last executing test programs: 26m15.358166102s ago: executing program 32 (id=225): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r0, 0x0, 0x0, 0x85, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40c002, 0x0) write$dsp(r4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r5, &(0x7f0000000480)=""/74, 0x4a) write$char_usb(r5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af25, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_open_procfs$pagemap(0x0, 0x0) 25m55.744553306s ago: executing program 33 (id=255): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x80000000, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc383, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r4 = epoll_create(0xaf2) epoll_pwait2(r4, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)={0xe000200f}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10, 0xfffffffc}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, 0x0, 0x0, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = geteuid() getresgid(&(0x7f0000000b00)=0x0, &(0x7f0000000b40), &(0x7f0000000b80)) sendmmsg$unix(r2, &(0x7f0000000c40)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000380)="cece55ab574ed82ce621312248acacac1c363c94e2fec819d12c8cefb16fa037b85e22a3025dae4b8a9a98", 0x2b}, {&(0x7f00000004c0)="14ed2660205ff11b3ca6dc8d470e6bca0c0a32adc42df35baad3768e0a1adaa951b3c1ebb2b5803651dd39827f0bd5c5128e3f1421e8d5975aea4d04bb1d5590aa796119564110d65da8adf184c66660dc230c147a386e71d6df31f86d32940b09b0295f61e09ac029192dfa419298f50368585d48be861e47488259e9803db717adf456829bd8dbfdf4bd67de372b29f2cbd9e6661e0949e5256d62b84c52428c510734c6d45120836802543c814d8d8ca7feec7f60d71d154f1a65eb46789287936deecc8a983939a86aa406c9a4cdaf7850dc3f949ee95cfd463728ed31956aa0dc2c59e4cd98baaa20ad12", 0xed}, {&(0x7f00000005c0)="8e6bf5f157bee120d5721ebe14eb6375a82bbb35927f22e9b61d532bd4ab6ae6c49b41545da5965dfcb745822e3663f77847835ffe5f16cdf843c51396019f5b3f3ca0f60553531ec1a01830ffbeed478c550b4600f7092a38954e2bd78b51f6ceb6cda7596756c93530f718ff6ca0aa50caad3a4e129f782a490ebba9b1cb34a6c8c067fb86ec83613ad928d1e28bb868182b0511640a801b5058f1342fe1c5d26e5091c50ff6867e1b3cb3eaaa44abedd00def5bf2a9f91bbbcee2cf0f9ed5", 0xc0}, {&(0x7f0000000680)="2fded74d820d02eb5550e781609a3a37ff57a4a461d7d4742a32eaaafa75095d2dab7131cb19829d3d72db", 0x2b}, {&(0x7f00000006c0)="5170124bcca178b4750e0d496eb55a82cc17fe39bd105a7395ea28377561796aae4610f04bc4cd2cd65232189f868eca24e04151af3b0b943b84c8d1cb71b8eaba206e3a8c99d8a1daad37b9152b48224616d80a56aeeef9de64f735dfae4c085c72dc8ae8511b3792cca51fb12d8d7f45b42de90255b876c22fe701b77866e3f517ed064b82936f12be3e266a36acb482787168416e4a4ba1d819d5835a1de767b3721d7cbc3d619bbc5934a6a89e47a72c4ceee6fc646a6854130e8abf8b3e3487a7d2d6e5", 0xc6}, {&(0x7f00000007c0)="0cc079510a21cff9e48727c96380d94cb33b15631aa786467c8c0f7997769b3afc2de8e9dc84c8f3987fbdde", 0x2c}, {&(0x7f0000000800)="5a2d5dab6fa2c2a8695fdfc9834c2fbfd6e97c749e050760a037d7305415869d22d7c65a9bb041ab8a01ddd28bdd93c375e927a98402ee21699ac570c768da1c463c3d7890320e223713adcbeae974b4fee08a91759921313a965f03d875f5d5e712d625ebaa95e9ff736fbdd7ee68981a8c77d71f9f3db8fe4dca9b6c09268e5651e0918226d6b83a7a46ad0cec0bd5caee04936b9d3d01254a74939ca87f4ab594ec748962aff337e1", 0xaa}, {&(0x7f00000008c0)="0e668d11b46f1b75df9959885db9c6709b7ddd79cbbc1821ed34f452ee2d44f71134fab9932c9f5f808d420cdbe10e299f1a8525440b2c19fb5aec7c34329ac7418ec9e7075dece198c17046ae7812fbfcf9b17563cd0f73a2449df3f8a9e4c85ede3b024c628d8c347430f8fb25eec009cb4afb89d426b94af2d76d8f93", 0x7e}, {&(0x7f0000000940)="30416c04a6d6f870cd5ed6b9dfb51f0deb96afcb3a0e2be49c285868f26a142940af91716e28238ba7177f65be1efdb502f7513c5266a60a5f72a24ce12ba551296ae4f55b45da462c6200fdad", 0x4d}], 0x9, &(0x7f0000000bc0)=ANY=[@ANYBLOB="2c0000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32, @ANYBLOB="18000000030000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="180000000100000002000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r6], 0x5c, 0x2400c800}}], 0x1, 0x2400c845) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000070000000400000080000000", @ANYRES32, @ANYBLOB="00000000000076be964707900100"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000400000000001100007cbcdddf1b2d7bf437877b1a90de583355e6e204f03f5433d2e638aefce5e0c898675654a68c69a0e1d12d90c6785dbbc9d091bca7fad0cb6805f628", @ANYRES32=r7, @ANYRESOCT=r5], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 25m45.727017341s ago: executing program 34 (id=267): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1a, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e76, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xc}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xd0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 23m36.760320763s ago: executing program 35 (id=444): socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8d2, 0x0, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000000)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) io_uring_setup(0x30a9, &(0x7f0000000140)={0x0, 0x5402, 0x4000, 0xffffffff, 0x14c}) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r3 = syz_io_uring_setup(0x496, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r3}, 0x0, &(0x7f0000000100), &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r1, &(0x7f0000002000)='`', 0x88020) 21m40.182236166s ago: executing program 36 (id=713): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount$overlay(0x0, 0x0, 0x0, 0x28, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 21m32.302443088s ago: executing program 37 (id=733): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, r0, 0x0, 0x5005) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe5e) timer_delete(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x162341, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) setreuid(0x0, 0x0) fcntl$setlease(r5, 0x400, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 17m23.78253507s ago: executing program 38 (id=1173): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) sendmsg$DEVLINK_CMD_TRAP_SET(r2, 0x0, 0x8000) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0xc0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, 0x0, 0x4050) sendmsg$nl_route(r0, 0x0, 0x40000) socket$nl_route(0x10, 0x3, 0x0) socket(0x9, 0x80000, 0x40000008) 16m59.530213448s ago: executing program 39 (id=1203): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) r1 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\x00\x00\x00\x00\x00', &(0x7f0000000300)='\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) openat$dir(0xffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x13) epoll_create1(0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) 15m24.037227481s ago: executing program 4 (id=1352): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0x10000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0xc000, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x200000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0x60000, 0xc, 0xdd, 0x7f, 0x7, 0xfe, 0x2, 0xf7, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0xd, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x0, 0xdddd1000, 0x10, 0x2, 0x7, 0x8, 0x5, 0xf9, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0x4, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xffff1000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x40041, 0x1, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x100000001, 0x1]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) 15m8.350504318s ago: executing program 40 (id=1352): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0x10000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0x81, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0xc000, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x200000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0x60000, 0xc, 0xdd, 0x7f, 0x7, 0xfe, 0x2, 0xf7, 0x29, 0xd, 0x9}, {0xeeee8000, 0xdddd0000, 0xf, 0xd, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x0, 0xdddd1000, 0x10, 0x2, 0x7, 0x8, 0x5, 0xf9, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0x4, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xffff1000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x40041, 0x1, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x100000001, 0x1]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = fsopen(&(0x7f0000000280)='pvfs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) 14m57.115031934s ago: executing program 41 (id=1361): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x40000) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13m23.518807226s ago: executing program 42 (id=1482): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000400)=0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r2 = epoll_create(0x7) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x11fe, 0x0, 0x717e387b, 0x40, "1ae34e1626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x35, "3eccd8000000000000000010000000040100"}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$TCSETS(r1, 0x40045431, 0x0) r4 = syz_open_pts(r1, 0x80) utime(0x0, &(0x7f0000000040)={0x2, 0xa08b}) dup3(r4, r1, 0x80000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 9m19.082093677s ago: executing program 43 (id=1762): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) futex(&(0x7f0000000040), 0x6, 0x2, &(0x7f0000000080), 0x0, 0x2) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x8801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x1f, 0xb, &(0x7f0000002a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x577a}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) madvise(&(0x7f0000783000/0x2000)=nil, 0x2000, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000084}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_bcm(0x1d, 0x2, 0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = openat$snapshot(0xffffff9c, 0x0, 0x20900, 0x0) ioctl$SNAPSHOT_S2RAM(r4, 0x330b) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x851, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) mmap$panthor(&(0x7f00002a4000/0x1000)=nil, 0x1000, 0x6, 0x2010, r5, 0xffff) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) socket$inet_tcp(0x2, 0x1, 0x0) 6m54.796399608s ago: executing program 44 (id=1927): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000340)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_pidfd_open(0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(streebog256-generic)\x00'}, 0x58) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) 6m19.424142526s ago: executing program 5 (id=1981): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x5d550000) 6m18.278151395s ago: executing program 5 (id=1983): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 6m17.068359759s ago: executing program 5 (id=1987): socket$inet(0xa, 0x801, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r3, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) 6m16.122066854s ago: executing program 5 (id=1989): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 6m15.358190427s ago: executing program 5 (id=1992): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x5d550000) 6m14.576611036s ago: executing program 5 (id=1995): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) userfaultfd(0x801) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x4, 0x5, 0x22, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x7, 0x3ff, 0x802, 0x3ff, 0x9, 0x2, 0x9, 0xe1cb, 0x3ff, 0x4, 0x3, 0x392, 0x80000088, 0x3, 0xa, 0xfffffff5, 0xa, 0x3, 0x0, 0x0, 0x4, 0x101, 0xdffffffa]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='pstore\x00', 0x28c2008, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x28, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000040), 0x5005) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0) getpriority(0x2, 0x0) 5m58.480600353s ago: executing program 45 (id=1995): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) userfaultfd(0x801) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x4, 0x5, 0x22, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x7, 0x3ff, 0x802, 0x3ff, 0x9, 0x2, 0x9, 0xe1cb, 0x3ff, 0x4, 0x3, 0x392, 0x80000088, 0x3, 0xa, 0xfffffff5, 0xa, 0x3, 0x0, 0x0, 0x4, 0x101, 0xdffffffa]}) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='pstore\x00', 0x28c2008, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x28, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000040), 0x5005) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffc}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x200000000000026f, 0x1}}, 0x40) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x0, 0x8, 0x0) getpriority(0x2, 0x0) 4m29.896250371s ago: executing program 8 (id=2145): r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 4m29.322738009s ago: executing program 8 (id=2147): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@iter={0x0}}, 0x18) 4m28.697256346s ago: executing program 8 (id=2148): io_submit(0x0, 0x2, &(0x7f0000001200)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xd5d}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000001040)="129d34217923b990f2fecc3227f38961c68e5c1128ebdb1291ad66da7b904f62ae3c0e1e477ae3e0a09f4496cba60d5688aef049ee0ddf22cfb25f832f766e", 0x3f, 0x3, 0x0, 0x3}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4m27.917375171s ago: executing program 