last executing test programs: 10.743841041s ago: executing program 3 (id=431): fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x58, 0xa) 10.430268953s ago: executing program 0 (id=434): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x310, 0x0, 0x240, 0x0, 0x400, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100008, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) symlink(&(0x7f00000005c0)='./control\x00', &(0x7f0000000600)='./control\x00') sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102384, 0x18ff0) umount2(0x0, 0xf00) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x600880d4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') pread64(r2, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) io_uring_setup(0xc01, 0x0) 9.862090918s ago: executing program 3 (id=436): socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.670557258s ago: executing program 0 (id=437): socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') 8.005879909s ago: executing program 2 (id=438): socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 7.996367741s ago: executing program 0 (id=439): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010101}, 0x29) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0_macvtap\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x90009, 0x3}, {0x8000006, 0x6}]}}) r3 = syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f0000000940)={{r3}, "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"}) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0xa, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x400}) syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000001, 0x2000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}}, 0x40) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) ioctl$MON_IOCX_GETX(r4, 0x80089203, 0x0) 7.952408428s ago: executing program 3 (id=440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0xf, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180), 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, "b9c5ec18837993a6", "74dd7a79b4b7c3fa449d7b06d28000000000fb9eab60000000000000000000a1", "6ebc780b", "3f23b1802d00cd92"}, 0x38) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x170}, 0x4080) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f00000004c0)={0x0, [0x2, 0xfeff133a, 0x2], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0x400ffff}, {}, {0x1}, {0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x2, 0xfffffffc}, {0x80000001, 0x4}, {0x0, 0x1}, {0x0, 0xffffffff}, {0x7fff}], 0x16, 0x0, 0x0, 0x8000000}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffff00, 0x1}}, './file0\x00'}) syz_usb_connect$uac3(0x3, 0x80, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000400)="0f217366f0101066b99c01000066b80b00000066ba000000000f30660fc770b60f09670f201564d3780066b98e09000066b80000000066ba008000000f300f23160f01ca"}], 0x5b, 0x78, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x800) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) 6.862451911s ago: executing program 1 (id=441): socket$inet6(0xa, 0x2, 0x1000007) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000b30000000000000000000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0780000024110000201f6ed871648b00840d3eec0000", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sendfile(r4, r4, 0x0, 0x200000) 6.706680657s ago: executing program 1 (id=442): socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x59) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500005800000000002f907800000000e0000001b48065580000000010000800000086dd080088be00"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgrp(0x0) r3 = getuid() keyctl$get_persistent(0x16, r3, 0xfffffffffffffffb) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x922bac8576b92dde) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007700)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 5.747834338s ago: executing program 1 (id=443): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) sendmmsg$inet6(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002940)}}], 0x1, 0xc000) 5.678272379s ago: executing program 2 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x6, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 4.023337196s ago: executing program 0 (id=445): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x310, 0x0, 0x240, 0x0, 0x400, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100008, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) symlink(&(0x7f00000005c0)='./control\x00', &(0x7f0000000600)='./control\x00') sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102384, 0x18ff0) umount2(0x0, 0xf00) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x600880d4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') pread64(r2, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) io_uring_setup(0xc01, 0x0) 3.852801975s ago: executing program 0 (id=446): r0 = socket(0x2, 0x80805, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000880)=ANY=[], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r4}) 3.827208759s ago: executing program 2 (id=447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040880}, 0x44808) 3.686402113s ago: executing program 2 (id=448): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) mkdir(0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x599681) ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f00000000c0)={0x400, 0x7, 0x3, 0x5, 0xc, 0x6, 0x5, 0x6}) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000180)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400888d}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xca5d, 0x5179}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 2.21273473s ago: executing program 0 (id=449): openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_procfs$userns(r0, &(0x7f0000000040)) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x2, 0x2}, 0x1}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0xfd}, 0x2062) r6 = bpf$MAP_CREATE(0x7000000, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf250200000008000800", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000002300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x4e23, 0x0, 0x4e22, 0x5, 0x2, 0x20, 0x120, 0x21, 0x0, 0xee01}, {0x5, 0x80, 0x9, 0x85, 0x80000001, 0x4, 0x6, 0x401}, {0x5, 0x5, 0x5, 0x1}, 0xffffffff, 0x6e6bb8, 0x0, 0x0, 0x2, 0x2}, {{@in=@multicast2, 0x4d4, 0x32}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3506, 0x0, 0x1, 0xfc, 0x3, 0x802, 0x5}}, 0xe8) close(0x3) ioctl$TIOCMGET(r8, 0x5415, &(0x7f0000000280)) 2.198422742s ago: executing program 3 (id=450): socket$inet6(0xa, 