last executing test programs: 3m39.652037032s ago: executing program 0 (id=4273): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getitimer(0x1, &(0x7f0000000040)) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@userptr={0x10, 0x6, 0x4, 0x0, 0x0, {}, {0x1}, 0x1, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0xc, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x3, 0x89d2, 0xc, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x7fffffff, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0x2, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0xb, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0x1], [0x7, 0x407, 0x8004, 0x6, 0xffffffff, 0x100, 0x80000001, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x9, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x5, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x1000, 0x7ff, 0x125, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x7, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0x0, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x1000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x49, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r5, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 3m39.112631299s ago: executing program 0 (id=4274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x5, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 3m37.781529895s ago: executing program 0 (id=4275): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="130000", 0x3}, {&(0x7f0000000140)="e82ce6", 0x3}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x18, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000001680)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x19, 0x10, 0x8, 0x2, 0x0}}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$FE_SET_FRONTEND_TUNE_MODE(0xffffffffffffffff, 0x6f51, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4, @ANYBLOB="170900000000ffdbdf25010000000800c521725d28192c1800ac1414aa060002000100000008000a00010000fee2057d6eb26f900008000900fffffffe08"], 0x44}}, 0x4) 3m36.255311852s ago: executing program 3 (id=4280): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x58047) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r4, &(0x7f0000001480)='-', 0x1) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x3ef) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m34.724251809s ago: executing program 3 (id=4283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x5, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 3m33.406975613s ago: executing program 3 (id=4284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 3m32.827069337s ago: executing program 1 (id=4285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/lru_gen\x00', 0x2, 0x0) r3 = io_uring_setup(0x1, &(0x7f0000000380)={0x0, 0x0, 0x3800, 0x2}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x1000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f0000000400), 0x0) 3m31.770457298s ago: executing program 1 (id=4286): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x920, 0x12) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000040)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000000)=""/214, 0x100000, 0x1000, 0x9}, 0x20) 3m31.724198286s ago: executing program 2 (id=4287): r0 = openat(0xffffffffffffff9c, 0x0, 0x2a5c3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x4}}]}, 0x2c}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000280)={0xffe, 0x16000, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r11, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40004) fcntl$setlease(r0, 0x400, 0x1) openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) 3m30.497712844s ago: executing program 1 (id=4288): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x800) syz_emit_vhci(0x0, 0x11) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m30.470583969s ago: executing program 2 (id=4289): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 3m29.396261063s ago: executing program 0 (id=4290): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x558, 0x168, 0x248, 0x168, 0x3e8, 0x0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {0x7a00000010000000}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0x0, 0xffffffff, 0xffffffff], 0x4e20, 0x2f, 0x6, 0x4e22, 0x0, 0x20}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, @ipv6=@empty, 0x39, 0x1c}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xff}, [], [], 'veth1_macvtap\x00', 'xfrm0\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0xffffffffffffffff}, {0x2}, 0x800001}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) 3m29.360451328s ago: executing program 2 (id=4291): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x58047) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)='-', 0x1) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x3ef) close_range(r0, 0xffffffffffffffff, 0x0) 3m29.322923294s ago: executing program 0 (id=4292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x5, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 3m28.061692429s ago: executing program 0 (id=4293): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r8, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) 3m27.916180662s ago: executing program 2 (id=4294): socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000780), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='tran', @ANYRESHEX=r3, @ANYRESOCT=r2]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) socket$can_j1939(0x1d, 0x2, 0x7) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x2800) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000280)={0x19, 0x73, &(0x7f0000000200)="eaed336d72b03c36757f087528d91b02bf8a9c707bae16b2ff6999ce72201b13ea4b69acacecd3e6b61e9df590ce66fdc3fdaefcfa3daf37320542d3cc8ddf348b6b1d694e393f13af330a2012b49f9d1d99d51bc4f467b7f4f960adb2ed65a20df0ad51826e42b0fc506511fa479e85acc874"}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0xe84, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfe, 0xfe, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0xfffffffffffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x10000000000, 0x2004cb, 0x4, 0xfffffffffffffe, 0xfdfffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x2, 0x200306}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m27.823951567s ago: executing program 1 (id=4295): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0xc, 0x21, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 3m27.568827658s ago: executing program 3 (id=4296): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0xc, 0x21, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000040)='1\x00', 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)="01", 0xffffffee, 0x80000000000000, 0x0, 0x0) 3m27.502714529s ago: executing program 1 (id=4297): r0 = openat(0xffffffffffffff9c, 0x0, 0x2a5c3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x20, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x4}}]}, 0x2c}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x31) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000280)={0xffe, 0x16000, 0x1}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x408c0c0) r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r10, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000200)="aefdda9d240300005a90f57f07703aeff0f64ebbee010052f436dd2a000000000000000000000005000009d9", 0x2c}], 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r11, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0xe, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x40004) fcntl$setlease(r0, 0x400, 0x1) openat$cgroup_ro(r0, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) 3m27.49949947s ago: executing program 2 (id=4298): mremap(&(0x7f0000aaf000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) dup2(r4, r0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) 3m23.679332718s ago: executing program 2 (id=4299): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 3m23.600475471s ago: executing program 3 (id=4300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x240480d6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='bi', 0x2) 3m19.338746291s ago: executing program 3 (id=4301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x5, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 3m18.909926331s ago: executing program 1 (id=4302): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x58047) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)='-', 0x1) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x3ef) close_range(r0, 0xffffffffffffffff, 0x0) 1m58.386625057s ago: executing program 32 (id=4293): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000020c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000000080)=""/144) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_procfs(0x0, &(0x7f0000002080)='net/igmp\x00') preadv(r5, &(0x7f00000026c0)=[{&(0x7f0000002180)=""/109, 0x6d}], 0x1, 0xffffffff, 0x34) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) io_uring_setup(0x7, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r8, &(0x7f0000000240)={0x18, 0x0, {0x0, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa80008000300030000000800070005000000080001001000000006000200", @ANYRES16], 0x84}}, 0x20008040) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000050000005600000025000000190004000400000007fd170000000000040000000000000000", 0x39}], 0x1) 1m58.126877597s ago: executing program 33 (id=4302): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x58047) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$9p(r5, &(0x7f0000001480)='-', 0x1) splice(r4, 0x0, r1, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a4", 0x1}], 0x1) write$binfmt_script(r3, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x3ef) close_range(r0, 0xffffffffffffffff, 0x0) 1m57.892054844s ago: executing program 34 (id=4299): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, &(0x7f0000000140)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xa5) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100002f00010000000000fbdbdf250401f2800d0018006e6c383032313534000000001400010000000000000000000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b00a9ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac6433"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./bus\x00') 1m57.649674401s ago: executing program 35 (id=4301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x5, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 1m37.672893061s ago: executing program 4 (id=4303): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x800) syz_emit_vhci(0x0, 0x11) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m37.211063172s ago: executing program 6 (id=4305): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000000fe000001000000000500010004000000080004"], 0x2c}}, 0x0) 1m36.993853085s ago: executing program 6 (id=4307): socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x815) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000500)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_START(r3, 0x6f29) 1m34.900903098s ago: executing program 6 (id=4308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0xc, 0x21, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000040)='1\x00', 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)="01", 0xffffffee, 0x80000000000000, 0x0, 0x0) 1m34.711989257s ago: executing program 5 (id=4304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 1m34.234346971s ago: executing program 7 (id=4306): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1806000056701f5000000000b10000000000000000"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x98, &(0x7f0000000480)=""/152}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1m32.429474919s ago: executing program 7 (id=4309): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x240480d6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0)='bi', 0x2) 1m29.420345223s ago: executing program 7 (id=4310): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x5, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0x9, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x3, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xb, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0x10, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x8000003c, 0x0, 0x8080000, 0x8, 0x4, 0x8001, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xcc480, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x6, 0x41, 0x2000000, 0x204, 0x2004cf, 0x7f, 0x2, 0x4068ff, 0x5, 0x0, 0x3, 0x10000000a, 0x0, 0x100], 0xdddd0000, 0x156201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m22.119684289s ago: executing program 36 (id=4303): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x80, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x3) accept4(r1, 0x0, 0x0, 0x800) syz_emit_vhci(0x0, 0x11) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r4, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m19.587921019s ago: executing program 37 (id=4304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 1m19.45349299s ago: executing program 38 (id=4308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0xc, 0x21, 0x0, @broadcast, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0xd, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) write$binfmt_format(r3, &(0x7f0000000040)='1\x00', 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r4, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r4, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)="01", 0xffffffee, 0x80000000000000, 0x0, 0x0) 1m14.042821654s ago: executing program 39 (id=4310): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x87, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x87}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d26", 0x0, 0x11}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x1, 0x8080000, 0x4, 0x0, 0xb, 0x2, 0x1, 0x1, 0x4, 0x81, 0x59, 0x59}, {0xa000, 0x60000, 0xd, 0x5, 0x2, 0x3, 0x2d, 0x3, 0x3, 0xa3, 0x3, 0x7}, {0xe000, 0x6000, 0xc, 0x8, 0x9, 0xc, 0x2, 0xaf, 0x0, 0x5, 0x3, 0x6}, {0x0, 0x40000, 0x9, 0xc, 0x65, 0x1f, 0x43, 0x9, 0x4, 0x9, 0x4, 0x1}, {0x5000, 0x1, 0xd, 0x1, 0x4c, 0x8, 0x7, 0xf4, 0x1, 0x8, 0x3, 0x10}, {0xe000, 0xdddd0000, 0x2, 0x27, 0x0, 0x8, 0xb, 0xa4, 0x3, 0x6, 0x3, 0x4}, {0x60000, 0x80e6000, 0xb, 0x6, 0x2, 0x31, 0x9, 0x5, 0x9, 0xff, 0x34, 0x3}, {0x2000, 0x2, 0x10, 0xc, 0x0, 0x6, 0x2, 0x8, 0xef, 0x82, 0x2, 0x1}, {0x9000, 0x9}, {0x54000, 0x6}, 0x8000003c, 0x0, 0x8080000, 0x8, 0x4, 0x8001, 0x70000, [0x8000000000000000, 0x5, 0x0, 0x9]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xcc480, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x6, 0x41, 0x2000000, 0x204, 0x2004cf, 0x7f, 0x2, 0x4068ff, 0x5, 0x0, 0x3, 0x10000000a, 0x0, 0x100], 0xdddd0000, 0x156201}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.296253138s ago: executing program 9 (id=4312): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 42.861068652s ago: executing program 9 (id=4324): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000340)=0xc5) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000380)={{{@in=@empty, @in=@empty, 0x4e24, 0x7fff, 0x4e24, 0x6, 0xa, 0x0, 0x0, 0x2e, 0x0, r5}, {0x0, 0x5, 0x4, 0x4df6, 0x3, 0x2e, 0x4, 0x3}, {0xbc19, 0x9, 0x80, 0x8}, 0x5, 0x6e6bb2, 0x2}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0xff}, 0x2, @in=@local, 0x3503, 0x0, 0x1, 0x9, 0x3, 0x5, 0x4}}, 0xe8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000180)=@filename='./file1\x00', r5, &(0x7f00000001c0)='./file0\x00') r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000680)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) close_range(r3, 0xffffffffffffffff, 0x0) setrlimit(0xd, &(0x7f0000000200)={0x7fffffff, 0x800}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbf7, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7, 0x8, 0xfffffff9, 0x7311, 0x4, 0x4}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) 41.209701186s ago: executing program 9 (id=4326): bind$inet6(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x82b440, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 39.746887122s ago: executing program 9 (id=4328): unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) semctl$IPC_RMID(r0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) 39.37008887s ago: executing program 9 (id=4330): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000040)={0x0, 0xc1, 0x10, 0xfffffffd, 0x230}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @private=0xa010102}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) syz_pidfd_open(0x0, 0x0) 35.332416682s ago: executing program 8 (id=4331): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 32.111757919s ago: executing program 9 (id=4332): link(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00') prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) madvise(&(0x7f0000bdb000/0x4000)=nil, 0x4000, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x20}, @exit, @call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000100)='GPL\x00', 0xc0, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000180)=[r4, r4, r4], &(0x7f00000001c0)=[{0x4, 0x1, 0x3}, {0x0, 0x4, 0xe, 0x6}, {0x0, 0x3, 0xf, 0x6}, {0x1, 0x2, 0x2, 0x1}, {0x2, 0x5, 0x9, 0x9}, {0x5, 0x1, 0xa, 0x4}, {0x0, 0x4, 0x3, 0xb}, {0x0, 0x2, 0x8, 0xb}, {0x0, 0x4, 0x2, 0x9}], 0x10, 0x81}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r4, 0x34, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x10bc01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000080)=0x7f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x7068, 0x8, 0x9, 0x7}, {0x100, 0x9, 0xa, 0x81}, {0xdc, 0x8, 0x3, 0x2}]}) faccessat2(r6, &(0x7f0000000680)='./cgroup.cpu/cgroup.procs\x00', 0x140, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000400)=0x10000002) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=r4, r5, 0x5, 0x2000, r6, @value, @void, @void, @void, r7}, 0x20) 29.781258018s