last executing test programs: 1m32.274451082s ago: executing program 4 (id=725): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000040)="9b3236bf3128702b84e739e340aefd52f6927e1880724ea4ee84af20417b2f4c4eae764732107158f0c4c403e5a2b875a4ba80d3d2651d7e78cb5026ab5d1c335b700e3b057364fc09e0ff7543be358d33a0bc6ed6e8a96323d9c7f53d36c9279809c28aacd1be75", 0x68}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000021c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x2, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x8}}}, 0xe) 1m31.694182024s ago: executing program 1 (id=730): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1m31.584617206s ago: executing program 1 (id=731): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640), 0x0, 0x2090) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m31.50318077s ago: executing program 1 (id=733): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) 1m31.230179747s ago: executing program 4 (id=736): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x7, 0x0, 0x3, 0x101}]}) 1m31.015822847s ago: executing program 1 (id=739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000900)}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2f64, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000280)={0x8000, 0x2}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000280)=0x1f) 1m30.790791742s ago: executing program 4 (id=742): socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2717, 0x0, &(0x7f00000001c0)) 1m30.762591833s ago: executing program 0 (id=743): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) 1m30.731958048s ago: executing program 1 (id=744): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x80044) read(r0, &(0x7f0000000140)=""/55, 0x37) 1m30.526543117s ago: executing program 4 (id=746): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000040)="9b3236bf3128702b84e739e340aefd52f6927e1880724ea4ee84af20417b2f4c4eae764732107158f0c4c403e5a2b875a4ba80d3d2651d7e78cb5026ab5d1c335b700e3b057364fc09e0ff7543be358d33a0bc6ed6e8a96323d9c7f53d36c9279809c28aacd1be75", 0x68}, {0x0}], 0x2) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000021c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x2, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x8}}}, 0xe) 1m30.482643883s ago: executing program 0 (id=747): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m30.290253072s ago: executing program 0 (id=750): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0x3, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xb, 0x8, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x6008000) 1m30.055988325s ago: executing program 0 (id=751): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.686389332s ago: executing program 1 (id=752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fe, 0x9, 0xa5f, 0x7, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r7, 0x1c}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="27030200dc0f24000e00073c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb080b) 1m29.532024467s ago: executing program 4 (id=755): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r0, &(0x7f0000000900)}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_BO_CREATE(0xffffffffffffffff, 0xc0186445, &(0x7f0000000280)={0x8000, 0x2}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000280)=0x1f) 1m29.198998163s ago: executing program 0 (id=757): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f00000001c0)) 1m29.119268117s ago: executing program 4 (id=758): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) 1m28.790155391s ago: executing program 0 (id=760): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m14.580024242s ago: executing program 32 (id=752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fe, 0x9, 0xa5f, 0x7, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r7, 0x1c}, 0x80, &(0x7f0000000700)=[{&(0x7f00000002c0)="27030200dc0f24000e00073c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141b", 0x3e}], 0x1}, 0x8bb3a301eb080b) 1m14.043416561s ago: executing program 33 (id=758): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) 1m13.544333468s ago: executing program 34 (id=760): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m5.434609797s ago: executing program 3 (id=796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbb, {0x0, 0x0, 0x0, r2, {0xc}, {}, {0xffff, 0xd}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xf5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 1m4.802131637s ago: executing program 3 (id=801): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000440)='|', 0x1}], 0x1}}], 0x3, 0x2090) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m4.580635798s ago: executing program 3 (id=802): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x0, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x32}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xe}, @fd={0x66642a85, 0x0, r1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1m4.396552466s ago: executing program 3 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2], 0x4c}}, 0x0) 1m4.114405986s ago: executing program 3 (id=805): write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc004) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, 0x0, 0x0) 1m3.918451463s ago: executing program 3 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x11}, 0x80, 0x0}, 0x5) 48.579366105s ago: executing program 35 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x11}, 0x80, 0x0}, 0x5) 4.560015207s ago: executing program 6 (id=993): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = dup(r2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0xffff, 0x2) 3.640077626s ago: executing program 7 (id=999): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.440934138s ago: executing program 6 (id=1003): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) pwritev(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.166467823s ago: executing program 2 (id=1005): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.015954423s ago: executing program 6 (id=1006): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{0x0}], 0x1}}], 0x1, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 2.947423202s ago: executing program 7 (id=1007): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f00000000c0)={0x0, 0x20323159, 0x500, 0x2cc, 0x4, @stepwise={{0x1, 0xfffffffb}, {0x4, 0x4c7}, {0xa9}}}) 2.746208787s ago: executing program 7 (id=1009): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb}, 0x48) 2.740657032s ago: executing program 6 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) 2.49643786s ago: executing program 7 (id=1013): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 2.394154017s ago: executing program 6 (id=1014): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x16, 0x1}}, 0x40) 2.068178123s ago: executing program 2 (id=1017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.061812115s ago: executing program 8 (id=1018): syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x52, 0xe59, 0x6, {0x26, 0x1}, {0x7f, 0x2}, @ramp={0x8, 0x7d79, {0x8002, 0x3, 0xd9f7, 0xf000}}}) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 1.754333974s ago: executing program 8 (id=1019): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c850) 1.720980926s ago: executing program 2 (id=1020): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{0x0}], 0x1}}], 0x1, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 1.65150189s ago: executing program 6 (id=1021): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.557989523s ago: executing program 2 (id=1022): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x8, 0x2) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x8001100) write$binfmt_script(r0, &(0x7f0000006180)={'#! ', './file0/file0', [], 0xa, "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"}, 0x432) name_to_handle_at(r0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x6, 0x4, 0x64, 0x20000000}}, &(0x7f0000000340), 0x1000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r5, 0x0, 0x4890) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f00000005c0)="bad386dd", 0x5dc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$rds(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x2, 0x80, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f0000002100)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x9048000, &(0x7f00000000c0)="f70949f00dc0ea113e987df13d9841a9679d17d6cc406af1f3908d77", 0x1c, &(0x7f0000000100), 0x0, &(0x7f0000000200)="ed3b7df525cd6f91200ba501c3ba43e59fab3a800e12f554aca937aa051653d848be0daf141137d5cd1bf9cc383e97ab3e3e73e34bad94814bdb650543d10d47021baa7a228e10f2b0bc04c97da55c09bb805858921bafed2921") openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x31f, 0x3) 1.490905156s ago: executing program 8 (id=1023): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000005c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x401, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) 1.467744956s ago: executing program 7 (id=1024): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000001180)=0x4, 0x7, 0x8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.393296369s ago: executing program 5 (id=1025): openat$tun(0xffffffffffffff9c, 0x0, 0x214600, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x81, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.262324069s ago: executing program 8 (id=1026): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000040), 0x0) sendto$inet6(r0, &(0x7f0000000800)="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"/1450, 0x5de, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000142, 0x0) 1.196192283s ago: executing program 7 (id=1027): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033bbd6a52a4be1de32c6297046c49a9bbfe"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)='7', 0x1) syz_usb_disconnect(r0) 1.092563145s ago: executing program 5 (id=1028): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 830.364275ms ago: executing program 8 (id=1029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="385b6ba86c2e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000040) 784.505164ms ago: executing program 8 (id=1030): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 729.496474ms ago: executing program 5 (id=1031): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 718.251085ms ago: executing program 2 (id=1032): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10, &(0x7f00000016c0)=[{0x0}], 0x1}}], 0x1, 0x4000800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={0x2c, 0x3f, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x18, 0x37, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='qtr(4\x14\xd6\xbb\xa9\x19sm4)\x00'}]}]}, 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 600.314504ms ago: executing program 5 (id=1033): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB='P'], 0x14) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r1) write$nci(r0, 0x0, 0x0) 436.844925ms ago: executing program 2 (id=1034): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) 157.043123ms ago: executing program 5 (id=1035): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=1036): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xf, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff3, @empty, 0x9}}, 0x10001fb, 0x2, 0xffff189a, 0x3, 0x26, 0xffffffb7, 0x1a}, 0x9c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 87.050536][ T31] cfg80211: failed to load regulatory.db [ 88.898649][ T5583] cgroup: Unknown subsys name 'net' [ 89.139802][ T5583] cgroup: Unknown subsys name 'cpuset' [ 89.193352][ T5583] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.176830][ T5583] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.986644][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.009592][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.010745][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.077878][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.085762][ T5622] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.087677][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.105600][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.124618][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.141846][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.142065][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.147647][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.154228][ T5618] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.158468][ T5622] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.160203][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.163788][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.165316][ T5618] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.166984][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.173057][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.173463][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.173481][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.180231][ T4916] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.199258][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.222070][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.223439][ T5622] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.228291][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.234820][ T59] Bluetooth: hci4: command tx timeout [ 97.234827][ T5622] Bluetooth: hci0: command tx timeout [ 97.313383][ T59] Bluetooth: hci1: command tx timeout [ 97.313525][ T59] Bluetooth: hci2: command tx timeout [ 97.313603][ T59] Bluetooth: hci3: command tx timeout [ 97.950338][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.950490][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.950675][ T5606] bridge_slave_0: entered allmulticast mode [ 97.954428][ T5606] bridge_slave_0: entered promiscuous mode [ 98.009044][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.009182][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.009304][ T5603] bridge_slave_0: entered allmulticast mode [ 98.010867][ T5603] bridge_slave_0: entered promiscuous mode [ 98.046851][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.046972][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.047150][ T5606] bridge_slave_1: entered allmulticast mode [ 98.048762][ T5606] bridge_slave_1: entered promiscuous mode [ 98.104267][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.104444][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.104647][ T5603] bridge_slave_1: entered allmulticast mode [ 98.108119][ T5603] bridge_slave_1: entered promiscuous mode [ 98.112103][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.112207][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.115076][ T5605] bridge_slave_0: entered allmulticast mode [ 98.117714][ T5605] bridge_slave_0: entered promiscuous mode [ 98.145849][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.145979][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.146140][ T5602] bridge_slave_0: entered allmulticast mode [ 98.149455][ T5602] bridge_slave_0: entered promiscuous mode [ 98.152714][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.152855][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.153107][ T5604] bridge_slave_0: entered allmulticast mode [ 98.159977][ T5604] bridge_slave_0: entered promiscuous mode [ 98.189330][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.189456][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.189626][ T5605] bridge_slave_1: entered allmulticast mode [ 98.196041][ T5605] bridge_slave_1: entered promiscuous mode [ 98.220416][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.221835][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.225073][ T5602] bridge_slave_1: entered allmulticast mode [ 98.227706][ T5602] bridge_slave_1: entered promiscuous mode [ 98.229600][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.229747][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.230274][ T5604] bridge_slave_1: entered allmulticast mode [ 98.236538][ T5604] bridge_slave_1: entered promiscuous mode [ 98.286374][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.325532][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.345160][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.378209][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.381140][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.412361][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.418157][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.441102][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.462154][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.467807][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.500873][ T5606] team0: Port device team_slave_0 added [ 98.529892][ T5603] team0: Port device team_slave_0 added [ 98.547085][ T5606] team0: Port device team_slave_1 added [ 98.577752][ T5603] team0: Port device team_slave_1 added [ 98.579458][ T5605] team0: Port device team_slave_0 added [ 98.599446][ T5602] team0: Port device team_slave_0 added [ 98.601602][ T5604] team0: Port device team_slave_0 added [ 98.626428][ T5605] team0: Port device team_slave_1 added [ 98.645563][ T5602] team0: Port device team_slave_1 added [ 98.647349][ T5604] team0: Port device team_slave_1 added [ 98.678348][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.678360][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.678375][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.723225][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.723243][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.723266][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.750527][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.750543][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.750565][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.802682][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.802699][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.802722][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.804154][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.804165][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.804186][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.833608][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.833624][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.833647][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.837112][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.837126][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.837148][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.853330][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.853347][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.853370][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.864957][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.864973][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.864996][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.869616][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.869630][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.869652][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.102195][ T5606] hsr_slave_0: entered promiscuous mode [ 99.104632][ T5606] hsr_slave_1: entered promiscuous mode [ 99.117422][ T5603] hsr_slave_0: entered promiscuous mode [ 99.118834][ T5603] hsr_slave_1: entered promiscuous mode [ 99.119921][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 99.120028][ T5603] Cannot create hsr debugfs directory [ 99.198899][ T5602] hsr_slave_0: entered promiscuous mode [ 99.199824][ T5602] hsr_slave_1: entered promiscuous mode [ 99.200442][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 99.200459][ T5602] Cannot create hsr debugfs directory [ 99.211582][ T5605] hsr_slave_0: entered promiscuous mode [ 99.213472][ T5605] hsr_slave_1: entered promiscuous mode [ 99.214476][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 99.214499][ T5605] Cannot create hsr debugfs directory [ 99.228213][ T5604] hsr_slave_0: entered promiscuous mode [ 99.229454][ T5604] hsr_slave_1: entered promiscuous mode [ 99.230350][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 99.230372][ T5604] Cannot create hsr debugfs directory [ 99.313542][ T5622] Bluetooth: hci0: command tx timeout [ 99.323443][ T5622] Bluetooth: hci4: command tx timeout [ 99.392681][ T59] Bluetooth: hci2: command tx timeout [ 99.392705][ T5623] Bluetooth: hci1: command tx timeout [ 99.392797][ T5622] Bluetooth: hci3: command tx timeout [ 100.665382][ T5606] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.709500][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.719325][ T5606] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.764457][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.767340][ T5606] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.806401][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.830741][ T5606] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.867831][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.988923][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.029700][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.043875][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.066635][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.087316][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.126789][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.153277][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.178898][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.334333][ T5603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.375747][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.381578][ T5603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.399298][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.403085][ T59] Bluetooth: hci0: command tx timeout [ 101.403251][ T5622] Bluetooth: hci4: command tx timeout [ 101.421661][ T5603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.456750][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.472650][ T59] Bluetooth: hci2: command tx timeout [ 101.472799][ T5622] Bluetooth: hci3: command tx timeout [ 101.473149][ T5622] Bluetooth: hci1: command tx timeout [ 101.481436][ T5603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.527527][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.689691][ T5602] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.716114][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.729964][ T5602] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.776003][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.780497][ T5602] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.826880][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.866556][ T5602] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.916780][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.059682][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.088437][ T5604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.126420][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.140788][ T5604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.166078][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.171261][ T5604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.218354][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.233037][ T5604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.256239][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.330299][ T5606] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.339871][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.389104][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.389281][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.437348][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.437478][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.488691][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.531820][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.531953][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.559546][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.589445][ T1193] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.589545][ T1193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.707385][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.746980][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.776660][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.776856][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.848545][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.848652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.930239][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.021720][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.021971][ T1455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.079904][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.098973][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.099162][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.284039][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.423866][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.427692][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.482772][ T5622] Bluetooth: hci4: command tx timeout [ 103.482809][ T5622] Bluetooth: hci0: command tx timeout [ 103.489866][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.491052][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.563727][ T59] Bluetooth: hci1: command tx timeout [ 103.563763][ T59] Bluetooth: hci3: command tx timeout [ 103.563783][ T59] Bluetooth: hci2: command tx timeout [ 104.437598][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.634550][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.855583][ T5606] veth0_vlan: entered promiscuous mode [ 104.980825][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.019457][ T5606] veth1_vlan: entered promiscuous mode [ 105.151556][ T5605] veth0_vlan: entered promiscuous mode [ 105.261747][ T5605] veth1_vlan: entered promiscuous mode [ 105.355321][ T5606] veth0_macvtap: entered promiscuous mode [ 105.408566][ T5606] veth1_macvtap: entered promiscuous mode [ 105.440039][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.541982][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.560617][ T5605] veth0_macvtap: entered promiscuous mode [ 105.576621][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.580026][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.597376][ T5605] veth1_macvtap: entered promiscuous mode [ 105.639812][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.660803][ T68] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.678123][ T68] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.683456][ T68] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.784349][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.885764][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.035305][ T5602] veth0_vlan: entered promiscuous mode [ 106.049304][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.066562][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.096260][ T1127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.100735][ T1127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.179933][ T5602] veth1_vlan: entered promiscuous mode [ 106.305209][ T5604] veth0_vlan: entered promiscuous mode [ 106.307412][ T5603] veth0_vlan: entered promiscuous mode [ 106.355538][ T1127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.355561][ T1127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.504569][ T5604] veth1_vlan: entered promiscuous mode [ 106.510933][ T5603] veth1_vlan: entered promiscuous mode [ 106.572637][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.572658][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.724704][ T5602] veth0_macvtap: entered promiscuous mode [ 106.746660][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.746682][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.763638][ T5602] veth1_macvtap: entered promiscuous mode [ 106.910400][ T5604] veth0_macvtap: entered promiscuous mode [ 106.939051][ T5603] veth0_macvtap: entered promiscuous mode [ 106.968382][ T1455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.968403][ T1455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.978329][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.980399][ T5604] veth1_macvtap: entered promiscuous mode [ 107.014830][ T5603] veth1_macvtap: entered promiscuous mode [ 107.053760][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.131864][ T1455] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.143694][ T1455] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.147227][ T1455] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.152374][ T1455] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.185074][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.216911][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.238384][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.379325][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.574779][ T66] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.597031][ T66] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.608702][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.747259][ T66] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.778541][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.779879][ T66] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.863617][ T66] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.957962][ T66] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.475729][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.475751][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.120579][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.120601][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.547118][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.547140][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.716780][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.716804][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.893024][ T5817] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 109.965703][ T5820] veth0_to_bond: entered promiscuous mode [ 110.104459][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.104480][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.341937][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.341960][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.558896][ T5830] macvlan2: entered promiscuous mode [ 110.566968][ T5830] vlan1: entered promiscuous mode [ 110.578823][ T5830] team0: Port device macvlan2 added [ 111.224468][ T5837] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.824160][ T5833] syz.3.16 (5833) used greatest stack depth: 17224 bytes left [ 113.292280][ T5742] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.660567][ T5742] usb 1-1: config 0 has no interfaces? [ 113.685223][ T5610] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 113.756035][ T5742] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 113.756071][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.756092][ T5742] usb 1-1: Product: syz [ 113.756106][ T5742] usb 1-1: Manufacturer: syz [ 113.756120][ T5742] usb 1-1: SerialNumber: syz [ 114.025883][ T5610] usb 2-1: Using ep0 maxpacket: 16 [ 114.037207][ T5610] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.037240][ T5610] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.037262][ T5610] usb 2-1: config 0 interface 0 has no altsetting 0 [ 114.037297][ T5610] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 114.037319][ T5610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.088505][ T5742] usb 1-1: config 0 descriptor?? [ 114.186747][ T5610] usb 2-1: config 0 descriptor?? [ 115.556348][ T5742] usb 1-1: USB disconnect, device number 2 [ 116.648301][ T5610] usbhid 2-1:0.0: can't add hid device: -71 [ 116.648423][ T5610] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.735423][ T5610] usb 2-1: USB disconnect, device number 2 [ 116.915786][ T5901] binder: 5900:5901 ioctl c0306201 200000000180 returned -14 [ 117.013650][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.37'. [ 117.116855][ T5906] fuse: Bad value for 'user_id' [ 117.116876][ T5906] fuse: Bad value for 'user_id' [ 117.922674][ T5859] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.095231][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 118.300447][ T5859] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 118.300479][ T5859] usb 2-1: config 0 has no interface number 0 [ 118.300532][ T5859] usb 2-1: config 0 interface 184 has no altsetting 0 [ 118.347424][ T5859] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 118.347456][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.347476][ T5859] usb 2-1: Product: syz [ 118.347491][ T5859] usb 2-1: Manufacturer: syz [ 118.347506][ T5859] usb 2-1: SerialNumber: syz [ 118.452605][ T5859] usb 2-1: config 0 descriptor?? [ 119.145745][ T5859] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 119.145777][ T5859] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 119.303837][ T5935] syzkaller0: entered promiscuous mode [ 119.303866][ T5935] syzkaller0: entered allmulticast mode [ 119.841822][ T5948] use of bytesused == 0 is deprecated and will be removed in the future, [ 119.841839][ T5948] use the actual size instead. [ 120.792716][ T5859] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 120.792748][ T5859] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 120.792766][ T5859] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 120.792784][ T5859] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 120.846777][ T5859] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 120.958696][ T5859] usb 2-1: USB disconnect, device number 3 [ 121.781924][ T5991] Zero length message leads to an empty skb [ 121.830517][ T5735] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.000879][ T5735] usb 3-1: Using ep0 maxpacket: 16 [ 122.015767][ T5735] usb 3-1: unable to get BOS descriptor or descriptor too short [ 122.018096][ T5735] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.018122][ T5735] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 122.018186][ T5735] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 122.046188][ T5735] usb 3-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 122.046216][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.046233][ T5735] usb 3-1: Product: syz [ 122.046245][ T5735] usb 3-1: Manufacturer: syz [ 122.046258][ T5735] usb 3-1: SerialNumber: syz [ 122.733184][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.928533][ T5735] usb 3-1: unit 7 not found! [ 122.949981][ T31] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 122.950046][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.950083][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.950105][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 122.957495][ T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 122.957523][ T31] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 122.957541][ T31] usb 4-1: Manufacturer: syz [ 123.003725][ T31] usb 4-1: config 0 descriptor?? [ 123.557700][ T31] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 123.966899][ T6029] pim6reg1: entered promiscuous mode [ 123.966930][ T6029] pim6reg1: entered allmulticast mode [ 124.220841][ T31] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 124.321761][ T31] usb 4-1: USB disconnect, device number 2 [ 124.382592][ T5895] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.532543][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 124.535767][ T5895] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 124.535816][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.535842][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.535862][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 124.535905][ T5895] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 124.535927][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.824584][ T5895] usb 2-1: config 0 descriptor?? [ 124.906651][ T6048] ======================================================= [ 124.906651][ T6048] WARNING: The mand mount option has been deprecated and [ 124.906651][ T6048] and is ignored by this kernel. Remove the mand [ 124.906651][ T6048] option from the mount to silence this warning. [ 124.906651][ T6048] ======================================================= [ 124.937243][ T5735] usb 3-1: USB disconnect, device number 2 [ 124.939278][ T6041] fido_id[6041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 125.771745][ T5895] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0002/input/input5 [ 125.933404][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.128381][ T31] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 126.128411][ T31] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 126.128430][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 126.128485][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 126.128513][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 126.141589][ T31] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 126.141619][ T31] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 126.141637][ T31] usb 4-1: Product: syz [ 126.141650][ T31] usb 4-1: Manufacturer: syz [ 126.275963][ T5895] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0002/input/input6 [ 126.453503][ T6062] fuse: Bad value for 'fd' [ 126.501963][ T5895] kye 0003:0458:5013.0002: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 126.603508][ T5895] usb 2-1: USB disconnect, device number 4 [ 126.848607][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 126.848630][ T31] cdc_wdm 4-1:1.0: skipping garbage [ 127.166857][ T6067] fido_id[6067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 127.265935][ T31] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 127.266125][ T31] cdc_wdm 4-1:1.0: Unknown control protocol [ 127.432094][ T31] usb 4-1: USB disconnect, device number 3 [ 127.586722][ T6070] openvswitch: netlink: Flow actions attr not present in new flow. [ 127.818796][ T5735] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 128.409810][ T6081] netlink: 'syz.4.93': attribute type 3 has an invalid length. [ 129.236078][ T6098] openvswitch: netlink: Flow actions attr not present in new flow. [ 129.749368][ T5622] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 130.633514][ T5735] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.802576][ T5735] usb 4-1: Using ep0 maxpacket: 16 [ 130.807397][ T5735] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 130.807447][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.807472][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.807512][ T5735] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 130.807557][ T5735] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 130.807580][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.856528][ T6133] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 130.930632][ T5735] usb 4-1: config 0 descriptor?? [ 131.548858][ T5735] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0003/input/input7 [ 131.666045][ T5735] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0003/input/input8 [ 131.787221][ T5735] kye 0003:0458:5013.0003: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 131.897416][ T5735] usb 4-1: USB disconnect, device number 4 [ 132.243195][ T6153] fido_id[6153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 132.573567][ T6165] syz.1.123 uses obsolete (PF_INET,SOCK_PACKET) [ 133.110631][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.128822][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.813929][ T6218] fuse: Bad value for 'rootmode' [ 134.927704][ T6221] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 135.994230][ T6248] macvlan2: entered promiscuous mode [ 136.213755][ T6256] netlink: 'syz.2.159': attribute type 3 has an invalid length. [ 136.632261][ T5622] Bluetooth: Frame is too long (len 16, expected len 4) [ 136.902740][ T6278] fuse: Bad value for 'rootmode' [ 136.992554][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 137.061244][ T6282] syzkaller0: entered promiscuous mode [ 137.061263][ T6282] syzkaller0: entered allmulticast mode [ 137.068791][ T6283] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 137.831834][ T59] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 138.675360][ T6314] Bluetooth: MGMT ver 1.23 [ 138.675579][ T6314] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 139.032054][ T6330] fuse: Bad value for 'rootmode' [ 139.169255][ T6335] pim6reg1: entered promiscuous mode [ 139.169286][ T6335] pim6reg1: entered allmulticast mode [ 139.194222][ T6316] kvm: kvm [6312]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 139.225152][ T6316] kvm_intel: kvm [6312]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 139.255251][ T6316] kvm: kvm [6312]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 139.256620][ T6316] kvm: kvm [6312]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x1 [ 139.259277][ T6316] kvm: kvm [6312]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x1 [ 139.285652][ T6316] kvm: kvm [6312]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 139.285712][ T6316] kvm: kvm [6312]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x1 [ 139.610144][ T6341] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 139.714351][ T59] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 140.377724][ T6365] tmpfs: Unsupported parameter 'huge' [ 141.072599][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 142.617878][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.212'. [ 143.080988][ T6445] syzkaller0: entered promiscuous mode [ 143.081016][ T6445] syzkaller0: entered allmulticast mode [ 143.222590][ T4928] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.241197][ T5735] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 143.384259][ T4928] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 143.384298][ T4928] usb 4-1: config 0 has no interface number 0 [ 143.384347][ T4928] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.387819][ T4928] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 143.387850][ T4928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.387871][ T4928] usb 4-1: Product: syz [ 143.387886][ T4928] usb 4-1: Manufacturer: syz [ 143.387900][ T4928] usb 4-1: SerialNumber: syz [ 143.453328][ T4928] usb 4-1: config 0 descriptor?? [ 143.472637][ T5735] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 143.472675][ T5735] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 143.472722][ T5735] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 143.472745][ T5735] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.637868][ T6451] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 143.689002][ T6442] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 143.739754][ T4928] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 143.750470][ T5735] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 143.797816][ T4928] usb 4-1: USB disconnect, device number 5 [ 143.802107][ T5622] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 143.802286][ T5622] Bluetooth: hci0: Injecting HCI hardware error event [ 143.812762][ T59] Bluetooth: hci0: hardware error 0x00 [ 143.878752][ T4928] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 143.918181][ T6454] team0: Device macvlan2 failed to change mtu [ 144.182518][ T37] audit: type=1326 audit(1777288553.623:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6455 comm="syz.4.225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe2ad60cdd9 code=0x0 [ 144.243814][ T5735] usb 2-1: USB disconnect, device number 5 [ 144.412685][ T6464] binder_alloc: 6458: binder_alloc_buf, no vma [ 144.426522][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.031384][ T6477] netlink: 132 bytes leftover after parsing attributes in process `syz.0.233'. [ 146.192669][ T59] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 146.348384][ T6493] syzkaller0: entered promiscuous mode [ 146.348413][ T6493] syzkaller0: entered allmulticast mode [ 146.538269][ T59] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 147.205845][ T6550] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 149.775503][ T6620] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 149.799936][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 150.156214][ T6633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.297'. [ 150.526558][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.303'. [ 150.612659][ T6649] fuse: Bad value for 'fd' [ 151.043378][ T6660] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 151.198379][ T6666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.310'. [ 151.447404][ T6675] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 151.684411][ T6685] fuse: Unknown parameter 'user_id00000000000000000000' [ 152.243298][ T6703] netlink: 132 bytes leftover after parsing attributes in process `syz.1.326'. [ 152.428824][ T5622] Bluetooth: hci2: unexpected event 0x09 length: 17 > 3 [ 152.484042][ T6711] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 152.962214][ T6730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.338'. [ 153.312625][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 153.349424][ T6740] fuse: fd is not a fuse device [ 154.100906][ T6734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 154.792609][ T59] Bluetooth: hci1: unexpected event for opcode 0x0407 [ 155.437648][ T6799] fuse: Bad value for 'fd' [ 155.488282][ T6798] ubi31: attaching mtd0 [ 155.488308][ T6798] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 155.645313][ T6807] capability: warning: `syz.3.367' uses deprecated v2 capabilities in a way that may be insecure [ 155.828139][ T6812] netlink: 48 bytes leftover after parsing attributes in process `syz.1.368'. [ 155.829192][ T6807] overlayfs: upper fs does not support tmpfile. [ 156.164038][ T6824] fuse: Bad value for 'fd' [ 157.442817][ T5895] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.596469][ T5895] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 157.596505][ T5895] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 157.596536][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 157.596550][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.625647][ T6847] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 157.813191][ T5895] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.909355][ T5735] IPVS: starting estimator thread 0... [ 158.007121][ T6857] Set syz1 is full, maxelem 14 reached [ 158.021475][ T6863] IPVS: using max 8 ests per chain, 19200 