last executing test programs: 4m11.267257508s ago: executing program 3 (id=32): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000b00)={&(0x7f00000003c0)=@nl=@unspec, 0x80, 0x0}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000280), 0xc3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000340)={0x3, 0xeceb, 0x1}) setregid(0x0, 0xee01) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=0x0, @ANYBLOB="d8118b386c186781dbce68b70cc167b6fe54547c85f8e755b4fe7d17563861aaff159e392476cd6a2ee9412759b46a27a353ea14c32d55ae1ae0939b8ff8a37384f7f27941d491378783f7ec794f2a1318c2d7d518f57820bb7f0a7426056486244dfb32884835bcc6a48d9d00c28d77b75fa217988256f51b2c70ace11a9560d715b8bca0e63a4395e7c32bcc6536ab74bfc66e46affc91894d4370e2032390de"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fefffdff8500000017000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x9f) keyctl$chown(0x4, r6, 0x0, 0xee01) 4m7.480192919s ago: executing program 3 (id=38): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000b00)={&(0x7f00000003c0)=@nl=@unspec, 0x80, 0x0}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000280), 0xc3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000340)={0x3, 0xeceb, 0x1}) setregid(0x0, 0xee01) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=0x0, @ANYBLOB="d8118b386c186781dbce68b70cc167b6fe54547c85f8e755b4fe7d17563861aaff159e392476cd6a2ee9412759b46a27a353ea14c32d55ae1ae0939b8ff8a37384f7f27941d491378783f7ec794f2a1318c2d7d518f57820bb7f0a7426056486244dfb32884835bcc6a48d9d00c28d77b75fa217988256f51b2c70ace11a9560d715b8bca0e63a4395e7c32bcc6536ab74bfc66e46affc91894d4370e2032390de"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fefffdff8500000017000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) r6 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r6, 0xffffffffffffffff, 0x9f) 3m59.236184341s ago: executing program 3 (id=45): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000fdff00000000000004000200000000001000000000000000200600000000"], 0x24, 0x1) fspick(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0x18, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYBLOB="10000500830000001c0012800b00010067656e65766500000c000280050008"], 0x3c}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(r6, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001140)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000003000)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000001180)=@newtaction={0x1e34, 0x30, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [{0x1350, 0x1, [@m_simple={0x108c, 0x1f, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x15, 0x3, '/dev/usb/hiddev#\x00'}, @TCA_DEF_DATA={0x11, 0x3, ':%\'%}^)/)}^%\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x0, 0x3, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffffff, 0x9, 0x2, 0x8, 0x2}}]}, {0x1004, 0x6, "96ee104fb8f3cecef037f1ae62a259427489750b2b6766172024a798bcfd9eca5198a2200100cf4443675e3a6b38a4991696487f70628b757be55ee140c1528b812436c0906f43962a899b4408985bd3d75d99a8a2e91ea980ae32cac1afe57692d72bb2794f5fb9e26e1794829b0c74b723667d83ffcf72c2811be036a130a178684fd04eddc7a7a7af7b7ec68856b1ba47c3fed6bb003631bd88a99cdaea44e54b2306b9139b2264a0670c7b58e0cdaa4a8c8e6e858e55bef9be224bbd2f9309da37ba752be87b0f7a3fa7d8e96ef259cb93f60f44dfc819de397778e81b985ab45976766cb3a357a6a0472135df1204c092f96cd093b79205a1b36884a33d77c926b9432bed7568dc023cb1363761ef11860af1b3cb46fb3ae2cefb5cc91b208574c0212a3b07daf7b4dd69aa04d3ea0c8a2b264c176e6e93d184bfbf5ba68371b84450ff29bbe43fe0cc651f4d9d3b8975892d2bc1b1d3d34c6722ffe65f87a7facb6a4cfcd59bdc43ed42f6e45bc8fc3ffd8f67e2bbf0b621c737c63298d8c2c5bc64bf74935411ae216b411510e17667a0eee858dc52ee71fb92c84fc80da6ef35d1d5767eec9be234e677cc93011503744df70855b977371bad2fa4670866dcebf2580b674ab97b859fd532fd44a32ac953a4d3eae1a2ed63b8d6de9b669ba99683c90ec5d8d2add234a2683246c694af315195a7d4c0ceef3678584ad82693cccba6360484eb13b5ad7a74cb3ed1cf0b8a1d4fbc2f8fa8b0aa708b17e68fc2b3600fa5b8f193dcee1ffa3cc833b2c535bc64d9ea9798174a93d477c2732e2c564ccabd398887248f7eea396a34fca30a42e882230556a6657ed847e48b4cd92e7cfbfab1e9c581af097c415be9fdb22632d0631df9427400eae0c036f46a1d40fe5fac25224ff08dffdc60492e2042361fef35f079b3f2efe3bdcd96351736f70f327e8265ee337993ee9c2626a64f911ff07ef62c1f66a4e4ccee5e6a2dc87dc3acb0eac4d10bbab7baa35c8b6fe360ebc1cacde9669ab127cf77aa65937478a61b4b7a995c20b4eb0e8798e3299a805183003f83617c49ad1fe74e7d69cc4dc3cd74f9483bcd49471645029564b5015159fcf4fd420e5e73dd0e7ea5758c453773985e376f36819a1862e4e27a86d1f840d8bf972a0b55d73b93967d8d293ba26f08309037df398073e77b8206289927df82503e2a3a8d142127b1345ab5e735305eebff0892589bb53936f51256cbe24841f6ebcb947c0cd39862e15dbdd3516dd83e15ae20ddabefb4ab437e96438c15cd1bb8f4d3b04c5b82e4bae764923548ab1a2f597f580e315a0920aba16323d1e35255b25556787a4d24cd2071bade1bc61ad2700ca89ac928b65baa2b58e5a568a0a1e6984381e9527b1e512b48205f551fdf988705f33de05820cd336260fef79e690a58b37d3ad7953fd25f6b56c701ecdb659663c079b2e86481dd1a45cb232e7080577a78ec7d4e697150a7595cc146ae79c8ad34a6db5222cf3edfe90a5d7a0025d3ef5778b4c8808b10099b0606b19144fd40f8406dd95d113d5b8d3717dcf15f2615b1d8bebfa215d3f33f5de4063b51e0e80788ec658203663f0584ed8e7aa7b93dc927cd1fc6b8c5b7db88013289c8bab377489bcb15a69379382a586fd62df9b4b222b228d96fd5e30e4a4e56a2dd84519a86c5b6e05ef1a67bb86bb170d6bffd305515e655fada1d5f1e82cd18d6625fd3bad636218047a48b4239c05c4770f7895a001d2178eb29b791cb8af09173981fe233819b60874a375650ced2d2876bc3c1d4157057c44394df815d8c9d84eca11961fd3b8f647e5cd5be2e0b410a7b2faed71d162cfea1c7f5b6e8ff7c3a0e341b4809be4dd23b69242aaaad482bf07dab5040e69647e5fb3485f7d621dabefddf1197f21a0c628c9b468a130e8eab5fdf8eeb42295f002801315f18bea86e2cf7db53245717244d3c52e2494ab054c5160792db0e489db39de324feb12953552c0caf9a4c8abdf8b347995d951d91ef0adf19593ee136e9405be9a6b66679289a9e352f0208fcc2909a8d80dc6a9873c237f911954527d7d9a36ab9022f5bb36a8b0bf9abc5bc66a1146e98ac536e326b1db794de53981263814e6e7d241be73e05439bb8bc773f85ac847fc342c0f3a2c6ee6800f2bd93e2707f28522a959c1ecaf4c111bbe8147832d610e2f3fd67ef3e2f1ead4a439a23ef919e18e9a445586533c84185e3472f9657ce98c0bbf88797665be996f29bbe430a42354e1f2d5d04710d19f8a8e4f3d3ee022fd457f9d474516a5186622a8e8821f0a9724f2412c7f26c2044a4cb4c30a2df7039215aa94545c575ff70810e83005b12f7e4faa06929611aee31a81117e449d1a080cb0af58c3bab5526c3fe65d9dd5bd515d15ce43c2a969a6f6e001c4d48cdcc1752e759404a02f6485aa797d6de61c572216028bafd77d54aacc4681e127240f882818a52c3be63a04468d39e375360cab7ce36325d28588bc26ad2587b6832d73d9966dfb3719bcac28ddb4e610315dc47b959a74c5aa76e75fe93e056e7505bebb1051fee9b2f1a0697454aad7242c6b73d255faf6552d586d3e34cd90f0f73fe457586abb36b3c7512ba86e94230e09e2b0833c7e234cd48eb8d16dccaa012e0017374c8d25d8c876550608c861c76715bd2b0e0cfcfe337e8bc9462fa25a1fefc2fde1f6bc10b9a81342f1f1a7e6e3da3b3039397b06995acb930488702758f4be14fbfa9ffe9662d08ee0523909e5fdca1e7a6470de2c2098878e76c0635f4604726668996c3709f60350cf03cf80f2d3a7e9862274384ac89e1208eb58b8828f303c9461589e88fe866d03bc596248e30249e4e7c5b548c01313354e44fd596e790713f5e41cc1e53790fe2e15b71dbce95e1bb6e5e5b5c1a5c2bcb9b899f7fb36b3d92817e4818694de3854203c577bcfecbb45796bb1a05def700e17531d5f5ba3e03fd6439072252c9fd2af7b10488113e672aaac22196394a2b03238365197133b9a0c7b0b86bb668075f3c30abf5348683ba7204ba3c614280838365af8af05d2b126906267a5bac4b9e6afa632ff720a44e083b31d803c7dfd677f5d4090eed298a4c28d9b6fc6597a62fd394bdef69b752e3dc391c0b1eda7b8973d42d0c392caa37704a2a79215abb2a47bc52b447aa2e620fa04240a5451297a2547300f398d2a85207ace4f31873b02bf251541db778be9a0073323770bc90a0191a6bd0f474405ab965df8c096ab6acbad312270baecc41e86b9b47dcf93342cb1c1998d704c805f333f9bdf03dbdeac73ab0e212dd2e42b0377bbf237dc58550c980bd2e549cfe8fb83d3157cb9943680753e3978fc0ce0c609ebafcd5689017e33c82d932ed389d70f73d60084adddc0c66cbda2815c64499c19eb8634aee36cbe4d0b59ec00a4a04e9d485463bc18b0f3955af01993de972536abcbf9daf6fe9daaa8be1c31bf5b8c245f7c074a3fd07d0f122f7d237b5ef92c605a98730470886c2c744da492d99a9913a51ece445840edb0910e1202dde8d7347fbb927779b721f08b6c9e444d0615a24b34f3a56580697a40168540c37f56cf68e03fb0d4110fe1da1deeca3ef7956c70f1c6d4201c1b3ddd6364ae3314d4b933e5f16f3e1399cbece1f6ca21d778c84d508617c49b47bbf1b89748ed55488737bc6e5ddca03f6f89cc6bd2b1607b784b9a253b57468cf3a89a928ffc0ec9115a7a12f2bf9789341d85bde22866f809c5746435fadc5f7f0378d4a52f99bc3d8e9a7ca90474af94d59702e2f917c46e1bc29c2ab359698274b59db1028fce9b6fa7810b7464d3c53143aa15f3c3c5195b370a138802842d536a3e5b12f03ed491b43d9bd6f3a8a91eaa78ba36c589a2642da33267c8f0a7c394994858fdc2915beb69b6e36e13aee7216089b898bd911b1f61c566fbb176d11f2fabd479841319ba9234464462f21f029410a099d8d12256197b9fcabc850007e1808ae0d54d15183f09b4e3aee5d154781755c53a707bd861c69a728e4ca20dec0afe2c2bd9e1b775dd47c3d4c4e676e902173c86cfb23a7b83732e8bb6fb636c6315d4e78731559bc6e21455c437ae3638dde4df5fccc535b023d2083410e1a434abece4b7acf99115f78459dfcb93c817d4cb78c0195d46e04402a5cd67b9b2065aa51a0c4a641798b2cf2c5edc44ae9934d5953b54f3de1170a29e4cb13e34601fdf73926fd44878474020274c36e4155a96c63f594f81fe6233a15b3a7b0ec24640a11fd713110fe0b4c44a83d4393986e63616f508042aaa88c913b88b0007beff44798ae616506301947f8312ce8b27f8d8f01a53ea72b15566826f428df309dcfa3369a56a8a03fbe720c2a49acb2b13f48a5be35c974aa2a43fe3f36755f02cf9ba3c0e4fdb7dbc7319b93042291103de771ed56ceb6da14e24eb6bc7ac817dfbffbfe1fb4fa4830055d4ea2d9b6aab415878f829bbd2fd522337ac4c694db29e0345ce2463c3cd9de52617bbc61c24a52208330165b14f404b8852eca56d1d42a08c77bb139073723f89d39c7376c62d65966faf7eef3fb2d4e96ec49a97fde6ffa567e69db909d6bbd26f105cd717e93906d41a335496cf339020dc13bf16c454d9c5e8867301c886e23d5df7ea1abebcd2633dd4595a47390021953bb9558195ce8603788f8e4dfa575290f3cb8408afb08509ae52f73ef7e9c16dd17b66cd6ab447ffb1666a0e752ce7fcb4b8937f6e611cd7d242f493bac55bece3b8fda54075b5aa4ff56e418b61448d2ffeadbe14c99dd3b6c73f235428d8ec16929526e821a119a33fc0a36d277f7c78365a4f2e45c96d8b1a5108106db66ab87c4fe86660a801eeaf81d32387afb3923e882319eba784bee6420a4ff30222a9f247fe86d98e005939961426c27154f3d1f3ed04eaf80b2e321c3a6d92f646a2585e4d5ebb3236818334f3fa732f97a27f775db3b4eb181a6fb13df79d76a3cc39bbdf8632a7fa11c7ae669ad76838a0df27d6ddb210b62c9918df3030a443a8acf416f910fa0be09385a9138daebaca115e80d689aca7841b1ddaff289bc2a0d34f167873f90d40fe831e7b3ecdd6c878419626aa464661f507b538e03bba430569a35671721cc887074f279f0e9573d9ef14aa5879d054d8be81fa16614c3c1f4327390aefee46c86baeb666e754140f6b95314c1c13cb08965312afb5728645308db8c3b04371870181dab4f88195dc70da3449cd3f5c8143c1c726ff05b3bf28326f183b83027b595bb380453b33bdd0bf0d6c46697dfa87baff928a1de671dde39ce6d647bfa142620f57c081a15d99b6c656e4fe098ed5683b96cf98e5651d7aa371d94edbe80da6640f594cbfe0eedde7c9441dab5107f9feedb41da5ce21d863556d3446a01b486903cd17ca7eca59bd68c068eb20565a9282524952c8084e363e703a508df1c9bd6e48e899c8cc781d5c9e3c51e7cdc6be9c0ae195df3ca67ffc82dcb963cd9ea7764e33945db41685b9af467612de405f49244a5ec95b84d3305bf25fd316b8e95ca76517c017e2d7ce048e413df7638877d4c8df7adcd649894bdd7a35071b700aac7a3b19c49efec5ab8296661acc4736a1ec3a8381b14ff9e41d34bad2df330ba41ef4617d3d0bfcfbe24a41aebd849c7c5bcdc8d4c8e0be85f9993eade4e27f0f025440c0fc395654616210b952cfb5b2790de145f0276e58c3ad9b6208efdb5a51c77d8827565b0698352df25da96622034f07df75b765c99d4741753"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0xfc, 0x11, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x6, 0x3, 0x8, 0xfff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x10, 0x4, 0x3, 0x800, 0x3}}]}, {0x66, 0x6, "9a83c09c9da38e5f34ccce59457e02e3788b637ebeb42aab5f055146bf0806b395e1604fcc240f23f81c09497f1954794de79cfe9a9c5e873928417c84758557ecb7a49f4ada554f15d293feee10e10ffbfe74f91de19139e79a5edee9165b11fb6e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0x8c, 0x12, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "c0a5d3642247a79e296196fc5b4f95f7"}, @TCA_CT_ZONE={0x6, 0x4, 0x3ff}, @TCA_CT_LABELS={0x14, 0x7, "66e84104766c653fb90608eaa386e0f3"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "4def3ece50d3d3d3a9b0b0e9d47e47c7"}]}, {0x1d, 0x6, "01091b649ef595d23bb42d4bfb75886e7ee148b9f902aef11a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x138, 0x1f, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xe, 0x8, 0x0, 0x3, 0x2}, 0x10}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0xa0, 0x6, "586eae5d58c2a33763ac6bd88fa240425095974d0512b4c39fa060b6c0bc3ad21d40711a549d4b0d4811420ae150030ec1ffeb1a729444a29f89eaf863f901ea96789b93394f13d9b932921d35908a23288100192b2c26b549defed7030cff1c1d0f2b28a4f915452e9ac129f8dfbc84943bceb4445d9a7da128dab48e551d686e671314f91e6f0dd14abdf2b9675e10c3b80377efeacde704946bd8"}, {0xc}, {0xc, 0x8, {0x5}}}}]}, {0x4}, {0xcc, 0x1, [@m_gact={0xc8, 0x10, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x8, 