ago: executing program 8 (id=4333): r0 = socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="30000000070601020001000000000000030000030900020073797a310000000008000640000000070500010007000000cab65037a8580dc9a9f96e7135fc78f8ee28b4fccaa1a5de53213f9b4812f31f19c0ce5ef8412e59165221bcbf279e058153461343ce4157c6b40800000000000000734b6ef4266cb185879e034cb1f52db42a526f96bca8e6eacbb5cd7f9879c4cfebdea6cde82f3a564d9108fdc92bd5661574215a71c89c30d52f901cd28e028347db6904ee5e431e2e16e68dacba3e2b7bbea60bb23a46096a368bf80a4a5c8d71a0b86cb14248f53a7a8615eb89ffe73709adc62762612263e05c71447d228f7e08a08d67a9ae5c371193d11bcd0aae07df9ac6788e3877ae9a41a2c76c99b579bfe610bf6299aea11979275c11f1ab8a1ce8e7f7665859405bbddcd3f378de408171c18aec7185329f4ba9a63eaeef674b0343864bb22d8fed9ec6b66358697660cff0eaafe8e37416cf8d5bdcc208a633f026f77c0bba228a66fae8a95575073595acb097bc5ba1e21ecac0d32ce41760702bc180163a5d9fb99f5c605b651e"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 22.920148866s ago: executing program 8 (id=4334): r0 = socket$packet(0x11, 0x3, 0x300) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) 22.780117757s ago: executing program 8 (id=4335): r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r0, 0x2007ffb) sendfile(r0, r0, 0x0, 0x1000000201005) 21.803763248s ago: executing program 8 (id=4336): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x10800, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@userptr={0x10, 0x6, 0x4, 0x0, 0x0, {}, {0x1}, 0x1, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x38, [0xb, 0xc957, 0x1, 0x8, 0x7ffffffb, 0x2, 0x80007, 0x83, 0x20000006, 0xca, 0x6, 0x5f, 0x8, 0x5, 0xfeff2d37, 0xffffff00, 0x20100001, 0x3, 0x0, 0x5, 0x6, 0xc, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0x5, 0x4, 0x3, 0x89d2, 0xc, 0x4c74, 0x80000000, 0x40000, 0x0, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0xfffffa01, 0x42, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x7, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x6, 0x4, 0x7, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0x11, 0x400, 0x6c7, 0x2, 0xfffffffc, 0x7fffffff, 0x0, 0x84, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xffff, 0x2, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x802, 0x7, 0x0, 0x1, 0x4, 0x5f31, 0x2, 0x7f, 0x2, 0x4, 0xb, 0x3ff, 0x2000c, 0x8, 0x9, 0xb, 0x47, 0x60f6, 0xffffffff, 0xfe000000, 0xfffe, 0xfffffffe, 0xd5e, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3, 0x1], [0x7, 0x407, 0x8004, 0x6, 0xffffffff, 0x100, 0x80000001, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x30000, 0x3, 0x30f0, 0x7, 0xb, 0x5, 0x2, 0x0, 0x5a9c, 0x20000008, 0x4, 0x6d01, 0x9, 0x1, 0x800003, 0x1fe, 0x7c, 0x7, 0x5, 0x0, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x7, 0x8c8, 0x2000af, 0xfffffffe, 0x1000, 0x7ff, 0x125, 0x4, 0x7, 0xfff, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x6, 0x0, 0x27], [0x9, 0xbb33, 0x7, 0x81, 0x8, 0x6, 0x3, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x8007, 0x7, 0x8000003, 0x101, 0x10000, 0x4, 0x7ffc, 0x81, 0x2000a620, 0x2, 0x7, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x10000018, 0x0, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0x1000, 0x10000, 0x1, 0x7e, 0xda4, 0x9602, 0x7, 0xaf, 0x8, 0x4, 0xffffffff, 0x5, 0x49, 0xc, 0x30b1d693, 0x5, 0x1f40, 0x1, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000280)=@multiplanar_fd={0x7, 0x1, 0x4, 0x4, 0x5, {0x77359400}, {0x1, 0x8, 0x65, 0xcf, 0x13, 0xff, "d4024221"}, 0x5, 0x4, {0x0}, 0x80000001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r6, &(0x7f0000000100)='1\x00', 0x2) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x8, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 16.307499046s ago: executing program 40 (id=4332): link(&(0x7f0000000280)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000002c0)='./cgroup.cpu/cpuset.cpus\x00') prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) madvise(&(0x7f0000bdb000/0x4000)=nil, 0x4000, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)={0x64, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000004000000040000000200020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff00"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xe, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x20}, @exit, @call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000100)='GPL\x00', 0xc0, 0x0, 0x0, 0x40f00, 0x36, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, &(0x7f0000000180)=[r4, r4, r4], &(0x7f00000001c0)=[{0x4, 0x1, 0x3}, {0x0, 0x4, 0xe, 0x6}, {0x0, 0x3, 0xf, 0x6}, {0x1, 0x2, 0x2, 0x1}, {0x2, 0x5, 0x9, 0x9}, {0x5, 0x1, 0xa, 0x4}, {0x0, 0x4, 0x3, 0xb}, {0x0, 0x2, 0x8, 0xb}, {0x0, 0x4, 0x2, 0x9}], 0x10, 0x81}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r4, 0x34, 0x0, 0x6, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x10bc01, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000080)=0x7f) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x7068, 0x8, 0x9, 0x7}, {0x100, 0x9, 0xa, 0x81}, {0xdc, 0x8, 0x3, 0x2}]}) faccessat2(r6, &(0x7f0000000680)='./cgroup.cpu/cgroup.procs\x00', 0x140, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000400)=0x10000002) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=r4, r5, 0x5, 0x2000, r6, @value, @void, @void, @void, r7}, 0x20) 16.000445163s ago: executing program 8 (id=4338): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x440b0) 0s ago: executing program 41 (id=4338): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x440b0) kernel console output (not intermixed with test programs): 272012][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.295246][ T9] usb 2-1: Product: syz [ 896.304500][ T9] usb 2-1: Manufacturer: syz [ 896.312127][ T9] usb 2-1: SerialNumber: syz [ 896.330441][ T9] usb 2-1: config 0 descriptor?? [ 896.379082][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3645'. [ 896.774805][ T9] gs_usb 2-1:0.0: Configuring for 63 interfaces [ 897.184616][ T9] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 897.229993][ T171] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 897.262568][ T9] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 897.414995][ T9] gs_usb: probe of 2-1:0.0 failed with error -71 [ 897.481039][ T171] usb 3-1: config 0 has no interfaces? [ 897.529705][ T171] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 897.541078][ T9] usb 2-1: USB disconnect, device number 56 [ 897.564496][ T171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.592405][ T171] usb 3-1: config 0 descriptor?? [ 898.685722][T12349] usb 3-1: USB disconnect, device number 68 [ 900.647321][T16349] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3655'. [ 900.708120][T16348] comedi comedi0: No hardware detected at I/O base 0x300 [ 900.818310][T16349] netlink: 'syz.1.3655': attribute type 10 has an invalid length. [ 900.864485][T16349] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.871942][T16349] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.695192][T16355] fuse: Unknown parameter 'user_id00000000000000000000' [ 901.724813][T16357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3659'. [ 902.142980][T16364] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3662'. [ 904.910550][T16379] comedi comedi0: No hardware detected at I/O base 0x300 [ 905.249055][T16391] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3671'. [ 907.702128][T16406] fuse: Bad value for 'fd' [ 907.711791][T16404] device-mapper: table: 248:0: mirror: Too few mirror arguments (-EINVAL) [ 907.747429][T16404] device-mapper: ioctl: error adding target to table [ 908.009751][ T2134] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 908.268840][ T2134] usb 2-1: Using ep0 maxpacket: 32 [ 908.288189][ T2134] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 908.306338][ T2134] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 908.328537][ T2134] usb 2-1: config 0 interface 0 has no altsetting 0 [ 908.376763][T16423] serio: Serial port ttyS3 [ 909.112265][ T2134] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 909.129837][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.137902][ T2134] usb 2-1: Product: syz [ 909.142175][ T2134] usb 2-1: Manufacturer: syz [ 909.146833][ T2134] usb 2-1: SerialNumber: syz [ 909.155386][ T2134] usb 2-1: config 0 descriptor?? [ 910.690082][ T2134] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 910.697279][ T2134] gs_usb: probe of 2-1:0.0 failed with error -110 [ 911.388221][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3675'. [ 911.727966][ T2134] usb 2-1: USB disconnect, device number 57 [ 912.663098][T16452] overlayfs: missing 'lowerdir' [ 914.869634][ T2134] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 914.877846][T16488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3701'. [ 915.074607][ T2134] usb 3-1: Using ep0 maxpacket: 32 [ 915.087828][ T2134] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 915.113255][ T2134] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 915.132012][ T2134] usb 3-1: config 0 interface 0 has no altsetting 0 [ 915.144330][ T2134] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 915.173194][ T2134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.187422][ T2134] usb 3-1: Product: syz [ 915.208336][ T2134] usb 3-1: Manufacturer: syz [ 915.231973][ T2134] usb 3-1: SerialNumber: syz [ 915.243227][ T2134] usb 3-1: config 0 descriptor?? [ 915.682068][ T2134] gs_usb 3-1:0.0: Configuring for 63 interfaces [ 916.271074][ T2134] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 916.376568][ T2134] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 916.557264][ T2134] gs_usb: probe of 3-1:0.0 failed with error -71 [ 916.602893][ T2134] usb 3-1: USB disconnect, device number 69 [ 917.461382][T16519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3713'. [ 918.906526][T16519] hsr_slave_1 (unregistering): left promiscuous mode [ 919.169650][ T5843] usb 1-1: new full-speed USB device number 72 using dummy_hcd [ 919.429134][ T5843] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 919.468788][ T5843] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.499699][ T5843] usb 1-1: Product: syz [ 919.504047][ T5843] usb 1-1: Manufacturer: syz [ 919.546728][ T5843] usb 1-1: SerialNumber: syz [ 919.903175][ T171] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 920.032702][ T5843] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 72 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 920.121802][ T5843] usb 1-1: USB disconnect, device number 72 [ 920.132291][ T171] usb 2-1: Using ep0 maxpacket: 32 [ 920.140825][ T5843] usblp0: removed [ 920.183707][ T171] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 920.296419][ T171] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 920.359638][ T171] usb 2-1: config 0 interface 0 has no altsetting 0 [ 920.372324][ T171] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 920.403490][ T171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.431964][ T171] usb 2-1: Product: syz [ 920.476758][ T171] usb 2-1: Manufacturer: syz [ 920.489571][ T171] usb 2-1: SerialNumber: syz [ 920.512587][ T171] usb 2-1: config 0 descriptor?? [ 920.961481][ T171] gs_usb 2-1:0.0: Configuring for 63 interfaces [ 921.373983][ T171] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 921.437087][ T171] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 921.585567][ T171] gs_usb: probe of 2-1:0.0 failed with error -71 [ 921.640892][ T171] usb 2-1: USB disconnect, device number 58 [ 921.700513][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3727'. [ 922.152266][T16563] netlink: 220 bytes leftover after parsing attributes in process `syz.0.3728'. [ 922.404927][T16565] FAULT_INJECTION: forcing a failure. [ 922.404927][T16565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.428491][T16565] CPU: 0 PID: 16565 Comm: syz.1.3729 Not tainted syzkaller #0 [ 922.436114][T16565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 922.446214][T16565] Call Trace: [ 922.449541][T16565] [ 922.452528][T16565] dump_stack_lvl+0x18c/0x250 [ 922.457238][T16565] ? show_regs_print_info+0x20/0x20 [ 922.462476][T16565] ? load_image+0x420/0x420 [ 922.466997][T16565] ? __might_fault+0xaa/0x120 [ 922.471690][T16565] should_fail_ex+0x394/0x4c0 [ 922.476387][T16565] copyin+0x1a/0x90 [ 922.480236][T16565] _copy_from_iter+0x532/0x1290 [ 922.485125][T16565] ? copyout_mc+0x70/0x70 [ 922.489462][T16565] ? __virt_addr_valid+0x10c/0x380 [ 922.494626][T16565] ? __virt_addr_valid+0x10c/0x380 [ 922.499753][T16565] ? __virt_addr_valid+0x10c/0x380 [ 922.504882][T16565] ? __check_object_size+0x4fc/0xa40 [ 922.510202][T16565] netlink_sendmsg+0x76b/0xbf0 [ 922.515009][T16565] ? netlink_getsockopt+0x590/0x590 [ 922.520236][T16565] ? apparmor_socket_sendmsg+0x8e/0x330 [ 922.525805][T16565] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 922.531110][T16565] ? security_socket_sendmsg+0x80/0xa0 [ 922.536577][T16565] ? netlink_getsockopt+0x590/0x590 [ 922.541803][T16565] ____sys_sendmsg+0x61b/0x980 [ 922.546588][T16565] ? __asan_memset+0x22/0x40 [ 922.551198][T16565] ? __sys_sendmsg_sock+0x30/0x30 [ 922.556241][T16565] ? __import_iovec+0x3fa/0x850 [ 922.561115][T16565] ? import_iovec+0x73/0xa0 [ 922.565651][T16565] ___sys_sendmsg+0x2a6/0x360 [ 922.570352][T16565] ? __sys_sendmsg+0x2b0/0x2b0 [ 922.575163][T16565] __se_sys_sendmsg+0x1d0/0x2c0 [ 922.580120][T16565] ? __x64_sys_sendmsg+0x80/0x80 [ 922.585107][T16565] ? lockdep_hardirqs_on+0x98/0x150 [ 922.590364][T16565] do_syscall_64+0x55/0xb0 [ 922.594795][T16565] ? clear_bhb_loop+0x40/0x90 [ 922.599583][T16565] ? clear_bhb_loop+0x40/0x90 [ 922.604317][T16565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 922.610231][T16565] RIP: 0033:0x7f9c8619e159 [ 922.614653][T16565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 922.634285][T16565] RSP: 002b:00007f9c87036028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 922.642708][T16565] RAX: ffffffffffffffda RBX: 00007f9c86425fa0 RCX: 00007f9c8619e159 [ 922.650692][T16565] RDX: 0000000000008000 RSI: 0000200000000580 RDI: 0000000000000004 [ 922.658729][T16565] RBP: 00007f9c8623506b R08: 0000000000000000 R09: 0000000000000000 [ 922.666728][T16565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 922.674724][T16565] R13: 00007f9c86426038 R14: 00007f9c86425fa0 R15: 00007ffc87c34368 [ 922.682744][T16565] [ 922.879747][T16569] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3732'. [ 922.892371][T16569] netlink: 'syz.2.3732': attribute type 10 has an invalid length. [ 923.319274][T16581] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3736'. [ 923.736595][T16592] fuse: Unknown parameter '0x0000000000000005' [ 923.777324][T16591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3740'. [ 924.064081][T16596] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3742'. [ 924.078703][T16596] netlink: 'syz.2.3742': attribute type 10 has an invalid length. [ 924.459331][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 924.777652][T16610] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3746'. [ 925.533003][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3750'. [ 926.135508][T16633] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3756'. [ 928.249537][T16642] comedi comedi1: reset error (fatal) [ 928.333808][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'. [ 928.529110][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3761'. [ 929.197151][T16661] overlayfs: missing 'lowerdir' [ 930.630203][ T2134] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 930.799766][ T2134] usb 2-1: device descriptor read/64, error -71 [ 931.069838][ T2134] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 931.727484][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.733937][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.093458][T16682] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3765'. [ 932.216482][T16686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3770'. [ 933.329444][ T2134] usb 2-1: device descriptor read/64, error -71 [ 933.472677][ T2134] usb usb2-port1: attempt power cycle [ 933.819062][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3777'. [ 933.924605][T16711] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3778'. [ 935.055579][ T2134] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 935.119044][ T2134] usb 2-1: Using ep0 maxpacket: 8 [ 935.162087][ T2134] usb 2-1: config 3 has an invalid interface number: 75 but max is 0 [ 935.209713][ T2134] usb 2-1: config 3 has no interface number 0 [ 935.216745][ T2134] usb 2-1: config 3 interface 75 altsetting 5 endpoint 0x9 has invalid maxpacket 18027, setting to 1024 [ 935.249642][ T2134] usb 2-1: config 3 interface 75 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 1024 [ 935.289897][ T2134] usb 2-1: config 3 interface 75 has no altsetting 0 [ 935.302424][ T2134] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0002, bcdDevice= 8.19 [ 935.322317][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.349854][ T2134] usb 2-1: Product: syz [ 935.354190][ T2134] usb 2-1: Manufacturer: syz [ 935.358810][ T2134] usb 2-1: SerialNumber: syz [ 935.391202][T16699] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 937.040965][ T2134] kvaser_usb 2-1:3.75: Cannot get software info, error -71 [ 937.048346][ T2134] kvaser_usb: probe of 2-1:3.75 failed with error -71 [ 937.087774][ T2134] usb 2-1: USB disconnect, device number 61 [ 937.256911][T16724] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3783'. [ 937.699704][ T9] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 937.886805][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 937.903527][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 937.914404][T16731] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3786'. [ 937.932960][T16731] netlink: 'syz.2.3786': attribute type 10 has an invalid length. [ 937.950096][ T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 