last executing test programs: 41m20.750697273s ago: executing program 32 (id=14): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r3) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x160) 41m7.687632287s ago: executing program 33 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x574, &(0x7f0000000040)={0x0, 0xb193, 0x40, 0x1, 0x20002f7}) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) r3 = openat2(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x982}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0x5, 0x3}, 0x10, 0xe8b5, r2, 0x0, &(0x7f0000000a00)=[r3], 0x0, 0x10, 0x1}, 0x94) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x40, 0x107, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 40m52.224645068s ago: executing program 34 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x574, &(0x7f0000000040)={0x0, 0xb193, 0x40, 0x1, 0x20002f7}) fadvise64(0xffffffffffffffff, 0x88, 0x0, 0x3) r3 = openat2(0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x982}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x18, &(0x7f0000000400)=""/24, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0x5, 0x3}, 0x10, 0xe8b5, r2, 0x0, &(0x7f0000000a00)=[r3], 0x0, 0x10, 0x1}, 0x94) r4 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x40, 0x107, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x3}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) 39m47.169363158s ago: executing program 35 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) statfs(0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x2) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 35m37.344251074s ago: executing program 36 (id=291): syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b5, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0x851, 0x400000000000000) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x121140, 0x13d) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) 25m45.19450944s ago: executing program 37 (id=717): bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x20000000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 23m23.447916898s ago: executing program 3 (id=1023): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x1b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"e50d1af80100007ea25edd00ff000000080000f6907ff16b7e00", r4}) epoll_create1(0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 23m22.088306598s ago: executing program 3 (id=1026): openat(0xffffffffffffff9c, 0x0, 0x42, 0x173) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x78) io_uring_setup(0x17ba, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1b6, &(0x7f0000000840)="$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") 23m20.77451788s ago: executing program 3 (id=1029): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x2) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe401020301090212000100f4ff00091a0000008ec4"], 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0) setresgid(0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) close_range(r0, 0xffffffffffffffff, 0x0) 23m16.82738445s ago: executing program 3 (id=1035): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000940)=""/97, 0x61}, {&(0x7f00000009c0)=""/49, 0x31}], 0x2}, 0x7e1a}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000b40)=""/234, 0xea}], 0x1}, 0x7fffffff}], 0x2, 0x142, 0x0) 23m16.395204404s ago: executing program 3 (id=1040): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 23m15.828328919s ago: executing program 3 (id=1043): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xffffffff, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) 23m0.540235897s ago: executing program 38 (id=1043): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xffffffff, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) 17m14.498123302s ago: executing program 9 (id=1610): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) migrate_pages(r0, 0x1000, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 17m9.810281072s ago: executing program 9 (id=1617): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xffffffff, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0xa, 0x3, 0x3a) openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) 17m8.349346933s ago: executing program 9 (id=1622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000003b80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 17m1.693189211s ago: executing program 9 (id=1632): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x805, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) syz_pidfd_open(0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xffffffff, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18) r2 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0xa, 0x3, 0x3a) openat$sw_sync_info(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) 17m0.942812001s ago: executing program 9 (id=1634): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xf, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r3, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48) 17m0.034875483s ago: executing program 9 (id=1635): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 16m57.834614312s ago: executing program 39 (id=1635): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m55.414708722s ago: executing program 2 (id=1937): openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x4002, &(0x7f0000000400)={[{@userxattr}], [{@permit_directio}], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000580)=""/174, 0xff56) 12m49.699277953s ago: executing program 2 (id=1946): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000019140), 0xe6, 0x0) read$msr(r3, &(0x7f0000019180)=""/102392, 0x18ff8) sched_getparam(r1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r4, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) syz_open_procfs(0x0, 0x0) getpeername$ax25(r4, &(0x7f0000019080)={{0x3, @rose}, [@remote, @rose, @null, @bcast, @netrom, @default, @remote, @bcast]}, &(0x7f0000019100)=0x48) syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x101000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r6, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) 12m45.498131306s ago: executing program 2 (id=1951): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 12m44.607693534s ago: executing program 2 (id=1953): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m37.40550346s ago: executing program 2 (id=1963): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150021cb700000010961b090000000000000109022d0001001000000904000201030b01008700000000000000000905810320000000f8090502034000420500"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) madvise(&(0x7f00009e1000/0x4000)=nil, 0x4000, 0xf) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BLKTRACESTOP(r1, 0x1269, 0x604000000000000) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 12m32.257951117s ago: executing program 2 (id=1965): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 12m16.843048726s ago: executing program 40 (id=1965): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000140)='./bus\x00', 0xc) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 11m46.068571256s ago: executing program 0 (id=2030): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$ax25(r0, &(0x7f0000000080)={{0x3, @null, 0x1}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast]}, 0x48) 11m40.813965579s ago: executing program 0 (id=2038): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000010bc0)={0x0, 0x0, &(0x7f0000010b80)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x205, 0x0, 0x0, {0x3, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x204, 0x0, 0x0, {0x2, 0x0, 0x1}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x18, 0x3, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x4}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) 11m40.479638647s ago: executing program 0 (id=2040): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x186, 0x904) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, &(0x7f0000001280)=0x10001) 11m39.29650584s ago: executing program 0 (id=2042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x141) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11m38.052164161s ago: executing program 0 (id=2043): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x2) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000004c0)='htcp', 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f0000000280)='2', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203"], 0x0) shutdown(r2, 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x448c0) setresgid(0x0, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) close_range(r0, 0xffffffffffffffff, 0x0) 11m34.477968604s ago: executing program 0 (id=2050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0x5792b252}, 0xfffffffb, 0x0, 0x0, 0x404, 0x7, 0x11, 0x4, 0x1b, 0x0, 0x3d76d621, {0x0, 0x0, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000100)={0x23, 0x1, 0x11, 0x1, 0x0, 0xb, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000190001000000ed9d000000000a002000fc00000a002e000008001e0000020000140005a6bb523a8c88812020fbc17c1d9ae9ab55ea71070ee7ccd7f3ffb4de"], 0x38}, 0x1, 0x0, 0x0, 0x5880}, 0x0) 11m18.948605088s ago: executing program 41 (id=2050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x1, 0x0, 0x5792b252}, 0xfffffffb, 0x0, 0x0, 0x404, 0x7, 0x11, 0x4, 0x1b, 0x0, 0x3d76d621, {0x0, 0x0, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000000100)={0x23, 0x1, 0x11, 0x1, 0x0, 0xb, 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000190001000000ed9d000000000a002000fc00000a002e000008001e0000020000140005a6bb523a8c88812020fbc17c1d9ae9ab55ea71070ee7ccd7f3ffb4de"], 0x38}, 0x1, 0x0, 0x0, 0x5880}, 0x0) 5m51.741436268s ago: executing program 5 (id=2559): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 5m51.274905228s ago: executing program 5 (id=2561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(0x0, 0x48141, 0x8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(0x0, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xffffffffffffffff) 5m50.04803693s ago: executing program 5 (id=2563): semctl$SETVAL(0x0, 0x0, 0x10, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) 5m49.547807595s ago: executing program 5 (id=2565): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x5, 0x72, 0x20000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 5m47.914757776s ago: executing program 5 (id=2569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000840)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x83, 0x0, 0x0) 5m47.505844705s ago: executing program 5 (id=2571): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f00000033c0)=""/4102, 0x105c) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000380)={0x3, 0x1, 0x0, "ee4f6da8d2cf4011ac7b00", 0x32314742}) 5m39.177547936s ago: executing program 8 (id=2593): openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0xffffffffffffffff, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x4002, &(0x7f0000000400)={[{@userxattr}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000580)=""/174, 0xff56) 5m37.118532517s ago: executing program 8 (id=2596): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000780)={{0x6, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffdfffffffff, 0xfffffffffffffffc, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000002000, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x7ff, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000003, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2c5, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x100000000000, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0x20000000, 0x0, 0x80]}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xfb827ab984038ea1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x280400c1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x4000894) 5m35.773988115s ago: executing program 8 (id=2600): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) close(r0) 5m25.505775111s ago: executing program 8 (id=2630): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x8000, &(0x7f0000001dc0)={0x5, 0x72, 0x20000}, 0x20) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 5m24.918550379s ago: executing program 8 (id=2633): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000001c0)={r4}) 5m24.521307666s ago: executing program 8 (id=2635): syz_io_uring_setup(0x46d2, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) openat$comedi(0xffffffffffffff9c, 0x0, 0x8ad01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x161102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x7e9b, 0x0, 0x6, 0x5c77881e}]}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x60}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) 2m48.984029024s ago: executing program 7 (id=2930): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x2, 0xa, 0x300) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m48.407120639s ago: executing program 7 (id=2931): socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000019140), 0xe6, 0x0) read$msr(r1, &(0x7f0000019180)=""/102392, 0x18ff8) sched_getparam(0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r2, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') getpeername$ax25(r2, &(0x7f0000019080)={{0x3, @rose}, [@remote, @rose, @null, @bcast, @netrom, @default, @remote, @bcast]}, &(0x7f0000019100)=0x48) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0405626, &(0x7f0000000000)={0x1, 0x0, {0xb4, 0x2000004, 0x100e, 0x7, 0x4, 0x1, 0x1, 0x5}}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r5, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) 2m46.421026547s ago: executing program 7 (id=2935): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2m38.881914847s ago: executing program 7 (id=2945): syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="120150021cb700000010961b090000000000000109022d0001001000000904000201030b01008700000000000000000905810320000000f809050203400042"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x8031, 0xffffffffffffffff, 0xf6bf000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) madvise(&(0x7f00009e1000/0x4000)=nil, 0x4000, 0xf) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x11) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1269, 0x604000000000000) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x89}, 0x8) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2m36.674867704s ago: executing program 7 (id=2948): socket(0x25, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)=r4}, 0x20) recvmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)}, 0x2000) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x40) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2m33.903809045s ago: executing program 7 (id=2952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000004f80)={0x3, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffeb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe89}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404}, 0x800) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r7 = socket(0x29, 0x2, 0x0) write(r7, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)={0x2, 0x13, 0x9, 0x2, 0x21d, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x8, {0x6, 0x3c, 0x4, 0xae, 0x0, 0xff, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@mcast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bc0, 0x3, {0x6, 0x6c, 0xd7, 0x9, 0x0, 0x4, 0x0, @in6=@remote, @in=@local}}, @sadb_lifetime={0x4, 0x3, 0x9, 0x401, 0xa8, 0x40f9}, @sadb_x_sec_ctx={0x200, 0x18, 0x7, 0x4, 0xff8, "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"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x36, 0x2}]}, 0x10e8}}, 0x40d0) 2m18.104773837s ago: executing program 42 (id=2952): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000004f80)={0x3, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffeb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe89}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404}, 0x800) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r7 = socket(0x29, 0x2, 0x0) write(r7, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)={0x2, 0x13, 0x9, 0x2, 0x21d, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x8, {0x6, 0x3c, 0x4, 0xae, 0x0, 0xff, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@mcast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bc0, 0x3, {0x6, 0x6c, 0xd7, 0x9, 0x0, 0x4, 0x0, @in6=@remote, @in=@local}}, @sadb_lifetime={0x4, 0x3, 0x9, 0x401, 0xa8, 0x40f9}, @sadb_x_sec_ctx={0x200, 0x18, 0x7, 0x4, 0xff8, "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"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x36, 0x2}]}, 0x10e8}}, 0x40d0) 49.877364301s ago: executing program 4 (id=3063): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYRES32], 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xfff2, 0x9}, {0xfff2, 0xfff1}, {0xfff1, 0xd}}, ["", "", "", "", ""]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x20004844) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000015) 48.720448325s ago: executing program 4 (id=3065): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21750f744b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x5f4f, &(0x7f00000003c0)={0x0, 0x804, 