8 (id=2150): setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_PTRACER(0x59616d61, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000a80)={0x0, 0x80000, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x9, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x2, 0xffffffffffffffff}, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x4, 0x1, 0x2000000}]}]}, {0x0, [0x5f, 0x61, 0x5f, 0x0, 0x2e, 0x2e, 0x5f]}}, 0x0, 0x49, 0x0, 0x1}, 0x28) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000c00)={0x9, 0xfffffffc, {}, {}, 0x8, 0x4}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffb, 0xffffffffffffff0f, 0x0, @buffer={0x0, 0x0, &(0x7f0000000240)=""/86}, &(0x7f00000000c0)="8516a69e20db268c99540c0c4d755ef653e8f4a6151d2e4d9f4c076575f96acf7c1518d5f60238b377d659f7bb700debccf243dbb01f49c4cb23c6c6bf4119e0df3d877e3263e5e3d9d4f4335d1eff843c53a999bed1ba0070eeda8f6717e0ea1d71aa6a3acedb5ed60c20a93f34bd93bfec5a81ec493fb3a69dff6dd7481d79822d14c335fbd34fd723beaea2", 0x0, 0xfffffffb, 0x10039, 0x0, 0x0}) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4m26.587022757s ago: executing program 8 (id=2153): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x2, 0x0, [{0x0, 0x24, &(0x7f0000000000)=""/36}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x5d550000) 4m26.259835641s ago: executing program 8 (id=2154): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x0, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000200), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x6a040000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x7, 0x9, {0xffffffffffffffff}, {0xee01}, 0x4, 0x8001}) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0xffffd000) 4m11.087477316s ago: executing program 46 (id=2154): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x0, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, &(0x7f0000000200), 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000600)={r3, r3, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r3, 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) unshare(0x6a040000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000440)={0x7, 0x9, {0xffffffffffffffff}, {0xee01}, 0x4, 0x8001}) mmap(&(0x7f00005f7000/0x1000)=nil, 0x1000, 0x0, 0x80010, 0xffffffffffffffff, 0xffffd000) 3m18.261007613s ago: executing program 6 (id=2252): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000109"], 0x14}}, 0x0) 3m16.534023649s ago: executing program 6 (id=2255): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRESDEC=r0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0xaa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x7, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0x7], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x10000, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f0000000c80)={'syz0\x00', {0xf, 0x7, 0x6, 0x8}, 0x46, [0x6, 0x3, 0x8, 0x7, 0x3, 0x8, 0xffff, 0x2, 0x1ff, 0x704e, 0x6, 0x2, 0x1, 0x4, 0x7fffffff, 0xc, 0x280, 0x7, 0x4, 0xbf6, 0x6, 0xfff, 0x0, 0x80000005, 0x2, 0x4ebe, 0x3, 0x2, 0x3, 0x0, 0x9, 0x2, 0x8, 0x5, 0x9, 0x0, 0x1, 0x400, 0x0, 0x8, 0x6, 0x1, 0x3, 0x2, 0x3, 0x80, 0x4, 0x40, 0xe, 0xffff, 0x3ca5, 0x81, 0xfffff68e, 0x6, 0x2, 0x10, 0x8001, 0x3, 0x9, 0x4, 0x6, 0xfffffffe, 0xe, 0x3ff], [0x103, 0x3817a07c, 0xfffffffd, 0x2d, 0xd7, 0x2, 0x435f78e4, 0x4, 0x1b9e, 0x0, 0x1, 0x1, 0x4, 0x7, 0x4, 0x80, 0x0, 0x8, 0x4, 0x3, 0x10, 0x1, 0x77, 0x100, 0x0, 0x7f, 0x6, 0x6, 0x0, 0x7f, 0x49, 0x4, 0x9, 0x80000000, 0xd, 0x64, 0x2, 0xe2, 0x0, 0x3, 0x9, 0x6, 0xeebe, 0x5, 0x0, 0x1b, 0xaea0, 0xb, 0x9d, 0xefcc, 0x2, 0x81, 0x6, 0x4, 0x2, 0x2, 0x0, 0x7f, 0x10, 0xff, 0x2, 0x31d, 0xe, 0x7], [0x8000, 0x1, 0x0, 0xb, 0x10001, 0x5, 0x6c5e, 0x401, 0x7, 0xb44, 0x1000, 0xc5d3dd53, 0x9, 0x4, 0x3a, 0x3, 0x80000000, 0x5, 0xa5ff, 0x1, 0x9, 0x0, 0x1, 0x80, 0x0, 0x1, 0xfffff564, 0x4, 0x9, 0x5, 0x5, 0x2, 0x3, 0x8, 0x5, 0xd, 0x6, 0x3ff, 0x3, 0x2, 0x1a, 0x5a, 0x7, 0x400, 0x380000, 0x1, 0x7, 0x3, 0x4, 0xa, 0xfffffffd, 0x5, 0xfffffff7, 0x4, 0x0, 0x1, 0xffffff00, 0x6, 0x2, 0xde2, 0x6, 0x7, 0xb7a, 0x4], [0x3ff, 0x4, 0x1, 0x5, 0x7ff, 0xfffffffa, 0x3, 0x6, 0x2, 0x0, 0x7, 0x8, 0x7, 0x8, 0xf, 0x6, 0x5, 0x329d, 0x49, 0x78079c2a, 0x0, 0x3, 0x5, 0x600, 0x7, 0xbfd2, 0x3, 0x4, 0xffffff7f, 0x0, 0xe, 0x9, 0x6, 0xfffffff2, 0xf, 0x10001, 0xb, 0x2, 0x9, 0x5, 0x8, 0xd195, 0x5, 0xba, 0x10000, 0x8, 0x609a, 0xffff, 0x9, 0x6, 0x51, 0x4, 0xa, 0x9, 0xd9, 0x5, 0x9, 0x2, 0xd, 0x5, 0x7, 0x2, 0xff, 0x4]}, 0x45c) openat$qrtrtun(0xffffff9c, &(0x7f00000000c0), 0x4102) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000300)={0x18, &(0x7f0000000000)={0x40, 0x3, 0x2f, {0x2f, 0x1a, "d31cee0b3d3d9e67dee919f1b76552cbc53ad82007bfba049bb7c2ea0340c18ae7b65410740a09960633ac762e"}}, &(0x7f00000001c0)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "1ec01ad997f87f473edd403fef01ead40093692207dfbc3c4fe37c7779522a625e40dde68d325367364e5f39e68744c126aecfc74b9904aa274aa17612b33b4c73468979e433829e91329e5c580229c668bbf4922dd6e26498d21cff2a23e71684e7e4e9f983aae6656f1e936cf46da5b7c36ec046da658c17b4e9d8e0289c54f4a1b68809ae484eae8d2c7fee7b380d1e8f805c241cdc6c0a56a3819af497e718e43748e6075951b40ae5beeb6536ba82d3cc6d4122d0928f12f55a91d1a8201bbad9ccd491796633e0a9"}}, &(0x7f0000000080)=ANY=[@ANYBLOB="000f38000000050f380001ad11f13d603018ca3d11ed94adc7da4529e6796b378da707997ef684e4b5023a5c34cbc063400f4dde27ec6b27a811fcab28f6"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x18, 0x4, 0x0, "d4fd42d5", "6e57bfde"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf2, 0x80, 0xfc, 0x4, 0xf2, 0x8001, 0x1bd6}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000340)={0x40, 0xc, 0xff, "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"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x14}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x20, 0x80}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xe4}, &(0x7f0000000600)={0x40, 0xb, 0x2, "08d4"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x8b}, &(0x7f0000000680)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "41ad"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x5}}) sendto$netrom(r6, &(0x7f0000000900)="9fa0ca6aae2bfd84eabb3f54d8b76f0c7d15f91153cb6622b47ecf7be0e09fdcfd4df8ae11d097d8074d92a575c61458d180d2d3b76f3463a65e45de11e8132b9773271693db867675bd13a346cc84fbab2bf686aa8a08254e5c60279251352c57e9ad7f49cf74f52b655b30f9532c387d74a80acf0a53c8654cf31ec0645d2d4c626f57e478851ec22de319f4a92b1bc149bb5d", 0x94, 0x4, &(0x7f00000009c0)={{0x3, @default, 0x3}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 3m13.440434116s ago: executing program 1 (id=2172): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x5d550000) 3m6.998541611s ago: executing program 1 (id=2257): io_submit(0x0, 0x2, &(0x7f0000001200)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xd5d}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000001040)="129d34217923b990f2fecc3227f38961c68e5c1128ebdb1291ad66da7b904f62ae3c0e1e477ae3e0a09f4496cba60d5688aef049ee0ddf22cfb25f832f766e", 0x3f, 0x3, 0x0, 0x3}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f406", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3m5.717054566s ago: executing program 6 (id=2258): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1c6) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000380), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fff, 0x6, 0xfffffffffffffffd, 0x6a}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x1, 0x9, 0xfffffffffffffffc, 0x0, 0x7fffffff}, 0x0, 0x0) 3m5.016867161s ago: executing program 9 (id=2259): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 3m4.897423935s ago: executing program 1 (id=2260): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)) mkdirat(0xffffffffffffffff, 0x0, 0x108) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) openat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_dev$video4linux(&(0x7f0000002300), 0xfffffffffffffffc, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r3, 0x0) 3m4.82596709s ago: executing program 6 (id=2261): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x10b}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004a40)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 3m4.113625338s ago: executing program 6 (id=2262): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000000109"], 0x14}}, 0x0) 3m3.257114155s ago: executing program 9 (id=2263): syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r0 = syz_io_uring_setup(0x32d9, &(0x7f0000000200)={0x0, 0x6273, 0x8, 0xffffffff, 0x400000, 0x0, 0x0}, &(0x7f0000000300)=0x0, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, 0x0, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index=0x3, 0x8, 0x0}) io_uring_enter(r0, 0x7ec5, 0x9f84, 0x24, 0x0, 0x0) 3m2.731813698s ago: executing program 6 (id=2264): openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f0000000000)=0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0xdc) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 3m2.506416515s ago: executing program 9 (id=2265): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) open$dir(&(0x7f00000001c0)='./file1\x00', 0x23942, 0x0) 3m0.499121372s ago: executing program 9 (id=2266): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x5d550000) 2m58.758364969s ago: executing program 1 (id=2267): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x4fbd, 0xc00, 0x0, 0x387}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002020, 0x1}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x800, 0x3, 0x3}, 0x10) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 2m58.440445368s ago: executing program 9 (id=2268): io_submit(0x0, 0x2, &(0x7f0000001200)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xd5d}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000001040)="129d34217923b990f2fecc3227f38961c68e5c1128ebdb1291ad66da7b904f62ae3c0e1e477ae3e0a09f4496cba60d5688aef049ee0ddf22cfb25f832f766e", 0x3f, 0x3, 0x0, 0x3}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m56.873690847s ago: executing program 1 (id=2269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x44}}, 0x24040054) 2m56.689420728s ago: executing program 9 (id=2270): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) eventfd2(0x5, 0x81001) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2b, 0xfffffffffffffff9) truncate(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs/file0\x00', 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2m55.916725757s ago: executing program 1 (id=2271): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2m38.639358548s ago: executing program 47 (id=2270): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x35) eventfd2(0x5, 0x81001) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2b, 0xfffffffffffffff9) truncate(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs/file0\x00', 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2m38.300920784s ago: executing program 48 (id=2271): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xb, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video4linux(0x0, 0x9, 0x34f081) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bond0\x00', 0x8}, 0x18) sched_setattr(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_80211_join_ibss(0x0, &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1) setpriority(0x2, 0x0, 0x7fffff7ffffffffb) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x0) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2m38.001670661s ago: executing program 49 (id=2264): openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f0000000000)=0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000200)=0xdc) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 2m7.44269013s ago: executing program 4 (id=2018): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x40015b0b, 0x0) 2m3.938061044s ago: executing program 4 (id=2276): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x5d550000) 2m2.259306317s ago: executing program 4 (id=2277): r0 = syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x4fbd, 0xc00, 0x0, 0x387}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0, 0x40002020, 0x1}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) 2m0.670218753s ago: executing program 4 (id=2278): io_submit(0x0, 0x2, &(0x7f0000001200)=[&(0x7f0000000e40)={0x0, 0x0, 0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0xd5d}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000001040)="129d34217923b990f2fecc3227f38961c68e5c1128ebdb1291ad66da7b904f62ae3c0e1e477ae3e0a09f4496cba60d5688aef049ee0ddf22cfb25f832f766e", 0x3f, 0x3, 0x0, 0x3}]) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m59.878626902s ago: executing program 4 (id=2281): sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) gettid() r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1m53.792476915s ago: executing program 3 (id=2288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x24040054) 1m52.051651023s ago: executing program 3 (id=2294): gettid() timer_create(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x8}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]}) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000200), 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="000000002a000200070000a0a007000000bbb76f43200fbbded3ecf468f42296"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0xe800) socket$kcm(0xa, 