937.986713][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 939.128422][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 939.137865][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.146424][ T9] usb 2-1: Product: syz [ 939.159562][ T9] usb 2-1: Manufacturer: syz [ 939.164234][ T9] usb 2-1: SerialNumber: syz [ 939.180591][ T9] usb 2-1: config 0 descriptor?? [ 939.260557][T16739] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3787'. [ 939.596116][ T9] gs_usb 2-1:0.0: Configuring for 63 interfaces [ 940.449630][ T9] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EREMOTEIO) [ 940.650680][T16756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3790'. [ 940.652956][ T9] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO) [ 940.728495][ T9] gs_usb: probe of 2-1:0.0 failed with error -71 [ 940.756746][ T9] usb 2-1: USB disconnect, device number 62 [ 942.890314][T16767] serio: Serial port ttyS3 [ 943.634948][T16770] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3796'. [ 943.660456][T16770] netlink: 'syz.3.3796': attribute type 10 has an invalid length. [ 943.992173][ T5842] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 944.771617][ T5842] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 944.781630][ T5842] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 944.796029][ T5842] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 946.735883][T16784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3792'. [ 946.774481][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.844002][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 946.855889][T16791] ip_tables: iptables: counters copy to user failed while replacing table [ 947.089733][ T5842] usb 2-1: can't set config #1, error -32 [ 947.115296][ T5842] usb 2-1: USB disconnect, device number 63 [ 947.639822][T16809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3803'. [ 947.862383][T16814] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3806'. [ 947.874190][T16814] netlink: 'syz.3.3806': attribute type 10 has an invalid length. [ 949.914319][T16830] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3812'. [ 953.274548][T16863] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3823'. [ 953.361387][T16860] overlayfs: missing 'lowerdir' [ 953.599673][T16871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'. [ 953.739298][T16874] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 953.739298][T16874] program syz.0.3826 not setting count and/or reply_len properly [ 953.780077][ T171] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 953.983000][ T171] usb 3-1: Using ep0 maxpacket: 32 [ 953.993559][ T171] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 954.007429][ T171] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 954.034472][ T171] usb 3-1: config 0 interface 0 has no altsetting 0 [ 954.057344][ T171] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 954.077223][ T171] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.105571][ T171] usb 3-1: Product: syz [ 954.115747][ T171] usb 3-1: Manufacturer: syz [ 954.125906][ T171] usb 3-1: SerialNumber: syz [ 954.138852][ T171] usb 3-1: config 0 descriptor?? [ 954.604502][ T5842] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 956.666625][ T171] gs_usb 3-1:0.0: Couldn't send data format (err=-110) [ 956.680044][ T171] gs_usb: probe of 3-1:0.0 failed with error -110 [ 956.749070][ T5842] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 956.796788][ T171] usb 3-1: USB disconnect, device number 70 [ 956.804259][ T5842] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 956.830231][ T5842] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 956.849992][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.882894][ T5842] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 956.902963][ T5842] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 957.084469][ T171] usb 1-1: USB disconnect, device number 73 [ 957.100422][ T171] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 957.134617][ T171] spcp8x5 1-1:1.0: device disconnected [ 957.211651][T16892] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3832'. [ 957.223278][T16892] netlink: 'syz.3.3832': attribute type 10 has an invalid length. [ 957.691450][T16894] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3833'. [ 957.755464][T16896] overlayfs: missing 'lowerdir' [ 958.039830][ T171] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 958.259778][ T171] usb 3-1: Using ep0 maxpacket: 32 [ 958.296295][ T171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.314552][ T171] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.344993][T16903] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 958.344993][T16903] program syz.0.3836 not setting count and/or reply_len properly [ 958.367835][ T171] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 958.384311][ T171] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.400115][ T171] usb 3-1: config 0 descriptor?? [ 958.413375][ T171] hub 3-1:0.0: USB hub found [ 960.212288][T16910] serio: Serial port ttyS3 [ 960.658672][ T171] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 961.053764][ T171] usbhid 3-1:0.0: can't add hid device: -71 [ 961.083084][ T171] usbhid: probe of 3-1:0.0 failed with error -71 [ 961.143671][ T171] usb 3-1: USB disconnect, device number 71 [ 968.229390][T16949] netlink: 'syz.2.3851': attribute type 13 has an invalid length. [ 970.862591][T16965] kvm: pic: non byte write [ 971.229732][ T171] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 971.399648][ T171] usb 2-1: device descriptor read/64, error -71 [ 971.740158][ T171] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 972.259809][ T171] usb 2-1: device descriptor read/64, error -71 [ 972.664981][ T171] usb usb2-port1: attempt power cycle [ 972.673320][T16984] binder: 16969:16984 unknown command 1074553619 [ 972.679884][T16984] binder: 16969:16984 ioctl c0306201 200000000480 returned -22 [ 972.690899][T16984] binder: BINDER_SET_CONTEXT_MGR already set [ 972.697903][T16984] binder: 16969:16984 ioctl 4018620d 200000000100 returned -16 [ 974.499707][ T171] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 974.992676][ T171] usb 2-1: device descriptor read/8, error -71 [ 975.791196][T17009] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.798424][T17009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.806089][T17009] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.813404][T17009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 975.829538][T17009] netlink: 'syz.3.3867': attribute type 4 has an invalid length. [ 976.447887][T17011] UBIFS error (pid: 17011): cannot open "(null)", error -22 [ 976.840430][T17019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3870'. [ 978.653570][T17028] comedi comedi0: No hardware detected at I/O base 0x300 [ 980.231858][ T5845] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 980.279112][T17043] UBIFS error (pid: 17043): cannot open "(null)", error -22 [ 980.440486][ T5845] usb 2-1: Using ep0 maxpacket: 16 [ 980.483896][ T5845] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 980.521592][ T5845] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 980.541374][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.559613][ T5845] usb 2-1: Product: syz [ 980.565702][ T5845] usb 2-1: Manufacturer: syz [ 980.590598][ T5845] usb 2-1: SerialNumber: syz [ 980.620654][ T5845] usb 2-1: config 0 descriptor?? [ 981.794276][ T5881] usb 2-1: USB disconnect, device number 68 [ 982.565269][T17069] comedi comedi0: No hardware detected at I/O base 0x300 [ 983.533930][T17073] UBIFS error (pid: 17073): cannot open "(null)", error -22 [ 984.995278][T17080] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 984.995278][T17080] program syz.1.3889 not setting count and/or reply_len properly [ 985.533256][T17100] netlink: 'syz.1.3890': attribute type 13 has an invalid length. [ 987.762743][T17114] comedi comedi0: No hardware detected at I/O base 0x300 [ 989.746570][T17128] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 989.746570][T17128] program syz.0.3898 not setting count and/or reply_len properly [ 992.244374][T17134] netlink: 'syz.2.3901': attribute type 13 has an invalid length. [ 993.162729][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.169111][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.696848][T17167] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 993.696848][T17167] program syz.2.3911 not setting count and/or reply_len properly [ 995.180554][T17173] netlink: 'syz.0.3912': attribute type 13 has an invalid length. [ 995.267200][T17178] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 995.267200][T17178] program syz.1.3900 not setting count and/or reply_len properly [ 998.776919][T17216] netlink: 'syz.1.3922': attribute type 13 has an invalid length. [ 1003.039710][T17253] syzkaller0: entered promiscuous mode [ 1003.045523][T17253] syzkaller0: entered allmulticast mode [ 1003.258434][T17255] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1003.258434][T17255] program syz.0.3934 not setting count and/or reply_len properly [ 1008.064461][T17300] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1008.064461][T17300] program syz.1.3947 not setting count and/or reply_len properly [ 1008.585985][T17310] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1008.585985][T17310] program syz.2.3952 not setting count and/or reply_len properly [ 1008.729977][ T9] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 1008.994605][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1009.092329][ T9] usb 2-1: config index 0 descriptor too short (expected 43, got 25) [ 1009.162520][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.288622][ T9] usb 2-1: config 0 has no interfaces? [ 1009.682366][ T9] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 1009.969193][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1010.049720][ T9] usb 2-1: Product: syz [ 1010.053978][ T9] usb 2-1: Manufacturer: syz [ 1010.097760][ T9] usb 2-1: config 0 descriptor?? [ 1010.364416][T17307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.396022][T17307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.448458][ T5842] usb 2-1: USB disconnect, device number 69 [ 1011.951240][T17339] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1011.951240][T17339] program syz.1.3958 not setting count and/or reply_len properly [ 1012.096317][T17348] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1012.096317][T17348] program syz.0.3961 not setting count and/or reply_len properly [ 1013.126065][T17348] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1014.992820][T17365] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3964'. [ 1015.315277][T17377] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1015.315277][T17377] program syz.2.3971 not setting count and/or reply_len properly [ 1015.680484][T17386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3974'. [ 1015.690989][T17387] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1015.690989][T17387] program syz.2.3973 not setting count and/or reply_len properly [ 1018.700026][T17401] netlink: 'syz.0.3967': attribute type 2 has an invalid length. [ 1019.340782][T17419] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1022.096771][T17451] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1022.096771][T17451] program syz.1.3984 not setting count and/or reply_len properly [ 1026.901474][T17465] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3988'. [ 1028.108525][T17483] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1028.108525][T17483] program syz.0.3991 not setting count and/or reply_len properly [ 1028.459818][ T5843] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1028.660505][ T5843] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.700262][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF9, skipping [ 1028.766871][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1028.827035][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1028.874327][ T5843] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.903401][ T5843] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1028.927242][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.953676][ T5843] usb 2-1: Product: syz [ 1028.957971][ T5843] usb 2-1: Manufacturer: syz [ 1028.970567][ T5843] usb 2-1: SerialNumber: syz [ 1028.991558][ T5843] usb 2-1: config 0 descriptor?? [ 1028.998583][T17486] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1029.041577][ T5843] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1029.376694][ T5842] usb 2-1: USB disconnect, device number 70 [ 1030.065198][T17520] overlayfs: failed to clone upperpath [ 1030.082794][T17521] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4001'. [ 1030.312329][T17528] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1030.312329][T17528] program syz.0.4005 not setting count and/or reply_len properly [ 1032.921882][T17533] netlink: 'syz.1.4007': attribute type 13 has an invalid length. [ 1037.664707][T17583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.671979][T17583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1037.679637][T17583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.686828][T17583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.714859][T17583] netlink: 'syz.1.4020': attribute type 4 has an invalid length. [ 1039.376055][T17599] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4027'. [ 1039.413124][T17605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4028'. [ 1044.308917][T17638] netlink: 'syz.3.4037': attribute type 4 has an invalid length. [ 1044.555753][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4040'. [ 1045.441111][T17651] serio: Serial port ttyS3 [ 1046.759575][ T5881] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1046.778744][T17664] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4039'. [ 1046.796670][T17663] netlink: 5188 bytes leftover after parsing attributes in process `syz.0.4046'. [ 1046.941909][ T5881] usb 2-1: not running at top speed; connect to a high speed hub [ 1047.018501][ T5881] usb 2-1: config index 0 descriptor too short (expected 43, got 25) [ 1047.097039][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.179912][ T5843] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1047.204471][ T5881] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1047.297263][ T5881] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 1047.377958][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1047.414170][ T5843] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.463260][ T5881] usb 2-1: Product: syz [ 1047.504980][ T5843] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1047.518434][ T5881] usb 2-1: Manufacturer: syz [ 1047.625993][ T5843] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1047.777381][ T5843] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1047.863048][T17653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.897664][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.995154][T17653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.344191][ T5881] usb 2-1: USB disconnect, device number 71 [ 1048.584944][ T5843] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 1048.892507][T17671] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 1049.003178][ T5843] usb 1-1: USB disconnect, device number 74 [ 1049.038381][T17671] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 1050.776360][T17675] overlayfs: missing 'lowerdir' [ 1052.060709][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4052'. [ 1052.620191][T17692] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.627531][T17692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.635206][T17692] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.642449][T17692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.673696][T17692] netlink: 'syz.2.4053': attribute type 4 has an invalid length. [ 1052.945845][T17695] netlink: 'syz.0.4055': attribute type 10 has an invalid length. [ 1052.972129][T17695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.979547][T17695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.607760][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.616584][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.209819][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1057.767130][T17737] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4066'. [ 1057.785953][T17738] netlink: 'syz.3.4068': attribute type 4 has an invalid length. [ 1059.211530][T17752] syzkaller0: entered promiscuous mode [ 1059.217089][T17752] syzkaller0: entered allmulticast mode [ 1059.280878][T17755] device-mapper: ioctl: name not supplied when creating device [ 1060.969772][T17757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4075'. [ 1061.199112][T17769] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4078'. [ 1062.050997][T17771] netlink: 'syz.0.4079': attribute type 10 has an invalid length. [ 1062.473866][T17785] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1062.473866][T17785] program syz.0.4082 not setting count and/or reply_len properly [ 1064.615617][T17799] syzkaller0: entered promiscuous mode [ 1064.635801][T17799] syzkaller0: entered allmulticast mode [ 1064.819654][T17807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4088'. [ 1065.055486][T17811] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4089'. [ 1066.118166][T17816] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1066.118166][T17816] program syz.1.4090 not setting count and/or reply_len properly [ 1069.502503][T17848] device-mapper: ioctl: name not supplied when creating device [ 1070.860945][T17867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4099'. [ 1071.183782][T17876] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1071.183782][T17876] program syz.2.4106 not setting count and/or reply_len