0x2, 0x1000000}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0xf, &(0x7f0000000540)={0x1002, 0x0, 0x0, 0x0, 0x28}, 0x20) r4 = socket(0x11, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) 47.31076053s ago: executing program 4 (id=3068): bpf$MAP_CREATE(0x300000000000000, &(0x7f00000003c0)=@base={0x18, 0x4, 0x2000041, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) 45.127364036s ago: executing program 4 (id=3070): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ff"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x14) getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x2}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000008000000000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000044000000060a010400000000000000000100000008000b40000000000900010073797a30000000001c000480188008000140000000ffffffff001100010000000000000000000000000a00"/184], 0xb8}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001700010325bd7000fcffffff0a"], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 41.065577425s ago: executing program 4 (id=3076): socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000019140), 0xe6, 0x0) read$msr(r2, &(0x7f0000019180)=""/102392, 0x18ff8) sched_getparam(r0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) bind$can_j1939(r3, 0x0, 0x0) sendmsg$can_j1939(r3, 0x0, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x541}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') getpeername$ax25(r3, &(0x7f0000019080)={{0x3, @rose}, [@remote, @rose, @null, @bcast, @netrom, @default, @remote, @bcast]}, &(0x7f0000019100)=0x48) pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x101000) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0405626, &(0x7f0000000000)={0x1, 0x0, {0xb4, 0x2000004, 0x100e, 0x7, 0x4, 0x1, 0x1, 0x5}}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) 37.390050579s ago: executing program 4 (id=3078): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 22.288772763s ago: executing program 43 (id=3078): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4008010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 9.87856366s ago: executing program 6 (id=3107): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1000000}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 8.705646155s ago: executing program 6 (id=3109): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000140)={r1, 0x1, 0x10001}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r5 = inotify_init1(0x0) r6 = inotify_add_watch(r5, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r4, &(0x7f0000005640)=ANY=[@ANYRES16=r6], 0x69) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="b533", 0x2}], 0x1) 6.629371129s ago: executing program 1 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[], 0x30}}, 0x0) 6.584028868s ago: executing program 6 (id=3112): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) keyctl$instantiate(0xc, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e657720646566617500002074727573746564aaaf7bb320303030303030303030303030303030303337323400e96d72917316b228108c56176cf9bf2cd0137293489cbd47963334da4d7268403a5c7c49b0e315ac98cb6e962ded0637c5be0f0b65160bf5d78fcfb63827a87f8acbe3dae71133e40d9eb3ce56a63648c255866523fc157388ba2c16b495126268d7afdb0eb74620"], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4000084) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x3ff, 0xffffffff, 0x34325241, 0x3, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x1ff, 0x3}, {0x6, 0x409}, {0x10001, 0x1800000}], 0x0, 0xd, 0x2, 0x3078182a3427730f, 0x1}}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r7, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x40, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000) 6.125203175s ago: executing program 1 (id=3113): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x20004844) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000015) 5.633962197s ago: executing program 6 (id=3114): eventfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r5, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f00000014c0)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x1c79, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.679465074s ago: executing program 1 (id=3115): socket(0xa, 0x3, 0x3a) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$eJzslb9uE0EQxn97t/HFYKTUVJGwSBqI7UiIMl1egAfAco5g5cwfnyWwZcmGJg00vEQkaioqCiToKRAC0SQFSDRBVEHI6G5nz3dgOzYK3X2SPd/OfjO7e7uzezu8H3rAr+N+gxViKEp8VAoNrCnjOykY+13sSPBFm3ZV/M/FHokNu713Twzt7dWDwG+H3WnEIyZKwVSNJTIs1ta3X6ZEesJgVnlq6rePsx7FRLEDzF7PWRIHZVc67uq4xvV31CDj8eh9GmuKhpjYItMH9WZ/sQvZrv6LOZdTlLR/djljjYOQ1XnOTWalhvwoZT5U8HVilNob/OumLPG/9x1iEm3uzxIztsmQD88mf9WYuBJelPMT7exi81HMJ36a9XQNkctgoa08mniwx4fE4/Q8oa2acPuRraD3x/1GxG4CWzKvHfOTcjKaqPFabrrId1HDEJTLSFmNhq2osQZsdFr3NsJu70qzVd/1d/07tdrmtcqb81KiowE0A7+ylBoiKeohCc6l+iPtZ510pVTEkXZqEqcKmLlpJQKJXb9krGsqHicVm85h8r5KlmcvAJcWN7jMMvBgqFahJtnKRNnccbCL5lYz8Ks6NU84wWE57rjauBvs7KNQoqwcoHFs2CFLSaOGaUTp/c3ryfL3xZbj/+Vk6gdiD8Xat8u+STrO8E1a60Mo8LDe6bTt40W7mvhqBY2wlWRkR0a1r6G9k8se80MtoM2RI0eOHDly5Dhz/A4AAP//Z98fTg==") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3.923965304s ago: executing program 6 (id=3116): socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x80000005, 0x0, 0x7fffffff, 0x3}, 0x0, 0x0) 3.485562527s ago: executing program 6 (id=3117): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) fcntl$lock(r3, 0x6, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) close(r4) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/netlink\x00') read(r6, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x0, 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r8 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r8, 0x0, 0x0) r9 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r9, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r9, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) 2.475711968s ago: executing program 1 (id=3118): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x49) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) 1.127330804s ago: executing program 1 (id=3119): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) accept4$unix(r4, 0x0, 0x0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x1000000}, 0x94) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 0s ago: executing program 1 (id=3120): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ort 2(bridge_slave_1) entered blocking state [ 2091.304289][T16995] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.335107][T16995] bridge_slave_1: entered allmulticast mode [ 2091.349187][T16995] bridge_slave_1: entered promiscuous mode [ 2092.363992][T16995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2092.387922][T16995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2093.233486][T17120] trusted_key: encrypted_key: insufficient parameters specified [ 2093.867516][T16995] team0: Port device team_slave_0 added [ 2094.158260][T16995] team0: Port device team_slave_1 added [ 2095.300272][T16995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2095.339411][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2095.523935][T16995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2096.197252][T16995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2096.246883][T16995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2096.620428][T16995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2101.412452][T16995] hsr_slave_0: entered promiscuous mode [ 2101.455198][T16995] hsr_slave_1: entered promiscuous mode [ 2101.462492][T16995] debugfs: 'hsr0' already exists in 'hsr' [ 2101.507024][T16995] Cannot create hsr debugfs directory [ 2101.698661][T15113] bridge_slave_1: left allmulticast mode [ 2101.715038][T15113] bridge_slave_1: left promiscuous mode [ 2101.720936][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.789943][T15113] bridge_slave_0: left allmulticast mode [ 2101.814269][T15113] bridge_slave_0: left promiscuous mode [ 2101.839997][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2103.744845][T15113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2103.962821][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 2103.973656][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 2104.324569][T15113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2104.362284][T15113] bond0 (unregistering): Released all slaves [ 2105.923688][T17165] loop1: detected capacity change from 0 to 1024 [ 2105.965660][T17165] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2106.044423][T17165] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2106.052787][T17165] System zones: 0-1, 3-36 [ 2106.062342][T17165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2106.724117][T15113] hsr_slave_0: left promiscuous mode [ 2106.916502][T15113] hsr_slave_1: left promiscuous mode [ 2106.957733][T15113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2107.160431][T15307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2107.194628][T15113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2108.560948][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2108.581608][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2110.063387][ T6102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2110.200043][T17192] trusted_key: encrypted_key: insufficient parameters specified [ 2112.760352][T17199] overlayfs: failed to clone lowerpath [ 2112.935716][T17203] loop1: detected capacity change from 0 to 1024 [ 2112.956129][T17203] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2113.027135][T17203] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2113.054179][T17203] System zones: 0-1, 3-36 [ 2113.188490][T17203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2114.337912][T15307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2114.756253][T15113] team0 (unregistering): Port device team_slave_1 removed [ 2114.928592][T17214] loop1: detected capacity change from 0 to 128 [ 2115.028600][T17214] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2115.054057][T17214] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2115.269212][T15113] team0 (unregistering): Port device team_slave_0 removed [ 2115.867801][T15307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2117.709782][T17225] loop1: detected capacity change from 0 to 4096 [ 2120.324021][T16970] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2121.534082][T16970] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2121.629783][T16970] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2121.920878][T16970] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2124.530998][T17255] overlayfs: failed to clone lowerpath [ 2124.700076][T17253] loop1: detected capacity change from 0 to 2048 [ 2124.831649][T17258] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2124.926056][ T31] audit: type=1800 audit(1769708947.918:90): pid=17253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2324" name="bus" dev="loop1" ino=2097152 res=0 errno=0 [ 2129.336431][T17281] loop1: detected capacity change from 0 to 256 [ 2129.371794][T17281] vfat: Bad value for 'dmask' [ 2129.789579][T17286] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2331'. [ 2130.678302][T13741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2130.697775][T13741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2130.724050][T13741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2130.754266][T13741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2130.774244][T13741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2131.005210][T17289] loop1: detected capacity change from 0 to 4096 [ 2131.140928][T14351] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2131.154221][T14351] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2131.164390][T14351] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2131.374460][T14351] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2131.385200][T14351] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2132.145314][T17300] trusted_key: encrypted_key: insufficient parameters specified [ 2132.863972][T14351] Bluetooth: hci2: command tx timeout [ 2133.587294][T14351] Bluetooth: hci7: command tx timeout [ 2134.946433][T14351] Bluetooth: hci2: command tx timeout [ 2135.356841][T17320] overlayfs: failed to clone lowerpath [ 2135.376177][T17290] chnl_net:caif_netlink_parms(): no params data found [ 2136.523931][T14351] Bluetooth: hci7: command tx timeout [ 2137.033913][T14351] Bluetooth: hci2: command tx timeout [ 2138.104496][T17292] chnl_net:caif_netlink_parms(): no params data found [ 2138.543997][T14351] Bluetooth: hci7: command tx timeout [ 2138.609232][T17290] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.616857][T17290] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.634061][T17290] bridge_slave_0: entered allmulticast mode [ 2138.646212][T17290] bridge_slave_0: entered promiscuous mode [ 2138.681443][T17290] bridge0: port 2(bridge_slave_1) entered blocking state [ 2138.694196][T17290] bridge0: port 2(bridge_slave_1) entered disabled state [ 2138.701871][T17290] bridge_slave_1: entered allmulticast mode [ 2138.710535][T17290] bridge_slave_1: entered promiscuous mode [ 2138.869653][T17290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2138.905083][T17292] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.932678][T17292] bridge0: port 1(bridge_slave_0) entered disabled state [ 2139.084217][T17292] bridge_slave_0: entered allmulticast mode [ 2139.104135][T14351] Bluetooth: hci2: command tx timeout [ 2139.129886][T17292] bridge_slave_0: entered promiscuous mode [ 2139.164979][T17292] bridge0: port 2(bridge_slave_1) entered blocking state [ 2140.336521][T17292] bridge0: port 2(bridge_slave_1) entered disabled state [ 2140.372701][T17292] bridge_slave_1: entered allmulticast mode [ 2140.611184][T17292] bridge_slave_1: entered promiscuous mode [ 2140.637257][T17290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2140.646462][T14351] Bluetooth: hci7: command tx timeout [ 2140.936063][T17290] team0: Port device team_slave_0 added [ 2141.070884][T17290] team0: Port device team_slave_1 added [ 2141.185376][T17292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2141.276274][T17353] trusted_key: encrypted_key: insufficient parameters specified [ 2141.796591][T17292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2141.943437][T17290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2141.951001][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2142.004021][T17290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2142.046689][T17290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2142.071613][T17290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2142.131135][T17355] loop1: detected capacity change from 0 to 1024 [ 2142.145295][T17355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2142.176640][T17290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2142.241713][T17355] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2142.312524][T17355] System zones: 0-1, 3-36 [ 2142.427761][T17355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2143.327288][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2143.775319][T17292] team0: Port device team_slave_0 added [ 2144.092037][T17292] team0: Port device team_slave_1 added [ 2144.124411][T11147] bridge_slave_1: left allmulticast mode [ 2144.143916][T11147] bridge_slave_1: left promiscuous mode [ 2144.170385][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 2144.206102][T11147] bridge_slave_0: left allmulticast mode [ 2144.242511][T11147] bridge_slave_0: left promiscuous mode [ 2144.258647][T11147] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.677714][T15307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2144.754727][T17372] overlayfs: failed to clone lowerpath [ 2146.546719][T17378] loop1: detected capacity change from 0 to 4096 [ 2146.855464][T17384] netlink: 220 bytes leftover after parsing attributes in process `syz.7.2344'. [ 2147.652851][T17390] __vm_enough_memory: pid: 17390, comm: syz.6.2354, bytes: 21200501428224 not enough memory for the allocation [ 2148.641604][T11147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2148.765789][T11147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2148.993912][T11147] bond0 (unregistering): Released all slaves [ 2149.558472][T17290] hsr_slave_0: entered promiscuous mode [ 2149.602915][T17290] hsr_slave_1: entered promiscuous mode [ 2149.669455][T17290] debugfs: 'hsr0' already exists in 'hsr' [ 2149.698679][T17290] Cannot create hsr debugfs directory [ 2149.894325][T11147] hsr_slave_0: left promiscuous mode [ 2149.911087][T11147] hsr_slave_1: left promiscuous mode [ 2150.235237][T11147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2151.194222][T11147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2155.310565][T17428] overlayfs: failed to clone lowerpath [ 2155.861857][T11147] team0 (unregistering): Port device team_slave_1 removed [ 2156.765287][T11147] team0 (unregistering): Port device team_slave_0 removed [ 2159.837351][T17454] __vm_enough_memory: pid: 17454, comm: syz.7.2370, bytes: 21199877124096 not enough memory for the allocation [ 2161.047460][T17459] loop1: detected capacity change from 0 to 256 [ 2161.064863][T17459] vfat: Bad value