0x2, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x8864000000000000) 1m50.919942578s ago: executing program 3 (id=2298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)) mkdirat(0xffffffffffffffff, 0x0, 0x108) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) openat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_dev$video4linux(&(0x7f0000002300), 0xfffffffffffffffc, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r3, 0x0) 1m48.353172416s ago: executing program 3 (id=2301): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4770815}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004090) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000380)='\r', 0x160a}], 0x1) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4850) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000640)='\x00'/12, 0xc, r2) 1m47.211951338s ago: executing program 3 (id=2304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x24040054) 1m42.195434954s ago: executing program 50 (id=2281): sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x14, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) gettid() r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0x1}}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 1m41.947230279s ago: executing program 3 (id=2311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)) mkdirat(0xffffffffffffffff, 0x0, 0x108) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) openat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_dev$video4linux(&(0x7f0000002300), 0xfffffffffffffffc, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r3, 0x0) 1m25.929825262s ago: executing program 51 (id=2311): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000000c0)) mkdirat(0xffffffffffffffff, 0x0, 0x108) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) openat$cgroup_root(0xffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_open_dev$video4linux(&(0x7f0000002300), 0xfffffffffffffffc, 0x0) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xd, 0x11, r3, 0x0) 41.804003928s ago: executing program 2 (id=2389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000540000000908010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000a0900020073797a31000000000c00098008000140000006a3140000001000010000000000000000000000000a"], 0x9c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, 0x0, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) syz_genetlink_get_family_id$gtp(0x0, r3) r4 = fsopen(&(0x7f0000000400)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x00\x02\x00\x00\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\xd3O8mFC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8\x97\bmm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') sendmsg$AUDIT_SET(r3, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, 0x3e9, 0x200, 0x70bd2c, 0x25dfdbfc, {0x2, 0x1, 0x1, r0, 0x3, 0x7fffffff, 0x8000, 0x0, 0x0, 0x0, 0x2}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 30.11270924s ago: executing program 2 (id=2399): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mknodat$loop(0xffffffffffffffff, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) open$dir(&(0x7f00000001c0)='./file1\x00', 0x23942, 0x0) 28.957174084s ago: executing program 2 (id=2402): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x15e) r2 = fanotify_init(0xf00, 0x0) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 27.935221412s ago: executing program 2 (id=2403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}}, 0x24040054) 27.252239761s ago: executing program 2 (id=2405): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r0, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) 22.920246451s ago: executing program 2 (id=2407): socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) fallocate(0xffffffffffffffff, 0x0, 0x8, 0x1000f4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r2) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$SEG6(0x0, r1) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 12.407225663s ago: executing program 0 (id=2414): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0) r1 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='\x00\x00\x00\x00\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x1, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) read$msr(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) epoll_create1(0x80000) 5.864878299s ago: executing program 52 (id=2407): socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) fallocate(0xffffffffffffffff, 0x0, 0x8, 0x1000f4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r2) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$SEG6(0x0, r1) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5.851323655s ago: executing program 0 (id=2416): gettid() timer_create(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x8}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]}) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000200), 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="000000002a000200070000a0a007000000bbb76f43200fbbded3ecf468f42296"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0xe800) socket$kcm(0xa, 0x2, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, &(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x8864000000000000) 5.804257615s ago: executing program 7 (id=2417): syz_open_dev$sndctrl(0x0, 0x0, 0x400) unshare(0x28000600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.04637847s ago: executing program 0 (id=2418): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x1, 0x2c, 0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) gettid() setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r1 = socket(0x15, 0x5, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000440)) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x9}}, 0x1c}}, 0x4000050) syz_emit_ethernet(0x3a, &(0x7f0000019100)={@local, @random="a6e286036e89", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xb00, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x9a5f}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 3.189530162s ago: executing program 7 (id=2419): mount$nfs(0x0, 0x0, 0x0, 0x802800, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x13a}, 0x58) 2.672136129s ago: executing program 7 (id=2420): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) open$dir(&(0x7f00000001c0)='./file1\x00', 0x23942, 0x0) 2.370026941s ago: executing program 0 (id=2421): capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi3\x00', 0x0, 0x0) 2.261426125s ago: executing program 7 (id=2422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x24040054) 1.856694537s ago: executing program 0 (id=2423): sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x0, 0x6a9354ab0d020bb7, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r2, 0xfff, 0x0, 0x3, 0x7, 0x6}, &(0x7f0000000140)=0x14) 1.520246089s ago: executing program 0 (id=2424): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000016c0)={0x1c, &(0x7f0000001140)=ANY=[@ANYBLOB="c696b8"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000000200)=[{0x0, 0x4000, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000780)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) 520.650559ms ago: executing program 7 (id=2425): gettid() timer_create(0x0, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000000340)={{0x8}, 0x0, [0x0, 0x0, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb8fd, 0x0, 0x0, 0x0, 0xfffffd80, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xff, 0x0, 0x2, 0x0, 0x2, 0xfffffffc]}) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f0000000200), 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004900010026bd7000fddbdf250a008000", @ANYRES32=0x0, @ANYBLOB="000000002a000200070000a0a007000000bbb76f43200fbbded3ecf468f42296"], 0x38}, 0x1, 0x0, 0x0, 0x20040865}, 0xe800) socket$kcm(0xa, 0x2, 0x3a) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc0b45545, &(0x7f00000000c0)) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4ffe6, 0x8864000000000000) 0s ago: executing program 7 (id=2426): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): tadv0: Adding interface: batadv_slave_0 [ 1396.263595][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.282548][T14483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.319070][T14483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.346700][T14483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.354731][T14483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.416847][T14483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.099954][ T3850] hsr_slave_0: left promiscuous mode [ 1400.158321][ T3850] hsr_slave_1: left promiscuous mode [ 1400.168565][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1400.176072][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1400.450055][ T3850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1400.496991][ T3850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1400.601801][T14567] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1849'. [ 1400.628616][ T3850] veth1_macvtap: left promiscuous mode [ 1400.634335][ T3850] veth0_macvtap: left promiscuous mode [ 1400.666884][ T3850] veth1_vlan: left promiscuous mode [ 1400.675201][ T3850] veth0_vlan: left promiscuous mode [ 1401.825133][ T3850] team0 (unregistering): Port device team_slave_1 removed [ 1401.878918][ T3850] team0 (unregistering): Port device team_slave_0 removed [ 1402.630153][ T6021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1402.656663][ T6021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1402.929274][T14483] hsr_slave_0: entered promiscuous mode [ 1403.017957][T14483] hsr_slave_1: entered promiscuous mode [ 1403.056825][T14483] debugfs: 'hsr0' already exists in 'hsr' [ 1403.062741][T14483] Cannot create hsr debugfs directory [ 1404.249058][T14613] 9p: Bad value for 'rfdno' [ 1409.818945][T14483] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1409.939203][T14483] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1410.072643][T14483] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1410.238843][T14483] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1411.970578][T14369] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1412.114983][T14483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.251432][T14369] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1412.328807][T14369] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1412.369065][T14369] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1412.416669][T14369] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.471869][T14658] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1412.502873][T14483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.643793][T14369] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1412.688504][T12000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.695877][T12000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.872278][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.879828][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.694439][T14369] usb 8-1: USB disconnect, device number 2 [ 1414.850544][T14678] 9p: Bad value for 'rfdno' [ 1416.088221][T14483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.388453][T14483] veth0_vlan: entered promiscuous mode [ 1419.595480][T14719] syzkaller1: entered promiscuous mode [ 1419.605560][T14719] syzkaller1: entered allmulticast mode [ 1419.621798][T14483] veth1_vlan: entered promiscuous mode [ 1420.144371][T14483] veth0_macvtap: entered promiscuous mode [ 1420.319059][T14483] veth1_macvtap: entered promiscuous mode [ 1421.242762][T14483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1421.365725][T14483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1421.678948][ T8615] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.720080][ T8615] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.769364][ T5981] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.801593][ T5981] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1422.630640][T14728] : renamed from bond_slave_0 (while UP) [ 1428.612940][T14791] syzkaller0: entered promiscuous mode [ 1428.631531][T14791] syzkaller0: entered allmulticast mode [ 1432.800954][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.991299][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.039965][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.268138][T12000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.289014][T12000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1436.435447][T14869] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1436.632076][T14878] syzkaller1: entered promiscuous mode [ 1436.682671][T14878] syzkaller1: entered allmulticast mode [ 1442.970546][T14944] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1443.286718][T14347] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1443.887541][T14347] usb 10-1: Using ep0 maxpacket: 8 [ 1444.134373][T14956] mkiss: ax0: crc mode is auto. [ 1445.849937][T14347] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 1445.876700][T14347] usb 10-1: config 0 has no interface number 0 [ 