0x2, 0x1000007) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000800) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2041, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x7ffffffc}, 0x8) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000b30000000000000000000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0780000024110000201f6ed871648b00840d3eec0000", @ANYRES32=r3, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) sendfile(r4, r4, 0x0, 0x200000) 2.066352744s ago: executing program 2 (id=451): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.762612925s ago: executing program 1 (id=452): socket$key(0xf, 0x3, 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x59) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000008004500005800000000002f907800000000e0000001b48065580000000010000800000086dd080088be00000000100000008035"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgrp(0x0) r3 = getuid() keyctl$get_persistent(0x16, r3, 0xfffffffffffffffb) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000000), &(0x7f0000000240)=0x4) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0xa, 0x4, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}, 0x922bac8576b92dde) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) symlink(0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007700)=@newtfilter={0x2c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 984.213386ms ago: executing program 2 (id=453): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0xcc19, 0x13000, 0x0, 0x301}, 0x0, &(0x7f0000000140), &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x9, 0x90, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x28, 0x4, 0x4, 0x9a, {0x7, 0x25, 0x1, 0xc, 0x8, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd, 0x0, 0xd}, @as_header={0x7, 0x24, 0x1, 0x7f, 0xfe, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x40, 0xd7, 0x7, {0x7, 0x25, 0x1, 0xc, 0x80, 0x861}}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) sendmsg$nl_generic(r1, 0x0, 0x4008094) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100), 0x0, 0x24008094) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000400)={&(0x7f00004c2000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/246, 0xf6, 0x0, &(0x7f0000000340)=""/140, 0x8c}, &(0x7f0000000440)=0x40) io_uring_enter(r0, 0x1, 0x71a3, 0x9, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r7, &(0x7f0000002a40)={0x2020}, 0x2020) 745.580046ms ago: executing program 3 (id=454): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x6, 0x2, 0x0, {0x0, 0x9}, {0x4000350, 0x20002, 0xfffffff9}, {0xf4ef}, {0x4000005, 0x400, 0x1}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3b, 0x0, 0x3, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20060400) fsync(0xffffffffffffffff) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(r5, &(0x7f0000000100)='./file2\x00', 0x181) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000280000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xbb3ee8a9a53c79b, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000, @value=r5}, 0x94) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getown(r0, 0x9) 690.611805ms ago: executing program 1 (id=455): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x310, 0x0, 0x240, 0x0, 0x400, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100008, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) symlink(&(0x7f00000005c0)='./control\x00', &(0x7f0000000600)='./control\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102384, 0x18ff0) umount2(0x0, 0xf00) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x600880d4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') pread64(r2, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) io_uring_setup(0xc01, 0x0) 54.342741ms ago: executing program 1 (id=456): madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x520, 0x310, 0x0, 0x240, 0x0, 0x400, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x100008, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) symlink(&(0x7f00000005c0)='./control\x00', &(0x7f0000000600)='./control\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102384, 0x18ff0) umount2(0x0, 0xf00) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, 0x0, 0x600880d4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') pread64(r3, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) io_uring_setup(0xc01, 0x0) 0s ago: executing program 3 (id=457): r0 = socket(0x2, 0x80805, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x40045731, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x14, 0x46, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}}, 0x14}}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f0000000880)=ANY=[], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x5, {}, {0x4, 0x8, 0x8, 0x4, 0x29, 0x9, "0adb3ff8"}, 0x1000003, 0x1, {}, 0x0, 0x0, r4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 75.502629][ T5756] cgroup: Unknown subsys name 'net' [ 75.661840][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.019728][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.067338][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.076341][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.084442][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.092678][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.101110][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.109060][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.116483][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.123250][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.124551][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.138212][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.146627][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.154390][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.164038][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.171787][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.179558][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.185794][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.186807][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.202067][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.210538][ T5089] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.223721][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.237990][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.246078][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.254299][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.261852][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.641908][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 