0x30000008, 0x8, 0x50d9}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x5, 0x8, 0x10000, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x3c8, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x2, 0x4, 0x6, 0x2}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x220d, 0x4}}]}, {0x3c, 0x6, "5f0af7c4104967ae3f3e6ea9b3b0fd1aab16dcc59f6444fc3d9a44b958ca3e8df45a6b808f1f666a57ad3663e7cdf218be81349171012e3b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, {0x2bc, 0x1, [@m_vlan={0xe4, 0xb, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0xa8, 0x6, "d21a0fe44f1cf8e5f18bd98b12a984a8fc86d3d9aa6bf1aa8284dc0d03d9359bcfebedc662e2c0eab481b88ee4d2173efb5c35de6db54dbb793a53cce9a826d90915fba90be6a60e420d9824fc72a110173f01c12e021fb282d0f58f4b6591c380ea652657a61f7f491c0c836f1d85c4d9bfc1b8814b1c84efb059c347febd452bee21be16a37305fb28b5b74d9c6ddd17df52cf79900afce3f3406fb3fba6ab4a509f6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0xc42c93efb432e550}}}}, @m_mirred={0x1d4, 0x12, 0x0, 0x0, {{0xb}, {0x144, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xe94b, 0x7, 0x1, 0x78000000, 0x4}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x6, 0xc, 0x1}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x0, 0x8, 0x5, 0x4}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x20000003, 0x7, 0x4c6}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfff, 0x2, 0x6, 0x8000, 0xfffffad6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x2, 0x2, 0x7, 0xdb8}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x8, 0xffffffffffffffff, 0x3, 0x3}, 0x3, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x4, 0x0, 0x1, 0x7}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc4c, 0xfffffffc, 0x0, 0xef5, 0x8}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000001, 0xffffffff, 0x1, 0x80, 0x4}, 0x2, r4}}]}, {0x68, 0x6, "9456972d8469335f79d752c11d4900abdc5e1673a300013ce1f409400f334de73aeb9ec21a3c50ebe10f949207c2e1db187266d6c36d3d04b176bce1e84b5746dc8228df780f933724b4f47f400f6c889fbb86638564e920958d7a49f124de0dc8c42e2f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, {0x134, 0x1, [@m_vlan={0x84, 0x0, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcf4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xbadf, 0x3, 0x1, 0x400, 0x9a9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0xf6d3579f48bb7165}]}, {0x1c, 0x6, "c8cf91e176b7908475e3c60427324108e325ed0a0119a75c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_gact={0xac, 0x10, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x833, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x2, 0x3, 0x1, 0x8001}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x0, 0xffffffffffffffff, 0x5, 0x7ff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x2, 0x10000000, 0x7, 0x7}}]}, {0x2b, 0x6, "030a4edb3ece407b4c4fdbe0747bf67aecc171b4f5b18979f4780a62b986ebe7a30425c1f0da6a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}, {0x610, 0x1, [@m_sample={0x84, 0x4, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x47, 0x6, "fa01913007f574ecaeea606e895dac926455672b207166fac2eb77c77522c30ddea2f6e45785bb5bf55e6ba21ac69fdf0bd39fb91405cf089b1d53d79ff99d15e5e0d3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0x154, 0x10, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x4, 0xffffffffffffffff, 0x7, 0x2}, 0xd}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x9, 0x1, 0xc2, 0x321}, 0x76}}]}, {0xed, 0x6, "a839a92620f66901d69603548b6a1d58b9edddf7ad853a11856191d0e056c42ec2fc0e81e883123bfee4f752dd16108bf253f2b5953f17408c9a52d529684107d59465ce8754bc7e6372086c2a94db58c7831214722d8a61e2d6f130c7942435cf12f0c088c3b93a234bd8c63b09302b46f831800535a18d0c2d02bd6365d120b0992f36a0afa9d2b9b5e168faa47f1ac11e98d72dfec98f307e12f8ace5fa54477272597ba75228bb445f164ec28a0fc4750d71f56f28534dd18535f471746a334450ffccc0e29cd90f5dfcca1bc579a9d1b241717546bf62221adf6352fa5797fa35920c0f794799"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x88, 0x20, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x5, 0x20000000, 0x81, 0xfff}, 0x69}}]}, {0x3f, 0x6, "4c1fd553a0a4932f1a69d89ea5c47a6c9ec467d8c41712d92ca4cf7816f40152e0fd7125779ecbc8d18e5e26334a6304d2f67f06d88d35f9cc8f43"}, {0xc, 0x7, {0x1, 0xb0ece5135d2ec345}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x5c, 0x10, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc4c}]}, {0x27, 0x6, "6132333b14681182cfcc283d7467edcf34ac07db3e95d90d676929e10a56e4959ed075"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xfc, 0xa, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x1, 0x10000000, 0xae2, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x6, 0x0, 0x5, 0x3ff}}]}, {0xa0, 0x6, "a5b627da677e745f2da015b3e3b1aed60c3e2113e23154b90be10171225e58bf85a440a7ae11bc02b9f4aa20722555faad14e4beaea529f3a73f3d2e8a4af2781918148dfdf9789355c5da5e1341945e1c2115d51b9ff1e9e0899acf5ed945be6f71b4e1aed99fd85824047a3544dfa5924a8ad6f2214744da9933e48f411c06313dcfaf094441acba29aeca39806ead2d71c8ee37573f751ee9c0fc"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_xt={0x254, 0x0, 0x0, 0x0, {{0x7}, {0x148, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x5f, 0x6, {0x7f, 'security\x00', 0xa0, 0x1, "84c658822d9b05c568b66b9f189f3a747400fb2bfe0a153a3f9000b063e1000c3d6b08cee1c1a21c29e4654eb244da2c231c01406e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0x74, 0x6, {0x7, 'mangle\x00', 0x3, 0x1000, "21b3ec0da9774566559b27ee625198bd7924219746476db93782fb90ce9ea1d3f9b4ddeface5192d4e46c804b9ee97067dd382f0c9da5877b65969a878036bcfe568931da5e2bc26c95e"}}]}, {0xe5, 0x6, "7e0a11a14955ac64cf41b9ea153069e419e85e2a747d6028b24ef5111cb045ce4b605392dfa112f220d7528a3d3b4384476c3f0eeb349fba0e4227221510da498c2001951c8a07a722bf036aa3fb4157eaff76f0b89b5219fdfcc58c8f4dd055a4185da7f3f90ac8f43a8a431b75c9091f566eb405bea535542c1a150c2e329ec629079dde14db397127e3baf8ccb23dfc4e42d47967c2dd8511b0b2d27f74bdec432fa84cf5e56293d6f9df274b38d18647aaa42742899d65a40aa028efea3667cfbf574e52a576af0920b70aa39e7b9644f69f06f25d772aa9a28ba05bc8a4d5"}, {0xc}, {0xc, 0x8, {0x6, 0x3}}}}]}]}, 0x1e34}, 0x1, 0x0, 0x0, 0x40001}, 0x40001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x110, r6, 0xd264e000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e0009043401"], 0x0) close(0xffffffffffffffff) getsockopt$bt_hci(r12, 0x84, 0x7c, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) write$binfmt_aout(r6, 0x0, 0xffffffdb) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 3m53.045674496s ago: executing program 3 (id=50): mount(0x0, &(0x7f00000000a0)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x50) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 3m50.284366596s ago: executing program 3 (id=54): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES8=r0, @ANYRESOCT=r0], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x2000004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x8}) fcntl$lock(r1, 0x6, &(0x7f00000001c0)={0x1, 0x2, 0x3, 0xea}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r2, &(0x7f0000000180)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='/dev/nullb0\x00', 0xc) write(0xffffffffffffffff, &(0x7f0000000480), 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(r2, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x82, 0x0) write(r4, &(0x7f0000000580)='4421', 0x4) symlinkat(&(0x7f0000000040)='./config/nvmet\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/attr_allow_any_host/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="5001000000000000030000000000000004000000000000000300000000000000ff07000100000000ffffffffffffff7fff0f0000ff070000070000000000000009000000000000006c0600000000000006000000000000000700000000000000020000000000000002000000010000000700000000a00000b3060000", @ANYRESHEX=r7, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB, @ANYRES64=r2, @ANYRES32=r1, @ANYRESOCT, @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES64=r3, @ANYRES64, @ANYRESOCT=0x0], 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) 3m44.021121267s ago: executing program 3 (id=58): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x8) 3m33.38689809s ago: executing program 2 (id=71): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket(0x2d, 0x2, 0x0) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 3m32.789554719s ago: executing program 2 (id=74): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001100)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x4, 0x90743) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc854}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) epoll_create(0x5) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sendmsg$NL80211_CMD_DEL_KEY(r1, 0x0, 0x24002000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1b4, 0x7, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x9}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_OFFSET={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x50, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x2d}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x884c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}]}, @NFTA_RULE_USERDATA={0xd6, 0x7, 0x1, 0x0, "302763400d025dcf501a71403112bf3ccd5edd2070afed3792891f371dfbf0bbbb7bc6f8fe096e2b74d2da2b14a9243defb10e748005f79d635d4bff2a5fe5b7ec4e36bc2a3a93d6d9344f016af884d83e6433234836ca1f3c94fcdc6dce706885ea1e71905747bc801e3675abaa5d0a9f60cc8218c6682cf3074aa69f217f5f05b7701784af46d09111e4688ca4b1979bd5c76a963065279f3aa0dcc8a8af3ca0f67ea6a77bbdca408118e087971713566c432b4f042feb7c138ad3dd4bd4cfb7a0f4723174bb0da99a7f440aee405527c3"}]}, 0x1b4}, 0x1, 0x0, 0x0, 0xc000}, 0x40d0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000002c0)='16', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs_dir/trace\x00', 0x0, 0x0) 3m30.997950002s ago: executing program 2 (id=77): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x94) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/4092}) r1 = eventfd(0x10000) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1) 3m28.525310694s ago: executing program 32 (id=58): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x5, 0x64, 0x9, 0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0x10, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x8) 3m28.498592344s ago: executing program 2 (id=82): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 3m26.740540469s ago: executing program 2 (id=86): ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000640)={0xd5, &(0x7f0000000540)="1b0b86dce85c1be13340a487954dd9634653f8166258668481aae63dfe199c7f73658fd42208bf55428280e3e49a3f461bc6bee86c60fa77826a253f930f895738fd778d94b03690b2c135ee28b2e7764a1cd89dc704e0af7035cfafb6222e66a4e6898cfeda7eb465b31d1c0b820529f92bb3aa139c09cbf1044e285d842a9dd1c58e93b17d52e4678469eae5e18c58f1520acb05fdaff40d60cacb3c4b8159c37f1eadce239fddc36a35e0ca9d05b351f7169bb596cecec7c11d44077bef6813fe88882f078322eec75ae081917736a6e366adcb"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c050) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 3m24.798427073s ago: executing program 2 (id=88): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m7.47324443s ago: executing program 33 (id=88): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 17.422073313s ago: executing program 4 (id=287): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xffffffffffffffff, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 12.667670232s ago: executing program 1 (id=292): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) lsetxattr$security_capability(&(0x7f0000000000)='./file1/file2\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x84, 0x4, 0x4038a0b, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x20, 0x0, 0x0, 0x4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007000076"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x972, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028fffe00009506907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c020008907810050000000000000040005600002d226905531de156c8ecefbaecbc06add46e8a3d97a47e75e224d3858e1494d970d9e00fd3e79c9939f75883aee0a185a4e2b4950e2c1a0b5b052ae7609ba5aecca6e20beb023dcb1c"], 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, 0x0, 0x0) 12.495096754s ago: executing program 0 (id=293): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}}]}}, 0xf) r3 = socket$inet6_udp(0xa, 0x2, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x0, 0x0, 0xe, 0x2, 0x5}, 0x20) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.685440984s ago: executing program 0 (id=294): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0xb, 0x3}, @fd={0x66642a85, 0x0, r1}, @flat=@weak_handle={0x77682a85, 0x1115}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000880)="4a8e464b3d4657499ea54e5c7d563ff8776074ae642a55558dbfd1df9462b1259816b613ea02f9c5a2a4cc3bf701b7f4fa887e4ce6d2045a432a7b060f115097ae0e0e07f3f3704a688c03"}) 11.438610075s ago: executing program 4 (id=295): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 11.397088375s ago: executing program 0 (id=296): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x2e, 0x0, 0x61, 0x0, 0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x22, 0x0, 0x1}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000"], 0x0, 0x3c}, 0x28) socket$kcm(0xa, 0x3, 0x87) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000000c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x71, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 11.078320665s ago: executing program 1 (id=297): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000080), 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r1, 0x4, 0x800) ioctl(r1, 0x8934, &(0x7f00000002c0)) ioctl(r1, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") ioctl(r1, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg(r2, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)="66bfdcf8156709246ddd266fa0f213eb5a3351", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4020044) bind$x25(r1, &(0x7f0000000080), 0x12) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) pread64(r3, &(0x7f0000000340)=""/69, 0x45, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC=r0], 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r6, 0x40246f4c, &(0x7f0000000440)={0xf4243, 0x2, @qpsk={0x7, 0x13}}) 10.656234441s ago: executing program 4 (id=298): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x40080) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) keyctl$clear(0x11, 0xfffffffffffffffd) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0) write$uinput_user_dev(r1, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1000, 0x10, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8c, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x80000001, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {0x0, 0x0, 0x0, 0xf}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xa9, 0x0, 0x1, 0x0, 0x7ff, 0x80, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x800, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4], [0xffffffff, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x4, 0xfffffffd, 0x800, 0x9262, 0x4, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1000, 0x401f, 0x0, 0x0, 0x0, 0x4, 0xfffffffb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0xfd5], [0x0, 0xfffffff6, 0x0, 0x20000004, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x80000, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x6, 0x82, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100, 0x0, 0x6, 0x6, 0x0, 0x5], [0x81, 0x5, 0x5d30, 0x1, 0x0, 0x100000, 0xdbc1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0xffffffff, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, 0x3, 0x0, 0xffffffdc, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe58b, 0xfffffff9, 0x0, 0x3, 0x0, 0x4, 0x1ff]}, 0x45c) listen(r0, 0xa) listen(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x50000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) mmap(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r4, 0xffffe000) sendfile(r3, r3, 0x0, 0x1ffffc) 10.217776976s ago: executing program 0 (id=299): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat(r0, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) lseek(r1, 0x1, 0x0) getdents64(r1, &(0x7f00000003c0)=""/31, 0x1f) syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="5ce71e004ec537f33358aff458540adc301dcd01e37430b174762fec827ec45c82dbb18893fa72118777c8d1fb68cff15400a1e29c532b6906acd7c90b3df561acd61db1a6d92eeed726495ba660afe8150cf307466c6e663ea0cdbb39f21e02bc1f1832a3693eafaa3b515d2a404d16ff5305db2b1963018327ac6c279eaed743db78acb3b7a6bafa022e90463265658ab788e9c0c40d003cbd46452088f083eb2261d4adf255f27641bf83447e1d0f9d82c29b3a6c396fb5", @ANYRES16=r1], 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x30}, 0x4004000) dup(0xffffffffffffffff) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='\x00\xe5\xff\xff\xff\xff\xff\xff\xff2', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000003c0)='\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000ac0)='fuseblk\x00M\x13k\x92#\x05z)\xe0c\\35\xdf%\xa3\xac!zoO\xf8\xcex\xb3\f\xad@\x853o\x0f0\x1a\xc0\"\xf7\x11Z\x01\xc1\xd9\x9fbJ7\xd1\xad\xe1\xed\x87\xae\x11-s\xb4\xbd\x1e\x9a\xd7\xc1crt\x88%\x92\x8fL\x8d\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xfa\xeb\x1e|M\x98W\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xe8\x7f\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='\x1c@\\X', &(0x7f0000000880)='R\x8d\xe9\x1a\xe0\x04\x00\x00\x00\x00\x00\x00\x00s\x03l\x8c\x11kSg\x03\x14 \'_\v/\xe0\xb0A\rx\x19\xe8\xf6sU\xfe<\xef\xc9\x12\xc25\xf8A\t\xdb\xb7\x88\xeeT\x80\x00\x00\x00=-\xe0\xf9\xff\xd2/x\x86i9\xcb@\xfa-\x19Q\x00\x90\x04\'J\xf8\xdfs\xad\xe6dS\x98\xeb\x89p\xd6)\xe8\x94d\x9dv.3\x9b\x81\x8e\x10\xca\xbc\x888', 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='0', 0x1}, {&(0x7f0000000080)="7a67b645fb3228ef0bacdde862e1e368bb0be2b830468baacc18337c7c", 0x1d}], 0x2) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000680)='P\xfc#N\x1d\x04\x00\x01\x00\x00\x00\x00\x00\x00\x04\x00\xbe\xd8\x83M\x1a\x06mEy\xcf\xb7\xb1\xd0N\x01\x03}\v\xcc\xaaca$|U\xdd\x1fhM\xa6\xa4-\x84Y\x0f\xdd\"\xf0\xf8\x1e\x84H\x7f\xf5*\x88\x8c\x0fF#-)\xa1|\xc2\x17\x1e\xedq*n\xaeT\xbc\xc7fJL\xa3Jq\xd8\xc5S\xed\xb3\fH\xe7kC\xcf', &(0x7f0000000900)="0e", 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000980)='\x00'/10, &(0x7f0000000300)='\x1c@\\X', 0x0) close(r3) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x8a, &(0x7f0000002a40)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60f9000e00540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00034e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50820002907800001e0c16ce00000000000000051e2c0854d6d40714a3287030a9d35819924cab04d570fc79d90945f32861294fbbcc2ae6fd7af6a4c84e76f1fe06e2d4c3d90000"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) 7.376923771s ago: executing program 1 (id=300): ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000640)={0xd5, &(0x7f0000000540)="1b0b86dce85c1be13340a487954dd9634653f8166258668481aae63dfe199c7f73658fd42208bf55428280e3e49a3f461bc6bee86c60fa77826a253f930f895738fd778d94b03690b2c135ee28b2e7764a1cd89dc704e0af7035cfafb6222e66a4e6898cfeda7eb465b31d1c0b820529f92bb3aa139c09cbf1044e285d842a9dd1c58e93b17d52e4678469eae5e18c58f1520acb05fdaff40d60cacb3c4b8159c37f1eadce239fddc36a35e0ca9d05b351f7169bb596cecec7c11d44077bef6813fe88882f078322eec75ae081917736a6e366adcb"}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c050) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x67, 0x2, {0x80, 0x3, 0x3}}, 0x14) 4.264727811s ago: executing program 1 (id=301): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000b00)={&(0x7f00000003c0)=@nl=@unspec, 0x80, 0x0}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000280), 0xc3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000340)={0x3, 0xeceb, 0x1}) setregid(0x0, 0xee01) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=0x0, @ANYBLOB="d8118b386c186781dbce68b70cc167b6fe54547c85f8e755b4fe7d17563861aaff159e392476cd6a2ee9412759b46a27a353ea14c32d55ae1ae0939b8ff8a37384f7f27941d491378783f7ec794f2a1318c2d7d518f57820bb7f0a7426056486244dfb32884835bcc6a48d9d00c28d77b75fa217988256f51b2c70ace11a9560d715b8bca0e63a4395e7c32bcc6536ab74bfc66e46affc91894d4370e2032390de"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) keyctl$chown(0x4, 0x0, 0x0, 0xee01) 4.178022839s ago: executing program 0 (id=302): r0 = fsopen(&(0x7f00000001c0)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'wlan0\x00', &(0x7f0000000100)=@ethtool_channels={0x3d, 0x101, 0x0, 0xfffffffb, 0x2, 0x1000000, 0xb33, 0xfd, 0x6}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000200)={0x8, "e2f06487b14a4767c1bc0565958c4af043a57786be27fdd97fc698c6cc0340a7"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4048004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x7, 0x2, 0x0, 0x7fff7ffc}, {0xf001, 0x3, 0xff, 0x9}]}) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 3.116542419s ago: executing program 4 (id=303): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$sock(r0, &(0x7f0000000b00)={&(0x7f00000003c0)=@nl=@unspec, 0x80, 0x0}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$cachefiles(0xffffff9c, &(0x7f0000000280), 0xc3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000340)={0x3, 0xeceb, 0x1}) setregid(0x0, 0xee01) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c00000400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000700", @ANYRES32=0x0, @ANYBLOB="d8118b386c186781dbce68b70cc167b6fe54547c85f8e755b4fe7d17563861aaff159e392476cd6a2ee9412759b46a27a353ea14c32d55ae1ae0939b8ff8a37384f7f27941d491378783f7ec794f2a1318c2d7d518f57820bb7f0a7426056486244dfb32884835bcc6a48d9d00c28d77b75fa217988256f51b2c70ace11a9560d715b8bca0e63a4395e7c32bcc6536ab74bfc66e46affc91894d4370e2032390de"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r4 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) keyctl$chown(0x4, 0x0, 0x0, 0xee01) 1.022237981s ago: executing program 1 (id=304): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) pipe2(&(0x7f0000000000), 0x80000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x4004000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f00000001c0)='1', 0x1) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_cmd_rej_unk={{0x1, 0x1, 0x2}}]}}, 0xf) r3 = socket$inet6_udp(0xa, 0x2, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7, 0x0, 0x0, 0xe, 0x2, 0x5}, 0x20) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) write$uinput_user_dev(r4, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 797.111157ms ago: executing program 4 (id=305): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_settings={0x8, 0x4, @te1=0x0}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x3, 0x3, 0xe, 0x7, 0x5, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x0, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x2, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x7, 0x80000001, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x3, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x6]}, 0x45c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$kcm(0x2d, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10000008ebc, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000000)={[{0x81fffffe, 0x4, 0xc1, 0x4f, 0x3, 0xbd, 0x80, 0x6, 0x1, 0x44, 0x8, 0x3, 0x100}, {0xb, 0x26f2, 0x6, 0x8, 0x9, 0xfb, 0x44, 0xc0, 0xa, 0xe, 0x7, 0x6, 0x3}, {0x1fd, 0x8, 0xe, 0x21, 0x25, 0x8, 0x1, 0x53, 0x3, 0x15, 0x0, 0x7, 0x40000000000004}], 0x20000002}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x8000000000000000, 0x3fe, 0x0, 0x1000, 0x2, 0x4002004c4, 0x1000, 0x0, 0x97, 0x14, 0x3, 0x2, 0x4, 0x63, 0x1aa], 0xeeee0000, 0x400}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r6}, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000140)={r2}) 191.133695ms ago: executing program 0 (id=306): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 166.504387ms ago: executing program 1 (id=307): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b}, 0x94) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/4092}) r2 = eventfd(0x10000) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 4 (id=308): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.190' (ED25519) to the list of known hosts. [ 92.007636][ T198] cfg80211: failed to load regulatory.db [ 93.005001][ T5570] cgroup: Unknown subsys name 'net' [ 93.246405][ T5570] cgroup: Unknown subsys name 'cpuset' [ 93.319295][ T5570] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.277413][ T5570] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.966124][ T4897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.004305][ T5593] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.005826][ T5595] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.032064][ T5593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.049355][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.055422][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.063952][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.067506][ T5593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.075329][ T5593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.079925][ T5593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.080396][ T5593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.086921][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.111929][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.126682][ T5593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.130759][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.148873][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.174354][ T5593] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.176744][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.177074][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.189793][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.197955][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.237348][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.251122][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.274074][ T5591] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.276560][ T5591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.321385][ T5597] Bluetooth: hci4: command tx timeout [ 100.331060][ T5597] Bluetooth: hci2: command tx timeout [ 100.331079][ T59] Bluetooth: hci1: command tx timeout [ 100.398717][ T59] Bluetooth: hci0: command tx timeout [ 100.401456][ T59] Bluetooth: hci3: command tx timeout [ 101.020632][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.021472][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.021700][ T5588] bridge_slave_0: entered allmulticast mode [ 101.023735][ T5588] bridge_slave_0: entered promiscuous mode [ 101.115408][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.115513][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.115966][ T5588] bridge_slave_1: entered allmulticast mode [ 101.118024][ T5588] bridge_slave_1: entered promiscuous mode [ 101.146946][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.147400][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.147564][ T5585] bridge_slave_0: entered allmulticast mode [ 101.155875][ T5585] bridge_slave_0: entered promiscuous mode [ 101.192299][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.192421][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.192543][ T5589] bridge_slave_0: entered allmulticast mode [ 101.194359][ T5589] bridge_slave_0: entered promiscuous mode [ 101.249091][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.249218][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.249349][ T5585] bridge_slave_1: entered allmulticast mode [ 101.251253][ T5585] bridge_slave_1: entered promiscuous mode [ 101.288935][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.289070][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.289667][ T5589] bridge_slave_1: entered allmulticast mode [ 101.292635][ T5589] bridge_slave_1: entered promiscuous mode [ 101.296380][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.296484][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.296613][ T5586] bridge_slave_0: entered allmulticast mode [ 101.300619][ T5586] bridge_slave_0: entered promiscuous mode [ 101.377723][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.377848][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.377978][ T5587] bridge_slave_0: entered allmulticast mode [ 101.387029][ T5587] bridge_slave_0: entered promiscuous mode [ 101.422900][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.423034][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.423390][ T5586] bridge_slave_1: entered allmulticast mode [ 101.425360][ T5586] bridge_slave_1: entered promiscuous mode [ 101.444943][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.484046][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.484239][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.484415][ T5587] bridge_slave_1: entered allmulticast mode [ 101.486578][ T5587] bridge_slave_1: entered promiscuous mode [ 101.542902][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.546011][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.583683][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.628388][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.656707][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.667465][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.711265][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.744847][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.748399][ T5588] team0: Port device team_slave_0 added [ 101.783837][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.824935][ T5588] team0: Port device team_slave_1 added [ 101.827103][ T5585] team0: Port device team_slave_0 added [ 101.868518][ T5589] team0: Port device team_slave_0 added [ 101.909849][ T5585] team0: Port device team_slave_1 added [ 101.934340][ T5589] team0: Port device team_slave_1 added [ 101.936358][ T5586] team0: Port device team_slave_0 added [ 101.979604][ T5587] team0: Port device team_slave_0 added [ 102.001899][ T5586] team0: Port device team_slave_1 added [ 102.003216][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.003227][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.003247][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.062099][ T5587] team0: Port device team_slave_1 added [ 102.095863][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.095881][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.095908][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.098438][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.098450][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.098469][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.178257][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.178307][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.178442][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.248405][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.248418][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.248437][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.298417][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.298435][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.298465][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.310336][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.310386][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.310488][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.389573][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.389587][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.389606][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.399435][ T5597] Bluetooth: hci4: command tx timeout [ 102.399463][ T5591] Bluetooth: hci1: command tx timeout [ 102.404943][ T59] Bluetooth: hci2: command tx timeout [ 102.422006][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.422053][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.422133][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.478868][ T59] Bluetooth: hci3: command tx timeout [ 102.478961][ T59] Bluetooth: hci0: command tx timeout [ 102.833112][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.833126][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.833145][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.993780][ T5588] hsr_slave_0: entered promiscuous mode [ 102.995008][ T5588] hsr_slave_1: entered promiscuous mode [ 103.077165][ T5585] hsr_slave_0: entered promiscuous mode [ 103.078130][ T5585] hsr_slave_1: entered promiscuous mode [ 103.085510][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 103.091750][ T5585] Cannot create hsr debugfs directory [ 103.106747][ T5589] hsr_slave_0: entered promiscuous mode [ 103.107818][ T5589] hsr_slave_1: entered promiscuous mode [ 103.108497][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 103.108515][ T5589] Cannot create hsr debugfs directory [ 103.185978][ T5586] hsr_slave_0: entered promiscuous mode [ 103.186997][ T5586] hsr_slave_1: entered promiscuous mode [ 103.187726][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 103.187744][ T5586] Cannot create hsr debugfs directory [ 103.215605][ T5587] hsr_slave_0: entered promiscuous mode [ 103.216666][ T5587] hsr_slave_1: entered promiscuous mode [ 103.217348][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 103.217366][ T5587] Cannot create hsr debugfs directory [ 104.282482][ T5588] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.334585][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.343981][ T5588] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.382397][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.387823][ T5588] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.434303][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.461376][ T5588] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.478888][ T5597] Bluetooth: hci1: command tx timeout [ 104.478923][ T5597] Bluetooth: hci2: command tx timeout [ 104.478946][ T5597] Bluetooth: hci4: command tx timeout [ 104.486021][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.558741][ T59] Bluetooth: hci0: command tx timeout [ 104.558774][ T59] Bluetooth: hci3: command tx timeout [ 104.654389][ T5585] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.677963][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.692999][ T5585] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.733405][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.736921][ T5585] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.783846][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.815677][ T5585] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.855210][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.035706][ T5589] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.068205][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.080769][ T5589] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.122585][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.141540][ T5589] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.172613][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.200814][ T5589] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.233120][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.372775][ T5586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.403141][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.424436][ T5586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.453452][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.476767][ T5586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.513371][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.542386][ T5586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.573200][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.661551][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.746217][ T5587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.777130][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.805893][ T5587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.832181][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.848071][ T5587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.872027][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.883143][ T5587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.922608][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.963185][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.013088][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.013298][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.059994][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.113529][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.113651][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.203647][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.252818][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.257863][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.258009][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.325696][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.325809][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.410505][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.450522][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.450737][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.491872][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.542315][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.542461][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.564651][ T59] Bluetooth: hci2: command tx