for 'dmask' [ 2161.454423][T17461] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2365'. [ 2161.536868][T17292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2161.583062][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2161.691979][T17292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2161.721149][T17292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2161.736844][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2161.813817][T17292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2163.078033][T17470] loop1: detected capacity change from 0 to 1024 [ 2163.169512][T17470] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2165.856911][T17474] overlayfs: failed to clone lowerpath [ 2165.883284][T17470] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2165.893820][T17292] hsr_slave_0: entered promiscuous mode [ 2165.901158][T17292] hsr_slave_1: entered promiscuous mode [ 2165.908819][T17292] debugfs: 'hsr0' already exists in 'hsr' [ 2165.914747][T17292] Cannot create hsr debugfs directory [ 2165.974317][T17470] System zones: 0-1, 3-36 [ 2165.979215][T17470] EXT4-fs: error -4 creating inode table initialization thread [ 2166.116501][T17470] EXT4-fs (loop1): mount failed [ 2169.807099][T17504] loop1: detected capacity change from 0 to 256 [ 2169.836938][T17504] vfat: Bad value for 'dmask' [ 2170.004561][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2170.010944][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2170.196444][T17509] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2384'. [ 2170.299048][ T31] audit: type=1326 audit(1769708993.298:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17510 comm="syz.4.2386" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdd219aeb9 code=0x0 [ 2171.245904][T17516] loop1: detected capacity change from 0 to 16 [ 2171.273516][T17516] erofs (device loop1): mounted with root inode @ nid 36. [ 2174.064616][T17522] overlayfs: failed to clone lowerpath [ 2174.580615][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 2174.593699][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2390'. [ 2175.716618][T11147] bridge_slave_1: left allmulticast mode [ 2175.722322][T11147] bridge_slave_1: left promiscuous mode [ 2175.730140][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 2176.682408][T11147] bridge_slave_0: left allmulticast mode [ 2178.304713][T11147] bridge_slave_0: left promiscuous mode [ 2178.312968][T15113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2178.324724][T11147] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.047049][ T31] audit: type=1326 audit(1769709003.048:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17557 comm="syz.4.2399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdd219aeb9 code=0x0 [ 2180.295813][T11147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2182.374807][T11147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2182.486239][T11147] bond0 (unregistering): Released all slaves [ 2183.012699][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 2183.027254][T17572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2403'. [ 2184.284905][T11147] hsr_slave_0: left promiscuous mode [ 2184.514188][T11147] hsr_slave_1: left promiscuous mode [ 2184.535027][T11147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2185.224725][T11147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2190.859545][T17609] loop1: detected capacity change from 0 to 4096 [ 2191.185251][T11147] team0 (unregistering): Port device team_slave_1 removed [ 2191.521264][T13741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2191.540743][T13741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2191.550335][T13741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2191.560368][T13741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2191.568237][T13741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2191.958052][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2414'. [ 2191.971057][T17621] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2414'. [ 2192.267781][ T31] audit: type=1326 audit(1769709015.258:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17616 comm="syz.4.2413" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdd219aeb9 code=0x0 [ 2192.715531][T11147] team0 (unregistering): Port device team_slave_0 removed [ 2192.857605][T14351] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2192.887907][T14351] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2192.904462][T14351] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2192.912846][T14351] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2192.921846][T14351] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2192.925519][T17629] loop1: detected capacity change from 0 to 1024 [ 2192.985989][T17629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2193.097561][T17629] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2193.213988][T17629] System zones: 0-1, 3-36 [ 2193.259902][T17629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2193.663903][T13741] Bluetooth: hci0: command tx timeout [ 2195.051878][T15307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2195.167283][T14351] Bluetooth: hci6: command tx timeout [ 2195.765780][T14351] Bluetooth: hci0: command tx timeout [ 2197.185209][T14351] Bluetooth: hci6: command tx timeout [ 2198.918042][T14351] Bluetooth: hci0: command tx timeout [ 2199.333064][T14351] Bluetooth: hci6: command tx timeout [ 2199.529897][ T31] audit: type=1326 audit(1769709022.528:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.7.2427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46499aeb9 code=0x0 [ 2200.642625][T17627] chnl_net:caif_netlink_parms(): no params data found [ 2200.943824][T14351] Bluetooth: hci0: command tx timeout [ 2201.379192][T14351] Bluetooth: hci6: command tx timeout [ 2201.495458][T17627] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.502668][T17627] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.555734][T17627] bridge_slave_0: entered allmulticast mode [ 2201.576341][T17627] bridge_slave_0: entered promiscuous mode [ 2201.616749][T17627] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.660782][T17627] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.710231][T17627] bridge_slave_1: entered allmulticast mode [ 2201.769164][T17627] bridge_slave_1: entered promiscuous mode [ 2205.735122][T17613] chnl_net:caif_netlink_parms(): no params data found [ 2205.928714][T17627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2206.196008][T17627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2206.327964][T11147] bridge_slave_1: left allmulticast mode [ 2206.630138][T11147] bridge_slave_1: left promiscuous mode [ 2207.144014][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.171748][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2426'. [ 2207.182920][T17715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2426'. [ 2207.255272][T11147] bridge_slave_0: left allmulticast mode [ 2207.260989][T11147] bridge_slave_0: left promiscuous mode [ 2207.414782][T11147] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.556818][ T31] audit: type=1326 audit(1769709030.558:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17724 comm="syz.7.2441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46499aeb9 code=0x0 [ 2207.917479][T11147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2207.978037][T11147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2208.029940][T11147] bond0 (unregistering): Released all slaves [ 2209.198909][T17627] team0: Port device team_slave_0 added [ 2210.730411][T15113] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2211.696938][T11147] hsr_slave_0: left promiscuous mode [ 2211.743129][T11147] hsr_slave_1: left promiscuous mode [ 2211.906176][T11147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2211.942710][T11147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2214.474170][T17765] loop1: detected capacity change from 0 to 4096 [ 2214.671993][T11147] team0 (unregistering): Port device team_slave_1 removed [ 2214.743464][T17772] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2453'. [ 2216.015970][T11147] team0 (unregistering): Port device team_slave_0 removed [ 2216.036578][ T31] audit: type=1326 audit(1769709039.038:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17778 comm="syz.6.2456" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdd8eb9aeb9 code=0x0 [ 2216.936111][T17627] team0: Port device team_slave_1 added [ 2217.164658][T17627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2217.171647][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2217.199188][T17627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2217.301775][T17613] bridge0: port 1(bridge_slave_0) entered blocking state [ 2217.354248][T17613] bridge0: port 1(bridge_slave_0) entered disabled state [ 2217.424668][T17613] bridge_slave_0: entered allmulticast mode [ 2217.433684][T17613] bridge_slave_0: entered promiscuous mode [ 2217.469775][T17627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2217.516074][T17627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2217.617636][T17627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2217.939681][T17613] bridge0: port 2(bridge_slave_1) entered blocking state [ 2217.998647][T17613] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.006265][T17613] bridge_slave_1: entered allmulticast mode [ 2218.014714][T17613] bridge_slave_1: entered promiscuous mode [ 2218.031606][T17627] hsr_slave_0: entered promiscuous mode [ 2218.039562][T17627] hsr_slave_1: entered promiscuous mode [ 2218.050391][T17627] debugfs: 'hsr0' already exists in 'hsr' [ 2218.056563][T17627] Cannot create hsr debugfs directory [ 2218.247557][T17613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2218.635027][T17613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2218.916652][T17613] team0: Port device team_slave_0 added [ 2218.995283][T17613] team0: Port device team_slave_1 added [ 2219.602163][T17613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2219.633860][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2219.724196][T17613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2219.782294][T17613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2219.816057][T17613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2219.944686][T17613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2221.512542][T17613] hsr_slave_0: entered promiscuous mode [ 2221.555354][T17613] hsr_slave_1: entered promiscuous mode [ 2221.561820][T17613] debugfs: 'hsr0' already exists in 'hsr' [ 2221.597273][T17613] Cannot create hsr debugfs directory [ 2223.466183][ T31] audit: type=1326 audit(1769709046.458:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17819 comm="syz.7.2468" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46499aeb9 code=0x0 [ 2224.416828][T17627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2224.565212][T17627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2224.814009][T17627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2224.866284][T17627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2227.059241][T11147] bridge_slave_1: left allmulticast mode [ 2227.093845][T11147] bridge_slave_1: left promiscuous mode [ 2227.099705][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 2227.435307][T11147] bridge_slave_0: left allmulticast mode [ 2227.449424][T11147] bridge_slave_0: left promiscuous mode [ 2227.482231][T11147] bridge0: port 1(bridge_slave_0) entered disabled state [ 2227.572219][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 2228.334502][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2476'. [ 2229.298321][T17870] loop1: detected capacity change from 0 to 256 [ 2229.334275][T11147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2229.384996][T17870] vfat: Bad value for 'dmask' [ 2229.419025][T11147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2230.442393][T11147] bond0 (unregistering): Released all slaves [ 2232.250581][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2232.257070][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2232.400432][T11147] hsr_slave_0: left promiscuous mode [ 2232.444750][T11147] hsr_slave_1: left promiscuous mode [ 2232.463367][T11147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2232.568409][T11147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2233.978173][T11147] team0 (unregistering): Port device team_slave_1 removed [ 2234.164944][T11147] team0 (unregistering): Port device team_slave_0 removed [ 2235.478100][T17627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2235.776182][T17627] 8021q: adding VLAN 0 to HW filter on device team0 [ 2235.870734][ T6102] bridge0: port 1(bridge_slave_0) entered blocking state [ 2235.877984][ T6102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2235.976658][ T6102] bridge0: port 2(bridge_slave_1) entered blocking state [ 2235.983900][ T6102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2237.026699][T17613] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2237.216083][T17613] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2237.297872][T17613] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2237.413529][T17613] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2239.403574][T17613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2239.502770][T17613] 8021q: adding VLAN 0 to HW filter on device team0 [ 2239.586961][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 2239.594200][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2239.709664][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2239.716949][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2239.841605][T17627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2240.636843][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2498'. [ 2240.646434][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2498'. [ 2241.482254][T17613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2241.588908][T17953] loop1: detected capacity change from 0 to 512 [ 2241.869012][T17627] veth0_vlan: entered promiscuous mode [ 2242.964520][T17627] veth1_vlan: entered promiscuous mode [ 2243.057967][T17627] veth0_macvtap: entered promiscuous mode [ 2243.107382][T17627] veth1_macvtap: entered promiscuous mode [ 2243.246757][T17627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2243.298993][T17627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2243.357109][T15113] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2243.386675][T15113] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2243.468080][T15113] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2243.513865][T15113] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2243.762664][ T31] audit: type=1800 audit(1769709066.758:98): pid=17975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2508" name="memory.events" dev="tmpfs" ino=756 res=0 errno=0 [ 2243.948342][ T6022] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2243.998545][T15113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2244.043822][T15113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2244.204900][T11960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2245.561368][T11960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2245.953375][T17613] veth0_vlan: entered promiscuous mode [ 2246.053107][T17613] veth1_vlan: entered promiscuous mode [ 2246.397106][T17613] veth0_macvtap: entered promiscuous mode [ 2246.426582][T17613] veth1_macvtap: entered promiscuous mode [ 2246.517768][T17613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2246.557994][T17613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2246.642534][T15113] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.676788][T15113] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.734990][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2246.776470][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2247.157380][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2247.195454][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2247.307275][ T5983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2247.333929][ T5983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2247.697896][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 2247.707473][T17998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2512'. [ 2248.071233][T17999] loop8: detected capacity change from 0 to 8 [ 2249.737207][T18012] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2515'. [ 2251.571742][T18022] loop5: detected capacity change from 0 to 256 [ 2251.623464][T18023] overlayfs: failed to clone lowerpath [ 2251.647791][T18022] vfat: Bad value for 'dmask' [ 2258.956463][T18068] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2260.922743][T18076] loop5: detected capacity change from 0 to 4096 [ 2262.504639][T18076] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 2262.604444][T18076] ntfs3(loop5): Failed to load $Bitmap (-2). [ 2266.592250][T18106] loop8: detected capacity change from 0 to 256 [ 2266.636842][T18106] vfat: Bad value for 'dmask' [ 2266.934759][T18113] netlink: 'syz.5.2548': attribute type 10 has an invalid length. [ 