79.675821][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 79.764291][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 79.848180][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.856225][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.863516][ T5767] bridge_slave_0: entered allmulticast mode [ 79.871003][ T5767] bridge_slave_0: entered promiscuous mode [ 79.889955][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.897133][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.904277][ T5769] bridge_slave_0: entered allmulticast mode [ 79.911705][ T5769] bridge_slave_0: entered promiscuous mode [ 79.919272][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.926468][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.933612][ T5769] bridge_slave_1: entered allmulticast mode [ 79.940580][ T5769] bridge_slave_1: entered promiscuous mode [ 79.948505][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 79.970987][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.978278][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.986091][ T5767] bridge_slave_1: entered allmulticast mode [ 79.992759][ T5767] bridge_slave_1: entered promiscuous mode [ 80.050233][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.061574][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.088836][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.100120][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.169967][ T5769] team0: Port device team_slave_0 added [ 80.181129][ T5767] team0: Port device team_slave_0 added [ 80.187718][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.197577][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.204703][ T5766] bridge_slave_0: entered allmulticast mode [ 80.211905][ T5766] bridge_slave_0: entered promiscuous mode [ 80.227676][ T5769] team0: Port device team_slave_1 added [ 80.243747][ T5767] team0: Port device team_slave_1 added [ 80.250323][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.257720][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.264889][ T5766] bridge_slave_1: entered allmulticast mode [ 80.271578][ T5766] bridge_slave_1: entered promiscuous mode [ 80.328775][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.335823][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.361834][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.373723][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.381253][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.388717][ T5771] bridge_slave_0: entered allmulticast mode [ 80.395853][ T5771] bridge_slave_0: entered promiscuous mode [ 80.420875][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.427909][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.453911][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.467234][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.474182][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.500509][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.512367][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.519830][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.527134][ T5771] bridge_slave_1: entered allmulticast mode [ 80.533802][ T5771] bridge_slave_1: entered promiscuous mode [ 80.542722][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.553753][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.560812][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.586789][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.624217][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.682157][ T5769] hsr_slave_0: entered promiscuous mode [ 80.689062][ T5769] hsr_slave_1: entered promiscuous mode [ 80.710652][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.722616][ T5766] team0: Port device team_slave_0 added [ 80.731939][ T5766] team0: Port device team_slave_1 added [ 80.750647][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.783729][ T5767] hsr_slave_0: entered promiscuous mode [ 80.791524][ T5767] hsr_slave_1: entered promiscuous mode [ 80.798598][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.806771][ T5767] Cannot create hsr debugfs directory [ 80.849177][ T5771] team0: Port device team_slave_0 added [ 80.856302][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.863255][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.889498][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.910593][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.917625][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.943640][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.969374][ T5771] team0: Port device team_slave_1 added [ 81.052142][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.059441][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.086594][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.118257][ T5766] hsr_slave_0: entered promiscuous mode [ 81.124486][ T5766] hsr_slave_1: entered promiscuous mode [ 81.131259][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.138943][ T5766] Cannot create hsr debugfs directory [ 81.157198][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.164154][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.190265][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.269857][ T5779] Bluetooth: hci1: command tx timeout [ 81.270112][ T5089] Bluetooth: hci0: command tx timeout [ 81.275941][ T51] Bluetooth: hci2: command tx timeout [ 81.342711][ T5771] hsr_slave_0: entered promiscuous mode [ 81.348579][ T51] Bluetooth: hci3: command tx timeout [ 81.354763][ T5771] hsr_slave_1: entered promiscuous mode [ 81.361155][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.369241][ T5771] Cannot create hsr debugfs directory [ 