timeout [ 106.564687][ T59] Bluetooth: hci1: command tx timeout [ 106.564878][ T5597] Bluetooth: hci4: command tx timeout [ 106.638757][ T5591] Bluetooth: hci3: command tx timeout [ 106.638789][ T5591] Bluetooth: hci0: command tx timeout [ 106.699935][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.760113][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.796996][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.797256][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.885143][ T1307] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.885280][ T1307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.013632][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.076446][ T1307] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.076667][ T1307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.186957][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.187178][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.475598][ T5587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.774507][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.234590][ T5588] veth0_vlan: entered promiscuous mode [ 108.252253][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.343593][ T5588] veth1_vlan: entered promiscuous mode [ 108.662436][ T5588] veth0_macvtap: entered promiscuous mode [ 108.701346][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.730551][ T5588] veth1_macvtap: entered promiscuous mode [ 108.736041][ T5585] veth0_vlan: entered promiscuous mode [ 108.856619][ T5585] veth1_vlan: entered promiscuous mode [ 108.938339][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.049323][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.076799][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.119112][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.187794][ T5585] veth0_macvtap: entered promiscuous mode [ 109.324891][ T5585] veth1_macvtap: entered promiscuous mode [ 109.579176][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.646333][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.693194][ T1184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.693222][ T1184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.740740][ T5586] veth0_vlan: entered promiscuous mode [ 109.760832][ T5587] veth0_vlan: entered promiscuous mode [ 109.808286][ T5589] veth0_vlan: entered promiscuous mode [ 109.876490][ T5586] veth1_vlan: entered promiscuous mode [ 109.895132][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.895154][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.896520][ T5587] veth1_vlan: entered promiscuous mode [ 109.980836][ T5589] veth1_vlan: entered promiscuous mode [ 110.378912][ T5586] veth0_macvtap: entered promiscuous mode [ 110.534295][ T5587] veth0_macvtap: entered promiscuous mode [ 110.550955][ T5586] veth1_macvtap: entered promiscuous mode [ 110.558214][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.558235][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.613392][ T5587] veth1_macvtap: entered promiscuous mode [ 110.644548][ T5589] veth0_macvtap: entered promiscuous mode [ 110.785307][ T5589] veth1_macvtap: entered promiscuous mode [ 110.836159][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.836182][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.974454][ T5776] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 113.177401][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.872135][ T5776] : entered promiscuous mode [ 114.526137][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.694907][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.709979][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.733737][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.966737][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.849654][ T5820] input: syz0 as /devices/virtual/input/input5 [ 121.247302][ T5803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.247359][ T5803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.911466][ T1314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.914504][ T5807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.914523][ T5807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.000438][ T1314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000488][ T1314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000528][ T1314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000567][ T1314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000605][ T1314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000643][ T1314] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000681][ T1314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000720][ T1314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000768][ T1314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000805][ T1314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000844][ T1314] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000882][ T1314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000920][ T1314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000959][ T1314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.000997][ T1314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.001034][ T1314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.001073][ T1314] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.001111][ T1314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.001148][ T1314] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.378001][ T5832] netlink: 'syz.2.7': attribute type 2 has an invalid length. [ 125.202028][ T5832] : entered promiscuous mode [ 125.432795][ T5810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.432811][ T5810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.950344][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.950366][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.331730][ T5591] Bluetooth: hci4: command 0x0405 tx timeout [ 127.474416][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.474440][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.616830][ T5871] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 128.591977][ T5871] team0: Port device dummy0 added [ 128.886552][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.886574][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.918486][ T5882] input: syz0 as /devices/virtual/input/input6 [ 131.613713][ T5899] input: syz0 as /devices/virtual/input/input7 [ 134.182344][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.196804][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.020991][ T5910] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 135.972517][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 137.172893][ T5920] /dev/nullb0: Can't open blockdev [ 137.204124][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 137.216439][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 137.217162][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 137.218233][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 138.889768][ T5925] Zero length message leads to an empty skb [ 141.068565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 141.909148][ T5946] netlink: 'syz.2.23': attribute type 2 has an invalid length. [ 144.146630][ T5987] binder: BINDER_SET_CONTEXT_MGR already set [ 144.146647][ T5987] binder: 5986:5987 ioctl 4018620d 2000000002c0 returned -16 [ 144.639328][ T6000] process 'syz.3.27' launched './file2' with NULL argv: empty string added [ 144.773627][ T6000] 9p: Bad value for 'rfdno' [ 147.642267][ T6007] binder: 6006:6007 ioctl 80247008 2000000001c0 returned -22 [ 147.681492][ T6002] binder: 6001:6002 ioctl 80247008 2000000001c0 returned -22 [ 148.299550][ T6010] netlink: 'syz.3.32': attribute type 2 has an invalid length. [ 149.385366][ T6017] netlink: 'syz.4.33': attribute type 2 has an invalid length. [ 149.978181][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 150.298802][ T6017] : entered promiscuous mode [ 151.928316][ T6091] netlink: 'syz.1.36': attribute type 2 has an invalid length. [ 152.261989][ T6091] : entered promiscuous mode [ 153.452680][ T6109] netlink: 'syz.3.38': attribute type 2 has an invalid length. [ 154.920089][ T6142] /dev/nullb0: Can't open blockdev [ 155.238827][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.40'. [ 158.138552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 158.178562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 158.208566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 161.787578][ T6156] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 161.787611][ T6156] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 161.787626][ T6156] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 161.800196][ T37] audit: type=1800 audit(1786259702.157:2): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.42" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 171.813525][ T6201] input: syz0 as /devices/virtual/input/input11 [ 172.399759][ T37] audit: type=1800 audit(1786259712.957:3): pid=6197 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.54" name="attr_allow_any_host" dev="configfs" ino=9226 res=0 errno=0 [ 173.208812][ T6212] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 173.671050][ T6212] team0: Port device dummy0 added [ 177.136411][ T6232] /dev/nullb0: Can't open blockdev [ 177.138133][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 177.148126][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 177.159151][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 177.174938][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 178.049146][ T6237] netlink: 'syz.2.63': attribute type 2 has an invalid length. [ 178.303360][ T6237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.63'. [ 178.438722][ T198] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 179.728716][ T198] usb 2-1: Using ep0 maxpacket: 8 [ 182.249060][ T37] audit: type=1326 audit(1786259722.907:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6264 comm="syz.2.65" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0113c6e0d9 code=0x7ffc0000 [ 182.249121][ T37] audit: type=1326 audit(1786259722.917:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6264 comm="syz.2.65" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0113c6e0d9 code=0x7ffc0000 [ 183.035254][ T198] usb 2-1: device descriptor read/all, error -71 [ 183.264183][ T6276] netlink: 'syz.0.67': attribute type 2 has an invalid length. [ 183.660398][ T6284] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 184.971625][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.67'. [ 185.170397][ T6276] : entered promiscuous mode [ 185.175164][ T6284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 185.985918][ T6295] input: syz0 as /devices/virtual/input/input13 [ 186.007158][ T6297] input: syz0 as /devices/virtual/input/input14 [ 186.208586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 186.228583][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 188.003799][ T6327] syz.2.74 (6327) used greatest stack depth: 17072 bytes left [ 189.730804][ T37] audit: type=1326 audit(1786259730.417:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14369ae0d9 code=0x7ffc0000 [ 189.730960][ T37] audit: type=1326 audit(1786259730.417:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6330 comm="syz.4.76" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14369ae0d9 code=0x7ffc0000 [ 190.924868][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 190.955374][ T6349] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 192.943212][ T6356] input: syz0 as /devices/virtual/input/input17 [ 194.403497][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.403570][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.173951][ T5591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.205436][ T5591] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.224802][ T5591] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.239612][ T5591] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.270081][ T5591] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.547758][ T6386] netlink: 'syz.4.89': attribute type 2 has an invalid length. [ 198.677484][ T6387] netlink: 'syz.1.90': attribute type 2 has an invalid length. [ 200.718310][ T6438] input: syz0 as /devices/virtual/input/input18 [ 200.814778][ T5597] Bluetooth: hci5: command tx timeout [ 201.535138][ T6445] netlink: 'syz.1.92': attribute type 2 has an invalid length. [ 201.844947][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.92'. [ 