properly [ 1073.922482][T17894] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4110'. [ 1075.080744][T17926] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1075.080744][T17926] program syz.0.4115 not setting count and/or reply_len properly [ 1075.750255][T17920] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1075.750255][T17920] program syz.1.4117 not setting count and/or reply_len properly [ 1075.806217][T17926] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1077.288393][T17948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4122'. [ 1077.351678][T17949] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4121'. [ 1078.738404][T17958] overlayfs: failed to resolve './file0/file1': -2 [ 1082.777086][T17996] device-mapper: ioctl: name not supplied when creating device [ 1083.057426][T18004] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4133'. [ 1084.689980][T18008] overlayfs: failed to resolve './file0/file1': -2 [ 1086.670401][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4136'. [ 1086.793824][T18021] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1086.793824][T18021] program syz.2.4129 not setting count and/or reply_len properly [ 1087.323545][T18027] device-mapper: ioctl: name not supplied when creating device [ 1090.557141][T18049] overlayfs: failed to resolve './file0/file1': -2 [ 1091.719483][T18054] comedi comedi1: reset error (fatal) [ 1093.801946][T18066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4150'. [ 1094.259012][T18069] device-mapper: ioctl: name not supplied when creating device [ 1094.534432][T18073] ip_tables: iptables: counters copy to user failed while replacing table [ 1095.356105][T18079] FAULT_INJECTION: forcing a failure. [ 1095.356105][T18079] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1095.369367][T18079] CPU: 0 PID: 18079 Comm: syz.0.4153 Not tainted syzkaller #0 [ 1095.376984][T18079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1095.387080][T18079] Call Trace: [ 1095.390402][T18079] [ 1095.393356][T18079] dump_stack_lvl+0x18c/0x250 [ 1095.398096][T18079] ? show_regs_print_info+0x20/0x20 [ 1095.403321][T18079] ? load_image+0x420/0x420 [ 1095.407851][T18079] ? sched_core_dequeue+0x150/0x1c0 [ 1095.413138][T18079] should_fail_ex+0x394/0x4c0 [ 1095.417936][T18079] get_futex_key+0x136/0x1030 [ 1095.422726][T18079] ? futex_setup_timer+0xc0/0xc0 [ 1095.427698][T18079] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1095.433696][T18079] ? __lock_acquire+0x7d80/0x7d80 [ 1095.438741][T18079] ? preempt_schedule+0xc0/0xd0 [ 1095.443703][T18079] futex_wait_setup+0xbc/0x270 [ 1095.448533][T18079] ? futex_wait_multiple+0x920/0x920 [ 1095.453843][T18079] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1095.459835][T18079] ? _raw_spin_unlock+0x40/0x40 [ 1095.464709][T18079] futex_wait+0x1bc/0x5c0 [ 1095.469057][T18079] ? futex_wait_setup+0x270/0x270 [ 1095.474115][T18079] ? lock_chain_count+0x20/0x20 [ 1095.478987][T18079] do_futex+0x2ff/0x3e0 [ 1095.483163][T18079] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1095.489071][T18079] ? slab_free_freelist_hook+0x130/0x1a0 [ 1095.494884][T18079] __se_sys_futex+0x3a9/0x440 [ 1095.499595][T18079] ? __x64_sys_futex+0xf0/0xf0 [ 1095.504385][T18079] ? __x64_sys_futex+0x21/0xf0 [ 1095.509161][T18079] do_syscall_64+0x55/0xb0 [ 1095.513594][T18079] ? clear_bhb_loop+0x40/0x90 [ 1095.518288][T18079] ? clear_bhb_loop+0x40/0x90 [ 1095.522984][T18079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1095.528893][T18079] RIP: 0033:0x7f4262f9e159 [ 1095.533328][T18079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.553042][T18079] RSP: 002b:00007f4263e410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1095.561471][T18079] RAX: ffffffffffffffda RBX: 00007f4263225fa8 RCX: 00007f4262f9e159 [ 1095.569478][T18079] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4263225fa8 [ 1095.577488][T18079] RBP: 00007f4263225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1095.585470][T18079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1095.593451][T18079] R13: 00007f4263226038 R14: 00007ffe73f98760 R15: 00007ffe73f98848 [ 1095.601526][T18079] [ 1095.790449][T18083] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4154'. [ 1098.375389][T18089] syz.2.4157: attempt to access beyond end of device [ 1098.375389][T18089] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1098.935689][T18098] device-mapper: ioctl: name not supplied when creating device [ 1100.209868][ T5845] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1100.428220][T18119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4165'. [ 1100.447871][ T5845] usb 2-1: not running at top speed; connect to a high speed hub [ 1100.481088][ T5845] usb 2-1: config index 0 descriptor too short (expected 43, got 25) [ 1100.520042][ T5845] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.543974][ T5845] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 1100.574765][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1100.604609][ T5845] usb 2-1: Product: syz [ 1100.620209][ T5845] usb 2-1: Manufacturer: syz [ 1100.781547][ T5845] msi2500 2-1:1.0: Registered as swradio24 [ 1100.797680][ T5845] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1102.013225][T18102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.022108][T18102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.033464][ T2134] usb 2-1: USB disconnect, device number 72 [ 1102.070419][T18139] syz.0.4169: attempt to access beyond end of device [ 1102.070419][T18139] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1105.309915][T18156] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4174'. [ 1105.572397][T18155] netlink: 'syz.2.4172': attribute type 4 has an invalid length. [ 1105.701105][T18161] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1105.701105][T18161] program syz.0.4176 not setting count and/or reply_len properly [ 1106.386122][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4180'. [ 1107.864065][T18189] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1107.864065][T18189] program syz.2.4185 not setting count and/or reply_len properly [ 1109.021278][T18212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 1110.881997][T18222] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4195'. [ 1111.656792][T17671] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 1112.221729][ T5843] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1112.412744][ T5843] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1112.422693][ T5843] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1112.434263][ T2134] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1112.461795][ T5843] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1112.471299][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.480111][ T5843] usb 3-1: Product: syz [ 1112.484526][ T5843] usb 3-1: Manufacturer: syz [ 1112.489271][ T5843] usb 3-1: SerialNumber: syz [ 1112.502894][ T5843] usb 3-1: config 0 descriptor?? [ 1112.526678][T18229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1112.534719][T18229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1114.840642][T18229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1114.847952][T18229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1114.874204][ T2134] usb 2-1: not running at top speed; connect to a high speed hub [ 1114.892399][ T2134] usb 2-1: config index 0 descriptor too short (expected 43, got 25) [ 1114.909566][ T2134] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.931864][ T2134] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 1114.941800][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1114.950469][ T2134] usb 2-1: Product: syz [ 1114.954722][ T2134] usb 2-1: Manufacturer: syz [ 1115.076946][ T2134] msi2500 2-1:1.0: Registered as swradio24 [ 1115.086962][ T2134] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1115.139389][T18245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1115.226778][ T2134] usb 2-1: USB disconnect, device number 73 [ 1115.281196][ T5843] Error reading MAC address [ 1115.310906][ T5843] usb 3-1: USB disconnect, device number 72 [ 1115.675379][T18254] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4205'. [ 1116.056700][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.134166][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.600132][T18261] Context (ID=0x0) not attached to queue pair (handle=0x2:0x2) [ 1118.309513][ T5843] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1118.711298][ T5843] usb 2-1: not running at top speed; connect to a high speed hub [ 1118.720837][ T5843] usb 2-1: config index 0 descriptor too short (expected 43, got 25) [ 1118.758836][ T5843] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.935528][ T5843] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 1119.015878][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1119.151916][ T5843] usb 2-1: Product: syz [ 1119.156172][ T5843] usb 2-1: Manufacturer: syz [ 1119.322116][ T5843] msi2500 2-1:1.0: Registered as swradio24 [ 1119.338291][ T5843] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1119.413161][T18282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.474370][T18282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.526761][ T5843] usb 2-1: USB disconnect, device number 74 [ 1119.692288][T18296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4216'. [ 1120.022085][T18300] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1120.022085][T18300] program syz.2.4218 not setting count and/or reply_len properly [ 1121.624996][T18315] vivid-000: kernel_thread() failed [ 1121.844275][T18323] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4224'. [ 1123.919987][ T5842] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1123.928646][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1124.134236][ T5842] usb 1-1: not running at top speed; connect to a high speed hub [ 1124.145650][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.165918][ T5842] usb 1-1: config index 0 descriptor too short (expected 43, got 25) [ 1124.180406][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1124.197824][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.212423][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1124.232263][ T9] usb 2-1: SerialNumber: syz [ 1124.245389][ T5842] usb 1-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 1124.270599][ T9] cdc_ether 2-1:1.0: skipping garbage [ 1124.276059][ T9] usb 2-1: bad CDC descriptors [ 1124.282969][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1124.293947][ T5842] usb 1-1: Product: syz [ 1124.298170][ T5842] usb 1-1: Manufacturer: syz [ 1124.402348][ T5842] msi2500 1-1:1.0: Registered as swradio24 [ 1124.408244][ T5842] msi2500 1-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 1124.542998][T18332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.566675][T18332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.569165][T18333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1124.587346][T18333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1124.598553][ T2134] usb 1-1: USB disconnect, device number 75 [ 1124.620774][ T5842] usb 2-1: USB disconnect, device number 75 [ 1125.170031][T18345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4230'. [ 1128.063330][T18364] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4235'. [ 1130.229337][T18391] netlink: 'syz.1.4243': attribute type 4 has an invalid length. [ 1130.975403][T18387] tipc: Cannot configure node identity twice [ 1131.493287][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4248'. [ 1133.745723][T13242] Bluetooth: hci3: command 0x1003 tx timeout [ 1133.754172][ T51] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1134.862481][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4259'. [ 1135.605184][T18454] netlink: 'syz.2.4262': attribute type 4 has an invalid length. [ 1138.001792][T18468] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4269'. [ 1138.802584][ T3449] Bluetooth: hci3: Frame reassembly failed (-84) [ 1139.293761][ T28] audit: type=1326 audit(1790990796.668:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18472 comm="syz.0.4271" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4262f9e159 code=0x0 [ 1140.253531][T18484] vivid-000: kernel_thread() failed [ 1141.608232][ T51] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1141.615153][T13242] Bluetooth: hci3: command 0x1003 tx timeout [ 1141.816808][T18497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4276'. [ 1141.902282][T18498] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1141.902282][T18498] program syz.2.4277 not setting count and/or reply_len properly [ 1143.673349][T18512] netlink: 'syz.1.4278': attribute type 4 has an invalid length. [ 1144.351356][T18507] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4279'. [ 1146.549467][T18524] vivid-000: kernel_thread() failed [ 1147.786532][T18533] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1147.786532][T18533] program syz.2.4287 not setting count and/or reply_len properly [ 1149.147101][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4288'. [ 1149.349573][T18548] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4289'. [ 1151.727980][T18568] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1152.288948][T18585] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 1152.288948][T18585] program syz.1.4297 not setting count and/or reply_len properly [ 1156.395770][T18597] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4299'. [ 1239.684465][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.699449][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.708890][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.809541][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.201405][T13242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1244.296507][T13242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1244.305574][T13242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1244.319932][T13242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1244.327774][T13242] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1244.335956][T13242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1244.412667][T18620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1244.427609][T18620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1244.436258][T18620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1244.463765][T18620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1244.542765][T18395] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1244.552735][T18395] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1244.985662][T18620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1244.997098][T18620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1245.005886][T18620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1245.014475][T18620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1245.022518][T18620] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1245.030284][T18620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1245.118389][T18620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1245.131317][T18620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1245.139919][T18620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1245.148233][T18620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1245.156531][T18620] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1245.167443][T18620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1245.413579][T10741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1246.669759][T18620] Bluetooth: hci3: command tx timeout [ 1246.749664][T18620] Bluetooth: hci5: command tx timeout [ 1247.008959][T18615] chnl_net:caif_netlink_parms(): no params data found [ 1247.043143][T18623] chnl_net:caif_netlink_parms(): no params data found [ 1247.072107][T18620] Bluetooth: hci0: command tx timeout [ 1247.237534][T18620] Bluetooth: hci1: command tx timeout [ 1247.346715][T18618] chnl_net:caif_netlink_parms(): no params data found [ 1247.649947][T18615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.657200][T18615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.675072][T18615] bridge_slave_0: entered allmulticast mode [ 1247.685545][T18615] bridge_slave_0: entered promiscuous mode [ 1247.743608][T18626] chnl_net:caif_netlink_parms(): no params data found [ 1247.798917][T18615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.808292][T18615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.816145][T18615] bridge_slave_1: entered allmulticast mode [ 1247.824402][T18615] bridge_slave_1: entered promiscuous mode [ 1247.864010][T18615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.877443][T18615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.944710][T18623] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.959970][T18623] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.968982][T18623] bridge_slave_0: entered allmulticast mode [ 1247.986502][T18623] bridge_slave_0: entered promiscuous mode [ 1248.070261][T18623] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.077481][T18623] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.094587][T18623] bridge_slave_1: entered allmulticast mode [ 1248.106150][T18623] bridge_slave_1: entered promiscuous mode [ 1248.254159][T18615] team0: Port device team_slave_0 added [ 1248.277890][T18618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.294690][T18618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.335444][T18618] bridge_slave_0: entered allmulticast mode [ 1248.361020][T18618] bridge_slave_0: entered promiscuous mode [ 1248.371936][T18623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1248.386200][T18623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1248.427390][T18623] team0: Port device team_slave_0 added [ 1248.438054][T18623] team0: Port device team_slave_1 