1445.883104][T14347] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1445.906803][T14347] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1445.926689][T14347] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1445.938180][T14347] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1446.107546][T14347] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1446.940512][T14347] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.002208][ T5096] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1448.930426][T14347] usb 10-1: config 0 descriptor?? [ 1450.927662][ T5783] Bluetooth: hci6: command 0x0406 tx timeout [ 1451.957016][T14347] usb 10-1: can't set config #0, error -71 [ 1452.087098][T14347] usb 10-1: USB disconnect, device number 7 [ 1455.434412][T14978] netlink: 'syz.7.1927': attribute type 10 has an invalid length. [ 1457.074351][T14978] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1457.823284][T14986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1458.867218][T15020] 9pnet_virtio: no channels available for device syz [ 1469.376243][T15041] binder: 15036:15041 ioctl c0306201 80000080 returned -14 [ 1471.914157][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1471.935562][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1471.955513][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1471.985351][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1472.009279][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1472.474215][T15075] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1472.707681][T15075] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1472.775516][T15083] evm: overlay not supported [ 1474.207218][ T5778] Bluetooth: hci0: command tx timeout [ 1474.361270][ T5778] Bluetooth: hci6: command 0x0406 tx timeout [ 1482.597527][ T5778] Bluetooth: hci6: command 0x0406 tx timeout [ 1482.605491][ T5783] Bluetooth: hci0: command tx timeout [ 1483.105463][T15075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1483.203848][T15075] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1483.608917][T15075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1483.615200][T15075] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1483.739379][T15075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1483.745762][T15075] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1483.884472][T15075] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1484.034517][T15075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1484.059401][T15075] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1484.086295][T15075] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1485.158363][T15109] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1951'. [ 1485.171922][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 1485.647420][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 1485.741628][T15071] chnl_net:caif_netlink_parms(): no params data found [ 1485.747043][ T5778] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1485.806730][ T5778] Bluetooth: hci4: command 0x0c1a tx timeout [ 1486.046820][ T5778] Bluetooth: hci0: command 0x0419 tx timeout [ 1487.248276][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 1487.726948][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 1487.887034][ T5778] Bluetooth: hci4: command 0x0c1a tx timeout [ 1488.126941][ T5778] Bluetooth: hci0: command 0x0419 tx timeout [ 1488.182961][T15143] 9p: Could not find request transport: fd0x0000000000000004 [ 1488.957116][T15071] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.964711][T15071] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.047644][T15071] bridge_slave_0: entered allmulticast mode [ 1489.116867][T15071] bridge_slave_0: entered promiscuous mode [ 1489.192089][T15071] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.248085][T15071] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.255834][T15071] bridge_slave_1: entered allmulticast mode [ 1489.360494][T15071] bridge_slave_1: entered promiscuous mode [ 1489.558034][ T5096] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1489.756924][ T5096] usb 7-1: Using ep0 maxpacket: 8 [ 1489.805840][ T5096] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.877347][ T5096] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1489.929728][T15071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.953550][ T5096] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1489.967741][ T5778] Bluetooth: hci4: command 0x0c1a tx timeout [ 1489.997261][ T5096] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1490.011375][ T5096] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1490.025927][ T5096] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.189566][ T5096] hub 7-1:1.0: bad descriptor, ignoring hub [ 1490.207333][ T5778] Bluetooth: hci0: command 0x0419 tx timeout [ 1490.225196][ T5096] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1490.248528][ T5096] cdc_wdm 7-1:1.0: skipping garbage [ 1490.254463][ T5096] cdc_wdm 7-1:1.0: skipping garbage [ 1490.269436][ T5096] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1490.277204][ T5096] cdc_wdm 7-1:1.0: Unknown control protocol [ 1490.283029][T15071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1490.508964][ T5096] usb 7-1: USB disconnect, device number 2 [ 1490.869264][T15071] team0: Port device team_slave_0 added [ 1490.992325][T15071] team0: Port device team_slave_1 added [ 1491.066854][ T5096] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1491.145089][T14976] bond0: (slave syz_tun): Releasing backup interface [ 1491.267024][ T5096] usb 7-1: Using ep0 maxpacket: 32 [ 1491.306058][ T5096] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1491.389873][ T5096] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1491.448806][ T5096] usb 7-1: can't read configurations, error -71 [ 1491.679237][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1491.707899][ T8615] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.773153][T15071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1491.845172][T15071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1491.878692][ T24] usb 6-1: device descriptor read/64, error -71 [ 1491.947394][T15071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1492.084341][ T8615] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.137220][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1492.287459][ T5778] Bluetooth: hci0: command 0x0419 tx timeout [ 1492.418343][T15071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1492.426392][T15071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1492.770072][ T24] usb 6-1: device descriptor read/64, error -71 [ 1492.828864][T15071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1492.887453][ T24] usb usb6-port1: attempt power cycle [ 1492.983407][ T8615] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.239807][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1493.308811][ T24] usb 6-1: device descriptor read/8, error -71 [ 1493.447001][ T8615] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.466347][T15210] input: syz0 as /devices/virtual/input/input7 [ 1493.536551][T15204] 9p: Could not find request transport: fd0x0000000000000004 [ 1493.701067][T15211] netlink: 'syz.8.1973': attribute type 13 has an invalid length. [ 1493.979119][T15212] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1494.141467][T15071] hsr_slave_0: entered promiscuous mode [ 1494.146838][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1494.159507][T15213] program syz.6.1972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1495.153269][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.160227][T15071] hsr_slave_1: entered promiscuous mode [ 1495.162931][T15071] debugfs: 'hsr0' already exists in 'hsr' [ 1495.912233][T15071] Cannot create hsr debugfs directory [ 1496.397386][ T29] audit: type=1804 audit(1775399448.973:55): pid=15219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1974" name="/newroot/290/file0" dev="tmpfs" ino=1571 res=1 errno=0 [ 1496.481561][ T24] usb 6-1: device descriptor read/8, error -71 [ 1496.647708][ T24] usb usb6-port1: unable to enumerate USB device [ 1504.129746][T15217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1504.138092][T15217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.169544][T15217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.178066][T15217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.766472][ C0] hrtimer: interrupt took 271014 ns [ 1506.295931][ T8615] bridge_slave_1: left allmulticast mode [ 1506.337265][ T8615] bridge_slave_1: left promiscuous mode [ 1506.344381][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.431905][ T8615] bridge_slave_0: left allmulticast mode [ 1506.488384][ T8615] bridge_slave_0: left promiscuous mode [ 1506.495522][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.926785][ T5819] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1507.114027][T15273] 9p: Could not find request transport: fd0x0000000000000004 [ 1507.129143][ T5819] usb 7-1: device descriptor read/64, error -71 [ 1507.386797][ T5819] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1507.546803][ T5819] usb 7-1: device descriptor read/64, error -71 [ 1507.701187][ T5819] usb usb7-port1: attempt power cycle [ 1507.845648][ T8615] bond0 (unregistering): (slave 30): Releasing backup interface [ 1507.905832][ T8615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1507.964593][ T8615] bond0 (unregistering): Released all slaves [ 1508.005366][ T8615] bond1 (unregistering): Released all slaves [ 1508.136700][ T5819] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1508.203957][ T5819] usb 7-1: device descriptor read/8, error -71 [ 1508.458639][ T5819] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1508.510787][ T5819] usb 7-1: device descriptor read/8, error -71 [ 1508.647792][ T5819] usb usb7-port1: unable to enumerate USB device [ 1508.782583][T15299] syz_tun: entered allmulticast mode [ 1508.811099][T15296] syz_tun: left allmulticast mode [ 1509.330396][ T8615] hsr_slave_0: left promiscuous mode [ 1509.373926][ T8615] hsr_slave_1: left promiscuous mode [ 1509.442577][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.489853][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1509.530704][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.586942][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1509.761391][ T8615] veth1_macvtap: left promiscuous mode [ 1509.787656][ T8615] veth0_macvtap: left promiscuous mode [ 1509.811738][ T8615] veth1_vlan: left promiscuous mode [ 1509.837235][ T8615] veth0_vlan: left promiscuous mode [ 1510.121571][T15325] 9pnet_fd: Insufficient options for proto=fd [ 1511.288394][ T29] audit: type=1804 audit(1775399463.893:56): pid=15331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1995" name="/newroot/46/file0" dev="tmpfs" ino=265 res=1 errno=0 [ 1511.723821][T15339] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1997'. [ 1512.257266][ T5819] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1512.580199][ T5819] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1512.601612][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1512.625351][ T5819] usb 7-1: Product: syz [ 1512.643015][ T5819] usb 7-1: Manufacturer: syz [ 1512.714941][ T8615] team0 (unregistering): Port device team_slave_1 removed [ 1512.716927][ T5819] usb 7-1: SerialNumber: syz [ 1512.800965][ T5819] usb 7-1: config 0 descriptor?? [ 1512.970854][ T8615] team0 (unregistering): Port device team_slave_0 removed [ 1512.985221][ T5778] Bluetooth: hci2: urb ffff88805cc4c900 submission failed (2) [ 1513.673198][T15348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1515.500960][T15339] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1515.765933][T15339] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1515.884116][T15339] bond0 (unregistering): Released all slaves [ 1517.156776][T15353] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1517.252916][T15367] 9pnet_fd: Insufficient options for proto=fd [ 1517.290250][T15071] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1517.342734][T15353] usb 9-1: device descriptor read/64, error -71 [ 1517.390412][T15071] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1517.533401][T15071] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1517.635492][T15071] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1517.648258][T15353] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1517.886770][T15353] usb 9-1: device descriptor read/64, error -71 [ 1518.048209][T15353] usb usb9-port1: attempt power cycle [ 1518.496833][T15353] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1518.554188][T15353] usb 9-1: device descriptor read/8, error -71 [ 1518.847296][T15353] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1518.916171][T15353] usb 9-1: device descriptor read/8, error -71 [ 1519.090229][T15071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.113416][T15353] usb usb9-port1: unable to enumerate USB device [ 1519.573136][T15071] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.694780][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.703198][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.159583][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.167712][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.970464][T15392] Bluetooth: MGMT ver 1.23 [ 1521.144875][T15353] usb 7-1: USB disconnect, device number 9 [ 