per kthread [ 158.276360][ T6873] fuse: Bad value for 'fd' [ 158.479705][ T5895] usb 4-1: USB disconnect, device number 6 [ 160.138669][ T6926] fuse: Unknown parameter '0x0000000000000003' [ 160.346938][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 161.140360][ T6962] netlink: 'syz.4.424': attribute type 3 has an invalid length. [ 161.569494][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 161.569520][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 162.169278][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 162.169307][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 162.169333][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.169346][ T59] Workqueue: hci2 hci_rx_work [ 162.169374][ T59] Call Trace: [ 162.169394][ T59] [ 162.169404][ T59] dump_stack_lvl+0xe8/0x150 [ 162.169436][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 162.169469][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 162.169502][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 162.169540][ T59] ? rt_spin_unlock+0x160/0x200 [ 162.169570][ T59] kobject_add_internal+0x631/0xd10 [ 162.169606][ T59] kobject_add+0x163/0x240 [ 162.169634][ T59] ? __pfx_kobject_add+0x10/0x10 [ 162.169664][ T59] ? get_device_parent+0x370/0x3a0 [ 162.169690][ T59] device_add+0x408/0xbb0 [ 162.169717][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 162.169752][ T59] le_conn_complete_evt+0x10e6/0x16b0 [ 162.169793][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 162.169820][ T59] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 162.169852][ T59] ? lockdep_hardirqs_on+0x7a/0x110 [ 162.169885][ T59] ? skb_pull_data+0xfb/0x200 [ 162.169918][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 162.169953][ T59] hci_event_packet+0x659/0xef0 [ 162.169992][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 162.170014][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 162.170036][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 162.170067][ T59] ? rt_spin_unlock+0x14f/0x200 [ 162.170103][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 162.170136][ T59] hci_rx_work+0x3ee/0x1040 [ 162.170166][ T59] ? process_scheduled_works+0xa70/0x1860 [ 162.170193][ T59] process_scheduled_works+0xb5d/0x1860 [ 162.170254][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 162.170286][ T59] ? assign_work+0x3d5/0x5e0 [ 162.170316][ T59] worker_thread+0xa53/0xfc0 [ 162.170373][ T59] kthread+0x388/0x470 [ 162.170411][ T59] ? __pfx_worker_thread+0x10/0x10 [ 162.170433][ T59] ? __pfx_kthread+0x10/0x10 [ 162.170461][ T59] ret_from_fork+0x514/0xb70 [ 162.170490][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 162.170514][ T59] ? __switch_to+0xc79/0x1410 [ 162.170551][ T59] ? __pfx_kthread+0x10/0x10 [ 162.170582][ T59] ret_from_fork_asm+0x1a/0x30 [ 162.170630][ T59] [ 162.170775][ T59] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 162.170820][ T59] Bluetooth: hci2: failed to register connection device [ 162.571814][ T7010] 9pnet_virtio: no channels available for device syz [ 163.075538][ T7029] netlink: 36 bytes leftover after parsing attributes in process `syz.4.450'. [ 163.690137][ T7049] binder_alloc: 7042: binder_alloc_buf, no vma [ 164.748897][ T7086] fuse: Unknown parameter '0x0000000000000003' [ 164.872602][ T7089] fuse: fd is not a fuse device [ 165.011321][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 165.427287][ T7113] binder_alloc: 7105: binder_alloc_buf, no vma [ 167.111715][ T7162] binder_alloc: 7158: binder_alloc_buf, no vma [ 167.539644][ T59] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 167.597180][ T59] Bluetooth: hci2: ACL packet too small [ 167.939253][ T7181] netlink: 'syz.4.501': attribute type 5 has an invalid length. [ 168.277403][ T7203] netlink: 36 bytes leftover after parsing attributes in process `syz.0.507'. [ 169.215691][ T7235] netlink: 'syz.0.523': attribute type 3 has an invalid length. [ 170.572898][ T7253] 9pnet_virtio: no channels available for device syz [ 170.787271][ T7257] fuse: Unknown parameter '0x0000000000000003' [ 171.810459][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.541'. [ 171.825849][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.541'. [ 172.356463][ T7300] ubi31: attaching mtd0 [ 172.356490][ T7300] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 173.403789][ T7332] syzkaller0: entered promiscuous mode [ 173.403820][ T7332] syzkaller0: entered allmulticast mode [ 174.923269][ T7375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.583'. [ 174.972033][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.052834][ T7414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 176.053053][ T7417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'. [ 176.276860][ T5895] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 176.422605][ T5895] usb 2-1: Using ep0 maxpacket: 8 [ 176.428459][ T5895] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 176.428531][ T5895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 176.428555][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 176.428580][ T5895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 176.428604][ T5895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.428646][ T5895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 176.428670][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.751162][ T5895] usb 2-1: usb_control_msg returned -32 [ 176.751218][ T5895] usbtmc 2-1:16.0: can't read capabilities [ 176.868196][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 176.869883][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 177.239349][ T7448] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 177.276694][ T7451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 177.286100][ T7452] binder: BINDER_SET_CONTEXT_MGR already set [ 177.286116][ T7452] binder: 7449:7452 ioctl 4018620d 200000004a80 returned -16 [ 177.529895][ T5735] usb 2-1: USB disconnect, device number 6 [ 177.981478][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 178.612990][ T7494] binder: BINDER_SET_CONTEXT_MGR already set [ 178.613006][ T7494] binder: 7493:7494 ioctl 4018620d 200000004a80 returned -16 [ 178.830546][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.640'. [ 179.473806][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 181.555790][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 182.029939][ T59] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 183.712623][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 185.098510][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.695'. [ 186.293102][ T7675] vlan0: entered promiscuous mode [ 186.293382][ T7675] vlan0: entered allmulticast mode [ 186.293397][ T7675] veth0_vlan: entered allmulticast mode [ 187.091964][ T7699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.720'. [ 187.861727][ T7717] ubi31: attaching mtd0 [ 187.861752][ T7717] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 188.320290][ T7729] netlink: 28 bytes leftover after parsing attributes in process `syz.3.732'. [ 188.840895][ T7747] ubi31: attaching mtd0 [ 188.840918][ T7747] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 189.141543][ T5742] IPVS: starting estimator thread 0... [ 189.222595][ T7758] IPVS: using max 8 ests per chain, 19200 per kthread [ 189.253622][ T7760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.745'. [ 189.351811][ T5622] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 190.389923][ T7795] ubi31: attaching mtd0 [ 190.389947][ T7795] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66) [ 191.066793][ T7797] syzkaller0: entered promiscuous mode [ 191.336500][ T7827] fuse: fd is not a fuse device [ 194.536269][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.537263][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.459414][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.509207][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.525023][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.526212][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.526959][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.912321][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.968975][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.970114][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.971242][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.972148][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 206.416473][ T5622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 206.424549][ T5622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 206.430223][ T5622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 206.466926][ T5622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 206.469559][ T5622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 207.717014][ T59] Bluetooth: hci5: command tx timeout [ 208.121355][ T59] Bluetooth: hci6: command tx timeout [ 208.672675][ T59] Bluetooth: hci7: command tx timeout [ 209.795095][ T59] Bluetooth: hci5: command tx timeout [ 209.894202][ T59] Bluetooth: hci2: unexpected event for opcode 0x0404 [ 210.192754][ T59] Bluetooth: hci6: command tx timeout [ 210.752589][ T59] Bluetooth: hci7: command tx timeout [ 211.872916][ T5622] Bluetooth: hci5: command tx timeout [ 211.886791][ T7914] 9pnet_virtio: no channels available for device syz [ 212.282574][ T5622] Bluetooth: hci6: command tx timeout [ 212.818654][ T1138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.837690][ T5622] Bluetooth: hci7: command tx timeout [ 213.443284][ T1138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.632494][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 213.920680][ T1138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.952982][ T5623] Bluetooth: hci5: command tx timeout [ 214.189175][ T7957] overlayfs: failed to clone upperpath [ 214.352620][ T5623] Bluetooth: hci6: command tx timeout [ 214.385800][ T1138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.500956][ T7970] fuse: fd is not a fuse device [ 214.922551][ T5623] Bluetooth: hci7: command tx timeout [ 215.280336][ T7984] binder: 7983:7984 ioctl c0306201 200000000680 returned -14 [ 215.393472][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 215.465079][ T7990] netlink: 48 bytes leftover after parsing attributes in process `syz.3.803'. [ 215.713212][ T5623] Bluetooth: hci2: command 0x0406 tx timeout [ 215.919716][ T5623] Bluetooth: hci2: Malformed HCI Event [ 216.470701][ T8005] syzkaller0: entered promiscuous mode [ 216.470731][ T8005] syzkaller0: entered allmulticast mode [ 216.992841][ T1138] bridge_slave_1: left allmulticast mode [ 216.993042][ T1138] bridge_slave_1: left promiscuous mode [ 217.016102][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.114103][ T1138] bridge_slave_0: left allmulticast mode [ 217.114130][ T1138] bridge_slave_0: left promiscuous mode [ 217.114349][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.213383][ T5623] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 217.472889][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 217.784511][ T5622] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 217.784540][ T5622] CPU: 1 UID: 0 PID: 5622 Comm: kworker/u9:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.784566][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.784581][ T5622] Workqueue: hci2 hci_rx_work [ 217.784609][ T5622] Call Trace: [ 217.784618][ T5622] [ 217.784627][ T5622] dump_stack_lvl+0xe8/0x150 [ 217.784658][ T5622] sysfs_create_dir_ns+0x271/0x2a0 [ 217.784690][ T5622] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 217.784731][ T5622] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 217.784768][ T5622] ? rt_spin_unlock+0x160/0x200 [ 217.784799][ T5622] kobject_add_internal+0x631/0xd10 [ 217.784834][ T5622] kobject_add+0x163/0x240 [ 217.784865][ T5622] ? __pfx_kobject_add+0x10/0x10 [ 217.784899][ T5622] ? get_device_parent+0x370/0x3a0 [ 217.784928][ T5622] device_add+0x408/0xbb0 [ 217.784954][ T5622] hci_conn_add_sysfs+0xd5/0x210 [ 217.784985][ T5622] le_conn_complete_evt+0x10e6/0x16b0 [ 217.785021][ T5622] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 217.785049][ T5622] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 217.785083][ T5622] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.785119][ T5622] ? skb_pull_data+0xfb/0x200 [ 217.785152][ T5622] hci_le_enh_conn_complete_evt+0x189/0x490 [ 217.785182][ T5622] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 217.785214][ T5622] hci_event_packet+0x659/0xef0 [ 217.785257][ T5622] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 217.785283][ T5622] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 217.785307][ T5622] ? __pfx_hci_event_packet+0x10/0x10 [ 217.785340][ T5622] ? rt_spin_unlock+0x14f/0x200 [ 217.785378][ T5622] ? hci_send_to_monitor+0xe2/0x590 [ 217.785412][ T5622] hci_rx_work+0x3ee/0x1040 [ 217.785442][ T5622] ? process_scheduled_works+0xa70/0x1860 [ 217.785470][ T5622] process_scheduled_works+0xb5d/0x1860 [ 217.785532][ T5622] ? __pfx_process_scheduled_works+0x10/0x10 [ 217.785565][ T5622] ? assign_work+0x3d5/0x5e0 [ 217.785595][ T5622] worker_thread+0xa53/0xfc0 [ 217.785654][ T5622] kthread+0x388/0x470 [ 217.785684][ T5622] ? __pfx_worker_thread+0x10/0x10 [ 217.785714][ T5622] ? __pfx_kthread+0x10/0x10 [ 217.785745][ T5622] ret_from_fork+0x514/0xb70 [ 217.785775][ T5622] ? __pfx_ret_from_fork+0x10/0x10 [ 217.785799][ T5622] ? __switch_to+0xc79/0x1410 [ 217.785836][ T5622] ? __pfx_kthread+0x10/0x10 [ 217.785867][ T5622] ret_from_fork_asm+0x1a/0x30 [ 217.785916][ T5622] [ 217.785965][ T5622] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 217.786006][ T5622] Bluetooth: hci2: failed to register connection device [ 217.872559][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 218.313412][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.416927][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.454906][ T1138] bond0 (unregistering): Released all slaves [ 219.557184][ T5622] Bluetooth: hci4: command 0x0406 tx timeout [ 220.192835][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 222.272729][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 224.352821][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 231.357541][ T5262] 8021q: adding VLAN 0 to HW filter on device eth1 [ 231.386603][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.386729][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.386960][ T7863] bridge_slave_0: entered allmulticast mode [ 231.420854][ T7863] bridge_slave_0: entered promiscuous mode [ 231.488955][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 231.526539][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.526674][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.526911][ T7863] bridge_slave_1: entered allmulticast mode [ 231.531080][ T5622] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 231.534016][ T5622] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 231.559024][ T7863] bridge_slave_1: entered promiscuous mode [ 231.566599][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 231.570866][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 231.808079][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.810790][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.811485][ T7857] bridge_slave_0: entered allmulticast mode [ 231.825279][ T7857] bridge_slave_0: entered promiscuous mode [ 231.837238][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.837360][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.837596][ T7869] bridge_slave_0: entered allmulticast mode [ 231.882878][ T7869] bridge_slave_0: entered promiscuous mode [ 232.016276][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.016448][ T7857] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.016689][ T7857] bridge_slave_1: entered allmulticast mode [ 232.026027][ T7857] bridge_slave_1: entered promiscuous mode [ 232.090584][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.090744][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.091004][ T7869] bridge_slave_1: entered allmulticast mode [ 232.097090][ T7869] bridge_slave_1: entered promiscuous mode [ 232.131818][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.373501][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.889198][ T7857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.997633][ T7869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.305650][ T7857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.404474][ T7869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.425763][ T7863] team0: Port device team_slave_0 added [ 233.458039][ T37] audit: type=1326 audit(1777288642.933:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8066 comm="syz.2.821" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff52206cdd9 code=0x0 [ 233.548704][ T7863] team0: Port device team_slave_1 added [ 233.712535][ T59] Bluetooth: hci0: command tx timeout [ 233.888711][ T7857] team0: Port device team_slave_0 added [ 233.894683][ T7869] team0: Port device team_slave_0 added [ 234.033947][ T7857] team0: Port device team_slave_1 added [ 234.066448][ T7869] team0: Port device team_slave_1 added [ 234.069294][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.069306][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.069321][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.319900][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.319919][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.319945][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.562700][ T1138] hsr_slave_0: left promiscuous mode [ 234.608392][ T1138] hsr_slave_1: left promiscuous mode [ 234.609495][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.609562][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.644915][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.644938][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.766813][ T1138] vlan1: left promiscuous mode [ 234.770492][ T1138] veth1_macvtap: left promiscuous mode [ 234.770674][ T1138] veth0_macvtap: left promiscuous mode [ 234.770836][ T1138] veth1_vlan: left promiscuous mode [ 234.771779][ T1138] veth0_vlan: left promiscuous mode [ 235.093191][ T1138] team0 (unregistering): Port device macvlan2 removed [ 235.624098][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 235.683177][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 235.792661][ T59] Bluetooth: hci0: command tx timeout [ 235.933730][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.933750][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.933776][ T7857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.936360][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.936372][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.936817][ T7869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.964829][ T5262] 8021q: adding VLAN 0 to HW filter on device eth2 [ 235.967975][ T7857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.967990][ T7857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 235.968014][ T7857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.007266][ T7869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.007285][ T7869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.007309][ T7869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.375775][ T7863] hsr_slave_0: entered promiscuous mode [ 236.376687][ T7863] hsr_slave_1: entered promiscuous mode [ 236.377346][ T7863] debugfs: 'hsr0' already exists in 'hsr' [ 236.377363][ T7863] Cannot create hsr debugfs directory [ 236.498637][ T7857] hsr_slave_0: entered promiscuous mode [ 236.499535][ T7857] hsr_slave_1: entered promiscuous mode [ 236.500125][ T7857] debugfs: 'hsr0' already exists in 'hsr' [ 236.500142][ T7857] Cannot create hsr debugfs directory [ 236.531532][ T7869] hsr_slave_0: entered promiscuous mode [ 236.538325][ T7869] hsr_slave_1: entered promiscuous mode [ 236.539649][ T7869] debugfs: 'hsr0' already exists in 'hsr' [ 236.539673][ T7869] Cannot create hsr debugfs directory [ 237.703477][ T1138] IPVS: stop unused estimator thread 0... [ 237.829701][ T5262] 8021q: adding VLAN 0 to HW filter on device eth3 [ 237.874324][ T59] Bluetooth: hci0: command tx timeout [ 238.531274][ T1138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.947061][ T1138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.447159][ T1138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.484443][ T7863] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 239.574929][ T7863] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 239.576401][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.576596][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.576834][ T8048] bridge_slave_0: entered allmulticast mode [ 239.581179][ T8048] bridge_slave_0: entered promiscuous mode [ 239.635893][ T7863] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 239.759339][ T7863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 239.763648][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.763788][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.764019][ T8048] bridge_slave_1: entered allmulticast mode [ 239.776897][ T8048] bridge_slave_1: entered promiscuous mode [ 239.888179][ T37] audit: type=1804 audit(1777288649.293:4): pid=8137 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.828" name="file0" dev="tmpfs" ino=1177 res=1 errno=0 [ 239.977628][ T59] Bluetooth: hci0: command tx timeout [ 240.016721][ T1138] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.063495][ T7863] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 240.108213][ T7863] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 240.209532][ T5262] 8021q: adding VLAN 0 to HW filter on device eth4 [ 240.210273][ T7863] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 240.255064][ T7863] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 240.351538][ T8048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.450692][ T8048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.771874][ T8048] team0: Port device team_slave_0 added [ 240.813136][ T8048] team0: Port device team_slave_1 added [ 241.151128][ T7869] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 241.230554][ T7869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 241.336502][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.336522][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.336557][ T8048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.398457][ T7869] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 241.437675][ T7869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 241.489803][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.489822][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.489849][ T8048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.539793][ T7869] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 241.655244][ T7869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 241.788648][ T7869] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 241.818561][ T7869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 241.888246][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'. [ 241.888271][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 241.959776][ T8170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.837'. [ 