2267.749455][T18113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2268.050445][T18120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2548'. [ 2268.164540][T18113] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 2268.249078][T18120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2268.306335][T18120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2268.407543][T18120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2268.463362][T18120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2268.474142][ T792] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 2269.135935][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2269.319094][ T792] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2269.329097][ T792] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 2269.338292][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2269.354511][ T792] usb 9-1: config 0 descriptor?? [ 2269.771145][T18120] bond0: (slave batadv0): Releasing backup interface [ 2269.963144][ T792] usbhid 9-1:0.0: can't add hid device: -71 [ 2269.994868][ T792] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2270.050918][ T792] usb 9-1: USB disconnect, device number 2 [ 2270.835202][T18146] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2557'. [ 2271.609837][T18152] loop8: detected capacity change from 0 to 512 [ 2271.640217][T18152] EXT4-fs: Ignoring removed oldalloc option [ 2271.851726][T18152] EXT4-fs error (device loop8): ext4_iget_extra_inode:5072: inode #15: comm syz.8.2560: corrupted in-inode xattr: invalid ea_ino [ 2272.814316][T18152] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.2560: couldn't read orphan inode 15 (err -117) [ 2272.922273][T18152] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2273.163630][ T31] audit: type=1800 audit(1769709096.158:99): pid=18152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2560" name="bus" dev="loop8" ino=18 res=0 errno=0 [ 2273.687138][T17613] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2275.463073][T15113] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2275.504338][ T5807] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2275.745730][ T5807] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 2275.773901][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2275.811541][ T5807] usb 2-1: config 0 descriptor?? [ 2275.918410][T15113] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.202646][T15113] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.524093][ T5983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2276.596333][T15113] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.734438][T18197] trusted_key: encrypted_key: insufficient parameters specified [ 2277.134893][ T5807] usb 2-1: Cannot set autoneg [ 2277.141202][ T5807] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 2277.837713][ T5807] usb 2-1: USB disconnect, device number 4 [ 2278.032427][T13741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2278.048375][T13741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2278.058255][T13741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2278.067751][T13741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2278.089006][T13741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2279.265858][T15113] bridge_slave_1: left allmulticast mode [ 2279.271572][T15113] bridge_slave_1: left promiscuous mode [ 2279.313956][ T31] audit: type=1326 audit(1769709102.308:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec0d9aeb9 code=0x7ffc0000 [ 2279.338290][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2279.428629][T15113] bridge_slave_0: left allmulticast mode [ 2279.433860][ T31] audit: type=1326 audit(1769709102.308:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec0d9aeb9 code=0x7ffc0000 [ 2279.457309][T15113] bridge_slave_0: left promiscuous mode [ 2279.477436][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2279.520974][ T31] audit: type=1326 audit(1769709102.328:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ec0d9aeb9 code=0x7ffc0000 [ 2279.599461][ T31] audit: type=1326 audit(1769709102.328:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec0d9aeb9 code=0x7ffc0000 [ 2279.679207][ T31] audit: type=1326 audit(1769709102.328:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18226 comm="syz.1.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ec0d9aeb9 code=0x7ffc0000 [ 2280.144111][T14351] Bluetooth: hci2: command tx timeout [ 2281.393932][T18243] loop1: detected capacity change from 0 to 32768 [ 2281.498516][T18243] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2281.631709][T18243] XFS (loop1): Ending clean mount [ 2281.651291][T18243] XFS (loop1): Quotacheck needed: Please wait. [ 2281.763886][T18243] XFS (loop1): Quotacheck: Done. [ 2281.770797][T15113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2281.811022][T15113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2281.871636][T15113] bond0 (unregistering): Released all slaves [ 2282.223888][T14351] Bluetooth: hci2: command tx timeout [ 2283.813811][T15307] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2283.939697][T18274] trusted_key: encrypted_key: insufficient parameters specified [ 2284.713814][T14351] Bluetooth: hci2: command tx timeout [ 2284.924703][T18278] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2285.066522][T18214] chnl_net:caif_netlink_parms(): no params data found [ 2286.796007][T14351] Bluetooth: hci2: command tx timeout [ 2287.234336][T15113] hsr_slave_0: left promiscuous mode [ 2287.305519][T15113] hsr_slave_1: left promiscuous mode [ 2287.457722][T18300] loop1: detected capacity change from 0 to 512 [ 2287.570336][T18300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2287.584275][T18300] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2288.266975][T15307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2288.280627][T15113] veth1_macvtap: left promiscuous mode [ 2288.317406][T15113] veth0_macvtap: left promiscuous mode [ 2288.323119][T15113] veth1_vlan: left promiscuous mode [ 2288.335163][T15113] veth0_vlan: left promiscuous mode [ 2288.569615][T18311] tls_set_device_offload_rx: netdev not found [ 2289.948759][ T31] audit: type=1326 audit(1769709112.948:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18326 comm="syz.7.2608" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa46499aeb9 code=0x0 [ 2290.135394][ T5913] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2290.595708][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 2290.615220][ T5913] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 2290.624671][ T5913] usb 2-1: config 0 has no interface number 0 [ 2290.650667][ T5913] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2290.668358][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2290.689542][ T5913] usb 2-1: Product: syz [ 2290.713838][ T5913] usb 2-1: Manufacturer: syz [ 2290.720506][ T5913] usb 2-1: SerialNumber: syz [ 2290.736229][ T5913] usb 2-1: config 0 descriptor?? [ 2290.806033][ T5913] smsc95xx v2.0.0 [ 2291.058434][T18332] trusted_key: encrypted_key: insufficient parameters specified [ 2291.183639][ T5913] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 2291.244446][ T5913] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2292.869556][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2292.876203][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2293.117760][T15113] team0 (unregistering): Port device team_slave_1 removed [ 2293.283334][T15113] team0 (unregistering): Port device team_slave_0 removed [ 2293.631379][ T5913] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 2293.858721][ T5913] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 2294.122909][ T5913] usb 2-1: USB disconnect, device number 5 [ 2294.561312][ T31] audit: type=1326 audit(1769709117.558:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18368 comm="syz.1.2621" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4ec0d9aeb9 code=0x0 [ 2295.618207][T18376] trusted_key: encrypted_key: insufficient parameters specified [ 2297.006316][T18298] veth0: entered promiscuous mode [ 2297.025830][T18298] veth0: left promiscuous mode [ 2297.245399][T18389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2627'. [ 2297.301129][T18214] bridge0: port 1(bridge_slave_0) entered blocking state [ 2297.344991][T18214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2297.352368][T18214] bridge_slave_0: entered allmulticast mode [ 2297.415977][T18214] bridge_slave_0: entered promiscuous mode [ 2297.456278][T18214] bridge0: port 2(bridge_slave_1) entered blocking state [ 2297.503522][T18214] bridge0: port 2(bridge_slave_1) entered disabled state [ 2297.514002][T18214] bridge_slave_1: entered allmulticast mode [ 2297.544004][T18214] bridge_slave_1: entered promiscuous mode [ 2297.737051][T18214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2297.807395][T18214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2298.059613][T18214] team0: Port device team_slave_0 added [ 2298.247124][T18214] team0: Port device team_slave_1 added [ 2298.403486][T18214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2298.434954][T18214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2298.506562][T18214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2298.544671][T18406] trusted_key: encrypted_key: insufficient parameters specified [ 2298.592096][T18214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2298.612595][T18214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2298.675620][T18214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2298.927264][T18214] hsr_slave_0: entered promiscuous mode [ 2298.954416][T18214] hsr_slave_1: entered promiscuous mode [ 2298.960999][T18214] debugfs: 'hsr0' already exists in 'hsr' [ 2298.983836][T18214] Cannot create hsr debugfs directory [ 2299.066887][T15113] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2299.299337][T18410] overlay: ./file0 is not a directory [ 2299.366702][T15113] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2300.480065][T15113] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2300.522401][T13741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2300.532035][T13741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2300.540852][T13741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2300.550813][T13741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2300.558695][T13741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2300.855276][T15113] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2303.454274][T14351] Bluetooth: hci0: command tx timeout [ 2303.696117][T15113] bridge_slave_1: left allmulticast mode [ 2303.701818][T15113] bridge_slave_1: left promiscuous mode [ 2303.744933][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2303.865860][T15113] bridge_slave_0: left allmulticast mode [ 2303.871755][T15113] bridge_slave_0: left promiscuous mode [ 2303.925002][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2304.007351][T18443] netlink: 'syz.1.2648': attribute type 30 has an invalid length. [ 2305.614376][T18453] trusted_key: encrypted_key: insufficient parameters specified [ 2305.743940][T14351] Bluetooth: hci0: command tx timeout [ 2306.528404][T15113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2306.572784][T15113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2306.607001][T15113] bond0 (unregistering): Released all slaves [ 2307.823950][T14351] Bluetooth: hci0: command tx timeout [ 2307.979090][T15113] hsr_slave_0: left promiscuous mode [ 2308.058794][T15113] hsr_slave_1: left promiscuous mode [ 2308.080145][T15113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2308.231634][T15113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2308.275005][T15113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2308.323814][T15113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2308.358679][ T6102] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2308.423387][T15113] veth1_macvtap: left promiscuous mode [ 2308.464701][T15113] veth0_macvtap: left promiscuous mode [ 2308.470467][T15113] veth1_vlan: left promiscuous mode [ 2308.495342][T15113] veth0_vlan: left promiscuous mode [ 2308.514084][T18467] loop1: detected capacity change from 0 to 32768 [ 2308.590799][T18467] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2308.765549][T18467] XFS (loop1): Ending clean mount [ 2308.837753][T18467] XFS (loop1): Quotacheck needed: Please wait. [ 2308.954892][T18467] XFS (loop1): Quotacheck: Done. [ 2309.905807][T14351] Bluetooth: hci0: command tx timeout [ 2310.518705][T15307] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2312.974012][T15113] team0 (unregistering): Port device team_slave_1 removed [ 2313.302620][T15113] team0 (unregistering): Port device team_slave_0 removed [ 2313.613944][T14710] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2313.769027][T14710] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2313.803832][T14710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2313.843978][T14710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2313.864362][T14710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2313.892739][T14710] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2313.915260][T14710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2313.954026][T14710] usb 2-1: config 0 descriptor?? [ 2314.421033][T14710] plantronics 0003:047F:FFFF.0002: collection stack underflow [ 2314.436809][T14710] plantronics 0003:047F:FFFF.0002: item 0 2 0 12 parsing failed [ 2314.445966][T14710] plantronics 0003:047F:FFFF.0002: parse failed [ 2314.454582][T14710] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 2314.665407][T14710] usb 2-1: USB disconnect, device number 6 [ 2314.810905][T18537] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 2314.853866][T18537] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2314.965626][T18422] chnl_net:caif_netlink_parms(): no params data found [ 2315.037040][T18537] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 2315.076605][T18537] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2315.096772][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2676'. [ 2317.018524][T18537] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 2317.038990][T18537] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.350496][T18214] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2317.516400][T18537] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 2317.543793][T18537] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2317.615101][T18214] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2317.659828][T18214] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2317.772153][T18214] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2317.811506][T18422] bridge0: port 1(bridge_slave_0) entered blocking state [ 2317.837258][T18422] bridge0: port 1(bridge_slave_0) entered disabled state [ 2317.868781][T18422] bridge_slave_0: entered allmulticast mode [ 2317.916084][T18422] bridge_slave_0: entered promiscuous mode [ 2317.956730][T18422] bridge0: port 2(bridge_slave_1) entered blocking state [ 2317.973937][T18422] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.001788][T18422] bridge_slave_1: entered allmulticast mode [ 2318.015019][T18422] bridge_slave_1: entered promiscuous mode [ 2318.151087][T18422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2318.185633][T18422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2318.326489][ T5983] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 2318.335782][ T5983] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2318.642289][T18422] team0: Port device team_slave_0 added [ 2318.696531][T18422] team0: Port device team_slave_1 added [ 2318.758625][ T8673] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 2318.782278][ T8673] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2318.896619][T18422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2318.903644][T18422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2319.003964][T18422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2319.034905][ T8673] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 2319.043186][ T8673] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.126523][T18422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2319.133520][T18422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2319.167181][T18582] tls_set_device_offload_rx: netdev not found [ 2319.234329][T18422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2319.294893][T11147] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 2319.316358][T11147] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2319.574872][T18422] hsr_slave_0: entered promiscuous mode [ 2319.600467][T18422] hsr_slave_1: entered promiscuous mode [ 2319.615346][T18422] debugfs: 'hsr0' already exists in 'hsr' [ 2319.625196][T18586] loop1: detected capacity change from 0 to 128 [ 2319.631502][T18422] Cannot create hsr debugfs directory [ 2319.664486][T18586] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2319.694472][T18586] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2319.838152][T18586] netlink: 'syz.1.2688': attribute type 1 has an invalid length. [ 2320.020313][T15307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2320.250290][T18544] IPVS: starting estimator thread 