1524.004351][T15071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1524.952054][T15071] veth0_vlan: entered promiscuous mode [ 1525.240077][T15427] 9pnet_fd: Insufficient options for proto=fd [ 1525.598201][T15071] veth1_vlan: entered promiscuous mode [ 1526.409002][T15071] veth0_macvtap: entered promiscuous mode [ 1526.708489][T15071] veth1_macvtap: entered promiscuous mode [ 1527.349150][T15071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.509670][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1527.515185][T15071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.594773][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1527.618376][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1527.633505][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1527.644461][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1528.193758][T15094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.256735][T15094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.390447][T15094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.457058][T15094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.727407][ T5778] Bluetooth: hci2: command tx timeout [ 1530.200853][T15472] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 1530.782117][T15447] chnl_net:caif_netlink_parms(): no params data found [ 1531.817038][ T5778] Bluetooth: hci2: command tx timeout [ 1532.934697][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1532.957832][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1532.977315][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1533.011478][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1533.039087][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1533.841658][T15506] 9pnet_fd: Insufficient options for proto=fd [ 1533.929763][ T5783] Bluetooth: hci2: command tx timeout [ 1535.107040][T15447] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.132407][T15447] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.159377][T15447] bridge_slave_0: entered allmulticast mode [ 1535.186632][ T5783] Bluetooth: hci5: command tx timeout [ 1535.233986][T15447] bridge_slave_0: entered promiscuous mode [ 1535.464022][ T6021] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.966882][ T5783] Bluetooth: hci2: command tx timeout [ 1536.322150][ T6021] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.428042][T15447] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.467364][T15447] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.475779][T15447] bridge_slave_1: entered allmulticast mode [ 1536.554192][T15447] bridge_slave_1: entered promiscuous mode [ 1536.891077][ T6021] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.259462][ T5783] Bluetooth: hci5: command tx timeout [ 1537.531743][ T6021] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.664016][T15447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.862516][T15447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1538.470807][T15447] team0: Port device team_slave_0 added [ 1538.554288][T15447] team0: Port device team_slave_1 added [ 1539.327259][ T5783] Bluetooth: hci5: command tx timeout [ 1539.859311][T15447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.896664][T15447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.055842][T15447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.158560][T15447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.196829][T15447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.413102][T15447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.434040][ T6021] bridge_slave_1: left allmulticast mode [ 1540.434135][ T6021] bridge_slave_1: left promiscuous mode [ 1540.434971][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1540.478237][T15564] 9pnet_fd: Insufficient options for proto=fd [ 1540.627804][ T6021] bridge_slave_0: left allmulticast mode [ 1540.627900][ T6021] bridge_slave_0: left promiscuous mode [ 1540.628750][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.806882][ T5783] Bluetooth: hci5: command tx timeout [ 1542.750782][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.818306][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1542.854315][ T6021] bond0 (unregistering): Released all slaves [ 1544.042543][T15447] hsr_slave_0: entered promiscuous mode [ 1544.082296][T15447] hsr_slave_1: entered promiscuous mode [ 1544.168497][T15447] debugfs: 'hsr0' already exists in 'hsr' [ 1544.174985][T15447] Cannot create hsr debugfs directory [ 1544.420649][ T6021] hsr_slave_0: left promiscuous mode [ 1544.445373][ T6021] hsr_slave_1: left promiscuous mode [ 1544.479789][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1544.496936][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1544.515613][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1544.534936][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1544.614381][ T6021] veth1_macvtap: left promiscuous mode [ 1544.622004][ T6021] veth0_macvtap: left promiscuous mode [ 1544.630804][ T6021] veth1_vlan: left promiscuous mode [ 1544.641907][ T6021] veth0_vlan: left promiscuous mode [ 1545.951857][T15599] 9pnet_fd: Insufficient options for proto=fd [ 1546.528272][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 1547.384984][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 1548.051390][T15499] chnl_net:caif_netlink_parms(): no params data found [ 1549.420675][ T6021] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.563670][ T6021] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.711710][ T6021] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.064150][ T6021] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.311086][T15499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.349780][T15499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.380936][T15499] bridge_slave_0: entered allmulticast mode [ 1550.402895][T15499] bridge_slave_0: entered promiscuous mode [ 1550.579147][T15499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.633803][T15499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.652445][T15499] bridge_slave_1: entered allmulticast mode [ 1550.669717][T15499] bridge_slave_1: entered promiscuous mode [ 1551.517675][T15499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1551.648735][T15499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1551.852194][T15665] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.2061'. [ 1551.983915][ T6021] bridge_slave_1: left allmulticast mode [ 1552.014837][ T6021] bridge_slave_1: left promiscuous mode [ 1552.055109][ T6021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.231925][ T6021] bridge_slave_0: left allmulticast mode [ 1552.239157][ T6021] bridge_slave_0: left promiscuous mode [ 1552.246210][ T6021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.290620][ T6021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1553.351280][ T6021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.380920][ T6021] bond0 (unregistering): Released all slaves [ 1553.445601][T15499] team0: Port device team_slave_0 added [ 1553.979387][T15499] team0: Port device team_slave_1 added [ 1554.150963][T15685] 9pnet_virtio: no channels available for device syz [ 1555.999435][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1556.184958][ T6021] hsr_slave_0: left promiscuous mode [ 1557.236138][ T6021] hsr_slave_1: left promiscuous mode [ 1558.359906][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1559.320009][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1559.358912][ T6021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1559.542512][ T6021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1562.756892][ T6021] veth1_macvtap: left promiscuous mode [ 1562.763239][ T6021] veth0_macvtap: left promiscuous mode [ 1563.278265][ T6021] veth1_vlan: left promiscuous mode [ 1563.284317][ T6021] veth0_vlan: left promiscuous mode [ 1563.698017][T15708] netlink: 1688 bytes leftover after parsing attributes in process `syz.8.2072'. [ 1564.645836][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 1564.711492][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 1565.365158][T15499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1565.403935][T15499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.494854][T15499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1565.560200][T15499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1565.587173][T15499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1565.645098][T15499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.944430][T15499] hsr_slave_0: entered promiscuous mode [ 1565.986899][T15499] hsr_slave_1: entered promiscuous mode [ 1566.013871][T15499] debugfs: 'hsr0' already exists in 'hsr' [ 1566.067841][T15499] Cannot create hsr debugfs directory [ 1566.889103][T15447] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1567.020863][T15743] 9pnet_virtio: no channels available for device syz [ 1570.008457][T15447] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1571.142235][T15447] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1571.317769][T15447] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1573.065845][T15447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1573.415494][T15447] 8021q: adding VLAN 0 to HW filter on device team0 [ 1573.658303][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 1573.666763][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1573.704322][T15764] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.2087'. [ 1573.804118][T14898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1573.812458][T14898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1577.230456][T15499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1577.342202][T15499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1577.507182][T15499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1577.628080][T15499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1579.893826][T15447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1580.021088][T15499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1580.242946][T15499] 8021q: adding VLAN 0 to HW filter on device team0 [ 1580.362483][ T8615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1580.370804][ T8615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1580.590892][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1580.599154][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.609833][T15447] veth0_vlan: entered promiscuous mode [ 1582.753992][T15447] veth1_vlan: entered promiscuous mode [ 1583.073086][T15499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1583.673840][T15447] veth0_macvtap: entered promiscuous mode [ 1583.833028][T15447] veth1_macvtap: entered promiscuous mode [ 1591.593683][T15499] veth0_vlan: entered promiscuous mode [ 1594.023513][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1594.033805][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1594.044851][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1594.066786][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1594.091874][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1594.748475][ T5778] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1594.775777][ T5778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1594.797901][ T5778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1594.858083][ T5778] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1594.884265][ T5778] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1596.219303][ T5783] Bluetooth: hci0: command tx timeout [ 1597.017300][ T5783] Bluetooth: hci6: command tx timeout [ 1599.105870][ T5783] Bluetooth: hci0: command tx timeout [ 1599.105912][ T5778] Bluetooth: hci6: command tx timeout [ 1601.166878][ T5783] Bluetooth: hci0: command tx timeout [ 1601.166963][ T5778] Bluetooth: hci6: command tx timeout [ 1603.246743][ T5783] Bluetooth: hci0: command tx timeout [ 1603.256798][ T5783] Bluetooth: hci6: command tx timeout [ 1605.400343][T15893] chnl_net:caif_netlink_parms(): no params data found [ 1605.749923][T15901] chnl_net:caif_netlink_parms(): no params data found [ 1607.097926][T15960] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.2128'. [ 1607.671997][ T8615] bridge_slave_1: left allmulticast mode [ 1607.755024][ T8615] bridge_slave_1: left promiscuous mode [ 1607.773237][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.791877][ T8615] bridge_slave_0: left allmulticast mode [ 1607.816647][ T8615] bridge_slave_0: left promiscuous mode [ 1607.823467][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.783318][ T8615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1608.847138][ T8615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1608.878622][ T8615] bond0 (unregistering): Released all slaves [ 1609.793594][T15893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1609.813103][T15893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1609.834133][T15893] bridge_slave_0: entered allmulticast mode [ 1609.879112][T15893] bridge_slave_0: entered promiscuous mode [ 1609.980983][ T8615] hsr_slave_0: left promiscuous mode [ 1609.997514][ T8615] hsr_slave_1: left promiscuous mode [ 1610.009091][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1610.031308][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.077043][ T8615] veth1_macvtap: left promiscuous mode [ 1610.077187][ T8615] veth0_macvtap: left promiscuous mode [ 1610.077464][ T8615] veth1_vlan: left promiscuous mode [ 1610.077676][ T8615] veth0_vlan: left promiscuous mode [ 1610.965656][ T8615] team0 (unregistering): Port device team_slave_1 removed [ 1611.013660][ T8615] team0 (unregistering): Port device team_slave_0 removed [ 1611.594320][T15901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1611.616962][T15901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.625362][T15901] bridge_slave_0: entered allmulticast mode [ 1611.679092][T15901] bridge_slave_0: entered promiscuous mode [ 1611.725611][T15893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1611.742488][T15893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.779451][T15893] bridge_slave_1: entered allmulticast mode [ 1611.819085][T15893] bridge_slave_1: entered promiscuous mode [ 1612.121895][T16002] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2139'. [ 1612.145006][T15901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.160106][T15901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.173874][T15901] bridge_slave_1: entered allmulticast mode [ 1612.188954][T15901] bridge_slave_1: entered promiscuous mode [ 1612.222456][T15893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.269958][T15893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.809637][T15893] team0: Port device team_slave_0 added [ 1612.853196][T15901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.931750][T15893] team0: Port device team_slave_1 added [ 1613.182742][T15901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1613.815715][T15893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1613.856923][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1613.988728][T15893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1614.444919][T15893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1614.500998][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1614.586133][T15893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1614.737441][T15901] team0: Port device team_slave_0 added [ 1614.811555][T15901] team0: Port device team_slave_1 added [ 1615.313388][T15901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.347107][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.395669][T15901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.491992][T15901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.514402][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.549977][T15901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.611222][T15893] hsr_slave_0: entered promiscuous mode [ 1615.660551][T15893] hsr_slave_1: entered promiscuous mode [ 1615.700183][T15893] debugfs: 'hsr0' already exists in 'hsr' [ 1615.724894][T15893] Cannot create hsr debugfs directory [ 1616.089631][T16032] netlink: 1752 bytes leftover after parsing attributes in process `syz.8.2148'. [ 1616.527674][ T75] bridge_slave_1: left allmulticast mode [ 1616.534084][ T75] bridge_slave_1: left promiscuous mode [ 1616.578616][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1616.632389][ T75] bridge_slave_0: left allmulticast mode [ 1616.656871][ T75] bridge_slave_0: left promiscuous mode [ 1616.676359][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.124189][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.853506][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1617.915425][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1617.987162][ T75] bond0 (unregistering): Released all slaves [ 1618.120737][T15901] hsr_slave_0: entered promiscuous mode [ 1618.143050][T15901] hsr_slave_1: entered promiscuous mode [ 1618.152925][T15901] debugfs: 'hsr0' already exists in 'hsr' [ 1618.165773][T15901] Cannot create hsr debugfs directory [ 1618.413799][ T75] hsr_slave_0: left promiscuous mode [ 1618.488810][ T75] hsr_slave_1: left promiscuous mode [ 1618.506059][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1618.529883][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1618.611120][ T75] veth0_vlan: left promiscuous mode [ 1619.105417][T16061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input9 [ 1619.242256][T16065] Bluetooth: MGMT ver 1.23 [ 1620.392363][T16067] slcan: can't register candev [ 1621.288328][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1621.488212][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1635.008181][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1635.024044][T15893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1635.036982][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1635.051543][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1635.078116][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1635.120769][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1635.178602][T15893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1635.276884][T15893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1635.553872][T15893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1635.850764][T15901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1635.997263][T15901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1636.145226][T15901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1636.279677][T15901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1637.169148][ T5783] Bluetooth: hci2: command tx timeout [ 1637.875510][T16131] chnl_net:caif_netlink_parms(): no params data found [ 1638.723657][ T8615] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.823066][T15893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1638.885923][ T8615] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.145939][T15901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.257102][ T5783] Bluetooth: hci2: command tx timeout [ 1639.474893][ T8615] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.678555][T15893] 8021q: adding VLAN 0 to HW filter on device team0 [ 1639.790060][ T8615] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.914151][T15901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.054532][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.062822][ T5981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.199587][T16131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.224320][T16131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.237073][T16131] bridge_slave_0: entered allmulticast mode [ 1640.260425][T16131] bridge_slave_0: entered promiscuous mode [ 1640.285641][T16131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.304170][T16131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.312921][T16131] bridge_slave_1: entered allmulticast mode [ 1640.355234][T16131] bridge_slave_1: entered promiscuous mode [ 1640.495550][T12001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.503834][T12001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.647816][T12001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.656040][T12001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.890537][T16131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.082170][T16131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.123615][T12001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.131856][T12001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1641.327246][ T5783] Bluetooth: hci2: command tx timeout [ 1641.503140][T16131] team0: Port device team_slave_0 added [ 1641.651637][T16131] team0: Port device team_slave_1 added [ 1641.673461][ T8615] bridge_slave_1: left allmulticast mode [ 1641.689417][ T8615] bridge_slave_1: left promiscuous mode [ 1641.697358][ T8615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.713850][ T8615] bridge_slave_0: left allmulticast mode [ 1641.721216][ T8615] bridge_slave_0: left promiscuous mode [ 1641.737216][ T8615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1642.228035][ T8615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1642.249164][ T8615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1642.271732][ T8615] bond0 (unregistering): Released all slaves [ 1642.421418][T16131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1642.431684][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.473281][T16131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.540383][T16131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.548558][T16131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1642.577951][T16131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.978827][T16131] hsr_slave_0: entered promiscuous mode [ 1643.000518][T16131] hsr_slave_1: entered promiscuous mode [ 1643.019762][T16131] debugfs: 'hsr0' already exists in 'hsr' [ 1643.043342][T16131] Cannot create hsr debugfs directory [ 1643.241376][ T8615] hsr_slave_0: left promiscuous mode [ 1643.280902][ T8615] hsr_slave_1: left promiscuous mode [ 1643.298591][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.338011][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1643.391647][ T8615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1643.409648][ T5783] Bluetooth: hci2: command tx timeout [ 1643.409801][ T8615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1643.540148][ T8615] veth1_macvtap: left promiscuous mode [ 1643.548097][ T8615] veth0_macvtap: left promiscuous mode [ 1643.555555][ T8615] veth1_vlan: left promiscuous mode [ 1643.600588][ T8615] veth0_vlan: left promiscuous mode [ 1645.219215][ T8615] team0 (unregistering): Port device team_slave_1 removed [ 1645.251306][ T8615] team0 (unregistering): Port device team_slave_0 removed [ 1647.094725][T15893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1648.500615][T16131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1648.531999][T16131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1648.593078][T16131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1648.636232][T16131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1648.997077][T15901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1649.198472][T16261] 9pnet_virtio: no channels available for device syz [ 1650.014829][T15901] veth0_vlan: entered promiscuous mode [ 1650.334541][T15901] veth1_vlan: entered promiscuous mode [ 1650.563234][T16131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.625827][T15893] veth0_vlan: entered promiscuous mode [ 1650.796286][T15893] veth1_vlan: entered promiscuous mode [ 1650.914030][T16131] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.086560][T14898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1651.094715][T14898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1651.135096][T15901] veth0_macvtap: entered promiscuous mode [ 1651.330070][T15901] veth1_macvtap: entered promiscuous mode [ 1651.443115][T14898] bridge0: port 2(bridge_slave_1) entered blocking state [ 1651.451467][T14898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1651.950414][T15901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.142250][T15901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.447071][ T75] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.504268][ T75] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.654651][ T75] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.756755][ T75] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.882031][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1653.908716][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1653.927562][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1653.981375][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1654.001839][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1656.129056][ T5778] Bluetooth: hci4: command tx timeout [ 1656.279961][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1656.299707][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1656.316904][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1656.347596][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1656.385542][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1656.603749][T16131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.950511][T16316] chnl_net:caif_netlink_parms(): no params data found [ 1658.216642][ T5778] Bluetooth: hci4: command tx timeout [ 1658.449515][ T5778] Bluetooth: hci5: command tx timeout [ 1659.015075][T16131] veth0_vlan: entered promiscuous mode [ 1659.338280][T16316] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.363961][T16316] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.396931][T16316] bridge_slave_0: entered allmulticast mode [ 1659.418699][T16316] bridge_slave_0: entered promiscuous mode [ 1659.688514][T16316] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.697632][T16316] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.750745][T16316] bridge_slave_1: entered allmulticast mode [ 1659.867466][T16316] bridge_slave_1: entered promiscuous mode [ 1659.884774][T14898] bridge_slave_1: left allmulticast mode [ 1659.912116][T14898] bridge_slave_1: left promiscuous mode [ 1659.935031][T14898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.963026][T14898] bridge_slave_0: left allmulticast mode [ 1659.975301][T14898] bridge_slave_0: left promiscuous mode [ 1659.986714][T14898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.286684][ T5778] Bluetooth: hci4: command tx timeout [ 1660.527078][ T5778] Bluetooth: hci5: command tx