241.959803][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.837'. [ 242.026195][ T1447] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.094135][ T1447] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.131534][ T1447] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.443055][ T1138] bridge_slave_1: left allmulticast mode [ 242.443082][ T1138] bridge_slave_1: left promiscuous mode [ 242.443282][ T1138] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.523972][ T1138] bridge_slave_0: left allmulticast mode [ 242.524000][ T1138] bridge_slave_0: left promiscuous mode [ 242.524208][ T1138] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.425145][ T1138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.503146][ T1138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.546261][ T1138] bond0 (unregistering): Released all slaves [ 243.599023][ T8048] hsr_slave_0: entered promiscuous mode [ 243.601253][ T8048] hsr_slave_1: entered promiscuous mode [ 243.603612][ T8048] debugfs: 'hsr0' already exists in 'hsr' [ 243.603636][ T8048] Cannot create hsr debugfs directory [ 243.606200][ T1447] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.215976][ T7857] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 244.247866][ T7857] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 244.349629][ T7857] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 244.388668][ T7857] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 244.694586][ T7857] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 244.768147][ T7857] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.904164][ T7857] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 244.999338][ T7857] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.203913][ T1138] hsr_slave_0: left promiscuous mode [ 245.223035][ T1138] hsr_slave_1: left promiscuous mode [ 245.223982][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.224001][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.277533][ T1138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.277555][ T1138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.346700][ T1138] veth1_macvtap: left promiscuous mode [ 245.346826][ T1138] veth0_macvtap: left promiscuous mode [ 245.347043][ T1138] veth1_vlan: left promiscuous mode [ 245.347147][ T1138] veth0_vlan: left promiscuous mode [ 246.277034][ T1138] team0 (unregistering): Port device team_slave_1 removed [ 246.333235][ T1138] team0 (unregistering): Port device team_slave_0 removed [ 246.989126][ T8218] overlayfs: failed to clone upperpath [ 247.246037][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.696494][ T7863] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.814105][ T7869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.937485][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.937711][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.957431][ T8048] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 248.020751][ T8048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.067153][ T8048] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 248.140795][ T8048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 248.187237][ T8048] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 248.217244][ T8048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 248.228738][ T157] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.228944][ T157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.257421][ T8048] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 248.298675][ T8048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.316808][ T5262] 8021q: adding VLAN 0 to HW filter on device eth5 [ 248.456842][ T7869] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.671947][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.672175][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.718315][ T7857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.788366][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.788515][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.937833][ T7857] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.023193][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.024253][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.121135][ T8258] trusted_key: syz.2.860 sent an empty control message without MSG_MORE. [ 249.168543][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.168698][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.688276][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.859406][ T8048] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.918122][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.918319][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.007093][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.007255][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.208194][ T8287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.864'. [ 250.765881][ T5262] 8021q: adding VLAN 0 to HW filter on device eth6 [ 251.497283][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.046308][ T8330] netlink: 56 bytes leftover after parsing attributes in process `syz.2.869'. [ 252.050512][ T7869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.413204][ T8342] netlink: 16 bytes leftover after parsing attributes in process `syz.2.871'. [ 252.529988][ T7857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.602273][ T59] Bluetooth: hci2: unexpected event for opcode 0x0c2d [ 253.246046][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.469701][ T7863] veth0_vlan: entered promiscuous mode [ 253.591929][ T7863] veth1_vlan: entered promiscuous mode [ 253.767975][ T5262] 8021q: adding VLAN 0 to HW filter on device eth7 [ 253.913191][ T8380] netlink: 56 bytes leftover after parsing attributes in process `syz.2.876'. [ 254.133155][ T7863] veth0_macvtap: entered promiscuous mode [ 254.254040][ T7863] veth1_macvtap: entered promiscuous mode [ 254.258499][ T7869] veth0_vlan: entered promiscuous mode [ 254.274453][ T8393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.878'. [ 254.370063][ T7869] veth1_vlan: entered promiscuous mode [ 254.375237][ T7857] veth0_vlan: entered promiscuous mode [ 254.413226][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.540934][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.559200][ T7857] veth1_vlan: entered promiscuous mode [ 254.695396][ T1447] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.718474][ T1447] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.731168][ T1447] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.738586][ T1447] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.902260][ T8048] veth0_vlan: entered promiscuous mode [ 255.062996][ T7869] veth0_macvtap: entered promiscuous mode [ 255.230242][ T8048] veth1_vlan: entered promiscuous mode [ 255.604150][ T7869] veth1_macvtap: entered promiscuous mode [ 255.697995][ T7857] veth0_macvtap: entered promiscuous mode [ 255.762954][ T7857] veth1_macvtap: entered promiscuous mode [ 255.880424][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.880446][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.926007][ T7869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.959751][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.959829][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.975164][ T5262] 8021q: adding VLAN 0 to HW filter on device eth8 [ 256.008481][ T7869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.038768][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.108517][ T66] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.109265][ T8048] veth0_macvtap: entered promiscuous mode [ 256.151309][ T7857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.206569][ T66] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.253638][ T66] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.267317][ T66] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.298651][ T8048] veth1_macvtap: entered promiscuous mode [ 256.310242][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.310333][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.310366][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.379341][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.401301][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.447496][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.326438][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.629590][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.438252][ T8457] warning: `syz.2.891' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 258.466581][ T1455] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.469355][ T1447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.469375][ T1447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.500036][ T1455] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.503469][ T1455] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.505204][ T1455] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.776072][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.776095][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.248416][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.248437][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.911843][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 259.953598][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 260.031293][ T1447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.031323][ T1447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.081395][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 260.174405][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.174427][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.181946][ T8468] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 260.253106][ T8468] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 260.253154][ T8468] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 260.330474][ T8468] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 260.411999][ T8468] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 260.478854][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.478877][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.935601][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 262.284081][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 262.371051][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 262.409778][ T59] Bluetooth: hci0: Malformed HCI Event [ 262.506521][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 262.604313][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 262.750849][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 262.769813][ T8468] xfrm0 speed is unknown, defaulting to 1000 [ 263.701231][ T8546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.915'. [ 263.948063][ T8555] netlink: 48 bytes leftover after parsing attributes in process `syz.2.917'. [ 264.188106][ T8560] Bluetooth: MGMT ver 1.23 [ 264.751077][ T5735] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 265.034199][ T5735] usb 6-1: Using ep0 maxpacket: 16 [ 265.070024][ T5735] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.070082][ T5735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.070108][ T5735] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 265.070129][ T5735] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 265.070151][ T5735] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.133836][ T5735] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 265.133868][ T5735] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 265.133888][ T5735] usb 6-1: Manufacturer: syz [ 265.225818][ T5735] usb 6-1: config 0 descriptor?? [ 265.766511][ T8596] 9pnet_virtio: no