202.888801][ T5597] Bluetooth: hci5: command tx timeout [ 204.813398][ T6452] netlink: 'syz.4.95': attribute type 2 has an invalid length. [ 204.971387][ T5597] Bluetooth: hci5: command tx timeout [ 206.145242][ T6500] netlink: 'syz.0.96': attribute type 2 has an invalid length. [ 206.514584][ T6502] netlink: 24 bytes leftover after parsing attributes in process `syz.0.96'. [ 207.039227][ T5597] Bluetooth: hci5: command tx timeout [ 208.341996][ T6527] input: syz0 as /devices/virtual/input/input19 [ 209.489049][ T6532] netlink: 'syz.0.99': attribute type 2 has an invalid length. [ 209.745480][ T6535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.99'. [ 212.637307][ T5314] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 212.641272][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 213.581024][ T6565] netlink: 'syz.0.101': attribute type 2 has an invalid length. [ 213.888064][ T6567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.101'. [ 217.130695][ T6077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.479325][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.512601][ T5591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.540810][ T5591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.544987][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.560196][ T6597] input: syz0 as /devices/virtual/input/input20 [ 218.571107][ T5591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.765559][ T6602] binder: 6601:6602 ioctl 4018620d 0 returned -22 [ 220.639070][ T5598] Bluetooth: hci3: command tx timeout [ 221.211346][ T6077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.098082][ T5598] Bluetooth: hci4: command 0x0405 tx timeout [ 222.098823][ T4897] Bluetooth: hci0: command 0x0406 tx timeout [ 222.807312][ T5598] Bluetooth: hci3: command tx timeout [ 223.007793][ T6627] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 223.899372][ T6611] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.899486][ T6611] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 224.009172][ T6611] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 224.009910][ T6611] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 224.074247][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 224.149499][ T6611] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 224.149607][ T6611] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 224.323918][ T6611] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 224.324035][ T6611] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 224.419945][ T6611] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 224.440894][ T6077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.526091][ T6611] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 224.526203][ T6611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 224.640361][ T6611] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 225.075173][ T6643] binder: 6642:6643 ioctl 4018620d 0 returned -22 [ 225.264106][ T6648] input: syz0 as /devices/virtual/input/input21 [ 225.472873][ T6649] 9p: Bad value for 'rfdno' [ 226.329431][ T5597] Bluetooth: hci2: command 0x0406 tx timeout [ 226.367915][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 226.369743][ T5591] Bluetooth: hci4: command 0x0405 tx timeout [ 226.398977][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 226.410755][ T6077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.561587][ T5597] Bluetooth: hci3: command 0x0419 tx timeout [ 227.406976][ T6653] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 227.407008][ T6653] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 227.407022][ T6653] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 228.428432][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 228.428586][ T5591] Bluetooth: hci2: command 0x0406 tx timeout [ 228.428661][ T5597] Bluetooth: hci4: command 0x0405 tx timeout [ 228.458545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 228.478638][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 228.641289][ T5597] Bluetooth: hci3: command 0x0419 tx timeout [ 229.999157][ T6676] binder: 6675:6676 ioctl 4018620d 0 returned -22 [ 230.558669][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 230.707867][ T6684] input: syz0 as /devices/virtual/input/input22 [ 230.719318][ T5597] Bluetooth: hci3: command 0x0419 tx timeout [ 232.800113][ T5597] Bluetooth: hci3: command 0x0419 tx timeout [ 233.428495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 234.002304][ T6691] netlink: 'syz.1.128': attribute type 2 has an invalid length. [ 234.367206][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 236.343494][ T6077] bridge_slave_1: left allmulticast mode [ 236.343692][ T6077] bridge_slave_1: left promiscuous mode [ 236.460440][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.915792][ T6077] bridge_slave_0: left allmulticast mode [ 236.915832][ T6077] bridge_slave_0: left promiscuous mode [ 236.946474][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.688743][ T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 238.907425][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.939175][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 238.987461][ T31] usb 1-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 239.004808][ T31] usb 1-1: config 10 has an invalid interface number: 3 but max is 0 [ 239.004898][ T31] usb 1-1: config 10 has no interface number 0 [ 239.004999][ T31] usb 1-1: config 10 interface 3 has no altsetting 0 [ 239.057278][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.057298][ T31] usb 1-1: Product: syz [ 239.057310][ T31] usb 1-1: Manufacturer: syz [ 239.057320][ T31] usb 1-1: SerialNumber: syz [ 239.991763][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.065852][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.102685][ T6077] bond0 (unregistering): Released all slaves [ 240.249684][ T6716] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 240.249715][ T6716] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 240.249800][ T6716] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 240.367579][ T31] pvrusb2: Hardware description: OnAir Creator Hybrid USB tuner [ 240.391173][ T31] usb 1-1: selecting invalid altsetting 0 [ 240.417745][ T2383] pvrusb2: Invalid write control endpoint [ 240.702126][ T31] usb 1-1: USB disconnect, device number 2 [ 241.124295][ T6077] : left promiscuous mode [ 243.875642][ T2383] pvrusb2: Invalid write control endpoint [ 243.876239][ T2383] pvrusb2: Invalid write control endpoint [ 243.876674][ T2383] pvrusb2: Invalid write control endpoint [ 243.876903][ T2383] pvrusb2: Invalid write control endpoint [ 243.877106][ T2383] pvrusb2: Invalid write control endpoint [ 243.877377][ T2383] pvrusb2: Invalid write control endpoint [ 243.942030][ T2383] pvrusb2: Invalid write control endpoint [ 243.942054][ T2383] pvrusb2: Invalid write control endpoint [ 243.942065][ T2383] pvrusb2: Invalid write control endpoint [ 243.942074][ T2383] pvrusb2: Invalid write control endpoint [ 243.942084][ T2383] pvrusb2: Invalid write control endpoint [ 243.942094][ T2383] pvrusb2: Invalid write control endpoint [ 243.942103][ T2383] pvrusb2: Invalid write control endpoint [ 243.942113][ T2383] pvrusb2: Invalid write control endpoint [ 243.942122][ T2383] pvrusb2: Invalid write control endpoint [ 243.942132][ T2383] pvrusb2: Invalid write control endpoint [ 243.942141][ T2383] pvrusb2: Invalid write control endpoint [ 243.942151][ T2383] pvrusb2: Invalid write control endpoint [ 243.942160][ T2383] pvrusb2: Invalid write control endpoint [ 243.942170][ T2383] pvrusb2: Invalid write control endpoint [ 243.942179][ T2383] pvrusb2: Invalid write control endpoint [ 243.942189][ T2383] pvrusb2: Invalid write control endpoint [ 243.942198][ T2383] pvrusb2: Invalid write control endpoint [ 243.942216][ T2383] pvrusb2: Invalid write control endpoint [ 243.942226][ T2383] pvrusb2: Invalid write control endpoint [ 243.942236][ T2383] pvrusb2: Invalid write control endpoint [ 243.942245][ T2383] pvrusb2: Invalid write control endpoint [ 243.942255][ T2383] pvrusb2: Invalid write control endpoint [ 243.942264][ T2383] pvrusb2: Invalid write control endpoint [ 243.942274][ T2383] pvrusb2: Invalid write control endpoint [ 243.942284][ T2383] pvrusb2: Invalid write control endpoint [ 243.942293][ T2383] pvrusb2: Invalid write control endpoint [ 244.048535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 244.483705][ T2383] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 244.535914][ T6741] binder: 6739:6741 ioctl c0306201 0 returned -14 [ 244.642128][ T2383] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 244.642180][ T2383] pvrusb2: Invalid write control endpoint [ 244.642196][ T2383] pvrusb2: Invalid write control endpoint [ 244.642206][ T2383] pvrusb2: Invalid write control endpoint [ 244.642216][ T2383] pvrusb2: Invalid write control endpoint [ 244.642226][ T2383] pvrusb2: Invalid write control endpoint [ 244.642235][ T2383] pvrusb2: Invalid write control endpoint [ 244.642245][ T2383] pvrusb2: Invalid write control endpoint [ 244.654714][ T2383] pvrusb2: Invalid write control endpoint [ 244.654753][ T2383] pvrusb2: Invalid write control endpoint [ 244.655709][ T2383] pvrusb2: Invalid write control endpoint [ 244.655753][ T2383] pvrusb2: Invalid write control endpoint [ 244.655794][ T2383] pvrusb2: Invalid write control endpoint [ 244.655834][ T2383] pvrusb2: Invalid write control endpoint [ 244.655868][ T2383] pvrusb2: Invalid write control endpoint [ 244.655909][ T2383] pvrusb2: Invalid write control endpoint [ 244.655949][ T2383] pvrusb2: Invalid write control endpoint [ 244.655984][ T2383] pvrusb2: Invalid write control endpoint [ 244.656576][ T2383] pvrusb2: Invalid write control endpoint [ 244.656626][ T2383] pvrusb2: Invalid write control endpoint [ 244.656660][ T2383] pvrusb2: Invalid write control endpoint [ 244.656707][ T2383] pvrusb2: Invalid write control endpoint [ 244.840597][ T2383] pvrusb2: Attached sub-driver cs53l32a [ 245.070143][ T2383] pvrusb2: Invalid write control endpoint [ 245.070172][ T2383] pvrusb2: Invalid write control endpoint [ 245.070188][ T2383] pvrusb2: Invalid write control endpoint [ 245.070204][ T2383] pvrusb2: Invalid write control endpoint [ 245.070211][ T2383] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 245.070240][ T2383] pvrusb2: Device being rendered inoperable [ 245.070266][ T2383] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 245.070275][ T2383] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 245.317188][ T6750] netlink: 'syz.1.136': attribute type 2 has an invalid length. [ 246.290108][ T6761] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 247.287482][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 250.107496][ T6815] binder: 6812:6815 ioctl 80247008 2000000001c0 returned -22 [ 250.553969][ T6824] binder: 6823:6824 ioctl c0306201 0 returned -14 [ 250.558677][ T5598] Bluetooth: hci3: command 0x0419 tx timeout [ 250.976303][ T6836] input: syz0 as /devices/virtual/input/input23 [ 251.792247][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.822311][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.825059][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.857427][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.872933][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 253.998895][ T5598] Bluetooth: hci1: command tx timeout [ 255.214799][ T6867] netlink: 'syz.4.151': attribute type 2 has an invalid length. [ 255.474019][ T6870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.151'. [ 255.843126][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.843199][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.058526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 256.199133][ T5598] Bluetooth: hci1: command tx timeout [ 256.424063][ T6879] 9p: Bad value for 'rfdno' [ 258.198170][ T5243] 8021q: adding VLAN 0 to HW filter on device eth1 [ 258.248827][ T5598] Bluetooth: hci1: command tx timeout [ 258.383720][ T6904] input: syz0 as /devices/virtual/input/input24 [ 260.125120][ T6911] input: syz0 as /devices/virtual/input/input25 [ 260.318568][ T5598] Bluetooth: hci1: command tx timeout [ 263.723740][ T6921] 9p: Bad value for 'rfdno' [ 271.323260][ T6077] hsr_slave_0: left promiscuous mode [ 271.335220][ T5597] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 271.378198][ T6077] hsr_slave_1: left promiscuous mode [ 