timeout [ 1661.924583][T14898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.963053][T14898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.985868][T14898] bond0 (unregistering): Released all slaves [ 1662.211226][ T29] audit: type=1326 audit(1775399614.813:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16399 comm="syz.9.2221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77f6c code=0x7ffc0000 [ 1662.277204][ T29] audit: type=1326 audit(1775399614.813:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16399 comm="syz.9.2221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77f6c code=0x7ffc0000 [ 1662.331280][T16131] veth1_vlan: entered promiscuous mode [ 1662.373377][ T29] audit: type=1326 audit(1775399614.843:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16399 comm="syz.9.2221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=283 compat=1 ip=0xf7f77f6c code=0x7ffc0000 [ 1662.416881][ T5778] Bluetooth: hci4: command tx timeout [ 1662.482386][ T29] audit: type=1326 audit(1775399614.843:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16399 comm="syz.9.2221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77f6c code=0x7ffc0000 [ 1662.519085][T16316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1662.535664][ T29] audit: type=1326 audit(1775399614.843:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16399 comm="syz.9.2221" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77f6c code=0x7ffc0000 [ 1662.610143][T14898] hsr_slave_0: left promiscuous mode [ 1662.622824][ T5778] Bluetooth: hci5: command tx timeout [ 1662.651935][T14898] hsr_slave_1: left promiscuous mode [ 1662.677178][T14898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1662.704027][T14898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1662.847486][T14898] veth1_vlan: left promiscuous mode [ 1662.853555][T14898] veth0_vlan: left promiscuous mode [ 1664.095600][T14898] team0 (unregistering): Port device team_slave_1 removed [ 1664.225676][T14898] team0 (unregistering): Port device team_slave_0 removed [ 1664.686749][ T5778] Bluetooth: hci5: command tx timeout [ 1665.322953][T16316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1666.158608][T16335] chnl_net:caif_netlink_parms(): no params data found [ 1666.554306][T16316] team0: Port device team_slave_0 added [ 1666.643844][T16316] team0: Port device team_slave_1 added [ 1667.012259][T16316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.035054][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.113599][T16316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.200926][T16316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1667.221564][T16316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.289669][T16316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1667.634582][T14898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.894793][T14898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1667.980630][T16316] hsr_slave_0: entered promiscuous mode [ 1668.000543][T16316] hsr_slave_1: entered promiscuous mode [ 1668.010526][T16316] debugfs: 'hsr0' already exists in 'hsr' [ 1668.025184][T16316] Cannot create hsr debugfs directory [ 1668.122253][T14898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.176693][T14371] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1668.245571][T16335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.257118][T16335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1668.281456][T16335] bridge_slave_0: entered allmulticast mode [ 1668.305570][T16335] bridge_slave_0: entered promiscuous mode [ 1668.338266][T16131] veth0_macvtap: entered promiscuous mode [ 1668.347441][T14371] usb 10-1: Using ep0 maxpacket: 16 [ 1668.364621][T14371] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1668.411775][T14898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.433647][T14371] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1668.452958][T14371] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.463465][T14371] usb 10-1: Product: syz [ 1668.468541][T14371] usb 10-1: Manufacturer: syz [ 1668.474281][T14371] usb 10-1: SerialNumber: syz [ 1668.493696][T14371] usb 10-1: config 0 descriptor?? [ 1668.538315][T16335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1668.555536][T14371] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1668.565156][T16335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.599380][T14371] em28xx 10-1:0.0: DVB interface 0 found: bulk [ 1668.608644][T16335] bridge_slave_1: entered allmulticast mode [ 1668.643442][T16335] bridge_slave_1: entered promiscuous mode [ 1669.114569][T16335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.151136][T16131] veth1_macvtap: entered promiscuous mode [ 1669.176803][T14371] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1669.302021][T16335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.615918][T14371] em28xx 10-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1669.645841][T14371] em28xx 10-1:0.0: board has no eeprom [ 1669.681448][T16335] team0: Port device team_slave_0 added [ 1669.746716][T14371] em28xx 10-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1669.763936][T14371] em28xx 10-1:0.0: dvb set to bulk mode. [ 1669.773234][ T5828] em28xx 10-1:0.0: Binding DVB extension [ 1669.826666][T14371] usb 10-1: USB disconnect, device number 8 [ 1669.840514][T14371] em28xx 10-1:0.0: Disconnecting em28xx [ 1669.866123][T16335] team0: Port device team_slave_1 added [ 1670.032601][ T5828] em28xx 10-1:0.0: Registering input extension [ 1670.044878][T14371] em28xx 10-1:0.0: Closing input extension [ 1670.105853][T14371] em28xx 10-1:0.0: Freeing device [ 1670.463133][T16335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.472465][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1670.518339][T16335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1670.580630][T14898] bridge_slave_1: left allmulticast mode [ 1670.591749][T14898] bridge_slave_1: left promiscuous mode [ 1670.611236][T14898] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.660420][T14898] bridge_slave_0: left allmulticast mode [ 1670.677305][T14898] bridge_slave_0: left promiscuous mode [ 1670.684379][T14898] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.147977][T16483] binder_alloc: 16482: binder_alloc_buf, no vma [ 1675.582687][T14898] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1675.644270][T14898] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1675.734277][T14898] bond0 (unregistering): Released all slaves [ 1675.845346][T16335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.890384][T16335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1676.009348][T16335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1676.143894][T16131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1676.278155][T16131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1676.325431][T14898] hsr_slave_0: left promiscuous mode [ 1676.358604][T14898] hsr_slave_1: left promiscuous mode [ 1676.369779][T14898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1676.393827][T14898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1676.418958][T14898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1676.435011][T14898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.520435][T14898] veth1_macvtap: left promiscuous mode [ 1676.529880][T14898] veth0_macvtap: left promiscuous mode [ 1676.544705][T14898] veth1_vlan: left promiscuous mode [ 1676.569420][T14898] veth0_vlan: left promiscuous mode [ 1677.712571][T14898] team0 (unregistering): Port device team_slave_1 removed [ 1677.772153][T14898] team0 (unregistering): Port device team_slave_0 removed [ 1678.222901][T15094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.259003][T15094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.388248][T16335] hsr_slave_0: entered promiscuous mode [ 1678.411876][T16335] hsr_slave_1: entered promiscuous mode [ 1678.461696][T16335] debugfs: 'hsr0' already exists in 'hsr' [ 1678.482008][T16335] Cannot create hsr debugfs directory [ 1678.514552][T15094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.547367][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.570535][T15094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1678.924283][T16529] binder_alloc: 16526: binder_alloc_buf, no vma [ 1680.093307][ T29] audit: type=1800 audit(1775399632.693:62): pid=16533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.2246" name="/newroot/140" dev="tmpfs" ino=781 res=0 errno=0 [ 1681.353800][T16316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1681.491219][T16316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1681.628914][T16316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1681.736780][T16316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1682.759945][T16335] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1682.858402][T16335] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1682.988959][T16335] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1683.066034][T16335] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1683.252219][T16316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1683.380552][T16316] 8021q: adding VLAN 0 to HW filter on device team0 [ 1683.539769][ T6021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1683.548136][ T6021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1683.684605][ T6021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1683.693025][ T6021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.009021][T16335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1686.232889][T16335] 8021q: adding VLAN 0 to HW filter on device team0 [ 1686.311560][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1686.319932][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1686.536274][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1686.544568][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1686.983026][ T6021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.029806][ T6021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.266755][T16596] __kmem_cache_create_args(9p-fcall-cache-27) failed with error -12 [ 1687.306302][T16596] CPU: 1 UID: 0 PID: 16596 Comm: syz.6.2252 Not tainted syzkaller #0 PREEMPT(full) [ 1687.306457][T16596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1687.306543][T16596] Call Trace: [ 1687.306590][T16596] [ 1687.306637][T16596] __dump_stack+0x26/0x30 [ 1687.307227][T16596] dump_stack_lvl+0x14c/0x1c0 [ 1687.307390][T16596] dump_stack+0x1e/0x25 [ 1687.307525][T16596] __kmem_cache_create_args+0xbea/0x13a0 [ 1687.307831][T16596] p9_client_create+0x154e/0x1960 [ 1687.308226][T16596] v9fs_session_init+0x56/0x10c0 [ 1687.308587][T16596] v9fs_get_tree+0xd3/0x1500 [ 1687.308718][T16596] ? stack_depot_save_flags+0x35/0x790 [ 1687.308992][T16596] ? kmsan_get_metadata+0xf1/0x160 [ 1687.309185][T16596] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1687.309315][T16596] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1687.309453][T16596] vfs_get_tree+0xb3/0x5d0 [ 1687.309669][T16596] do_new_mount+0x885/0x1dd0 [ 1687.309867][T16596] ? apparmor_capable+0x2a2/0x380 [ 1687.310140][T16596] ? kmsan_get_metadata+0xf1/0x160 [ 1687.310267][T16596] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1687.310426][T16596] path_mount+0x7a2/0x20b0 [ 1687.310558][T16596] ? user_path_at+0x1fc/0x330 [ 1687.310781][T16596] __se_sys_mount+0x704/0x7f0 [ 1687.310944][T16596] __ia32_sys_mount+0xe2/0x150 [ 1687.311085][T16596] ia32_sys_call+0x27fe/0x4360 [ 1687.311239][T16596] __do_fast_syscall_32+0x17f/0x3f0 [ 1687.311561][T16596] do_fast_syscall_32+0x37/0x80 [ 1687.311731][T16596] do_SYSENTER_32+0x1f/0x30 [ 1687.311889][T16596] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1687.312064][T16596] RIP: 0023:0xf6fdef6c [ 1687.312171][T16596] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1687.312283][T16596] RSP: 002b:00000000f53ac50c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 1687.312411][T16596] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800000c0 [ 1687.312495][T16596] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000080000380 [ 1687.312579][T16596] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1687.312659][T16596] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1687.312740][T16596] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1687.312854][T16596] [ 1687.391199][T16316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.783502][ T6021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.793751][ T6021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.073814][T16619] input: syz0 as /devices/virtual/input/input11 [ 1689.222020][T16619] Device name cannot be null; rc = [-22] [ 1699.603585][T16335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.697167][T16316] veth0_vlan: entered promiscuous mode [ 1699.885821][T16316] veth1_vlan: entered promiscuous mode [ 1700.365600][T16316] veth0_macvtap: entered promiscuous mode [ 1700.564307][T16316] veth1_macvtap: entered promiscuous mode [ 1700.836913][T16335] veth0_vlan: entered promiscuous mode [ 1700.942919][T16316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1701.074834][T16316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1701.119195][T16335] veth1_vlan: entered promiscuous mode [ 