81.493943][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.527508][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.561475][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.570840][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.651797][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.683669][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.698891][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.719809][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.777082][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.789947][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.812486][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.822891][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.894500][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.916483][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.937348][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.948694][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.975600][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.031816][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.062329][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.084632][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.091886][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.116953][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.124095][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.164664][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.202203][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.209437][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.279225][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.286421][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.311829][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.346127][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.361513][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.439020][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.468056][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.499592][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.506778][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.536535][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.543699][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.568327][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.575518][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.631798][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.639000][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.690586][ T5766] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.708666][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.943034][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.113625][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.146781][ T5769] veth0_vlan: entered promiscuous mode [ 83.192475][ T5769] veth1_vlan: entered promiscuous mode [ 83.256156][ T5769] veth0_macvtap: entered promiscuous mode [ 83.301331][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.316512][ T5769] veth1_macvtap: entered promiscuous mode [ 83.344506][ T5767] veth0_vlan: entered promiscuous mode [ 83.346063][ T51] Bluetooth: hci2: command tx timeout [ 83.352508][ T5089] Bluetooth: hci1: command tx timeout [ 83.357262][ T5779] Bluetooth: hci0: command tx timeout [ 83.399725][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.409394][ T5767] veth1_vlan: entered promiscuous mode [ 83.420878][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.430302][ T51] Bluetooth: hci3: command tx timeout [ 83.448597][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.474183][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.485875][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.494600][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.503800][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.534314][ T5766] veth0_vlan: entered promiscuous mode [ 83.573051][ T5766] veth1_vlan: entered promiscuous mode [ 83.613305][ T5767] veth0_macvtap: entered promiscuous mode [ 83.642388][ T5767] veth1_macvtap: entered promiscuous mode [ 83.656527][ T5771] veth0_vlan: entered promiscuous mode [ 83.724275][ T5771] veth1_vlan: entered promiscuous mode [ 83.734643][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.741586][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.756323][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.765083][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.778371][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.828167][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.838984][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.850499][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.860583][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.862735][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.878959][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.887778][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.888054][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.903782][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.940624][ T5766] veth0_macvtap: entered promiscuous mode [ 83.964731][ T5766] veth1_macvtap: entered promiscuous mode [ 84.044401][ T5771] veth0_macvtap: entered promiscuous mode [ 84.054592][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.068976][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.078864][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.089322][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.101190][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.124671][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.140256][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.164801][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.176143][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.188334][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.209275][ T5771] veth1_macvtap: entered promiscuous mode [ 84.219589][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.231762][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.237308][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.251159][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.260168][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.269046][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.329420][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.337921][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.350825][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.364383][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.376829][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.387464][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.397653][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.408528][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.419912][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.450180][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.463123][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.473811][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.484367][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.494196][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.505009][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.522691][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.560317][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.578274][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.595219][ T5812] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.615010][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.623740][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.687123][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.718613][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.740056][ T5841] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 84.746771][ T5841] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 84.775778][ T5841] vhci_hcd vhci_hcd.0: Device attached [ 84.805389][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 84.815465][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.840620][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.844321][ T5812] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 84.853396][ T5842] vhci_hcd: connection closed [ 84.859539][ T49] vhci_hcd: stop threads [ 84.879481][ T5812] usb 1-1: config 0 has no interface number 0 [ 84.886052][ T5812] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 84.887011][ T49] vhci_hcd: release socket [ 84.904189][ T49] vhci_hcd: disconnect device [ 84.924237][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.958021][ T5812] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 84.973115][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.981813][ T5812] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.002939][ T5812] usb 1-1: Product: syz [ 85.008082][ T5812] usb 1-1: Manufacturer: syz [ 85.012720][ T5812] usb 1-1: SerialNumber: syz [ 85.034198][ T5812] usb 1-1: config 0 descriptor?? [ 85.047778][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.061346][ T5812] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 85.072883][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.192149][ T5849] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.272257][ T5812] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 85.279116][ T5852] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4'. [ 85.326520][ T5812] quatech2: probe of 1-1:0.51 failed with error -8 [ 85.393607][ T5855] syz.3.5[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.426388][ T5779] Bluetooth: hci1: command tx timeout [ 85.432446][ T5779] Bluetooth: hci0: command tx timeout [ 85.438636][ T51] Bluetooth: hci2: command tx timeout [ 85.505484][ T51] Bluetooth: hci3: command tx timeout [ 85.525702][ T5812] usb 1-1: USB disconnect, device number 2 [ 86.296780][ T5861] comedi comedi0: Minor 3 could not be opened [ 87.407312][ T5867] binder: 5864:5867 unknown command 1074553619 [ 87.414431][ T5867] binder: 5864:5867 ioctl c0306201 200000000000 returned -22 [ 87.535657][ T51] Bluetooth: hci1: command tx timeout [ 87.550821][ T51] Bluetooth: hci2: command tx timeout [ 87.556980][ T51] Bluetooth: hci0: command tx timeout [ 87.746115][ T51] Bluetooth: hci3: command tx timeout [ 88.328088][ T5876] loop2: detected capacity change from 0 to 128 [ 88.350838][ T5876] FAT-fs (loop2): Unrecognized mount option "184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#" or missing value [ 89.079945][ T5780] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 89.415722][ T5809] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.714911][ T5809] usb 3-1: Using ep0 maxpacket: 16 [ 89.755931][ T5809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.789405][ T5809] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 89.801768][ T5809] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 89.813958][ T5809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.822260][ T5809] usb 3-1: Product: syz [ 89.826590][ T5809] usb 3-1: Manufacturer: syz [ 89.831280][ T5809] usb 3-1: SerialNumber: syz [ 90.164676][ T5885] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.445708][ T5886] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14'. [ 91.449714][ T5758] usb 3-1: USB disconnect, device number 2 [ 91.643370][ T5900] binder: 5897:5900 unknown command 1074553619 [ 91.649791][ T5900] binder: 5897:5900 ioctl c0306201 200000000000 returned -22 [ 92.040237][ T5896] comedi comedi0: Minor 3 could not be opened [ 92.490994][ T9] cfg80211: failed to load regulatory.db [ 95.701047][ T5935] binder: 5933:5935 unknown command 1074553619 [ 95.707484][ T5935] binder: 5933:5935 ioctl c0306201 200000000000 returned -22 [ 96.745418][ T5937] comedi comedi0: Minor 3 could not be opened [ 96.898282][ T5948] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 99.326987][ T5976] binder: 5974:5976 unknown command 1074553619 [ 99.333567][ T5976] binder: 5974:5976 ioctl c0306201 200000000000 returned -22 [ 100.514600][ T5983] syzkaller0: entered promiscuous mode [ 100.528232][ T5983] syzkaller0: entered allmulticast mode [ 101.630870][ T5998] Zero length message leads to an empty skb [ 102.225733][ T5999] overlayfs: failed to resolve './file2': -2 [ 102.273615][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 102.294940][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 102.310824][ T6006] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.320133][ T6006] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.328964][ T6006] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.338288][ T6006] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.403105][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 102.436747][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 105.520346][ T6040] overlayfs: failed to resolve './file2': -2 [ 110.744501][ T6116] 9pnet_fd: Insufficient options for proto=fd [ 112.435182][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.644989][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 112.655723][ T23] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 112.677166][ T23] usb 3-1: config 0 has no interface number 0 [ 112.683313][ T23] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 112.725611][ T23] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 112.744336][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.762246][ T23] usb 3-1: Product: syz [ 112.773444][ T23] usb 3-1: Manufacturer: syz [ 112.792536][ T23] usb 3-1: SerialNumber: syz [ 112.811811][ T23] usb 3-1: config 0 descriptor?? [ 112.828130][ T23] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.027979][ T23] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 113.050845][ T23] quatech2: probe of 3-1:0.51 failed with error -8 [ 113.234387][ T23] usb 3-1: USB disconnect, device number 3 [ 113.956565][ T6147] 9pnet_fd: Insufficient options for proto=fd [ 115.587696][ T6165] loop2: detected capacity change from 0 to 128 [ 115.596134][ T6165] FAT-fs (loop2): Unrecognized mount option "184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#" or missing value [ 116.194833][ C0] sched: RT throttling activated [ 116.345191][ T5780] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 116.674979][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 116.885058][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 116.904093][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 116.925268][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.944969][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.949264][ T9] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 116.982813][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 117.004921][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.023157][ T9] usb 3-1: Product: syz [ 117.027560][ T9] usb 3-1: Manufacturer: syz [ 117.032416][ T9] usb 3-1: SerialNumber: syz [ 117.135163][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 117.151032][ T23] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.163675][ T23] usb 1-1: config 0 has no interface number 0 [ 117.171706][ T23] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 117.193445][ T23] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 117.204064][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.215006][ T23] usb 1-1: Product: syz [ 117.219254][ T23] usb 1-1: Manufacturer: syz [ 117.223909][ T23] usb 1-1: SerialNumber: syz [ 117.254515][ T23] usb 1-1: config 0 descriptor?? [ 117.272138][ T23] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 117.473150][ T23] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 117.481758][ T23] quatech2: probe of 1-1:0.51 failed with error -8 [ 117.798520][ T9] usb 1-1: USB disconnect, device number 3 [ 118.351199][ T23] usb 3-1: USB disconnect, device number 4 [ 119.244855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 122.110417][ T6230] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 124.292696][ T6247] 9pnet_fd: Insufficient options for proto=fd [ 124.295117][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.524983][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 124.541111][ T9] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 124.564442][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.586717][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 124.608129][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 124.635293][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.660217][ T9] usb 1-1: Product: syz [ 124.668085][ T9] usb 1-1: Manufacturer: syz [ 124.682393][ T9] usb 1-1: SerialNumber: syz [ 126.727680][ T5823] usb 1-1: USB disconnect, device number 4 [ 128.286217][ T6296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.143'. [ 129.705670][ T6307] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 130.776135][ T6317] overlayfs: failed to resolve './file2': -2 [ 133.437831][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.444540][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.586837][ T6353] 9pnet_fd: Insufficient options for proto=fd [ 134.869998][ T6355] overlayfs: failed to resolve './file2': -2 [ 136.635473][ T969] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 136.835305][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 136.905048][ T969] usb 3-1: Using ep0 maxpacket: 16 [ 136.925234][ T969] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 136.938178][ T969] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.956935][ T969] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 136.993100][ T969] usb 3-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 137.015241][ T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.023628][ T969] usb 3-1: Product: syz [ 137.025053][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 137.029366][ T969] usb 3-1: Manufacturer: syz [ 137.037943][ T969] usb 3-1: SerialNumber: syz [ 137.072942][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 137.117839][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 137.149784][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 137.160783][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.188716][ T9] usb 4-1: Product: syz [ 137.195814][ T9] usb 4-1: Manufacturer: syz [ 137.206781][ T9] usb 4-1: SerialNumber: syz [ 139.484435][ T6417] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 139.966541][ T8] usb 3-1: USB disconnect, device number 5 [ 139.986253][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 139.994171][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 140.146598][ T9] usb 4-1: USB disconnect, device number 2 [ 142.285029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 145.577434][ T6469] overlayfs: conflicting lowerdir path [ 148.003972][ T6493] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 149.025036][ T971] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 149.250405][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.272932][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.408142][ T971] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.427767][ T971] usb 1-1: no configurations [ 149.432526][ T971] usb 1-1: can't read configurations, error -22 [ 152.384110][ T6526] overlayfs: conflicting lowerdir path [ 152.587149][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.002943][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.030257][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.242537][ T8] usb 3-1: unable to get BOS descriptor or descriptor too short [ 153.280751][ T8] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 153.288838][ T8] usb 3-1: can't read configurations, error -71 [ 153.443884][ T6539] comedi comedi0: Minor 3 could not be opened [ 154.545372][ T51] Bluetooth: hci3: command tx timeout [ 157.235242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 160.356146][ T6575] comedi comedi0: Minor 3 could not be opened [ 162.355220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 162.764883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 166.452971][ T6600] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 166.779187][ T6609] binder: 6608:6609 ioctl c0306201 0 returned -14 [ 171.083482][ T6649] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 173.937072][ T971] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 175.155232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 176.680157][ T6683] binder: 6682:6683 ioctl c0306201 0 returned -14 [ 186.212963][ T5779] Bluetooth: hci3: command tx timeout [ 188.894222][ T6765] binder: 6764:6765 ioctl c0306201 0 returned -14 [ 189.778459][ T6771] 9pnet_fd: Insufficient options for proto=fd [ 194.389084][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 