channels available for device syz [ 265.956792][ T5735] rc_core: IR keymap rc-hauppauge not found [ 265.956814][ T5735] Registered IR keymap rc-empty [ 265.957528][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 265.981696][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.049837][ T5735] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 266.074286][ T5735] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 266.130334][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.152666][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.169806][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.182581][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.209377][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.222589][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.242597][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.263734][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.282534][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.308004][ T5735] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 266.357285][ T5735] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 266.357315][ T5735] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 266.415725][ T5735] usb 6-1: USB disconnect, device number 2 [ 267.735952][ T8647] 9pnet_virtio: no channels available for device syz [ 268.749520][ T8621] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.751963][ T8621] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.517553][ T8621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.565836][ T8621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.022047][ T8704] syz.8.958 (8704) used greatest stack depth: 17192 bytes left [ 272.689945][ T2947] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.689983][ T2947] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.967672][ T2947] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.967711][ T2947] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.967826][ T2947] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.967852][ T2947] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.967889][ T2947] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.967914][ T2947] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.177437][ T8754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.973'. [ 273.822054][ T8769] syz_tun: entered allmulticast mode [ 273.869251][ T8771] lo: entered allmulticast mode [ 274.165525][ T8768] syz_tun: left allmulticast mode [ 274.834321][ T8800] syz_tun: entered allmulticast mode [ 275.095941][ T8799] syz_tun: left allmulticast mode [ 276.344412][ T8850] binder: 8842:8850 ioctl 4018620d 0 returned -22 [ 277.468030][ T37] audit: type=1804 audit(1777288686.943:5): pid=8883 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.1014" name="/newroot/18/file0" dev="tmpfs" ino=110 res=1 errno=0 [ 278.336134][ T8909] 9pnet_virtio: no channels available for device syz [ 278.462549][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 278.614672][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 278.631628][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 278.631659][ T10] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 278.631708][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.631753][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.631775][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.759178][ T10] usbtmc 7-1:16.0: bulk endpoints not found [ 279.002474][ T5859] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 279.153591][ T5859] usb 8-1: Using ep0 maxpacket: 32 [ 279.179688][ T5859] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 279.179736][ T5859] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 279.179779][ T5859] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 106, changing to 10 [ 279.179806][ T5859] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 42299, setting to 1024 [ 279.179845][ T5859] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 279.179870][ T5859] usb 8-1: config 0 interface 0 has no altsetting 0 [ 279.199689][ T5859] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 279.199722][ T5859] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 279.199743][ T5859] usb 8-1: Product: syz [ 279.199758][ T5859] usb 8-1: Manufacturer: syz [ 279.199773][ T5859] usb 8-1: SerialNumber: syz [ 279.317522][ T5859] usb 8-1: config 0 descriptor?? [ 279.322089][ T8921] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 279.345407][ T5859] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.382601][ T5859] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.590202][ T6020] usb 8-1: USB disconnect, device number 2 [ 279.606233][ T6020] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 279.613220][ T8945] binder_alloc: 8944: binder_alloc_buf, no vma [ 279.879197][ T8928] ------------[ cut here ]------------ [ 279.879213][ T8928] kcov->t != t [ 279.879220][ T8928] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.8.1030/8928 [ 279.879264][ T8928] Modules linked in: [ 279.879283][ T8928] CPU: 1 UID: 0 PID: 8928 Comm: syz.8.1030 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.879307][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.879320][ T8928] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 279.879344][ T8928] Code: 10 00 00 48 8b bb 90 00 00 00 e8 c6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 e9 6d 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 0b d0 59 09 48 89 df be 03 00 [ 279.879396][ T8928] RSP: 0018:ffffc900040dfd20 EFLAGS: 00010206 [ 279.879414][ T8928] RAX: 47978dcd0a87dd00 RBX: ffff88802ad0ea00 RCX: 0000000000000000 [ 279.879429][ T8928] RDX: 0000000040d37c8c RSI: ffffffff8ba74b40 RDI: 00000000ffffffff [ 279.879445][ T8928] RBP: ffffc900040dfe78 R08: ffffffff8b1e3760 R09: ffffffff8dfc8140 [ 279.879460][ T8928] R10: dffffc0000000000 R11: fffffbfff1f11a3f R12: dffffc0000000000 [ 279.879476][ T8928] R13: 0000000000000000 R14: ffff88802ad0ea08 R15: ffff88801ab50000 [ 279.879491][ T8928] FS: 000055555cb47500(0000) GS:ffff88812627d000(0000) knlGS:0000000000000000 [ 279.879509][ T8928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.879524][ T8928] CR2: 00007efe91c9a4c0 CR3: 00000000371d6000 CR4: 00000000003526f0 [ 279.879544][ T8928] Call Trace: [ 279.879553][ T8928] [ 279.879565][ T8928] do_exit+0x150/0x22c0 [ 279.879597][ T8928] ? lockdep_hardirqs_on+0x7a/0x110 [ 279.879632][ T8928] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 279.879668][ T8928] ? reacquire_held_locks+0x104/0x190 [ 279.879699][ T8928] ? rt_spin_lock+0x1e0/0x400 [ 279.879723][ T8928] ? __pfx_do_exit+0x10/0x10 [ 279.879752][ T8928] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 279.879792][ T8928] ? rt_spin_unlock+0x160/0x200 [ 279.879823][ T8928] do_group_exit+0x21b/0x2d0 [ 279.879855][ T8928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.879878][ T8928] __x64_sys_exit_group+0x3f/0x40 [ 279.879903][ T8928] x64_sys_call+0x221a/0x2240 [ 279.879928][ T8928] do_syscall_64+0x15f/0xf80 [ 279.879946][ T8928] ? trace_irq_disable+0x3b/0x140 [ 279.879969][ T8928] ? clear_bhb_loop+0x40/0x90 [ 279.879995][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.880014][ T8928] RIP: 0033:0x7f73178ccdd9 [ 279.880033][ T8928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.880048][ T8928] RSP: 002b:00007fff5eccc5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 279.880068][ T8928] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f73178ccdd9 [ 279.880081][ T8928] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.880093][ T8928] RBP: 00007fff5eccc64c R08: 0000000000000000 R09: 00000000000927c0 [ 279.880106][ T8928] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000025 [ 279.880117][ T8928] R13: 00000000000927c0 R14: 0000000000043ff6 R15: 00007fff5eccc6a0 [ 279.882035][ T8928] [ 279.882048][ T8928] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 279.882060][ T8928] CPU: 1 UID: 0 PID: 8928 Comm: syz.8.1030 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 279.882076][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.882083][ T8928] Call Trace: [ 279.882089][ T8928] [ 279.882094][ T8928] vpanic+0x56c/0xa60 [ 279.882120][ T8928] ? __pfx__printk+0x10/0x10 [ 279.882137][ T8928] ? __pfx_vpanic+0x10/0x10 [ 279.882150][ T8928] ? is_bpf_text_address+0x292/0x2b0 [ 279.882167][ T8928] ? is_bpf_text_address+0x26/0x2b0 [ 279.882186][ T8928] panic+0xc5/0xd0 [ 279.882200][ T8928] ? __pfx_panic+0x10/0x10 [ 279.882223][ T8928] __warn+0x315/0x4c0 [ 279.882237][ T8928] ? kcov_task_exit+0xf5/0x160 [ 279.882251][ T8928] ? kcov_task_exit+0xf5/0x160 [ 279.882265][ T8928] __report_bug+0x29a/0x540 [ 279.882287][ T8928] ? kcov_task_exit+0xf5/0x160 [ 279.882300][ T8928] ? __pfx___report_bug+0x10/0x10 [ 279.882318][ T8928] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 279.882348][ T8928] ? rt_spin_lock+0x1e0/0x400 [ 279.882382][ T8928] ? rt_spin_lock+0x1e0/0x400 [ 279.882408][ T8928] ? kcov_task_exit+0xf5/0x160 [ 279.882429][ T8928] report_bug+0x16a/0x220 [ 279.882459][ T8928] ? kcov_task_exit+0xf5/0x160 [ 279.882478][ T8928] ? kcov_task_exit+0xf7/0x160 [ 279.882497][ T8928] handle_bug+0x9c/0x200 [ 279.882520][ T8928] exc_invalid_op+0x1a/0x50 [ 279.882542][ T8928] asm_exc_invalid_op+0x1a/0x20 [ 279.882562][ T8928] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 279.882583][ T8928] Code: 10 00 00 48 8b bb 90 00 00 00 e8 c6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 e9 6d 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 0b d0 59 09 48 89 df be 03 00 [ 279.882600][ T8928] RSP: 0018:ffffc900040dfd20 EFLAGS: 00010206 [ 279.882617][ T8928] RAX: 47978dcd0a87dd00 RBX: ffff88802ad0ea00 RCX: 0000000000000000 [ 279.882631][ T8928] RDX: 0000000040d37c8c RSI: ffffffff8ba74b40 RDI: 00000000ffffffff [ 279.882644][ T8928] RBP: ffffc900040dfe78 R08: ffffffff8b1e3760 R09: ffffffff8dfc8140 [ 279.882658][ T8928] R10: dffffc0000000000 R11: fffffbfff1f11a3f R12: dffffc0000000000 [ 279.882673][ T8928] R13: 0000000000000000 R14: ffff88802ad0ea08 R15: ffff88801ab50000 [ 279.882695][ T8928] ? rt_spin_lock+0x1e0/0x400 [ 279.882725][ T8928] do_exit+0x150/0x22c0 [ 279.882741][ T8928] ? lockdep_hardirqs_on+0x7a/0x110 [ 279.882765][ T8928] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 279.882784][ T8928] ? reacquire_held_locks+0x104/0x190 [ 279.882801][ T8928] ? rt_spin_lock+0x1e0/0x400 [ 279.882815][ T8928] ? __pfx_do_exit+0x10/0x10 [ 279.882831][ T8928] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 279.882851][ T8928] ? rt_spin_unlock+0x160/0x200 [ 279.882867][ T8928] do_group_exit+0x21b/0x2d0 [ 279.882885][ T8928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.882898][ T8928] __x64_sys_exit_group+0x3f/0x40 [ 279.882914][ T8928] x64_sys_call+0x221a/0x2240 [ 279.882929][ T8928] do_syscall_64+0x15f/0xf80 [ 279.882939][ T8928] ? trace_irq_disable+0x3b/0x140 [ 279.882953][ T8928] ? clear_bhb_loop+0x40/0x90 [ 279.882968][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.882980][ T8928] RIP: 0033:0x7f73178ccdd9 [ 279.882992][ T8928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.883001][ T8928] RSP: 002b:00007fff5eccc5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 279.883013][ T8928] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f73178ccdd9 [ 279.883021][ T8928] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 279.883028][ T8928] RBP: 00007fff5eccc64c R08: 0000000000000000 R09: 00000000000927c0 [ 279.883036][ T8928] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000025 [ 279.883043][ T8928] R13: 00000000000927c0 R14: 0000000000043ff6 R15: 00007fff5eccc6a0 [ 279.883060][ T8928] [ 279.883683][ T8928] Kernel Offset: disabled