0... [ 2320.284876][T18592] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2691'. [ 2320.364118][T18595] IPVS: using max 21 ests per chain, 50400 per kthread [ 2323.146675][T18602] team0 (unregistering): Port device team_slave_0 removed [ 2323.224112][T18602] team0 (unregistering): Port device team_slave_1 removed [ 2324.091329][T18214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2324.294781][T18214] 8021q: adding VLAN 0 to HW filter on device team0 [ 2324.440908][T15113] bridge0: port 1(bridge_slave_0) entered blocking state [ 2324.448126][T15113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2325.933631][T11147] bridge0: port 2(bridge_slave_1) entered blocking state [ 2325.940896][T11147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2327.157763][T18638] 9p: Bad value for 'rfdno' [ 2327.203161][T18422] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2327.305482][T18422] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2327.386859][T18422] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2327.441200][T18422] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2327.889045][T18422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2328.029407][T18422] 8021q: adding VLAN 0 to HW filter on device team0 [ 2328.082224][T11960] bridge0: port 1(bridge_slave_0) entered blocking state [ 2328.089509][T11960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2328.137554][T11960] bridge0: port 2(bridge_slave_1) entered blocking state [ 2328.144840][T11960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2328.157548][T18652] loop1: detected capacity change from 0 to 4096 [ 2328.255166][T18214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2333.865835][T18422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2335.910100][T18214] veth0_vlan: entered promiscuous mode [ 2335.993364][T18214] veth1_vlan: entered promiscuous mode [ 2336.165417][T18697] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2717'. [ 2336.189216][T18214] veth0_macvtap: entered promiscuous mode [ 2336.224035][T18697] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2717'. [ 2336.234914][T18214] veth1_macvtap: entered promiscuous mode [ 2337.479330][T18708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2720'. [ 2338.665083][T13741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2338.689854][T13741] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2338.713010][T13741] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2338.758126][T13741] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2338.770464][T13741] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2339.984895][ T5983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2340.696916][T18422] veth0_vlan: entered promiscuous mode [ 2340.832804][T18422] veth1_vlan: entered promiscuous mode [ 2340.864649][T14351] Bluetooth: hci6: command tx timeout [ 2343.047358][T14351] Bluetooth: hci6: command tx timeout [ 2345.654615][T14351] Bluetooth: hci6: command tx timeout [ 2346.467927][T18758] loop1: detected capacity change from 0 to 256 [ 2346.481642][T18758] exfat: Deprecated parameter 'utf8' [ 2346.487623][T18758] exfat: Deprecated parameter 'namecase' [ 2346.569044][T18758] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2348.638312][T14351] Bluetooth: hci6: command tx timeout [ 2349.895310][T18422] veth0_macvtap: entered promiscuous mode [ 2350.735231][T18715] chnl_net:caif_netlink_parms(): no params data found [ 2350.781414][T18422] veth1_macvtap: entered promiscuous mode [ 2353.554092][T18715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2353.564104][T18715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2353.571438][T18715] bridge_slave_0: entered allmulticast mode [ 2353.619050][T18715] bridge_slave_0: entered promiscuous mode [ 2353.629375][T18715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2353.637475][T18715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2353.646418][T18715] bridge_slave_1: entered allmulticast mode [ 2353.657831][T18715] bridge_slave_1: entered promiscuous mode [ 2353.691956][T18422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2353.767644][T18422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2353.991479][T18715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2354.127607][T18715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2354.181006][T15748] bridge_slave_1: left allmulticast mode [ 2354.214268][T15748] bridge_slave_1: left promiscuous mode [ 2354.220163][T15748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2354.312154][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2354.318619][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2354.330365][T15748] bridge_slave_0: left allmulticast mode [ 2354.363378][T15748] bridge_slave_0: left promiscuous mode [ 2354.426328][T15748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2354.944492][T18810] loop1: detected capacity change from 0 to 4096 [ 2360.174706][T18827] loop7: detected capacity change from 2048 to 2047 [ 2360.292756][T13741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2360.304381][T13741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2360.312941][T13741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2360.387367][T13741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2360.413943][T13741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2361.040790][T15748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2361.140087][T15748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2361.169962][T18835] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2361.176438][T18835] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 2361.208854][T15748] bond0 (unregistering): Released all slaves [ 2361.261876][T18835] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2361.269044][T18835] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2361.302416][T18715] team0: Port device team_slave_0 added [ 2361.351438][T18715] team0: Port device team_slave_1 added [ 2361.490125][T18835] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2361.499175][T18835] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2361.628089][T18835] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2361.635596][T18835] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 2361.647525][T18715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2361.663896][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2361.728563][T18715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2361.767336][T18835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2361.773327][T18835] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 2361.774551][T18715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2361.823017][T18715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2361.908018][T18715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2361.944297][T18835] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 2361.950862][T18835] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 2362.050285][T15748] hsr_slave_0: left promiscuous mode [ 2362.095960][T18835] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2362.103112][T18835] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 2362.128653][T15748] hsr_slave_1: left promiscuous mode [ 2362.155810][T15748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2362.188723][T15748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2362.324864][T15748] veth1_macvtap: left promiscuous mode [ 2362.353937][T15748] veth0_macvtap: left promiscuous mode [ 2362.359709][T15748] veth1_vlan: left promiscuous mode [ 2362.400599][T15748] veth0_vlan: left promiscuous mode [ 2364.482968][T18857] loop1: detected capacity change from 0 to 256 [ 2364.513566][T18857] exfat: Deprecated parameter 'utf8' [ 2364.561532][T18857] exfat: Deprecated parameter 'namecase' [ 2364.815684][T18857] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 2365.855431][T18546] IPVS: starting estimator thread 0... [ 2366.122261][T18872] IPVS: using max 21 ests per chain, 50400 per kthread [ 2366.184064][T18546] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2366.394456][T18546] usb 2-1: Using ep0 maxpacket: 16 [ 2366.421516][T18546] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2366.462181][T18546] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2366.494978][T18546] usb 2-1: Product: syz [ 2366.513011][T18546] usb 2-1: Manufacturer: syz [ 2366.534609][T18546] usb 2-1: SerialNumber: syz [ 2366.627070][T18546] usb 2-1: config 0 descriptor?? [ 2367.284488][T18546] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2367.407121][T18546] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2367.457535][T18546] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2367.518727][T18546] usb 2-1: media controller created [ 2367.570983][T18546] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2367.777759][T18546] zl10353_read_register: readreg error (reg=127, ret==0) [ 2367.790769][T18546] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2367.799368][T18546] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2367.816817][T18546] usb 2-1: USB disconnect, device number 7 [ 2367.877650][T18546] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2368.366228][T15748] team0 (unregistering): Port device team_slave_1 removed [ 2368.570792][T15748] team0 (unregistering): Port device team_slave_0 removed [ 2368.979384][T18895] hub 8-0:1.0: USB hub found [ 2368.986072][T18895] hub 8-0:1.0: 1 port detected [ 2372.113534][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2374.144208][T18934] raw_sendmsg: syz.4.2784 forgot to set AF_INET. Fix it! [ 2374.237503][T18870] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2763'. [ 2374.253846][T18870] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2763'. [ 2374.371709][T18937] fuse: Bad value for 'fd' [ 2374.573496][T18715] hsr_slave_0: entered promiscuous mode [ 2374.603673][T18715] hsr_slave_1: entered promiscuous mode [ 2374.628241][T18715] debugfs: 'hsr0' already exists in 'hsr' [ 2374.641674][T18715] Cannot create hsr debugfs directory [ 2375.059296][T18939] loop1: detected capacity change from 0 to 4096 [ 2379.255140][T18828] chnl_net:caif_netlink_parms(): no params data found [ 2380.541283][T18828] bridge0: port 1(bridge_slave_0) entered blocking state [ 2380.552180][T18828] bridge0: port 1(bridge_slave_0) entered disabled state [ 2380.560007][T18828] bridge_slave_0: entered allmulticast mode [ 2380.631774][T18828] bridge_slave_0: entered promiscuous mode [ 2380.646692][T18828] bridge0: port 2(bridge_slave_1) entered blocking state [ 2380.707948][T18828] bridge0: port 2(bridge_slave_1) entered disabled state [ 2380.730329][T18828] bridge_slave_1: entered allmulticast mode [ 2380.760362][T18828] bridge_slave_1: entered promiscuous mode [ 2381.041805][T19006] syz.4.2805 uses obsolete (PF_INET,SOCK_PACKET) [ 2381.107364][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 2381.159347][T18828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2381.202088][T18828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2382.724810][T18828] team0: Port device team_slave_0 added [ 2382.775889][T18828] team0: Port device team_slave_1 added [ 2383.426434][T18828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2383.433453][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2384.366105][T18828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2384.381385][T18828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2384.392799][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2384.429886][T18828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2384.750231][T19042] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2814'. [ 2384.759458][T19042] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2814'. [ 2385.527030][T18715] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2385.645921][T15748] bridge_slave_1: left allmulticast mode [ 2385.651712][T15748] bridge_slave_1: left promiscuous mode [ 2385.903538][T15748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2385.955224][T15748] bridge_slave_0: left allmulticast mode [ 2385.960960][T15748] bridge_slave_0: left promiscuous mode [ 2385.984397][T15748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2386.077702][T19053] loop1: detected capacity change from 0 to 8 [ 2389.172732][T15748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2389.245817][T15748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2389.302026][T15748] bond0 (unregistering): Released all slaves [ 2389.349088][T18715] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2389.405583][T18715] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2389.534799][T18828] hsr_slave_0: entered promiscuous mode [ 2389.575476][T18828] hsr_slave_1: entered promiscuous mode [ 2389.610991][T18828] debugfs: 'hsr0' already exists in 'hsr' [ 2389.617143][T18828] Cannot create hsr debugfs directory [ 2390.097299][T15748] hsr_slave_0: left promiscuous mode [ 2390.119933][T15748] hsr_slave_1: left promiscuous mode [ 2390.141917][T15748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2390.173871][T15748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2391.170182][T15748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2391.177820][T15748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2391.289745][T15748] veth1_macvtap: left promiscuous mode [ 2391.306862][T15748] veth0_macvtap: left promiscuous mode [ 2391.312601][T15748] veth1_vlan: left promiscuous mode [ 2391.344067][T15748] veth0_vlan: left promiscuous mode [ 2391.747277][T19102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2829'. [ 2391.756512][T19102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2829'. [ 2393.890212][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2833'. [ 2394.757083][T19123] trusted_key: encrypted_key: insufficient parameters specified [ 2396.950205][T15748] team0 (unregistering): Port device team_slave_1 removed [ 2397.012032][T15748] team0 (unregistering): Port device team_slave_0 removed [ 2398.034961][T19166] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2843'. [ 2398.859758][T19170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2398.879239][T19170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2398.889166][T19170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2398.911315][T19170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2398.934222][T19170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2398.958545][T13741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2398.979444][T13741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2398.989462][T13741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2398.998524][T13741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2399.006297][T13741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2399.064002][ T5913] IPVS: starting estimator thread 0... [ 2399.164377][T19176] IPVS: using max 29 ests per chain, 69600 per kthread [ 2399.188691][T18715] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2400.534115][T19189] trusted_key: encrypted_key: insufficient parameters specified [ 2401.303979][T13741] Bluetooth: hci0: command tx timeout [ 2403.376922][T13741] Bluetooth: hci0: command tx timeout [ 2403.587203][T18545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2404.105490][ T792] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2404.224077][ T8673] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2404.304234][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 2404.325263][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 2404.365487][ T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2404.376700][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 2404.416267][T19220] ceph: No mds server is up or the cluster is laggy [ 2404.426985][ T792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2404.492214][ T792] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2404.529307][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2404.590233][ T792] usb 2-1: Product: syz [ 2404.615194][ T792] usb 2-1: Manufacturer: syz [ 2404.620199][ T792] usb 2-1: SerialNumber: syz [ 2404.906014][ T792] usb 2-1: 0:2 : does not exist [ 2404.937135][ T792] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2404.961120][T19169] chnl_net:caif_netlink_parms(): no params data found [ 2405.172346][T19229] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2856'. [ 2405.513892][T13741] Bluetooth: hci0: command tx timeout [ 2405.888734][ T792] usb 2-1: USB disconnect, device number 8 [ 2405.981215][T19175] udevd[19175]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2407.581595][T18828] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2407.592015][T13741] Bluetooth: hci0: command tx timeout [ 2407.683012][T18828] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2407.760024][T19251] trusted_key: encrypted_key: insufficient parameters specified [ 2409.340049][T19259] loop1: detected capacity change from 0 to 4096 [ 2409.524212][T18828] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2409.594860][T18828] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2410.711489][T15748] bridge_slave_1: left allmulticast mode [ 2410.735547][T15748] bridge_slave_1: left promiscuous mode [ 