added [ 1248.474133][T18623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1248.481298][T18623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.527719][T18623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1248.552195][T18615] team0: Port device team_slave_1 added [ 1248.577533][T18618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.590008][T18618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.597284][T18618] bridge_slave_1: entered allmulticast mode [ 1248.615594][T18618] bridge_slave_1: entered promiscuous mode [ 1248.665734][T18623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1248.679692][T18623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1248.714306][T18623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1248.755303][T18620] Bluetooth: hci3: command tx timeout [ 1248.829868][T18620] Bluetooth: hci5: command tx timeout [ 1249.026917][T18615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.039216][T18615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.129500][T18615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.149949][T18620] Bluetooth: hci0: command tx timeout [ 1249.174348][T18615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.189710][T18615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.226454][T18615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.254665][T18618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.274094][T18626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.299621][T18626] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.307015][T18626] bridge_slave_0: entered allmulticast mode [ 1249.313514][T18620] Bluetooth: hci1: command tx timeout [ 1249.333555][T18626] bridge_slave_0: entered promiscuous mode [ 1249.352527][T18626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.367812][T18626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.376733][T18626] bridge_slave_1: entered allmulticast mode [ 1249.404397][T18626] bridge_slave_1: entered promiscuous mode [ 1249.467246][T18618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.653224][T18623] hsr_slave_0: entered promiscuous mode [ 1249.690271][T18623] hsr_slave_1: entered promiscuous mode [ 1249.697901][T18623] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.718541][T18623] Cannot create hsr debugfs directory [ 1249.841713][T18618] team0: Port device team_slave_0 added [ 1249.862896][T18626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.892172][T18626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.930564][T18615] hsr_slave_0: entered promiscuous mode [ 1249.952474][T18615] hsr_slave_1: entered promiscuous mode [ 1249.971937][T18615] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.988997][T18615] Cannot create hsr debugfs directory [ 1250.017844][T18618] team0: Port device team_slave_1 added [ 1250.361245][T18618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.368267][T18618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.403945][T18618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.441926][T18618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.458692][T18618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.495087][T18618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.522540][T18626] team0: Port device team_slave_0 added [ 1250.641822][T18626] team0: Port device team_slave_1 added [ 1250.751946][T18618] hsr_slave_0: entered promiscuous mode [ 1250.777863][T18618] hsr_slave_1: entered promiscuous mode [ 1250.806582][T18618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1250.819310][T18618] Cannot create hsr debugfs directory [ 1250.829624][T18620] Bluetooth: hci3: command tx timeout [ 1250.916106][T18620] Bluetooth: hci5: command tx timeout [ 1251.031264][T18626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.038285][T18626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.092896][T18626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.119283][T18626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.136660][T18626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.173171][T18626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.229971][T18620] Bluetooth: hci0: command tx timeout [ 1251.389732][T18620] Bluetooth: hci1: command tx timeout [ 1251.658906][T18626] hsr_slave_0: entered promiscuous mode [ 1251.681095][T18626] hsr_slave_1: entered promiscuous mode [ 1251.700947][T18626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1251.708607][T18626] Cannot create hsr debugfs directory [ 1252.014714][T18623] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1252.037310][T18623] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1252.150702][T18623] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1252.212678][T18623] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1252.467069][T18615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1252.505885][T18615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1252.572440][T18615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1252.612809][T18615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1252.911422][T18620] Bluetooth: hci3: command tx timeout [ 1252.922485][T18618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1252.952818][T18618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1252.976477][T18618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1252.990590][T18620] Bluetooth: hci5: command tx timeout [ 1253.060205][T18618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1253.175726][T18623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.247408][T18615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.273008][T18623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.311159][T18620] Bluetooth: hci0: command tx timeout [ 1253.392672][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.399938][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.436448][T18626] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1253.470334][T18620] Bluetooth: hci1: command tx timeout [ 1253.490735][T18626] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1253.515533][T18615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.531888][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.539089][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.583294][T18626] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1253.616279][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.623531][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.704666][T18626] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1253.759263][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.766549][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.186334][T18615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1254.248250][T18618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.393324][T18618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.463805][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.471093][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.762862][T16683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.770111][T16683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.985480][T18626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.153743][T18626] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.506931][T18623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.590239][T18615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.600474][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.607671][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.813278][T16683] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.820629][T16683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1256.336127][T18618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.472970][T18615] veth0_vlan: entered promiscuous mode [ 1257.574306][T18615] veth1_vlan: entered promiscuous mode [ 1257.680463][T18626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1257.700853][T18623] veth0_vlan: entered promiscuous mode [ 1257.863878][T18615] veth0_macvtap: entered promiscuous mode [ 1257.912132][T18623] veth1_vlan: entered promiscuous mode [ 1257.923158][T18615] veth1_macvtap: entered promiscuous mode [ 1258.114020][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.159477][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.199288][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.230358][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.252036][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.268635][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.289517][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.309067][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.331529][T18615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1258.397014][T18623] veth0_macvtap: entered promiscuous mode [ 1258.454323][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.499747][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.531502][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.569618][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.599771][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.630186][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.660282][T18615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1258.701333][T18615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.721367][T18615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1258.742453][T18623] veth1_macvtap: entered promiscuous mode [ 1258.863531][T18615] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.880428][T18615] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.889201][T18615] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.948359][T18615] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.025853][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.059628][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.099587][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.126081][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.154755][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.170899][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.189830][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.209462][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.229072][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1259.242483][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.274574][T18623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.315581][T18618] veth0_vlan: entered promiscuous mode [ 1259.357170][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.388657][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.410193][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.432603][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.449498][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.468487][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.499161][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.519420][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.529318][T18623] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1259.559414][T18623] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1259.580564][T18623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.663419][T18623] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.681609][T18623] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.698443][T18623] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.708251][T18623] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.766243][T18618] veth1_vlan: entered promiscuous mode [ 1259.969003][T18626] veth0_vlan: entered promiscuous mode [ 1260.316279][T18626] veth1_vlan: entered promiscuous mode [ 1260.322824][ T3449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.351158][ T3449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.437103][T18618] veth0_macvtap: entered promiscuous mode [ 1260.499199][T18618] veth1_macvtap: entered promiscuous mode [ 1260.580063][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.587995][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.603887][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.644836][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.666634][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.689733][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.708695][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.729168][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.741329][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.772561][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.786023][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.806301][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.827381][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1260.858608][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.889268][T18618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.996393][T18626] veth0_macvtap: entered promiscuous mode [ 1261.025165][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.055070][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.081565][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.111171][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.129732][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.148757][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.169494][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.189401][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.199289][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.237879][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.258745][T18618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1261.278701][T18618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.302036][T18618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.341061][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.348970][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.431300][T18626] veth1_macvtap: entered promiscuous mode [ 1261.475822][T18618] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.488894][T16683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.508822][T18618] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.518358][T16683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.537080][T18618] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.562055][T18618] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.706067][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.769635][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.823480][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.856921][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.901871][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.934536][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1261.959882][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1261.981491][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.015507][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.037847][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.060602][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.079577][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.095008][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1262.127320][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1262.154125][T18626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.196847][T18703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4303'. [ 1262.955999][T18703] hsr_slave_1 (unregistering): left promiscuous mode [ 1263.045557][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.058767][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.088502][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.111939][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.133079][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.158705][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.569521][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.593079][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.613537][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.634602][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.654935][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.674383][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.701834][T18626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1263.723376][T18626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1263.740963][T18626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1263.843000][T18626] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.879496][T18626] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.899504][T18626] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1263.908611][T18626] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.096143][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.136366][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.297244][T16683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.320879][T16683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.406917][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.435394][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1264.633240][T18672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1264.679650][T18672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.458130][T18491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1278.472132][T18491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1278.481257][T18491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1278.489822][T18491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1278.498364][T18491] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1278.506749][T18491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1278.982202][T18742] chnl_net:caif_netlink_parms(): no params data found [ 1279.178292][T18742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.196199][T18742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.207634][T18742] bridge_slave_0: entered allmulticast mode [ 