271.380113][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.380195][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.422366][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.422395][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.574406][ T6955] input: syz0 as /devices/virtual/input/input27 [ 272.762165][ T6077] veth1_macvtap: left promiscuous mode [ 272.762363][ T6077] veth0_macvtap: left promiscuous mode [ 272.763251][ T6077] veth1_vlan: left promiscuous mode [ 272.763527][ T6077] veth0_vlan: left promiscuous mode [ 276.507325][ T6077] team0 (unregistering): Port device team_slave_1 removed [ 276.599222][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 277.242477][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 277.352810][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 277.397816][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 277.495955][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 277.518400][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.745788][ T6595] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.745918][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.746154][ T6595] bridge_slave_0: entered allmulticast mode [ 277.833103][ T6595] bridge_slave_0: entered promiscuous mode [ 278.111009][ T6977] netlink: 'syz.1.170': attribute type 2 has an invalid length. [ 278.390814][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.170'. [ 278.843756][ T6981] input: syz0 as /devices/virtual/input/input28 [ 280.038285][ T5598] Bluetooth: hci5: command tx timeout [ 282.599384][ T5598] Bluetooth: hci5: command tx timeout [ 285.050772][ T5598] Bluetooth: hci5: command tx timeout [ 286.739892][ T7013] 9p: Bad value for 'rfdno' [ 287.691036][ T5598] Bluetooth: hci5: command tx timeout [ 289.837342][ T7028] input: syz0 as /devices/virtual/input/input29 [ 292.343641][ T7042] netlink: 'syz.1.179': attribute type 2 has an invalid length. [ 292.817007][ T7045] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'. [ 295.781931][ T7077] netlink: 'syz.0.182': attribute type 2 has an invalid length. [ 296.065598][ T7075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.519602][ T7083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.182'. [ 296.849100][ T5243] 8021q: adding VLAN 0 to HW filter on device eth2 [ 299.437230][ T7135] input: syz0 as /devices/virtual/input/input30 [ 300.027225][ T6844] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.027319][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.027490][ T6844] bridge_slave_0: entered allmulticast mode [ 300.063292][ T6844] bridge_slave_0: entered promiscuous mode [ 300.216419][ T7147] netlink: 'syz.4.190': attribute type 2 has an invalid length. [ 301.025365][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.190'. [ 301.527859][ T6844] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.528091][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.553432][ T6844] bridge_slave_1: entered allmulticast mode [ 301.554424][ T7154] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 301.556779][ T6844] bridge_slave_1: entered promiscuous mode [ 303.656968][ T7188] 9p: Bad value for 'rfdno' [ 305.942995][ T7202] 9p: Bad value for 'rfdno' [ 306.962192][ T6077] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.020795][ T7206] input: syz0 as /devices/virtual/input/input31 [ 307.260198][ T5243] 8021q: adding VLAN 0 to HW filter on device eth3 [ 307.272640][ T6844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.352578][ T6844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.561957][ T7222] 9p: Bad value for 'rfdno' [ 310.328778][ T5598] Bluetooth: hci5: command 0x0405 tx timeout [ 313.635013][ T6077] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.462467][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.462600][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.462870][ T6968] bridge_slave_0: entered allmulticast mode [ 314.494869][ T6968] bridge_slave_0: entered promiscuous mode [ 314.533181][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 314.581310][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 314.583769][ T6844] team0: Port device team_slave_0 added [ 314.595569][ T6968] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.595697][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.595929][ T6968] bridge_slave_1: entered allmulticast mode [ 314.596585][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 314.606289][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 314.614746][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.678977][ T6968] bridge_slave_1: entered promiscuous mode [ 314.993547][ T6968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.997187][ T6968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.133561][ T7251] netlink: 'syz.4.212': attribute type 2 has an invalid length. [ 315.483381][ T7254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.212'. [ 316.307401][ T7258] netlink: 'syz.1.211': attribute type 2 has an invalid length. [ 316.690085][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'. [ 316.798682][ T5598] Bluetooth: hci3: command tx timeout [ 317.289694][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.289747][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.375971][ T7279] binder: 7278:7279 ioctl 80247008 2000000001c0 returned -22 [ 318.086332][ T7296] 9p: Bad value for 'rfdno' [ 318.937645][ T6077] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.121708][ T5598] Bluetooth: hci3: command tx timeout [ 319.152870][ T6968] team0: Port device team_slave_0 added [ 319.301101][ T7302] 9p: Bad value for 'rfdno' [ 319.817972][ T6968] team0: Port device team_slave_1 added [ 319.886380][ T6968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.886398][ T6968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.886428][ T6968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.939955][ T6968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.939973][ T6968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.940004][ T6968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.178876][ T6968] hsr_slave_0: entered promiscuous mode [ 320.183635][ T6968] hsr_slave_1: entered promiscuous mode [ 321.199010][ T5598] Bluetooth: hci3: command tx timeout [ 321.527747][ T7314] input: syz0 as /devices/virtual/input/input33 [ 321.712273][ T7319] /dev/nullb0: Can't open blockdev [ 322.925660][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 323.288700][ T5598] Bluetooth: hci3: command tx timeout [ 326.457046][ T6077] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.649973][ T7335] netlink: 'syz.4.221': attribute type 2 has an invalid length. [ 330.296122][ T7370] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 330.296152][ T7370] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 330.296166][ T7370] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 330.368184][ T5243] 8021q: adding VLAN 0 to HW filter on device eth4 [ 332.250401][ T7388] jffs2: notice: (7388) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 332.367715][ T7391] binder: 7390:7391 ioctl c0306201 0 returned -14 [ 332.954084][ T37] audit: type=1800 audit(1786259870.656:8): pid=7397 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.233" name="attr_allow_any_host" dev="configfs" ino=11183 res=0 errno=0 [ 333.551424][ T7404] netlink: 'syz.0.235': attribute type 2 has an invalid length. [ 334.467916][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.235'. [ 334.939750][ T6077] bridge_slave_0: left allmulticast mode [ 334.939786][ T6077] bridge_slave_0: left promiscuous mode [ 334.940052][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.150464][ T6077] bridge_slave_1: left allmulticast mode [ 336.150502][ T6077] bridge_slave_1: left promiscuous mode [ 336.150777][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.370379][ T6077] bridge_slave_0: left allmulticast mode [ 336.370417][ T6077] bridge_slave_0: left promiscuous mode [ 336.370667][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.536805][ T7443] netlink: 'syz.4.239': attribute type 2 has an invalid length. [ 336.875402][ T7448] netlink: 24 bytes leftover after parsing attributes in process `syz.4.239'. [ 337.837797][ T5597] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 337.871070][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 337.882292][ T5597] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 337.890787][ T5597] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 337.899643][ T5597] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.675252][ T6077] bond0 (unregistering): Released all slaves [ 338.887869][ T6077] bond0 (unregistering): Released all slaves [ 339.429240][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.489200][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.530979][ T6077] bond0 (unregistering): Released all slaves [ 339.570472][ T7428] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 339.570503][ T7428] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 339.570517][ T7428] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 339.573702][ T5243] 8021q: adding VLAN 0 to HW filter on device eth5 [ 340.028321][ T5597] Bluetooth: hci1: command tx timeout [ 340.446297][ T7484] jffs2: notice: (7484) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 341.372003][ T5597] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 341.373105][ T7490] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 341.446299][ T6077] : left promiscuous mode [ 342.146607][ T5597] Bluetooth: hci1: command tx timeout [ 343.287685][ T7505] netlink: 'syz.0.245': attribute type 2 has an invalid length. [ 344.316509][ T5597] Bluetooth: hci1: command tx timeout [ 344.768803][ T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 345.888255][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.915608][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 345.915758][ T9] usb 5-1: New USB device found, idVendor=11ba, idProduct=1003, bcdDevice=14.c2 [ 346.109560][ T9] usb 5-1: config 10 has an invalid interface number: 3 but max is 0 [ 346.109626][ T9] usb 5-1: config 10 has no interface number 0 [ 346.380757][ T9] usb 5-1: config 10 interface 3 has no altsetting 0 [ 346.408706][ T5597] Bluetooth: hci1: command tx timeout [ 346.512957][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.513006][ T9] usb 5-1: Product: syz [ 346.513022][ T9] usb 5-1: Manufacturer: syz [ 346.513074][ T9] usb 5-1: SerialNumber: syz [ 351.481913][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 351.504876][ T9] usb 5-1: can't set config #10, error -32 [ 352.954435][ T5752] usb 5-1: USB disconnect, device number 2 [ 353.150586][ T7550] input: syz0 as /devices/virtual/input/input35 [ 353.198703][ T7555] jffs2: notice: (7555) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 357.668221][ T7566] input: syz0 as /devices/virtual/input/input36 [ 359.421189][ T5243] 8021q: adding VLAN 0 to HW filter on device eth6 [ 360.781550][ T7600] netlink: 'syz.1.259': attribute type 2 has an invalid length. [ 362.082168][ T7596] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 362.082201][ T7596] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 362.082216][ T7596] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 362.121800][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.122377][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.153070][ T7241] bridge_slave_0: entered allmulticast mode [ 362.190504][ T7241] bridge_slave_0: entered promiscuous mode [ 362.426383][ T7620] jffs2: notice: (7620) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 362.509418][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.509550][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.509791][ T7241] bridge_slave_1: entered allmulticast mode [ 362.559080][ T7241] bridge_slave_1: entered promiscuous mode [ 362.660498][ T7626] netlink: 76 bytes leftover after parsing attributes in process `syz.1.262'. [ 362.714782][ T5597] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 362.715243][ T7628] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 362.804995][ T7630] input: syz0 as /devices/virtual/input/input38 [ 365.675947][ T7241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.701299][ T7643] netlink: 'syz.0.267': attribute type 2 has an invalid length. [ 368.160364][ T7645] netlink: 24 bytes leftover after parsing attributes in process `syz.0.267'. [ 369.075127][ T7241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.301650][ T6077] hsr_slave_0: left promiscuous mode [ 369.318129][ T7653] jffs2: notice: (7653) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 369.349098][ T6077] hsr_slave_1: left promiscuous mode [ 369.350231][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.350258][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.406783][ T6077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.406813][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.466353][ T7655] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 369.539666][ T6077] veth1_macvtap: left promiscuous mode [ 369.539763][ T6077] veth0_macvtap: left promiscuous mode [ 369.539934][ T6077] veth1_vlan: left promiscuous mode [ 369.540059][ T6077] veth0_vlan: left promiscuous mode [ 370.529208][ T6077] team0 (unregistering): Port device team_slave_1 removed [ 370.589960][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 370.774914][ T6077] team0 (unregistering): Port device dummy0 removed [ 370.905130][ T7647] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.905399][ T7647] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.905623][ T7647] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 370.905842][ T7647] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 370.905953][ T7647] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 371.022430][ T7647] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 371.027060][ T7241] team0: Port device team_slave_0 added [ 371.091109][ T7241] team0: Port device team_slave_1 added [ 371.484259][ T7647] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 371.484461][ T7647] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 372.100213][ T7647] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 372.239810][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.239829][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.239857][ T7241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.242340][ T7241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.242355][ T7241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.242398][ T7241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.959359][ T5598] Bluetooth: hci3: command 0x0c1a tx timeout [ 372.959477][ T5598] Bluetooth: hci4: command 0x0405 tx timeout [ 372.959509][ T5598] Bluetooth: hci0: command 0x0406 tx timeout [ 372.959536][ T5598] Bluetooth: hci2: command 0x0406 tx timeout [ 372.960801][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 373.008300][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 373.023716][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 373.050058][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 373.055540][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.614192][ T5597] Bluetooth: hci1: command 0x0c1a tx timeout [ 373.857369][ T7702] 9p: Bad value for 'rfdno' [ 374.989300][ T7710] jffs2: notice: (7710) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 375.278593][ T5597] Bluetooth: hci5: command tx timeout [ 375.689274][ T5597] Bluetooth: hci1: command 0x0c1a tx timeout [ 377.360046][ T5597] Bluetooth: hci5: command tx timeout [ 377.767816][ T5597] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.450342][ T7726] binder: BINDER_SET_CONTEXT_MGR already set [ 378.450354][ T7726] binder: 7723:7726 ioctl 4018620d 2000000002c0 returned -16 [ 378.506418][ T7726] binder: 7723:7726 ioctl c0306201 200000000640 returned -14 [ 378.741034][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.745708][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.438657][ T5597] Bluetooth: hci5: command tx timeout [ 379.609623][ T5243] 8021q: adding VLAN 0 to HW filter on device eth7 [ 379.694188][ T7733] netlink: 'syz.1.283': attribute type 10 has an invalid length. [ 380.199860][ T7727] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 380.199892][ T7727] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 380.199906][ T7727] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 380.681886][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.897540][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.928522][ T7454] bridge_slave_0: entered allmulticast mode [ 380.931650][ T7454] bridge_slave_0: entered promiscuous mode [ 381.076436][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.076654][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.077308][ T7454] bridge_slave_1: entered allmulticast mode [ 381.097288][ T7454] bridge_slave_1: entered promiscuous mode [ 381.498920][ T7749] netlink: 'syz.1.286': attribute type 2 has an invalid length. [ 381.519792][ T5597] Bluetooth: hci5: command tx timeout [ 381.900779][ T7752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.286'. [ 382.535593][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.610953][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.114654][ T7454] team0: Port device team_slave_0 added [ 383.163339][ T7454] team0: Port device team_slave_1 added [ 385.215594][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.215612][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.215640][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.344010][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.344030][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.344061][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.873793][ T5597] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 386.889201][ T7792] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 387.752026][ T7454] hsr_slave_0: entered promiscuous mode [ 387.782185][ T7454] hsr_slave_1: entered promiscuous mode [ 387.815551][ T7454] debugfs: 'hsr0' already exists in 'hsr' [ 387.815600][ T7454] Cannot create hsr debugfs directory [ 388.612103][ T7820] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1000003 out of range (51000000..2150000000) [ 388.630700][ T7817] input: syz0 as /devices/virtual/input/input39 [ 393.227579][ T5702] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 393.651444][ T5702] usb 1-1: device descriptor read/64, error -71 [ 394.848521][ T5702] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 395.120213][ T7837] netlink: 'syz.1.301': attribute type 2 has an invalid length. [ 396.235210][ T7849] netlink: 'syz.4.303': attribute type 2 has an invalid length. [ 397.646922][ T5243] 8021q: adding VLAN 0 to HW filter on device eth8 [ 397.823220][ T7842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 397.966048][ T7842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 397.966389][ T7842] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 397.966639][ T7842] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 397.966881][ T7842] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 397.968537][ T7842] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 398.303565][ T7842] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 398.466791][ T5597] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 398.480772][ T7883] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 398.655296][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 398.684326][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 398.700918][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 398.739587][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 398.742439][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 399.279813][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 399.279839][ C1] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 29, name: ktimers/1 [ 399.279860][ C1] preempt_count: 0, expected: 0 [ 399.279871][ C1] RCU nest depth: 2, expected: 0 [ 399.279894][ C1] 4 locks held by ktimers/1/29: [ 399.279907][ C1] #0: ffffffff8e059220 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 399.280001][ C1] #1: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 399.280059][ C1] #2: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 399.280125][ C1] #3: ffff88803ab68358 (sk_lock-AF_X25){+.+.}-{0:0}, at: x25_kill_by_neigh+0x134/0x2a0 [ 399.280218][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 399.280255][ C1] Tainted: [L]=SOFTLOCKUP [ 399.280263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.280288][ C1] Call Trace: [ 399.280297][ C1] [ 399.280308][ C1] dump_stack_lvl+0xe8/0x150 [ 399.280343][ C1] __might_resched+0x329/0x480 [ 399.280379][ C1] lock_sock_nested+0x56/0x130 [ 399.280417][ C1] x25_kill_by_neigh+0x134/0x2a0 [ 399.280451][ C1] ? x25_kill_by_neigh+0x2b/0x2a0 [ 399.280491][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 399.280519][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 399.280557][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 399.280588][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 399.280614][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 399.280653][ C1] lapbeth_napi_poll+0x45/0x90 [ 399.280681][ C1] __napi_poll+0xae/0x550 [ 399.280720][ C1] net_rx_action+0x621/0xd70 [ 399.280775][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 399.280832][ C1] ? rt_spin_unlock+0x157/0x200 [ 399.280872][ C1] handle_softirqs+0x1d9/0x6c0 [ 399.280910][ C1] run_ktimerd+0x69/0x100 [ 399.280940][ C1] smpboot_thread_fn+0x57c/0xa80 [ 399.280974][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 399.281013][ C1] kthread+0x388/0x470 [ 399.281046][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 399.281074][ C1] ? __pfx_kthread+0x10/0x10 [ 399.281108][ C1] ret_from_fork+0x514/0xb70 [ 399.281146][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 399.281180][ C1] ? __switch_to+0xc89/0x1420 [ 399.281213][ C1] ? __pfx_kthread+0x10/0x10 [ 399.281247][ C1] ret_from_fork_asm+0x1a/0x30 [ 399.281302][ C1] [ 399.842615][ T5597] Bluetooth: hci2: command 0x0406 tx timeout [ 399.998724][ T5597] Bluetooth: hci5: command 0x0c1a tx timeout [ 399.998749][ T5598] Bluetooth: hci4: command 0x0405 tx timeout [ 400.078546][ T5597] Bluetooth: hci0: command 0x0406 tx timeout [ 400.878624][ T5597] Bluetooth: hci3: command tx timeout [ 402.618699][ T6077] bridge_slave_1: left allmulticast mode [ 402.618735][ T6077] bridge_slave_1: left promiscuous mode [ 402.619442][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.799902][ T6077] bridge_slave_0: left allmulticast mode [ 402.799947][ T6077] bridge_slave_0: left promiscuous mode [ 402.807318][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.998697][ T6077] bridge_slave_1: left allmulticast mode [ 402.998726][ T6077] bridge_slave_1: left promiscuous mode [ 402.998926][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.120593][ T6077] bridge_slave_0: left allmulticast mode [ 403.120676][ T6077] bridge_slave_0: left promiscuous mode [ 403.120951][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.318742][ T6077] bridge_slave_1: left allmulticast mode [ 403.318772][ T6077] bridge_slave_1: left promiscuous mode [ 403.318975][ T6077] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.420326][ T6077] bridge_slave_0: left allmulticast mode [ 403.420359][ T6077] bridge_slave_0: left promiscuous mode [ 403.420535][ T6077] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.819232][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.899278][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.960432][ T6077] bond0 (unregistering): Released all slaves [ 404.209270][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.289169][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.371507][ T6077] bond0 (unregistering): Released all slaves [ 404.640217][ T6077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.719691][ T6077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.801435][ T6077] bond0 (unregistering): Released all slaves [ 405.619515][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.675429][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.849941][ T6077] hsr_slave_0: left promiscuous mode [ 405.888712][ T6077] hsr_slave_1: left promiscuous mode [ 405.889740][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.939560][ T6077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.164573][ T6077] team0 (unregistering): Port device team_slave_1 removed [ 406.229362][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 406.759386][ T6077] team0 (unregistering): Port device team_slave_1 removed [ 406.810307][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 407.029536][ T6077] team0 (unregistering): Port device team_slave_0 removed [ 407.934655][ T5243] 8021q: adding VLAN 0 to HW filter on device eth9 [ 408.705178][ T5243] 8021q: adding VLAN 0 to HW filter on device eth10