2410.741365][T15748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2411.260038][T15748] bridge_slave_0: left allmulticast mode [ 2411.304746][T15748] bridge_slave_0: left promiscuous mode [ 2411.341242][T15748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2411.870795][T19291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2869'. [ 2412.984650][T15748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2413.139410][T19297] loop1: detected capacity change from 0 to 8 [ 2413.299171][T18546] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2413.311018][T18544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2414.555327][T15748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2414.635910][T15748] bond0 (unregistering): Released all slaves [ 2414.775198][T19169] bridge0: port 1(bridge_slave_0) entered blocking state [ 2414.782369][T19169] bridge0: port 1(bridge_slave_0) entered disabled state [ 2414.834379][T19169] bridge_slave_0: entered allmulticast mode [ 2414.877535][T19169] bridge_slave_0: entered promiscuous mode [ 2414.945063][T19169] bridge0: port 2(bridge_slave_1) entered blocking state [ 2414.972532][T19169] bridge0: port 2(bridge_slave_1) entered disabled state [ 2415.009306][T19169] bridge_slave_1: entered allmulticast mode [ 2415.035104][T19311] trusted_key: encrypted_key: insufficient parameters specified [ 2415.272602][T19169] bridge_slave_1: entered promiscuous mode [ 2415.754430][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2415.760834][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2415.895182][T15748] hsr_slave_0: left promiscuous mode [ 2416.086084][T15748] hsr_slave_1: left promiscuous mode [ 2416.120250][T15748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2416.179386][T15748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2419.286156][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2885'. [ 2419.336636][T15748] team0 (unregistering): Port device team_slave_1 removed [ 2421.781986][T15748] team0 (unregistering): Port device team_slave_0 removed [ 2422.301904][T19170] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2422.314596][T19170] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2422.322963][T19170] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2422.334231][T19170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2422.358728][T19170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2422.791161][T18544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2423.031657][T19330] bridge_slave_0: left allmulticast mode [ 2423.053852][T19330] bridge_slave_0: left promiscuous mode [ 2423.059717][T19330] bridge0: port 1(bridge_slave_0) entered disabled state [ 2423.348178][T19330] bridge_slave_1: left allmulticast mode [ 2423.356940][T19330] bridge_slave_1: left promiscuous mode [ 2423.362786][T19330] bridge0: port 2(bridge_slave_1) entered disabled state [ 2423.390891][T19330] bond0: (slave bond_slave_0): Releasing backup interface [ 2423.488292][T19330] bond0: (slave bond_slave_1): Releasing backup interface [ 2423.596289][T19330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2423.629194][T19330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2423.696918][T19330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2423.723851][T19330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2423.775067][T19330] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2423.849592][T19169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2423.927212][T19169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2424.473926][T19170] Bluetooth: hci6: command tx timeout [ 2425.557136][T19169] team0: Port device team_slave_0 added [ 2427.355178][T19170] Bluetooth: hci6: command tx timeout [ 2427.594224][T19169] team0: Port device team_slave_1 added [ 2427.938159][T19169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2427.965159][T19169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2428.042090][T19169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2428.925746][T19169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2428.932735][T19169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2429.093918][T19169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2429.423858][T19170] Bluetooth: hci6: command tx timeout [ 2429.474901][T19169] hsr_slave_0: entered promiscuous mode [ 2429.847323][T19169] hsr_slave_1: entered promiscuous mode [ 2429.854939][T19169] debugfs: 'hsr0' already exists in 'hsr' [ 2429.860717][T19169] Cannot create hsr debugfs directory [ 2431.526417][T19170] Bluetooth: hci6: command tx timeout [ 2432.474220][T18546] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2432.485297][T18544] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2434.383223][T19421] trusted_key: encrypted_key: insufficient parameters specified [ 2435.872417][T19361] chnl_net:caif_netlink_parms(): no params data found [ 2436.864128][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2441.974616][T15748] bridge_slave_1: left allmulticast mode [ 2442.006175][T18545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2442.033993][T15748] bridge_slave_1: left promiscuous mode [ 2442.039894][T15748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2442.206969][T15748] bridge_slave_0: left allmulticast mode [ 2442.212655][T15748] bridge_slave_0: left promiscuous mode [ 2442.274085][T15748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2444.093966][T15748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2444.210268][T15748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2444.269256][T15748] bond0 (unregistering): Released all slaves [ 2444.394231][T19361] bridge0: port 1(bridge_slave_0) entered blocking state [ 2444.401473][T19361] bridge0: port 1(bridge_slave_0) entered disabled state [ 2444.474833][T19361] bridge_slave_0: entered allmulticast mode [ 2444.583974][T19361] bridge_slave_0: entered promiscuous mode [ 2444.876294][T15748] hsr_slave_0: left promiscuous mode [ 2444.954614][T15748] hsr_slave_1: left promiscuous mode [ 2444.965145][T15748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2445.044800][T15748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2448.417257][T15748] team0 (unregistering): Port device team_slave_1 removed [ 2450.314481][T15748] team0 (unregistering): Port device team_slave_0 removed [ 2451.558240][T19505] loop1: detected capacity change from 0 to 4096 [ 2451.584412][T18545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2451.595501][ T1206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2453.438089][T19466] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.445510][T19466] bridge0: port 1(bridge_slave_0) entered disabled state [ 2454.057744][T19521] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2930'. [ 2454.113974][T19466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2454.204140][T19466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2455.294130][T19361] bridge0: port 2(bridge_slave_1) entered blocking state [ 2455.301515][T19361] bridge0: port 2(bridge_slave_1) entered disabled state [ 2455.335130][T19361] bridge_slave_1: entered allmulticast mode [ 2455.362759][T19361] bridge_slave_1: entered promiscuous mode [ 2455.597579][ T50] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 2455.648005][ T50] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2455.683846][ T50] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 2455.778088][ T50] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2455.843969][ T8673] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 2455.885124][T19539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2455.909407][ T8673] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2455.945849][T19361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2455.981336][ T8673] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 2456.013155][ T8673] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.110191][T19361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2457.072138][T19361] team0: Port device team_slave_0 added [ 2457.116088][T19361] team0: Port device team_slave_1 added [ 2458.125150][T19361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2458.207126][T19361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2458.774268][T19361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2458.867712][T19361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2459.081829][T19361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2459.142420][T19361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2461.052627][T19361] hsr_slave_0: entered promiscuous mode [ 2461.084855][T19361] hsr_slave_1: entered promiscuous mode [ 2461.119233][T19361] debugfs: 'hsr0' already exists in 'hsr' [ 2461.140509][T19361] Cannot create hsr debugfs directory [ 2461.148045][T13741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2461.170308][T13741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2461.180734][T13741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2461.190359][T19518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2461.205671][T13741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2461.213563][T13741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2463.309582][T13741] Bluetooth: hci2: command tx timeout [ 2465.343874][T13741] Bluetooth: hci2: command tx timeout [ 2466.262844][T19562] chnl_net:caif_netlink_parms(): no params data found [ 2468.237689][T13741] Bluetooth: hci2: command tx timeout [ 2469.505485][T15748] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2469.524026][T16491] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2469.673969][T16491] usb 2-1: device descriptor read/64, error -71 [ 2470.015844][T19616] trusted_key: encrypted_key: insufficient parameters specified [ 2470.593971][T13741] Bluetooth: hci2: command tx timeout [ 2470.784349][T18545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2470.796077][T19518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2470.831205][T16491] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2470.864833][ T5983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2471.054709][T16491] usb 2-1: device descriptor read/64, error -71 [ 2471.087352][T19562] bridge0: port 1(bridge_slave_0) entered blocking state [ 2471.126376][T19562] bridge0: port 1(bridge_slave_0) entered disabled state [ 2471.146929][T19562] bridge_slave_0: entered allmulticast mode [ 2471.326730][T16491] usb usb2-port1: attempt power cycle [ 2471.374157][T19562] bridge_slave_0: entered promiscuous mode [ 2472.377050][T19562] bridge0: port 2(bridge_slave_1) entered blocking state [ 2472.434030][T19562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2472.441922][T19562] bridge_slave_1: entered allmulticast mode [ 2472.564218][T19562] bridge_slave_1: entered promiscuous mode [ 2473.881237][T19562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2474.030216][T19562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2474.136764][T19626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2956'. [ 2474.153998][T19626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2956'. [ 2474.837991][T15748] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2474.894027][T15748] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2474.913355][T15748] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2474.966854][T19562] team0: Port device team_slave_0 added [ 2475.245192][T15748] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2475.381070][T19562] team0: Port device team_slave_1 added [ 2475.977657][T19361] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2476.548856][T11960] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2476.652291][T19361] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2477.221404][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2477.228517][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2477.269194][T19562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2477.286603][T19562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2478.024210][T19562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2478.097169][T19562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2478.123578][T19562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2478.548692][T19562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2478.714008][T19361] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2479.176946][T19361] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2479.521641][T15113] bridge_slave_1: left allmulticast mode [ 2479.543885][T15113] bridge_slave_1: left promiscuous mode [ 2479.562108][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2480.059064][T15113] bridge_slave_0: left allmulticast mode [ 2480.085449][T15113] bridge_slave_0: left promiscuous mode [ 2480.118760][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2480.384308][T18545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2481.344624][T19664] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2967'. [ 2482.309061][T18225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2483.177588][T19170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2483.196605][T19170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2483.214295][T19170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2483.222462][T19170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2483.230523][T19170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2483.275676][T15113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2483.605309][T15113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2485.343952][T19170] Bluetooth: hci0: command tx timeout [ 2485.357601][T13741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2485.376130][T13741] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2485.394280][T13741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2485.454582][T15113] bond0 (unregistering): Released all slaves [ 2485.465855][T13741] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2485.486138][T13741] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2485.721709][T19562] hsr_slave_0: entered promiscuous mode [ 2485.785397][T19562] hsr_slave_1: entered promiscuous mode [ 2485.791935][T19562] debugfs: 'hsr0' already exists in 'hsr' [ 2485.883954][T19562] Cannot create hsr debugfs directory [ 2487.587401][T13741] Bluetooth: hci0: command tx timeout [ 2487.663891][T13741] Bluetooth: hci7: command tx timeout [ 2488.146338][T15748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2489.674762][T13741] Bluetooth: hci0: command tx timeout [ 2489.754114][T13741] Bluetooth: hci7: command tx timeout [ 2489.947886][T19693] __vm_enough_memory: pid: 19693, comm: syz.6.2970, bytes: 21200501428224 not enough memory for the allocation [ 2490.696275][T18547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2490.748980][T15113] hsr_slave_0: left promiscuous mode [ 2490.997768][T15113] hsr_slave_1: left promiscuous mode [ 2491.029601][T15113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2491.109479][T15113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2491.744534][T13741] Bluetooth: hci0: command tx timeout [ 2491.823949][T13741] Bluetooth: hci7: command tx timeout [ 2493.394667][T15113] team0 (unregistering): Port device team_slave_1 removed [ 2493.835847][ T6102] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2494.193016][T13741] Bluetooth: hci7: command tx timeout [ 2494.276772][T19705] sd 0:0:1:0: device reset [ 2495.525587][T15113] team0 (unregistering): Port device team_slave_0 removed [ 2499.265716][ T6102] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2500.167268][T19725] bridge0: port 1(bridge_slave_0) entered disabled state [ 2500.234719][T19518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 2500.277449][T19725] bridge0: port 2(bridge_slave_1) entered disabled state [ 2502.502342][T19679] chnl_net:caif_netlink_parms(): no params data found [ 2503.423924][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2504.116333][T19742] hub 8-0:1.0: USB hub found [ 2504.121772][T19742] hub 8-0:1.0: 1 port detected [ 2504.196005][T19670] chnl_net:caif_netlink_parms(): no params data found [ 2505.898139][T19753] overlay: Unknown parameter 'uid' [ 2507.357840][T19763] __vm_enough_memory: pid: 19763, comm: syz.6.2988, bytes: 21200501428224 not enough memory for the allocation [ 2508.429488][T15113] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2508.723187][T19679] bridge0: port 1(bridge_slave_0) entered blocking state [ 2508.746218][T19679] bridge0: port 1(bridge_slave_0) entered disabled state [ 2508.774567][T19679] bridge_slave_0: entered allmulticast mode [ 2508.795644][T19679] bridge_slave_0: entered promiscuous mode [ 2508.859694][T15113] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2508.958920][T19679] bridge0: port 2(bridge_slave_1) entered blocking state [ 2508.968653][T19679] bridge0: port 2(bridge_slave_1) entered disabled state [ 2508.982326][T19679] bridge_slave_1: entered allmulticast mode [ 2508.994212][T19679] bridge_slave_1: entered promiscuous mode [ 2509.173386][T15113] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2511.337414][T15113] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2511.466687][T19679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2511.965355][T19670] bridge0: port 1(bridge_slave_0) entered blocking state [ 2512.174389][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 2512.774173][T19670] bridge_slave_0: entered allmulticast mode [ 2512.824344][T19670] bridge_slave_0: entered promiscuous mode [ 2512.877116][T19562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2513.010752][T19679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2514.701005][T19670] bridge0: port 2(bridge_slave_1) entered blocking state [ 2514.716102][T19670] bridge0: port 2(bridge_slave_1) entered disabled state [ 2514.746508][T19670] bridge_slave_1: entered allmulticast mode [ 2514.765345][T19670] bridge_slave_1: entered promiscuous mode [ 2514.884900][T19562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2514.939877][T19562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2515.057643][T19679] team0: Port device team_slave_0 added [ 2515.106896][T19562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2515.155257][T19679] team0: Port device team_slave_1 added [ 2515.196110][T19670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2515.246691][T19670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2515.396767][T19804] fuse: Bad value for 'fd' [ 2515.736756][T19679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2515.751600][T19679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2515.873848][T19679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2515.918400][T19679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2515.953871][T19679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2516.034205][T19679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2516.215375][T19808] loop1: detected capacity change from 0 to 512 [ 2516.241263][T19670] team0: Port device team_slave_0 added [ 2516.649119][T19670] team0: Port device team_slave_1 added [ 2516.674419][T19808] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2999: inode has both inline data and extents flags [ 2516.804275][T19808] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.2999: couldn't read orphan inode 15 (err -117) [ 2516.926337][T19808] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2517.021770][T19670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2517.053850][T19670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2517.167868][T19670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2517.204020][T19670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2517.211081][T19670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2517.508552][T19670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2518.640859][T15307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2518.844010][T19679] hsr_slave_0: entered promiscuous mode [ 2518.851121][T19679] hsr_slave_1: entered promiscuous mode [ 2518.933071][T19679] debugfs: 'hsr0' already exists in 'hsr' [ 2518.963884][T19679] Cannot create hsr debugfs directory [ 2519.794829][T19670] hsr_slave_0: entered promiscuous mode [ 2519.824342][T19670] hsr_slave_1: entered promiscuous mode [ 2519.868711][T19670] debugfs: 'hsr0' already exists in 'hsr' [ 2519.899335][T19670] Cannot create hsr debugfs directory [ 2520.646560][T19170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2520.685606][T19170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2520.714316][T19170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2520.715315][T19515] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 2520.764960][T19170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2520.774680][T19170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2521.013983][T19515] usb 2-1: device descriptor read/64, error -71 [ 2521.293914][T19515] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 2521.495820][T19515] usb 2-1: device descriptor read/64, error -71 [ 2521.614505][T19515] usb usb2-port1: attempt power cycle [ 2521.984333][T19515] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2522.339567][T19515] usb 2-1: device descriptor read/8, error -71 [ 2522.583962][T19515] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2522.634956][T19515] usb 2-1: device descriptor read/8, error -71 [ 2522.754367][T19515] usb usb2-port1: unable to enumerate USB device [ 2522.864168][T19170] Bluetooth: hci4: command tx timeout [ 2523.615968][T19843] loop1: detected capacity change from 0 to 32768 [ 2525.107624][T19170] Bluetooth: hci4: command tx timeout [ 2525.147822][T19843] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2525.198168][T19843] XFS (loop1): Ending clean mount [ 2525.214873][T19843] XFS (loop1): Quotacheck needed: Please wait. [ 2525.359477][T19843] XFS (loop1): Quotacheck: Done. [ 2526.301095][T15113] bridge_slave_1: left allmulticast mode [ 2526.373903][T15113] bridge_slave_1: left promiscuous mode [ 2526.379775][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2526.403396][T15307] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 2526.617069][T15113] bridge_slave_0: left allmulticast mode [ 2526.622778][T15113] bridge_slave_0: left promiscuous mode [ 2526.707417][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2526.759635][T19865] hub 8-0:1.0: USB hub found [ 2526.765819][T19865] hub 8-0:1.0: 1 port detected [ 2527.184478][T19170] Bluetooth: hci4: command tx timeout [ 2528.786629][T19868] IPVS: length: 218 != 24 [ 2529.266307][T19170] Bluetooth: hci4: command tx timeout [ 2532.273882][T18457] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 2532.472633][T18457] usb 2-1: config 0 interface 1 has no altsetting 0 [ 2532.504973][T18457] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.5e [ 2532.523897][T18457] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2532.532177][T18457] usb 2-1: Product: syz [ 2532.537027][T18457] usb 2-1: Manufacturer: syz [ 2532.541642][T18457] usb 2-1: SerialNumber: syz [ 2532.587896][T18457] usb 2-1: config 0 descriptor?? [ 2532.827467][T18457] msi2500 2-1:0.1: Registered as swradio24 [ 2532.833418][T18457] msi2500 2-1:0.1: SDR API is still slightly experimental and functionality changes may follow [ 2533.017482][T18457] videodev: could not get a free minor [ 2533.023706][T18457] msi2500 2-1:0.0: Failed to register as video device (-23) [ 2533.058026][T18457] msi2500 2-1:0.0: probe with driver msi2500 failed with error -23 [ 2533.128722][T18457] usb 2-1: USB disconnect, device number 16 [ 2533.875505][T15113] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2533.950838][T15113] bond0 (unregistering): Released all slaves [ 2534.073899][T14710] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2534.213950][T14710] usb 2-1: device descriptor read/64, error -71 [ 2534.394872][T15113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2534.463887][T14710] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2534.523932][T15113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2534.585662][T15113] bond0 (unregistering): Released all slaves [ 2534.643902][T14710] usb 2-1: device descriptor read/64, error -71 [ 2534.783922][T14710] usb usb2-port1: attempt power cycle [ 2534.895534][T19831] chnl_net:caif_netlink_parms(): no params data found [ 2536.167026][ T5983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2536.501806][T14710] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2536.524734][T14710] usb 2-1: device descriptor read/8, error -71 [ 2536.773968][T14710] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2536.857384][T14710] usb 2-1: device descriptor read/8, error -71 [ 2536.981995][T14710] usb usb2-port1: unable to enumerate USB device [ 2537.346095][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.477441][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.521053][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.608486][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.738849][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.780415][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.791627][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.814658][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.826457][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.864895][T19908] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 2537.948065][T19831] bridge0: port 1(bridge_slave_0) entered blocking state [ 2537.973899][T19831] bridge0: port 1(bridge_slave_0) entered disabled state [ 2537.981233][T19831] bridge_slave_0: entered allmulticast mode [ 2538.026261][T19831] bridge_slave_0: entered promiscuous mode [ 2538.076009][T19831] bridge0: port 2(bridge_slave_1) entered blocking state [ 2538.083187][T19831] bridge0: port 2(bridge_slave_1) entered disabled state [ 2538.158876][T19831] bridge_slave_1: entered allmulticast mode [ 2538.176014][T19831] bridge_slave_1: entered promiscuous mode [ 2538.419131][T15113] hsr_slave_0: left promiscuous mode [ 2538.454309][T15113] hsr_slave_1: left promiscuous mode [ 2538.630715][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2538.636335][T19911] loop1: detected capacity change from 0 to 4096 [ 2538.637641][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2538.650296][T15113] hsr_slave_0: left promiscuous mode [ 2538.692224][T15113] hsr_slave_1: left promiscuous mode [ 2538.935200][T15113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2538.965035][T15113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2539.982871][T15113] veth1_macvtap: left promiscuous mode [ 2539.990084][T15113] veth0_macvtap: left promiscuous mode [ 2542.400264][T19935] tls_set_device_offload_rx: netdev not found [ 2544.706967][T13741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2544.717954][T13741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2544.726810][T13741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2544.764026][T13741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2544.772266][T13741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2546.017540][T19170] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2546.049062][T19170] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2546.062703][T19170] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2546.087455][T19170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2546.095738][T19170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2546.722407][T19964] trusted_key: encrypted_key: insufficient parameters specified [ 2546.866460][T13741] Bluetooth: hci2: command tx timeout [ 2548.241181][T13741] Bluetooth: hci6: command tx timeout [ 2548.943823][T13741] Bluetooth: hci2: command tx timeout [ 2549.298318][T15113] team0 (unregistering): Port device team_slave_1 removed [ 2549.332108][T15113] team0 (unregistering): Port device team_slave_0 removed [ 2549.751714][T19930] tipc: Started in network mode [ 2549.757182][T19930] tipc: Node identity 6209c7fe7c0a, cluster identity 4711 [ 2549.776702][T19930] tipc: Enabled bearer , priority 0 [ 2549.797130][T19931] syzkaller0: entered promiscuous mode [ 2549.950089][T19931] syzkaller0: entered allmulticast mode [ 2549.996169][T19939] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3027'. [ 2550.074113][T19926] tipc: Resetting bearer [ 2550.169305][T19926] tipc: Disabling bearer [ 2550.230894][T19831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2550.292905][T19831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2550.307423][T13741] Bluetooth: hci6: command tx timeout [ 2550.772097][T19978] loop1: detected capacity change from 0 to 1024 [ 2550.852543][T19978] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2550.907078][T19978] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 2550.915670][T19978] System zones: 0-1, 3-36 [ 2550.956826][T19978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2551.024085][T13741] Bluetooth: hci2: command tx timeout [ 2551.374941][T19831] team0: Port device team_slave_0 added [ 2552.121008][T19831] team0: Port device team_slave_1 added [ 2552.173510][T15307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2552.384046][T13741] Bluetooth: hci6: command tx timeout [ 2554.443993][T13741] Bluetooth: hci2: command tx timeout [ 2554.464279][T13741] Bluetooth: hci6: command tx timeout [ 2554.771538][T19831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2554.795270][T19831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2554.822275][T19831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2554.856178][T19831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2554.863614][T19831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2554.890233][T19831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2555.307754][T20006] trusted_key: encrypted_key: insufficient parameters specified [ 2556.322101][T19831] hsr_slave_0: entered promiscuous mode [ 2556.585253][T19831] hsr_slave_1: entered promiscuous mode [ 2556.591948][T19831] debugfs: 'hsr0' already exists in 'hsr' [ 2556.601245][T19831] Cannot create hsr debugfs directory [ 2557.933623][T19959] chnl_net:caif_netlink_parms(): no params data found [ 2558.816171][T19951] chnl_net:caif_netlink_parms(): no params data found [ 2562.153590][T15113] IPVS: stop unused estimator thread 0... [ 2563.452228][T20045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3052'. [ 2564.723197][T19959] bridge0: port 1(bridge_slave_0) entered blocking state [ 2564.774003][T19959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2564.804271][T19959] bridge_slave_0: entered allmulticast mode [ 2564.845974][T19959] bridge_slave_0: entered promiscuous mode [ 2565.301880][T19959] bridge0: port 2(bridge_slave_1) entered blocking state [ 2565.319899][T19959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2566.754197][T19959] bridge_slave_1: entered allmulticast mode [ 2566.794048][T19959] bridge_slave_1: entered promiscuous mode [ 2567.108824][T19959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2567.307958][T19959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2567.402352][T19951] bridge0: port 1(bridge_slave_0) entered blocking state [ 2567.447412][T19951] bridge0: port 1(bridge_slave_0) entered disabled state [ 2567.456001][T19951] bridge_slave_0: entered allmulticast mode [ 2567.485220][T19951] bridge_slave_0: entered promiscuous mode [ 2567.512420][T19951] bridge0: port 2(bridge_slave_1) entered blocking state [ 2567.545182][T19951] bridge0: port 2(bridge_slave_1) entered disabled state [ 2567.553302][T19951] bridge_slave_1: entered allmulticast mode [ 2567.574759][T19951] bridge_slave_1: entered promiscuous mode [ 2567.850665][T19959] team0: Port device team_slave_0 added [ 2567.883895][T19959] team0: Port device team_slave_1 added [ 2568.126429][T19951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2568.201478][T19951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2568.318595][T19959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2568.340535][T19959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2568.464013][T19959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2568.566954][T19959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2568.583931][T19959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2568.673971][T19959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2568.704869][ T5983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2568.875452][T19951] team0: Port device team_slave_0 added [ 2568.905965][T19951] team0: Port device team_slave_1 added [ 2569.966543][T19951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2569.973508][T19951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2570.292699][T20077] trusted_key: encrypted_key: insufficient parameters specified [ 2571.171650][T19951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2572.938003][T19831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2573.584144][T19951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2573.621629][T19951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2573.733855][T19951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2573.810499][T19959] hsr_slave_0: entered promiscuous mode [ 2573.831922][T19959] hsr_slave_1: entered promiscuous mode [ 2573.858252][T19959] debugfs: 'hsr0' already exists in 'hsr' [ 2573.877888][T19959] Cannot create hsr debugfs directory [ 2573.900643][T19831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2574.036593][T19831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2574.096159][T15113] bridge_slave_1: left allmulticast mode [ 2574.101889][T15113] bridge_slave_1: left promiscuous mode [ 2574.113307][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2574.195590][T15113] bridge_slave_0: left allmulticast mode [ 2574.201311][T15113] bridge_slave_0: left promiscuous mode [ 2574.233691][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2574.250246][T15113] bridge_slave_1: left allmulticast mode [ 2574.284191][T15113] bridge_slave_1: left promiscuous mode [ 2574.290226][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2574.336566][T15113] bridge_slave_0: left allmulticast mode [ 2574.342286][T15113] bridge_slave_0: left promiscuous mode [ 2574.484099][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2577.458007][T15113] bridge_slave_1: left allmulticast mode [ 2577.513320][T15113] bridge_slave_1: left promiscuous mode [ 2577.527746][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2577.585440][T15113] bridge_slave_0: left allmulticast mode [ 