194.870767][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.877597][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.635405][ T6827] binder: 6826:6827 ioctl c0306201 0 returned -14 [ 196.652594][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 196.663059][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 196.681048][ T6829] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.689944][ T6829] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.698725][ T6829] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.707920][ T6829] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.735365][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'. [ 196.745187][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.284'. [ 200.277783][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 200.291529][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 200.302786][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 200.322388][ T6860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 201.133145][ T6871] ptrace attach of "./syz-executor exec"[5767] was attempted by " [ 202.077641][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 202.175949][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 202.182018][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 202.190940][ T5770] Bluetooth: hci3: command 0x0405 tx timeout [ 203.175700][ T6884] binder: 6883:6884 ioctl c0306201 0 returned -14 [ 206.284907][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 207.142088][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 207.161457][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.1.304'. [ 212.114218][ T6961] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 215.624360][ T6973] binder: 6971:6973 ioctl c0306201 0 returned -14 [ 216.825448][ T6989] overlayfs: failed to clone upperpath [ 221.305062][ T5812] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 221.497159][ T5812] usb 3-1: Using ep0 maxpacket: 32 [ 221.514194][ T5812] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 221.526033][ T5812] usb 3-1: config 0 has no interface number 0 [ 221.532967][ T5812] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.554914][ T5812] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 221.570732][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.584486][ T5812] usb 3-1: Product: syz [ 221.590645][ T5812] usb 3-1: Manufacturer: syz [ 221.598114][ T5812] usb 3-1: SerialNumber: syz [ 221.608335][ T5812] usb 3-1: config 0 descriptor?? [ 221.630049][ T5812] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 221.833538][ T5812] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 221.842196][ T5812] quatech2: probe of 3-1:0.51 failed with error -8 [ 222.248027][ T5758] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 222.280942][ T5812] usb 3-1: USB disconnect, device number 9 [ 222.323628][ T7042] binder: 7041:7042 ioctl c0306201 0 returned -14 [ 222.465216][ T5758] usb 1-1: Using ep0 maxpacket: 16 [ 222.472813][ T5758] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.483485][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 222.494951][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 222.505140][ T5758] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 222.525158][ T5758] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.543172][ T5758] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 222.557173][ T5758] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 222.565533][ T5758] usb 1-1: Manufacturer: syz [ 222.573074][ T5758] usb 1-1: config 0 descriptor?? [ 222.867032][ T5758] rc_core: IR keymap rc-hauppauge not found [ 222.876709][ T5758] Registered IR keymap rc-empty [ 222.882094][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 222.918278][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.057455][ T5758] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 223.072238][ T5758] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 223.094524][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.140749][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.185169][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.215030][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.255235][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.285124][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.324992][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.365225][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.405028][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.434962][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.465016][ T5758] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 223.500735][ T5758] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 223.513578][ T5758] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 223.531081][ T5758] usb 1-1: USB disconnect, device number 7 [ 225.634970][ T788] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 225.836132][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 225.856614][ T788] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.885022][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.915003][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.934633][ T788] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.968308][ T788] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.987726][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.220462][ T788] usb 3-1: usb_control_msg returned -32 [ 226.363673][ T788] usbtmc 3-1:16.0: can't read capabilities [ 226.452014][ T788] usb 3-1: USB disconnect, device number 10 [ 226.689420][ T7080] overlayfs: conflicting lowerdir path [ 231.284535][ T5773] Bluetooth: hci3: command 0x0405 tx timeout [ 232.897479][ T7134] ptrace attach of "./syz-executor exec"[5771] was attempted by "./syz-executor exec"[7134] [ 233.049603][ T969] libceph: connect (1)[c::]:6789 error -101 [ 233.060470][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 233.593846][ T969] libceph: connect (1)[c::]:6789 error -101 [ 233.602151][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 234.159278][ T7136] ceph: No mds server is up or the cluster is laggy [ 234.167735][ T969] libceph: connect (1)[c::]:6789 error -101 [ 234.173797][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 236.445404][ T7157] overlayfs: failed to clone upperpath [ 242.838833][ T7206] overlayfs: failed to clone upperpath [ 247.279337][ T7252] ptrace attach of "./syz-executor exec"[5771] was attempted by "./syz-executor exec"[7252] [ 250.614114][ T7265] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 252.142800][ T7287] overlayfs: conflicting lowerdir path Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.