] x26: 1ffff00012e7a250 x25: dfff800000000000 x24: ffff80009e217780 [ 34.767331][ T6927] x23: ffff700013c42ef0 x22: 0000000000000000 x21: 0000000000040cc0 [ 34.768558][ T6927] x20: 0000000000000000 x19: 0000000000000013 x18: 0000000000000000 [ 34.769773][ T6927] x17: 0000000000000000 x16: ffff80008ad6b188 x15: 0000000000000005 [ 34.769993][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.770177][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.773249][ T6927] x14: 1ffff00013c42ef4 x13: 0000000000000000 x12: 0000000000000000 [ 34.774400][ T6927] x11: ffff700013c42ef9 x10: dfff800000000000 x9 : 0000000000000001 [ 34.775603][ T6927] x8 : ffff800092c29000 x7 : 0000000000000000 x6 : ffff80009e217ae8 [ 34.776747][ T6927] x5 : ffff80009e217ae8 x4 : 0000000000000000 x3 : 0000000000000020 [ 34.777919][ T6927] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 34.779243][ T6927] Call trace: [ 34.779726][ T6927] __alloc_frozen_pages_noprof+0xd0/0x318 (P) [ 34.780699][ T6927] alloc_pages_mpol+0x1e4/0x460 [ 34.781472][ T6927] alloc_frozen_pages_noprof+0xe0/0x210 [ 34.782299][ T6927] ___kmalloc_large_node+0xac/0x154 [ 34.783068][ T6927] __kmalloc_large_node_noprof+0x2c/0x8c [ 34.783857][ T6927] __kmalloc_noprof+0x4bc/0x728 [ 34.784567][ T6927] raw_ioctl+0x1320/0x3368 [ 34.785256][ T6927] __arm64_sys_ioctl+0x14c/0x1c4 [ 34.786025][ T6927] invoke_syscall+0x98/0x254 [ 34.786747][ T6927] el0_svc_common+0xe8/0x23c [ 34.787453][ T6927] do_el0_svc+0x48/0x58 [ 34.788034][ T6927] el0_svc+0x5c/0x254 [ 34.788621][ T6927] el0t_64_sync_handler+0x84/0x12c [ 34.789380][ T6927] el0t_64_sync+0x198/0x19c [ 34.790028][ T6927] irq event stamp: 426 [ 34.790567][ T6927] hardirqs last enabled at (425): [] kasan_quarantine_put+0x1a0/0x1c8 [ 34.791943][ T6927] hardirqs last disabled at (426): [] el1_brk64+0x20/0x54 [ 34.793325][ T6927] softirqs last enabled at (408): [] local_bh_enable+0x10/0x34 [ 34.794908][ T6927] softirqs last disabled at (406): [] local_bh_disable+0x10/0x34 [ 34.796501][ T6927] ---[ end trace 0000000000000000 ]--- [ 35.849771][ T53] Bluetooth: hci2: command tx timeout [ 35.849861][ T6549] Bluetooth: hci0: command tx timeout [ 35.939658][ T6549] Bluetooth: hci4: command tx timeout [ 35.939678][ T53] Bluetooth: hci3: command tx timeout [ 37.210120][ T6549] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 37.210172][ T6549] Bluetooth: hci1: Injecting HCI hardware error event [ 37.210949][ T6549] Bluetooth: hci1: hardware error 0x00 [ 39.369684][ T6549] Bluetooth: hci1: Opcode 0x0c03 failed: -110