1279.233133][T18742] bridge_slave_0: entered promiscuous mode [ 1279.243552][T18742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.265983][T18742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.279798][T18742] bridge_slave_1: entered allmulticast mode [ 1279.287596][T18742] bridge_slave_1: entered promiscuous mode [ 1279.375596][T18742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.405573][T18742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.494458][T18742] team0: Port device team_slave_0 added [ 1279.504954][T18742] team0: Port device team_slave_1 added [ 1279.578123][T18742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.596592][T18742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.624000][T18742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.652118][T18742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.676572][T18742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.715654][T18742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.941029][T18742] hsr_slave_0: entered promiscuous mode [ 1280.010805][T18742] hsr_slave_1: entered promiscuous mode [ 1280.060534][T18742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1280.104064][T18742] Cannot create hsr debugfs directory [ 1280.589650][T18491] Bluetooth: hci2: command tx timeout [ 1281.232828][T18742] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1281.307538][T18742] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1281.380730][T18742] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1281.441413][T18742] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1281.460236][T18620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1281.472898][T18620] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1281.481436][T18620] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1281.490551][T18620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1281.500186][T18620] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1281.507571][T18620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1281.627175][T18491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1281.640883][T18491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1281.649303][T18491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1281.657871][T18491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1281.676829][T18491] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1281.688093][T18491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1282.294391][T18742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.410028][T18742] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.475015][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.482281][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.550103][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.557311][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.669533][T18491] Bluetooth: hci2: command tx timeout [ 1282.896903][T18752] chnl_net:caif_netlink_parms(): no params data found [ 1283.048686][T18754] chnl_net:caif_netlink_parms(): no params data found [ 1283.570454][T18491] Bluetooth: hci3: command tx timeout [ 1283.578505][T18752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.603193][T18752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.639700][T18752] bridge_slave_0: entered allmulticast mode [ 1283.647322][T18752] bridge_slave_0: entered promiscuous mode [ 1283.691626][T18752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.739811][T18752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.747164][T18752] bridge_slave_1: entered allmulticast mode [ 1283.771266][T18752] bridge_slave_1: entered promiscuous mode [ 1283.790076][T18491] Bluetooth: hci4: command tx timeout [ 1283.879664][T18754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.886883][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.909096][T18754] bridge_slave_0: entered allmulticast mode [ 1283.921497][T18754] bridge_slave_0: entered promiscuous mode [ 1283.987507][T18754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.009084][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.017200][T18754] bridge_slave_1: entered allmulticast mode [ 1284.033394][T18754] bridge_slave_1: entered promiscuous mode [ 1284.067961][T18742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.095416][T18752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.144035][T18752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.327494][T18754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.394202][T18754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.543981][T18752] team0: Port device team_slave_0 added [ 1284.581298][T18752] team0: Port device team_slave_1 added [ 1284.749691][T18491] Bluetooth: hci2: command tx timeout [ 1284.772823][T18754] team0: Port device team_slave_0 added [ 1284.801071][T18752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1284.808117][T18752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.905379][T18752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.061170][T18754] team0: Port device team_slave_1 added [ 1285.080142][T18752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.088914][T18752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.190548][T18752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1285.442513][T18754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.489696][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.596364][T18754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.639129][T18491] Bluetooth: hci3: command tx timeout [ 1285.671841][T18754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.678862][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.789936][T18754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1285.873120][T18620] Bluetooth: hci4: command tx timeout [ 1285.915092][T18752] hsr_slave_0: entered promiscuous mode [ 1285.990563][T18752] hsr_slave_1: entered promiscuous mode [ 1286.029889][T18752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1286.037528][T18752] Cannot create hsr debugfs directory [ 1286.337050][T18754] hsr_slave_0: entered promiscuous mode [ 1286.380603][T18754] hsr_slave_1: entered promiscuous mode [ 1286.409479][T18754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1286.449510][T18754] Cannot create hsr debugfs directory [ 1286.710748][T18491] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1286.724994][T18491] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1286.733876][T18491] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1286.747308][T18491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1286.764719][T18491] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1286.772690][T18491] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1286.829617][T18620] Bluetooth: hci2: command tx timeout [ 1287.050919][T18742] veth0_vlan: entered promiscuous mode [ 1287.186119][T18742] veth1_vlan: entered promiscuous mode [ 1287.554577][T18742] veth0_macvtap: entered promiscuous mode [ 1287.604182][T18742] veth1_macvtap: entered promiscuous mode [ 1287.710099][T18620] Bluetooth: hci3: command tx timeout [ 1287.814738][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.839601][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.866231][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.895037][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.920182][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.943599][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.956694][T18620] Bluetooth: hci4: command tx timeout [ 1287.971301][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1287.995364][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.019628][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.053815][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.079269][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.090705][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.113374][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.139639][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.169009][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1288.180595][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.216869][T18742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1288.318778][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.361315][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.381548][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.404159][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.415109][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.442190][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.469514][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.489636][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.519750][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.539822][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.569542][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.591584][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.619661][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.640740][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.662130][T18742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1288.698609][T18742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1288.716581][T18742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1288.742684][T18752] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1288.776854][T18752] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1288.837842][T18620] Bluetooth: hci6: command tx timeout [ 1289.009181][T18754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.112779][T18742] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.137949][T18742] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.160276][T18742] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.169054][T18742] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.207440][T18752] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1289.249852][T18752] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1289.679122][T18779] chnl_net:caif_netlink_parms(): no params data found [ 1289.729740][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.737645][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.790564][T18620] Bluetooth: hci3: command tx timeout [ 1289.940505][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.948408][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.031916][T18620] Bluetooth: hci4: command tx timeout [ 1290.224751][T18752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.246983][T18779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.257377][T18779] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.280172][T18779] bridge_slave_0: entered allmulticast mode [ 1290.299759][T18779] bridge_slave_0: entered promiscuous mode [ 1290.332658][T18779] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.349961][T18779] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.357375][T18779] bridge_slave_1: entered allmulticast mode [ 1290.381699][T18779] bridge_slave_1: entered promiscuous mode [ 1290.548678][T18752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.591638][T18779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.910165][T18620] Bluetooth: hci6: command tx timeout [ 1292.907008][T18779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1292.990434][T18620] Bluetooth: hci6: command tx timeout [ 1295.072331][T18620] Bluetooth: hci6: command tx timeout [ 1295.890334][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.897543][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.987188][T18779] team0: Port device team_slave_0 added [ 1296.013677][ T3449] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.020940][ T3449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.035986][T18779] team0: Port device team_slave_1 added [ 1296.192768][T18779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1296.222465][T18779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.339058][T18779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1296.415663][T18779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1296.453350][T18779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1296.608025][T18779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1296.894806][T18779] hsr_slave_0: entered promiscuous mode [ 1296.932661][T18779] hsr_slave_1: entered promiscuous mode [ 1296.973770][T18779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1296.995083][T18779] Cannot create hsr debugfs directory [ 1297.440732][T18804] input: syz1 as /devices/virtual/input/input25 [ 1297.723049][T18752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.369939][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.376312][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.841050][T18815] kAFS: No cell specified [ 1305.201463][T18821] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4318'. [ 1305.738505][T18752] veth0_vlan: entered promiscuous mode [ 1305.799042][T18752] veth1_vlan: entered promiscuous mode [ 1305.809604][ T5842] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1305.957595][T18752] veth0_macvtap: entered promiscuous mode [ 1305.993673][T18752] veth1_macvtap: entered promiscuous mode [ 1306.032586][ T5842] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.069953][ T5842] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1306.115875][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.155783][ T5842] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1306.169564][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.189819][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.218262][ T5842] usb 9-1: Product: syz [ 1306.222689][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.243331][ T5842] usb 9-1: Manufacturer: syz [ 1306.268402][ T5842] usb 9-1: SerialNumber: syz [ 1306.282069][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.339472][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.379423][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.419395][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.456074][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.507596][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.562089][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.632758][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.645092][ T5842] cdc_ether 9-1:1.0: skipping garbage [ 1306.684888][ T5842] usb 9-1: bad CDC descriptors [ 1306.696783][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.751136][ T5842] usb 9-1: USB disconnect, device number 2 [ 1306.761049][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.835752][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.876257][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.918985][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1306.939774][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1306.976109][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.023903][T18752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.115231][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.149636][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.186482][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.238309][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.269066][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.339653][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.379624][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.449468][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.488389][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.539602][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.581575][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.625049][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.669765][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.699475][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.759509][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.809618][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.844886][T18752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.879553][T18752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.903081][T18752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1307.948393][T18752] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1307.999485][T18752] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.008302][T18752] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1308.054704][T18752] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.796103][T18833] block nbd8: NBD_DISCONNECT [ 1311.369183][T18833] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1311.719623][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.727518][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.892033][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1311.921319][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1311.938918][T18837] hpfs: Bad magic ... probably not HPFS [ 1312.040335][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4322'. [ 1320.169654][T18811] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1324.011296][T18811] usb 9-1: device descriptor read/all, error -71 [ 1326.587941][T10741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.252060][T18868] netlink: 'syz.9.4330': attribute type 13 has an invalid length. [ 1343.550874][T18893] netlink: 'syz.8.4338': attribute type 1 has an invalid length. [ 1344.610480][T18491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1344.629093][T18491] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1344.637524][T18491] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1344.646305][T18491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1344.657703][T18491] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1344.666704][T18491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1344.877985][T18620] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1344.898661][T18620] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1344.908700][T18620] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1344.920878][T18620] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1344.948351][T18620] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1344.964173][T18620] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1345.613399][T18894] chnl_net:caif_netlink_parms(): no