2577.594018][T15113] bridge_slave_0: left promiscuous mode [ 2577.604576][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2578.238247][T15113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2578.416239][T15113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2578.531997][T15113] bond0 (unregistering): Released all slaves [ 2580.732586][T15113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2580.803399][T15113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2580.839555][T15113] bond0 (unregistering): Released all slaves [ 2581.824860][T19170] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2581.852598][T19170] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2581.886834][T19170] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2581.900169][T19170] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2581.918703][T19170] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2582.111750][T20138] trusted_key: encrypted_key: insufficient parameters specified [ 2583.194756][T15113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2583.314690][T15113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2583.344005][T18546] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2583.354869][T15113] bond0 (unregistering): Released all slaves [ 2583.486402][T18546] usb 2-1: device descriptor read/64, error -71 [ 2583.516304][T19831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2583.696462][T19951] hsr_slave_0: entered promiscuous mode [ 2583.744054][T18546] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2583.758725][T19951] hsr_slave_1: entered promiscuous mode [ 2583.794629][T19951] debugfs: 'hsr0' already exists in 'hsr' [ 2583.814028][T19951] Cannot create hsr debugfs directory [ 2583.894108][T18546] usb 2-1: device descriptor read/64, error -71 [ 2583.984497][T13741] Bluetooth: hci0: command tx timeout [ 2584.004140][T18546] usb usb2-port1: attempt power cycle [ 2584.132169][T15113] hsr_slave_0: left promiscuous mode [ 2584.170245][T15113] hsr_slave_1: left promiscuous mode [ 2584.391508][T15113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2585.264397][T18546] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2585.316504][T18546] usb 2-1: device descriptor read/8, error -71 [ 2585.396008][T15113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2585.663903][T18546] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2585.694740][T18546] usb 2-1: device descriptor read/8, error -71 [ 2585.716578][T15113] hsr_slave_0: left promiscuous mode [ 2585.787913][T15113] hsr_slave_1: left promiscuous mode [ 2585.796041][T15113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2585.824709][T18546] usb usb2-port1: unable to enumerate USB device [ 2585.910690][T15113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2586.011211][T15113] hsr_slave_0: left promiscuous mode [ 2586.020041][T15113] hsr_slave_1: left promiscuous mode [ 2586.028543][T15113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2586.037888][T15113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2586.075038][T13741] Bluetooth: hci0: command tx timeout [ 2588.372160][T13741] Bluetooth: hci0: command tx timeout [ 2590.423926][T13741] Bluetooth: hci0: command tx timeout [ 2590.957119][T15113] team0 (unregistering): Port device team_slave_1 removed [ 2592.564639][T15113] team0 (unregistering): Port device team_slave_0 removed [ 2595.720128][T15113] team0 (unregistering): Port device team_slave_1 removed [ 2595.874684][T15113] team0 (unregistering): Port device team_slave_0 removed [ 2596.336214][T20181] trusted_key: encrypted_key: insufficient parameters specified [ 2600.150142][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 2600.157118][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 2600.931800][T19170] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2600.946094][T19170] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2600.964904][T19170] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2600.974150][T19170] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2600.982182][T19170] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2601.011857][T15113] team0 (unregistering): Port device team_slave_1 removed [ 2601.146088][T15113] team0 (unregistering): Port device team_slave_0 removed [ 2601.344614][ T5983] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2602.684587][T20204] tipc: Enabling of bearer rejected, failed to enable media [ 2603.028372][T13741] Bluetooth: hci4: command tx timeout [ 2603.835451][T20224] ieee802154 phy0 wpan0: encryption failed: -22 [ 2605.113219][T13741] Bluetooth: hci4: command tx timeout [ 2605.801581][T20243] trusted_key: encrypted_key: insufficient parameters specified [ 2606.608113][T19170] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2606.654308][T19170] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2606.674022][T19170] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2606.705801][T19170] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2606.721309][T19170] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2607.089606][T20209] chnl_net:caif_netlink_parms(): no params data found [ 2607.190080][T19170] Bluetooth: hci4: command tx timeout [ 2607.223298][T13741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2607.295834][T13741] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2607.363836][T13741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2607.456044][T20253] netlink: 'syz.1.3102': attribute type 27 has an invalid length. [ 2607.480361][T13741] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2607.541390][T13741] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2609.360322][T13741] Bluetooth: hci4: command tx timeout [ 2609.365889][T19170] Bluetooth: hci1: command tx timeout [ 2609.534834][T20258] tls_set_device_offload_rx: netdev not found [ 2609.834155][T19170] Bluetooth: hci7: command tx timeout [ 2609.859947][T20130] chnl_net:caif_netlink_parms(): no params data found [ 2610.017514][T20209] bridge0: port 1(bridge_slave_0) entered blocking state [ 2610.042343][T20209] bridge0: port 1(bridge_slave_0) entered disabled state [ 2610.094231][T20209] bridge_slave_0: entered allmulticast mode [ 2610.115622][T20209] bridge_slave_0: entered promiscuous mode [ 2610.205473][T20209] bridge0: port 2(bridge_slave_1) entered blocking state [ 2610.212695][T20209] bridge0: port 2(bridge_slave_1) entered disabled state [ 2610.220923][T20209] bridge_slave_1: entered allmulticast mode [ 2610.285265][T20209] bridge_slave_1: entered promiscuous mode [ 2610.775113][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 2610.789110][T20273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3105'. [ 2611.424508][T19170] Bluetooth: hci1: command tx timeout [ 2611.657973][T20209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2611.719543][T20209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2611.910973][T19170] Bluetooth: hci7: command tx timeout [ 2612.296944][T20282] netlink: 'syz.6.3104': attribute type 1 has an invalid length. [ 2612.443242][T20282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2612.549686][T20284] vlan2: entered allmulticast mode [ 2612.559270][T20284] vlan1: entered allmulticast mode [ 2612.574382][T20284] veth0_vlan: entered allmulticast mode [ 2612.582052][T20284] bond1: (slave vlan2): Opening slave failed [ 2612.658191][T20209] team0: Port device team_slave_0 added [ 2612.679954][T20209] team0: Port device team_slave_1 added [ 2612.819016][T20130] bridge0: port 1(bridge_slave_0) entered blocking state [ 2612.854533][T20130] bridge0: port 1(bridge_slave_0) entered disabled state [ 2612.861960][T20130] bridge_slave_0: entered allmulticast mode [ 2612.907235][T20130] bridge_slave_0: entered promiscuous mode [ 2613.156847][T15113] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2613.270782][T20130] bridge0: port 2(bridge_slave_1) entered blocking state [ 2613.302002][T20130] bridge0: port 2(bridge_slave_1) entered disabled state [ 2613.323374][T20130] bridge_slave_1: entered allmulticast mode [ 2613.363488][T20130] bridge_slave_1: entered promiscuous mode [ 2613.503903][T19170] Bluetooth: hci1: command tx timeout [ 2613.750694][T15113] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2613.984476][T19170] Bluetooth: hci7: command tx timeout [ 2614.191950][T20209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2614.223878][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2614.313859][T20209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2614.347366][T20209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2614.386208][T20209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2614.533928][T20209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2616.211148][T19170] Bluetooth: hci1: command tx timeout [ 2616.216719][T13741] Bluetooth: hci7: command tx timeout [ 2616.395901][T20310] trusted_key: encrypted_key: insufficient parameters specified [ 2617.345449][T15113] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2617.771766][T20130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2617.815099][T20130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2618.105775][T20245] chnl_net:caif_netlink_parms(): no params data found [ 2619.175042][T15113] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2619.368947][T20324] loop1: detected capacity change from 0 to 8 [ 2620.356914][T20130] team0: Port device team_slave_0 added [ 2620.446215][T20130] team0: Port device team_slave_1 added [ 2621.766964][T20251] chnl_net:caif_netlink_parms(): no params data found [ 2621.823170][T20130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2621.853951][T20130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2621.933503][T20130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2622.353047][T20209] hsr_slave_0: entered promiscuous mode [ 2622.375471][T20209] hsr_slave_1: entered promiscuous mode [ 2622.394764][T20209] debugfs: 'hsr0' already exists in 'hsr' [ 2622.441424][T20209] Cannot create hsr debugfs directory [ 2622.598828][T20130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2622.608233][T20130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2622.724345][T20130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2622.999084][T20245] bridge0: port 1(bridge_slave_0) entered blocking state [ 2623.017551][T20245] bridge0: port 1(bridge_slave_0) entered disabled state [ 2623.032715][T20245] bridge_slave_0: entered allmulticast mode [ 2623.038361][T20344] ------------[ cut here ]------------ [ 2623.044216][T20344] ((d_inode(path->dentry))->i_flags & (1 << 19)) && !(path->mnt->mnt_sb->s_iflags & 0x00000002) [ 2623.044255][T20344] WARNING: fs/exec.c:118 at path_noexec+0x1cf/0x230, CPU#0: syz.1.3120/20344 [ 2623.044872][T20245] bridge_slave_0: entered promiscuous mode [ 2623.054875][T20344] Modules linked in: [ 2623.074156][T20344] CPU: 0 UID: 0 PID: 20344 Comm: syz.1.3120 Tainted: G L syzkaller #0 PREEMPT(full) [ 2623.085196][T20344] Tainted: [L]=SOFTLOCKUP [ 2623.089542][T20344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2623.099720][T20344] RIP: 0010:path_noexec+0x1cf/0x230 [ 2623.105448][T20344] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 fa 44 81 ff 83 e3 01 e8 12 4a 81 ff 89 d8 5b 5d 41 5c e9 d2 b0 8a fe e8 02 4a 81 ff 90 <0f> 0b 90 e9 46 ff ff ff e8 e4 a2 ea ff e9 a3 fe ff ff e8 da a2 ea [ 2623.125216][T20344] RSP: 0018:ffffc90003e2fc50 EFLAGS: 00010287 [ 2623.131344][T20344] RAX: 00000000000000b1 RBX: 0000000000000000 RCX: ffffc9000fec6000 [ 2623.139417][T20344] RDX: 0000000000080000 RSI: ffffffff8285903e RDI: ffff888028cd0000 [ 2623.147478][T20344] RBP: ffff88801e6b23a0 R08: 0000000000000007 R09: 0000000000000000 [ 2623.155533][T20344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 2623.163538][T20344] R13: 0000000000000001 R14: ffff88803325b1c8 R15: 0000000000000000 [ 2623.171613][T20344] FS: 00007f4ec1c126c0(0000) GS:ffff8881245dc000(0000) knlGS:0000000000000000 [ 2623.180656][T20344] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2623.187765][T20344] CR2: 000000110c36619b CR3: 0000000062047000 CR4: 0000000000350ef0 [ 2623.195822][T20344] Call Trace: [ 2623.199119][T20344] [ 2623.202070][T20344] do_mmap+0x857/0x12f0 [ 2623.206330][T20344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2623.212012][T20344] ? __pfx_do_mmap+0x10/0x10 [ 2623.216698][T20344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2623.222379][T20344] ? __pfx_down_write_killable+0x10/0x10 [ 2623.228125][T20344] vm_mmap_pgoff+0x29e/0x470 [ 2623.232767][T20344] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2623.238002][T20344] ? __fget_files+0x215/0x3d0 [ 2623.242729][T20344] ? __fget_files+0x21f/0x3d0 [ 2623.247515][T20344] ksys_mmap_pgoff+0x328/0x5b0 [ 2623.252350][T20344] __x64_sys_mmap+0x125/0x190 [ 2623.257127][T20344] do_syscall_64+0xc9/0xf80 [ 2623.261690][T20344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2623.267837][T20344] RIP: 0033:0x7f4ec0d9aeb9 [ 2623.272289][T20344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2623.292016][T20344] RSP: 002b:00007f4ec1c12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2623.300568][T20344] RAX: ffffffffffffffda RBX: 00007f4ec1015fa0 RCX: 00007f4ec0d9aeb9 [ 2623.308707][T20344] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 2623.316767][T20344] RBP: 00007f4ec0e08c1f R08: 0000000000000005 R09: 0000000000000000 [ 2623.324815][T20344] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 2623.332814][T20344] R13: 00007f4ec1016038 R14: 00007f4ec1015fa0 R15: 00007ffc312cbe88 [ 2623.340927][T20344] [ 2623.344043][T20344] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2623.351353][T20344] CPU: 0 UID: 0 PID: 20344 Comm: syz.1.3120 Tainted: G L syzkaller #0 PREEMPT(full) [ 2623.362326][T20344] Tainted: [L]=SOFTLOCKUP [ 2623.366652][T20344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2623.376732][T20344] Call Trace: [ 2623.380010][T20344] [ 2623.382939][T20344] dump_stack_lvl+0x100/0x190 [ 2623.387643][T20344] vpanic+0x20d/0x630 [ 2623.391641][T20344] panic+0xd1/0xd1 [ 2623.395374][T20344] ? __pfx_panic+0x10/0x10 [ 2623.399830][T20344] check_panic_on_warn.cold+0x19/0x34 [ 2623.405218][T20344] ? path_noexec+0x1cf/0x230 [ 2623.409835][T20344] __warn.cold+0x191/0x2f8 [ 2623.414266][T20344] __report_bug+0x296/0x3d0 [ 2623.418785][T20344] ? path_noexec+0x1cf/0x230 [ 2623.423406][T20344] ? __pfx___report_bug+0x10/0x10 [ 2623.428445][T20344] ? futex_unqueue+0x133/0x2c0 [ 2623.433248][T20344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2623.438899][T20344] ? arch_get_unmapped_area_topdown+0x559/0xa50 [ 2623.445168][T20344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2623.450825][T20344] ? path_noexec+0x1cf/0x230 [ 2623.455530][T20344] report_bug+0xb2/0x220 [ 2623.459791][T20344] ? path_noexec+0x1cf/0x230 [ 2623.464413][T20344] handle_bug+0x166/0x2a0 [ 2623.468772][T20344] exc_invalid_op+0x17/0x50 [ 2623.473303][T20344] asm_exc_invalid_op+0x1a/0x20 [ 2623.478169][T20344] RIP: 0010:path_noexec+0x1cf/0x230 [ 2623.483400][T20344] Code: 58 31 ff 83 e3 02 48 89 de 48 d1 eb e8 fa 44 81 ff 83 e3 01 e8 12 4a 81 ff 89 d8 5b 5d 41 5c e9 d2 b0 8a fe e8 02 4a 81 ff 90 <0f> 0b 90 e9 46 ff ff ff e8 e4 a2 ea ff e9 a3 fe ff ff e8 da a2 ea [ 2623.503020][T20344] RSP: 0018:ffffc90003e2fc50 EFLAGS: 00010287 [ 2623.509099][T20344] RAX: 00000000000000b1 RBX: 0000000000000000 RCX: ffffc9000fec6000 [ 2623.517092][T20344] RDX: 0000000000080000 RSI: ffffffff8285903e RDI: ffff888028cd0000 [ 2623.525091][T20344] RBP: ffff88801e6b23a0 R08: 0000000000000007 R09: 0000000000000000 [ 2623.533073][T20344] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000080000 [ 2623.541050][T20344] R13: 0000000000000001 R14: ffff88803325b1c8 R15: 0000000000000000 [ 2623.549046][T20344] ? path_noexec+0x1ce/0x230 [ 2623.553683][T20344] do_mmap+0x857/0x12f0 [ 2623.557866][T20344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2623.563530][T20344] ? __pfx_do_mmap+0x10/0x10 [ 2623.568135][T20344] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2623.573794][T20344] ? __pfx_down_write_killable+0x10/0x10 [ 2623.579473][T20344] vm_mmap_pgoff+0x29e/0x470 [ 2623.584099][T20344] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 2623.589236][T20344] ? __fget_files+0x215/0x3d0 [ 2623.593937][T20344] ? __fget_files+0x21f/0x3d0 [ 2623.598631][T20344] ksys_mmap_pgoff+0x328/0x5b0 [ 2623.603418][T20344] __x64_sys_mmap+0x125/0x190 [ 2623.608140][T20344] do_syscall_64+0xc9/0xf80 [ 2623.612693][T20344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2623.618605][T20344] RIP: 0033:0x7f4ec0d9aeb9 [ 2623.623027][T20344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2623.642650][T20344] RSP: 002b:00007f4ec1c12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2623.651081][T20344] RAX: ffffffffffffffda RBX: 00007f4ec1015fa0 RCX: 00007f4ec0d9aeb9 [ 2623.659062][T20344] RDX: 0000000003000007 RSI: 0000000000003000 RDI: 0000200000000000 [ 2623.667038][T20344] RBP: 00007f4ec0e08c1f R08: 0000000000000005 R09: 0000000000000000 [ 2623.675014][T20344] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 2623.682987][T20344] R13: 00007f4ec1016038 R14: 00007f4ec1015fa0 R15: 00007ffc312cbe88 [ 2623.690989][T20344] [ 2623.694291][T20344] Kernel Offset: disabled [ 2623.698619][T20344] Rebooting in 86400 seconds..