params data found [ 1345.905970][T18898] chnl_net:caif_netlink_parms(): no params data found [ 1345.999105][T18894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.019294][T18894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.027275][T18894] bridge_slave_0: entered allmulticast mode [ 1346.051398][T18894] bridge_slave_0: entered promiscuous mode [ 1346.089723][T18894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.096921][T18894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.122595][T18894] bridge_slave_1: entered allmulticast mode [ 1346.140518][T18894] bridge_slave_1: entered promiscuous mode [ 1346.311336][T18894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.412608][T18894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.466577][T18898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.491349][T18898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1346.515168][T18898] bridge_slave_0: entered allmulticast mode [ 1346.559679][T18898] bridge_slave_0: entered promiscuous mode [ 1346.734750][T18898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.751754][T18491] Bluetooth: hci7: command tx timeout [ 1346.777510][T18898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1346.789889][T18898] bridge_slave_1: entered allmulticast mode [ 1346.820339][T18898] bridge_slave_1: entered promiscuous mode [ 1346.938002][T18894] team0: Port device team_slave_0 added [ 1346.974705][T18894] team0: Port device team_slave_1 added [ 1347.070649][T18491] Bluetooth: hci8: command tx timeout [ 1347.100595][T18898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.223461][T18898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.439796][T18894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1347.469830][T18894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.559700][T18894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.622039][T18894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.629071][T18894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1347.747214][T18620] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1347.764835][T18620] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1347.777027][T18620] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1347.785759][T18620] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1347.803505][T18620] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1347.813784][T18620] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1347.847112][T18894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1347.900464][T18898] team0: Port device team_slave_0 added [ 1348.084629][T18898] team0: Port device team_slave_1 added [ 1348.230904][T18894] hsr_slave_0: entered promiscuous mode [ 1348.253547][T18894] hsr_slave_1: entered promiscuous mode [ 1348.288514][T18894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1348.305573][T18894] Cannot create hsr debugfs directory [ 1348.376994][T18898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.399469][T18898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.449623][T18898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.490018][T18898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.497052][T18898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1348.566695][T18898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.829736][T18491] Bluetooth: hci7: command tx timeout [ 1349.018693][T18898] hsr_slave_0: entered promiscuous mode [ 1349.054264][T18898] hsr_slave_1: entered promiscuous mode [ 1349.089900][T18898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1349.097543][T18898] Cannot create hsr debugfs directory [ 1349.150080][T18491] Bluetooth: hci8: command tx timeout [ 1349.695258][T18915] chnl_net:caif_netlink_parms(): no params data found [ 1349.869856][T18491] Bluetooth: hci9: command tx timeout [ 1349.962632][T18915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.985886][T18915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.994562][T18915] bridge_slave_0: entered allmulticast mode [ 1350.022529][T18915] bridge_slave_0: entered promiscuous mode [ 1350.051724][T18915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.069739][T18915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.077129][T18915] bridge_slave_1: entered allmulticast mode [ 1350.099974][T18915] bridge_slave_1: entered promiscuous mode [ 1350.202697][T18915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1350.250721][T18915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1350.383421][T18915] team0: Port device team_slave_0 added [ 1350.403478][T18915] team0: Port device team_slave_1 added [ 1350.499846][T18915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.506881][T18915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.559824][T18915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1350.594538][T18915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1350.607466][T18915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.666879][T18915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1350.815923][T18915] hsr_slave_0: entered promiscuous mode [ 1350.871218][T18915] hsr_slave_1: entered promiscuous mode [ 1350.878405][T18915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1350.899828][T18915] Cannot create hsr debugfs directory [ 1350.914276][T18491] Bluetooth: hci7: command tx timeout [ 1351.230158][T18491] Bluetooth: hci8: command tx timeout [ 1351.960318][T18491] Bluetooth: hci9: command tx timeout [ 1352.989868][T18491] Bluetooth: hci7: command tx timeout [ 1353.310886][T18491] Bluetooth: hci8: command tx timeout [ 1354.030074][T18491] Bluetooth: hci9: command tx timeout [ 1356.110103][T18491] Bluetooth: hci9: command tx timeout [ 1360.767133][T18620] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1360.787490][T18620] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1360.799054][T18620] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1360.809548][T18620] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1360.817501][T18620] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1360.825296][T18620] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1361.344861][T18925] chnl_net:caif_netlink_parms(): no params data found [ 1361.593005][T18925] bridge0: port 1(bridge_slave_0) entered blocking state [ 1361.609484][T18925] bridge0: port 1(bridge_slave_0) entered disabled state [ 1361.616832][T18925] bridge_slave_0: entered allmulticast mode [ 1361.652297][T18925] bridge_slave_0: entered promiscuous mode [ 1361.673714][T18925] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.696380][T18925] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.714950][T18925] bridge_slave_1: entered allmulticast mode [ 1361.731116][T18925] bridge_slave_1: entered promiscuous mode [ 1361.801488][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.807852][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.879111][T18925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.917469][T18925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.034398][T18925] team0: Port device team_slave_0 added [ 1362.062073][T18925] team0: Port device team_slave_1 added [ 1362.143321][T18925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.159438][T18925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.229639][T18925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.252184][T18925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.271261][T18925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.339656][T18925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.538504][T18925] hsr_slave_0: entered promiscuous mode [ 1362.580187][T18925] hsr_slave_1: entered promiscuous mode [ 1362.612030][T18925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1362.629362][T18925] Cannot create hsr debugfs directory [ 1362.920939][T18620] Bluetooth: hci10: command tx timeout [ 1364.989609][T18620] Bluetooth: hci10: command tx timeout [ 1367.073032][T13242] Bluetooth: hci10: command tx timeout [ 1368.989974][T13242] Bluetooth: hci5: command 0x0406 tx timeout [ 1369.000686][T13242] Bluetooth: hci0: command 0x0406 tx timeout [ 1369.006762][T13242] Bluetooth: hci1: command 0x0406 tx timeout [ 1369.149615][T18395] Bluetooth: hci10: command tx timeout [ 1370.424632][T18754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.601684][T10741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.835556][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 1405.080310][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1405.092490][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1405.106345][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1405.115279][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1405.123178][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1405.131133][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1405.210806][T18395] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1405.221487][T18395] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1405.231492][T18395] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1405.243152][T18395] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1405.252504][T18395] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1405.260439][T18395] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1406.033947][T18947] chnl_net:caif_netlink_parms(): no params data found [ 1406.095020][T18948] chnl_net:caif_netlink_parms(): no params data found [ 1406.502383][T18947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.522836][T18947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.553180][T18947] bridge_slave_0: entered allmulticast mode [ 1406.572640][T18947] bridge_slave_0: entered promiscuous mode [ 1406.588775][T18948] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.608503][T18948] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.616615][T18948] bridge_slave_0: entered allmulticast mode [ 1406.651082][T18948] bridge_slave_0: entered promiscuous mode [ 1406.671622][T18947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.678854][T18947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.709967][T18947] bridge_slave_1: entered allmulticast mode [ 1406.729652][T18947] bridge_slave_1: entered promiscuous mode [ 1406.751189][T18948] bridge0: port 2(bridge_slave_1) entered blocking state [ 1406.758425][T18948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1406.779806][T18948] bridge_slave_1: entered allmulticast mode [ 1406.798147][T18948] bridge_slave_1: entered promiscuous mode [ 1406.981019][T18948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.025325][T18947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1407.080622][T18947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.137125][T18948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1407.240221][T18395] Bluetooth: hci0: command tx timeout [ 1407.316760][T18395] Bluetooth: hci1: command tx timeout [ 1407.402712][T18948] team0: Port device team_slave_0 added [ 1407.433259][T18948] team0: Port device team_slave_1 added [ 1407.519875][T18947] team0: Port device team_slave_0 added [ 1407.646856][T18947] team0: Port device team_slave_1 added [ 1407.714688][T18948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.739566][T18948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.839567][T18948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.909846][T18948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.916860][T18948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.021359][T18948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.240579][T18938] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1408.252010][T18938] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1408.261525][T18938] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1408.276882][T18938] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1408.284945][T18938] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1408.292738][T18938] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1408.350672][T18947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1408.357694][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.423126][T18947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1408.500432][T18947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1408.507459][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1408.602699][T18947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.686728][T18948] hsr_slave_0: entered promiscuous mode [ 1408.720269][T18948] hsr_slave_1: entered promiscuous mode [ 1408.740327][T18948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1408.747947][T18948] Cannot create hsr debugfs directory [ 1409.093454][T18947] hsr_slave_0: entered promiscuous mode [ 1409.132761][T18947] hsr_slave_1: entered promiscuous mode [ 1409.153272][T18947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1409.161265][T18947] Cannot create hsr debugfs directory [ 1409.309671][ T51] Bluetooth: hci0: command tx timeout [ 1409.390322][ T51] Bluetooth: hci1: command tx timeout [ 1409.867628][T18964] chnl_net:caif_netlink_parms(): no params data found [ 1409.954284][ T51] Bluetooth: hci6: command 0x0406 tx timeout [ 1410.153383][T18964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.171679][T18964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.179024][T18964] bridge_slave_0: entered allmulticast mode [ 1410.201878][T18964] bridge_slave_0: entered promiscuous mode [ 1410.234697][T18964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.252670][T18964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.269843][T18964] bridge_slave_1: entered allmulticast mode [ 1410.289474][T18964] bridge_slave_1: entered promiscuous mode [ 1410.350816][T18395] Bluetooth: hci2: command tx timeout [ 1410.388276][T18964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.430865][T18964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.536291][T18964] team0: Port device team_slave_0 added [ 1410.573800][T18964] team0: Port device team_slave_1 added [ 1410.665325][T18964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.689337][T18964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.749326][T18964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.777559][T18964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.797646][T18964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.857888][T18964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.992546][T18964] hsr_slave_0: entered promiscuous mode [ 1411.013743][T18964] hsr_slave_1: entered promiscuous mode [ 1411.037661][T18964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1411.062998][T18964] Cannot create hsr debugfs directory [ 1411.389901][T18395] Bluetooth: hci0: command tx timeout [ 1411.470436][T18395] Bluetooth: hci1: command tx timeout [ 1412.430755][T18395] Bluetooth: hci2: command tx timeout [ 1413.475215][T18395] Bluetooth: hci0: command tx timeout [ 1413.550306][T18395] Bluetooth: hci1: command tx timeout [ 1414.509977][T18395] Bluetooth: hci2: command tx timeout [ 1416.589924][T18395] Bluetooth: hci2: command tx timeout [ 1421.180496][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1421.202145][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1421.210631][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1421.218665][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1421.226803][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1421.234600][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1421.805581][T18973] chnl_net:caif_netlink_parms(): no params data found [ 1422.060160][T18973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.067408][T18973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.097064][T18973] bridge_slave_0: entered allmulticast mode [ 1422.121770][T18973] bridge_slave_0: entered promiscuous mode [ 1422.141162][T18973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.148388][T18973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.169800][T18973] bridge_slave_1: entered allmulticast mode [ 1422.188179][T18973] bridge_slave_1: entered promiscuous mode [ 1422.281183][T18973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.326302][T18973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.436404][T18973] team0: Port device team_slave_0 added [ 1422.462871][T18973] team0: Port device team_slave_1 added [ 1422.544932][T18973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.569689][T18973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1422.636102][T18973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.663718][T18973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.679812][T18973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1422.746097][T18973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1422.976761][T18973] hsr_slave_0: entered promiscuous mode [ 1422.998720][T18973] hsr_slave_1: entered promiscuous mode [ 1423.037527][T18973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1423.051922][T18973] Cannot create hsr debugfs directory [ 1423.237772][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.244403][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.309940][T18395] Bluetooth: hci3: command tx timeout [ 1423.345174][T18754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.389604][T18395] Bluetooth: hci3: command tx timeout [ 1427.469857][T18395] Bluetooth: hci3: command tx timeout [ 1429.550371][T18395] Bluetooth: hci3: command tx timeout [ 1437.792334][T10741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1444.349954][ T29] INFO: task syz-executor:18779 blocked for more than 143 seconds. [ 1444.358392][ T29] Not tainted syzkaller #0 [ 1444.389584][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1444.398346][ T29] task:syz-executor state:D stack:22344 pid:18779 ppid:1 flags:0x00004004 [ 1444.483853][ T29] Call Trace: [ 1444.487332][ T29] [ 1444.501595][ T29] __schedule+0x15ae/0x4660 [ 1444.506232][ T29] ? asan.module_dtor+0x20/0x20 [ 1444.599821][ T29] ? __mutex_lock+0x66e/0xc80 [ 1444.604621][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1444.709667][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1444.715971][ T29] schedule+0xbd/0x170 [ 1444.779983][ T29] schedule_preempt_disabled+0x13/0x20 [ 1444.785564][ T29] __mutex_lock+0x673/0xc80 [ 1444.819688][ T29] ? __mutex_lock+0x4d2/0xc80 [ 1444.824477][ T29] ? del_device_store+0xd7/0x370 [ 1444.899792][ T29] ? mutex_lock_nested+0x20/0x20 [ 1444.927526][ T29] ? __virt_addr_valid+0x10c/0x380 [ 1444.953266][ T29] del_device_store+0xd7/0x370 [ 1444.958176][ T29] ? del_port_store+0x170/0x170 [ 1444.997587][ T29] ? sysfs_kf_write+0x187/0x2a0 [ 1445.019521][ T29] ? sysfs_kf_read+0x360/0x360 [ 1445.024418][ T29] kernfs_fop_write_iter+0x3a4/0x520 [ 1445.056743][ T29] vfs_write+0x474/0x9a0 [ 1445.061678][ T29] ? file_end_write+0x250/0x250 [ 1445.066614][ T29] ? do_sys_openat2+0x170/0x1d0 [ 1445.089451][ T29] ? __fdget_pos+0x2ba/0x330 [ 1445.094156][ T29] ksys_write+0x151/0x260 [ 1445.098574][ T29] ? __ia32_sys_read+0x90/0x90 [ 1445.129561][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1445.139092][ T29] do_syscall_64+0x55/0xb0 [ 1445.149587][ T29] ? clear_bhb_loop+0x40/0x90 [ 1445.154387][ T29] ? clear_bhb_loop+0x40/0x90 [ 1445.159121][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1445.196367][ T29] RIP: 0033:0x7fadae55e98e [ 1445.201326][ T29] RSP: 002b:00007ffea5812ee8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1445.229891][ T29] RAX: ffffffffffffffda RBX: 000055558ff42500 RCX: 00007fadae55e98e [ 1445.243028][ T29] RDX: 0000000000000001 RSI: 00007ffea5812f70 RDI: 0000000000000005 [ 1445.259760][ T29] RBP: 00007fadae6358ee R08: 0000000000000000 R09: 0000000000000000 [ 1445.267810][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.306462][ T29] R13: 00007ffea5812f70 R14: 00007fadaf354620 R15: 0000000000000003 [ 1445.320811][ T29] [ 1445.329792][ T29] [ 1445.329792][ T29] Showing all locks held in the system: [ 1445.349691][ T29] 2 locks held by kworker/1:0/23: [ 1445.354800][ T29] 1 lock held by khungtaskd/29: [ 1445.369619][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1445.399721][ T29] 2 locks held by kworker/u4:10/3510: [ 1445.405172][ T29] 2 locks held by getty/5535: [ 1445.430905][ T29] #0: ffff8880320020a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1445.459687][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 1445.479386][ T29] 5 locks held by kworker/u4:13/10741: [ 1445.485018][ T29] #0: ffff88801a25d138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1445.526650][ T29] #1: ffffc9001942fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1445.546311][ T29] #2: ffffffff8e3c3950 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x140/0xb00 [ 1445.570058][ T29] #3: ffff888145277250 (&devlink->lock_key#5){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0xee/0x360 [ 1445.589481][ T29] #4: ffffffff8d137980 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 1445.609835][ T29] 4 locks held by kworker/1:1/17895: [ 1445.615203][ T29] 7 locks held by syz-executor/18754: [ 1445.648774][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1445.669603][ T29] #1: ffff88803515fc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1445.689567][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1445.719577][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1445.739331][ T29] #4: ffff88807bb0f130 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 1445.775197][ T29] #5: ffff88807bb09250 (&devlink->lock_key#9){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x170 [ 1445.800212][ T29] #6: ffffffff8d137980 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 1445.819532][ T29] 4 locks held by syz-executor/18779: [ 1445.824989][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1445.853448][ T29] #1: ffff8880672f3888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1445.882150][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1445.909664][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1445.929776][ T29] 4 locks held by syz-executor/18894: [ 1445.935220][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1445.968282][ T29] #1: ffff88801e3d5c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1445.999509][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1446.030743][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1446.047030][ T29] 4 locks held by syz-executor/18898: [ 1446.058251][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1446.080096][ T29] #1: ffff888025b66488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1446.109646][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1446.129375][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1446.150958][ T29] 4 locks held by syz-executor/18915: [ 1446.156410][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1446.189757][ T29] #1: ffff88801c79dc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1446.219691][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1446.239538][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1446.263356][ T29] 4 locks held by syz-executor/18925: [ 1446.268805][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1446.299758][ T29] #1: ffff88807c68dc88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1446.329052][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1446.360003][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1446.389437][ T29] 4 locks held by syz-executor/18947: [ 1446.394915][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1446.419312][ T29] #1: ffff888091f27888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1446.429186][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1446.469825][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1446.499552][ T29] 4 locks held by syz-executor/18948: [ 1446.505005][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1446.529626][ T29] #1: ffff888091b32888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1446.552616][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1446.579866][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1446.601613][ T29] 4 locks held by syz-executor/18964: [ 1446.607087][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1446.639591][ T29] #1: ffff8880935d6088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1446.664913][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1446.689825][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1446.719618][ T29] 4 locks held by syz-executor/18973: [ 1446.725120][ T29] #0: ffff88802cdae418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 1446.749949][ T29] #1: ffff88808ce3a088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 1446.779346][ T29] #2: ffff8880249e85d8 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 1446.809663][ T29] #3: ffffffff8dcb7068 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 1446.831615][ T29] [ 1446.834012][ T29] ============================================= [ 1446.834012][ T29] [ 1446.849495][ T29] NMI backtrace for cpu 0 [ 1446.853895][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1446.861135][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1446.871234][ T29] Call Trace: [ 1446.874550][ T29] [ 1446.877549][ T29] dump_stack_lvl+0x18c/0x250 [ 1446.882285][ T29] ? __wake_up_klogd+0xd9/0x100 [ 1446.887193][ T29] ? show_regs_print_info+0x20/0x20 [ 1446.892447][ T29] ? load_image+0x420/0x420 [ 1446.897018][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1446.902048][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1446.908263][ T29] ? load_image+0x420/0x420 [ 1446.912813][ T29] ? wq_watchdog_touch+0xef/0x170 [ 1446.917908][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1446.924034][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1446.930075][ T29] watchdog+0xf59/0xfa0 [ 1446.934349][ T29] ? watchdog+0x1e1/0xfa0 [ 1446.938737][ T29] kthread+0x2fa/0x390 [ 1446.942847][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1446.947935][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1446.952584][ T29] ret_from_fork+0x48/0x80 [ 1446.957121][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1446.961762][ T29] ret_from_fork_asm+0x11/0x20 [ 1446.966655][ T29] [ 1446.973041][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1446.980744][ C1] NMI backtrace for cpu 1 [ 1446.980755][ C1] CPU: 1 PID: 18737 Comm: kworker/1:12 Not tainted syzkaller #0 [ 1446.980774][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1446.980786][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_receive_worker [ 1446.980892][ C1] RIP: 0010:unwind_get_return_address+0x71/0xc0 [ 1446.980915][ C1] Code: 80 3c 37 00 74 08 48 89 df e8 eb 64 a4 00 48 8b 3b e8 43 49 1e 00 89 c5 31 ff 89 c6 e8 68 dc 4b 00 85 ed 74 20 e8 af d8 4b 00 <43> 80 3c 37 00 74 08 48 89 df e8 c0 64 a4 00 48 8b 03 eb 0e e8 96 [ 1446.980931][ C1] RSP: 0018:ffffc900001efd60 EFLAGS: 00000246 [ 1446.980945][ C1] RAX: ffffffff813bb2a1 RBX: ffffc900001efdd0 RCX: ffff888029e48000 [ 1446.980959][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 1446.980969][ C1] RBP: 0000000000000001 R08: ffff888029e48000 R09: 0000000000000003 [ 1446.980980][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff88870dcc [ 1446.980991][ C1] R13: 00000000000002c0 R14: dffffc0000000000 R15: 1ffff9200003dfba [ 1446.981004][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1446.981018][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1446.981029][ C1] CR2: 00007f325f0bcff8 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 1446.981045][ C1] Call Trace: [ 1446.981052][ C1] [ 1446.981060][ C1] ? stack_trace_save+0x100/0x100 [ 1446.981083][ C1] arch_stack_walk+0x11d/0x190 [ 1446.981105][ C1] ? process_backlog+0x380/0x710 [ 1446.981132][ C1] stack_trace_save+0xaa/0x100 [ 1446.981154][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1446.981176][ C1] ? stack_trace_save+0xaa/0x100 [ 1446.981197][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1446.981220][ C1] kasan_set_track+0x4e/0x70 [ 1446.981240][ C1] ? kasan_set_track+0x4e/0x70 [ 1446.981259][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1446.981278][ C1] ? slab_post_alloc_hook+0x6a/0x4d0 [ 1446.981304][ C1] ? kmem_cache_alloc_node+0x1af/0x310 [ 1446.981329][ C1] ? kmalloc_reserve+0x95/0x240 [ 1446.981348][ C1] ? __alloc_skb+0x138/0x2c0 [ 1446.981367][ C1] ? synproxy_send_client_synack+0x170/0xda0 [ 1446.981451][ C1] ? nft_synproxy_eval_v4+0x363/0x4e0 [ 1446.981505][ C1] ? nft_synproxy_do_eval+0x332/0x550 [ 1446.981526][ C1] ? nft_do_chain+0x44b/0x1620 [ 1446.981547][ C1] ? nft_do_chain_inet+0x29b/0x380 [ 1446.981590][ C1] ? nf_hook_slow+0xbd/0x200 [ 1446.981626][ C1] ? NF_HOOK+0x21d/0x3b0 [ 1446.981671][ C1] ? NF_HOOK+0x32d/0x3b0 [ 1446.981688][ C1] ? __netif_receive_skb+0xcc/0x290 [ 1446.981734][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1446.981756][ C1] slab_post_alloc_hook+0x6a/0x4d0 [ 1446.981786][ C1] kmem_cache_alloc_node+0x1af/0x310 [ 1446.981812][ C1] ? kmalloc_reserve+0x95/0x240 [ 1446.981835][ C1] kmalloc_reserve+0x95/0x240 [ 1446.981858][ C1] __alloc_skb+0x138/0x2c0 [ 1446.981880][ C1] synproxy_send_client_synack+0x170/0xda0 [ 1446.981902][ C1] ? kasan_quarantine_put+0xd8/0x220 [ 1446.981927][ C1] ? synproxy_pernet+0x45/0x270 [ 1446.981949][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1446.981973][ C1] ? synproxy_init_timestamp_cookie+0x2d0/0x2d0 [ 1446.981996][ C1] ? synproxy_pernet+0x45/0x270 [ 1446.982016][ C1] ? synproxy_pernet+0x45/0x270 [ 1446.982040][ C1] nft_synproxy_eval_v4+0x363/0x4e0 [ 1446.982066][ C1] ? nft_synproxy_do_eval+0x550/0x550 [ 1446.982086][ C1] ? __lock_acquire+0x1336/0x7d80 [ 1446.982107][ C1] ? nf_ip_checksum+0x13c/0x520 [ 1446.982126][ C1] nft_synproxy_do_eval+0x332/0x550 [ 1446.982150][ C1] ? nft_synproxy_validate+0xc0/0xc0 [ 1446.982181][ C1] nft_do_chain+0x44b/0x1620 [ 1446.982212][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 1446.982258][ C1] ? nf_nat_packet+0xf0/0xf0 [ 1446.982278][ C1] nft_do_chain_inet+0x29b/0x380 [ 1446.982300][ C1] ? nft_do_chain_arp+0x110/0x110 [ 1446.982322][ C1] ? ipt_do_table+0x2c5/0x15c0 [ 1446.982365][ C1] ? nf_nat_ipv4_local_in+0x22d/0x5d0 [ 1446.982389][ C1] ? nft_do_chain_arp+0x110/0x110 [ 1446.982410][ C1] nf_hook_slow+0xbd/0x200 [ 1446.982438][ C1] NF_HOOK+0x21d/0x3b0 [ 1446.982458][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 1446.982476][ C1] ? NF_HOOK+0x9f/0x3b0 [ 1446.982493][ C1] ? ip_local_deliver+0x180/0x180 [ 1446.982514][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 1446.982535][ C1] ? ip_local_deliver+0x10b/0x180 [ 1446.982555][ C1] NF_HOOK+0x32d/0x3b0 [ 1446.982575][ C1] ? ip_rcv_core+0xd80/0xd80 [ 1446.982593][ C1] ? NF_HOOK+0x9f/0x3b0 [ 1446.982611][ C1] ? ip_local_deliver+0x180/0x180 [ 1446.982631][ C1] ? ip_rcv_core+0xd80/0xd80 [ 1446.982652][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 1446.982672][ C1] ? ip_local_deliver_finish+0x510/0x510 [ 1446.982692][ C1] __netif_receive_skb+0xcc/0x290 [ 1446.982719][ C1] ? process_backlog+0x2cf/0x710 [ 1446.982741][ C1] process_backlog+0x380/0x710 [ 1446.982773][ C1] ? trigger_rx_softirq+0x60/0x60 [ 1446.982796][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1446.982817][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1446.982839][ C1] ? lock_chain_count+0x20/0x20 [ 1446.982860][ C1] __napi_poll+0xbb/0x460 [ 1446.982884][ C1] net_rx_action+0x65f/0xcc0 [ 1446.982914][ C1] ? net_tx_action+0x950/0x950 [ 1446.982938][ C1] ? detach_timer+0x2b0/0x2b0 [ 1446.982958][ C1] ? lock_chain_count+0x20/0x20 [ 1446.982983][ C1] handle_softirqs+0x27d/0x820 [ 1446.983004][ C1] ? do_softirq+0xfa/0x1a0 [ 1446.983023][ C1] ? do_softirq+0x1a0/0x1a0 [ 1446.983042][ C1] ? __common_interrupt+0x15b/0x230 [ 1446.983073][ C1] ? wg_index_hashtable_insert+0x107/0x870 [ 1446.983095][ C1] do_softirq+0xfa/0x1a0 [ 1446.983112][ C1] [ 1446.983117][ C1] [ 1446.983123][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 1446.983142][ C1] ? lockdep_hardirqs_on_prepare+0x7d0/0x7d0 [ 1446.983165][ C1] ? rcu_is_watching+0x15/0xb0 [ 1446.983190][ C1] __local_bh_enable_ip+0x184/0x1c0 [ 1446.983208][ C1] ? _local_bh_enable+0xa0/0xa0 [ 1446.983229][ C1] ? wg_index_hashtable_insert+0x107/0x870 [ 1446.983250][ C1] wg_index_hashtable_insert+0x809/0x870 [ 1446.983272][ C1] ? wg_index_hashtable_insert+0x107/0x870 [ 1446.983295][ C1] wg_noise_handshake_create_response+0x882/0xa80 [ 1446.983318][ C1] ? wg_noise_handshake_consume_initiation+0x9e0/0x9e0 [ 1446.983339][ C1] ? wg_noise_handshake_consume_initiation+0x848/0x9e0 [ 1446.983360][ C1] ? __up_read+0x2b8/0x6b0 [ 1446.983378][ C1] ? down_write_trylock+0x320/0x3b0 [ 1446.983407][ C1] ? mark_lock+0x94/0x320 [ 1446.983437][ C1] ? blake2s_final+0x142/0x250 [ 1446.983481][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1446.983501][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1446.983529][ C1] ? ktime_get_coarse_with_offset+0x145/0x190 [ 1446.983553][ C1] wg_packet_send_handshake_response+0x111/0x2c0 [ 1446.983577][ C1] ? wg_packet_send_queued_handshake_initiation+0x340/0x340 [ 1446.983598][ C1] ? wg_socket_set_peer_endpoint_from_skb+0xd8/0x130 [ 1446.983629][ C1] wg_packet_handshake_receive_worker+0x6a7/0x1070 [ 1446.983659][ C1] ? wg_packet_purge_staged_packets+0x210/0x210 [ 1446.983689][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1446.983709][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1446.983730][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1446.983753][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1446.983772][ C1] ? process_scheduled_works+0x975/0x1600 [ 1446.983795][ C1] ? process_scheduled_works+0x975/0x1600 [ 1446.983819][ C1] process_scheduled_works+0xa60/0x1600 [ 1446.983856][ C1] ? worker_attach_to_pool+0x370/0x370 [ 1446.983882][ C1] ? assign_work+0x3cc/0x5d0 [ 1446.983906][ C1] worker_thread+0xa5e/0xfe0 [ 1446.983936][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1446.983954][ C1] ? __kthread_parkme+0x71/0x1c0 [ 1446.983976][ C1] kthread+0x2fa/0x390 [ 1446.983993][ C1] ? pr_cont_work+0x550/0x550 [ 1446.984014][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1446.984032][ C1] ret_from_fork+0x48/0x80 [ 1446.984052][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1446.984070][ C1] ret_from_fork_asm+0x11/0x20 [ 1446.984101][ C1] [ 1447.972989][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1447.979917][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1447.987159][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1447.997252][ T29] Call Trace: [ 1448.000570][ T29] [ 1448.003534][ T29] dump_stack_lvl+0x18c/0x250 [ 1448.008267][ T29] ? show_regs_print_info+0x20/0x20 [ 1448.013521][ T29] ? load_image+0x420/0x420 [ 1448.018104][ T29] panic+0x2ca/0x720 [ 1448.022052][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1448.026601][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1448.032217][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 1448.037656][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1448.043877][ T29] watchdog+0xf98/0xfa0 [ 1448.048087][ T29] ? watchdog+0x1e1/0xfa0 [ 1448.052471][ T29] kthread+0x2fa/0x390 [ 1448.056577][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1448.061663][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1448.066301][ T29] ret_from_fork+0x48/0x80 [ 1448.070766][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1448.075398][ T29] ret_from_fork_asm+0x11/0x20 [ 1448.080228][ T29] [ 1448.083864][ T29] Kernel Offset: disabled [ 1448.088211][ T29] Rebooting in 86400 seconds..