1701.322226][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.356756][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.411268][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.453206][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1701.666342][T16335] veth0_macvtap: entered promiscuous mode [ 1701.780841][T16335] veth1_macvtap: entered promiscuous mode [ 1702.271664][T16335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1702.473322][T16335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1703.092530][ T5981] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.796932][ T5981] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.807810][ T5981] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1703.890959][ T5981] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1727.037298][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1727.117915][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1727.145588][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1727.177460][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1727.190778][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1727.428854][ T5778] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1727.448398][ T5778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1727.491178][ T5778] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1727.520174][ T5778] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1727.530911][ T5778] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1728.667334][ T5783] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1728.670458][T16730] chnl_net:caif_netlink_parms(): no params data found [ 1728.697740][ T5783] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1728.719617][ T5783] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1728.738083][ T5783] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1728.753875][ T5783] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1729.007013][ T5778] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1729.039295][ T5778] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1729.054739][ T5778] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1729.068929][ T5778] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1729.080880][ T5778] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1729.246899][ T5778] Bluetooth: hci0: command tx timeout [ 1729.576904][ T5778] Bluetooth: hci6: command tx timeout [ 1729.818135][ T5783] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1729.850480][ T5783] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1729.860323][ T5783] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1729.894993][ T5783] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1729.909437][ T5783] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1730.886599][ T5783] Bluetooth: hci7: command tx timeout [ 1731.177196][ T5783] Bluetooth: hci8: command tx timeout [ 1731.332512][ T5783] Bluetooth: hci0: command tx timeout [ 1731.648626][ T5783] Bluetooth: hci6: command tx timeout [ 1731.964406][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.977791][ T5783] Bluetooth: hci9: command tx timeout [ 1732.146187][T11056] bond0: (slave syz_tun): Releasing backup interface [ 1732.433752][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.467944][T16730] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.476103][T16730] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.531344][T16730] bridge_slave_0: entered allmulticast mode [ 1732.554652][T16730] bridge_slave_0: entered promiscuous mode [ 1732.679924][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1732.716871][T16730] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.725285][T16730] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.741242][T16730] bridge_slave_1: entered allmulticast mode [ 1732.758534][T16730] bridge_slave_1: entered promiscuous mode [ 1732.816181][T16733] chnl_net:caif_netlink_parms(): no params data found [ 1732.931234][ T5783] Bluetooth: hci7: command tx timeout [ 1732.971385][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1733.103728][T16730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1733.136112][T16730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.256681][ T5783] Bluetooth: hci8: command tx timeout [ 1733.372062][T16730] team0: Port device team_slave_0 added [ 1733.403584][T16730] team0: Port device team_slave_1 added [ 1733.416895][ T5783] Bluetooth: hci0: command tx timeout [ 1733.543703][T16742] chnl_net:caif_netlink_parms(): no params data found [ 1733.691873][T16730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1733.700329][T16730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.729271][ T5783] Bluetooth: hci6: command tx timeout [ 1733.743425][T16730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1733.762100][T16730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1733.770103][T16730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1733.799840][T16730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1734.039783][T16733] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.050881][T16733] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.059025][ T5783] Bluetooth: hci9: command tx timeout [ 1734.059592][T16733] bridge_slave_0: entered allmulticast mode [ 1734.074114][T16733] bridge_slave_0: entered promiscuous mode [ 1734.254236][T16733] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.284430][T16733] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.320198][T16733] bridge_slave_1: entered allmulticast mode [ 1734.339127][T16733] bridge_slave_1: entered promiscuous mode [ 1734.401041][ T35] bridge_slave_1: left allmulticast mode [ 1734.408272][ T35] bridge_slave_1: left promiscuous mode [ 1734.415263][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.434846][ T35] bridge_slave_0: left allmulticast mode [ 1734.446040][ T35] bridge_slave_0: left promiscuous mode [ 1734.455459][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.751402][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1734.770348][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1734.783998][ T35] bond0 (unregistering): Released all slaves [ 1734.970343][T16746] chnl_net:caif_netlink_parms(): no params data found [ 1734.990570][T16752] chnl_net:caif_netlink_parms(): no params data found [ 1735.018489][ T5783] Bluetooth: hci7: command tx timeout [ 1735.053819][ T35] hsr_slave_0: left promiscuous mode [ 1735.061586][ T35] hsr_slave_1: left promiscuous mode [ 1735.071317][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1735.080039][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1735.091087][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1735.099777][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1735.119262][ T35] veth1_macvtap: left promiscuous mode [ 1735.125444][ T35] veth0_macvtap: left promiscuous mode [ 1735.131948][ T35] veth1_vlan: left promiscuous mode [ 1735.138195][ T35] veth0_vlan: left promiscuous mode [ 1735.336847][ T5783] Bluetooth: hci8: command tx timeout [ 1735.521797][ T5783] Bluetooth: hci0: command tx timeout [ 1735.640835][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1735.672136][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1735.806811][ T5783] Bluetooth: hci6: command tx timeout [ 1736.009233][T16733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1736.036817][T16730] hsr_slave_0: entered promiscuous mode [ 1736.047512][T16730] hsr_slave_1: entered promiscuous mode [ 1736.057406][T16730] debugfs: 'hsr0' already exists in 'hsr' [ 1736.064084][T16730] Cannot create hsr debugfs directory [ 1736.126977][ T5783] Bluetooth: hci9: command tx timeout [ 1736.229818][T16733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.352985][T16742] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.361946][T16742] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.374518][T16742] bridge_slave_0: entered allmulticast mode [ 1736.383978][T16742] bridge_slave_0: entered promiscuous mode [ 1736.402346][T16742] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.411014][T16742] bridge0: port 2(bridge_slave_1) entered disabled state [ 1736.419727][T16742] bridge_slave_1: entered allmulticast mode [ 1736.429845][T16742] bridge_slave_1: entered promiscuous mode [ 1736.588881][T16733] team0: Port device team_slave_0 added [ 1736.616120][T16742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1736.689690][T16733] team0: Port device team_slave_1 added [ 1736.733271][T16742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1737.024139][T16733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.032153][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.062454][T16733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.083610][T16742] team0: Port device team_slave_0 added [ 1737.090356][ T5783] Bluetooth: hci7: command tx timeout [ 1737.177634][T16733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.185466][T16733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.214804][T16733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.255660][T16742] team0: Port device team_slave_1 added [ 1737.287398][T16752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.295724][T16752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.304327][T16752] bridge_slave_0: entered allmulticast mode [ 1737.313357][T16752] bridge_slave_0: entered promiscuous mode [ 1737.331097][T16752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.339933][T16752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.348682][T16752] bridge_slave_1: entered allmulticast mode [ 1737.358201][T16752] bridge_slave_1: entered promiscuous mode [ 1737.406739][ T5783] Bluetooth: hci8: command tx timeout [ 1737.532591][T16746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.541114][T16746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.550999][T16746] bridge_slave_0: entered allmulticast mode [ 1737.561814][T16746] bridge_slave_0: entered promiscuous mode [ 1737.576837][T16746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.585003][T16746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.594069][T16746] bridge_slave_1: entered allmulticast mode [ 1737.603111][T16746] bridge_slave_1: entered promiscuous mode [ 1737.651450][T16742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.660357][T16742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.690329][T16742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.774103][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.119854][T16742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1738.128223][T16742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1738.160519][T16742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1738.195224][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.216993][ T5783] Bluetooth: hci9: command tx timeout [ 1738.232855][T16752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1738.296312][T16733] hsr_slave_0: entered promiscuous mode [ 1738.311931][T16733] hsr_slave_1: entered promiscuous mode [ 1738.322907][T16733] debugfs: 'hsr0' already exists in 'hsr' [ 1738.330609][T16733] Cannot create hsr debugfs directory [ 1738.361223][T16746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1738.385240][T16746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1738.483288][T16752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1738.591824][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1738.730875][T16746] team0: Port device team_slave_0 added [ 1738.747283][T16746] team0: Port device team_slave_1 added [ 1738.835368][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.040681][T16742] hsr_slave_0: entered promiscuous mode [ 1739.050413][T16742] hsr_slave_1: entered promiscuous mode [ 1739.062213][T16742] debugfs: 'hsr0' already exists in 'hsr' [ 1739.068894][T16742] Cannot create hsr debugfs directory [ 1739.121070][T16752] team0: Port device team_slave_0 added [ 1739.145020][T16746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.153110][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.185333][T16746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.203466][T16746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.211429][T16746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.240574][T16746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.382198][T16752] team0: Port device team_slave_1 added [ 1739.669991][T16752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1739.681161][T16752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.715189][T16752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.733984][T16752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.742836][T16752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.772884][T16752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.989301][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.010466][T16746] hsr_slave_0: entered promiscuous mode [ 1740.019874][T16746] hsr_slave_1: entered promiscuous mode [ 1740.029669][T16746] debugfs: 'hsr0' already exists in 'hsr' [ 1740.036110][T16746] Cannot create hsr debugfs directory [ 1740.400189][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.667679][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.723612][T16752] hsr_slave_0: entered promiscuous mode [ 1740.747245][T16752] hsr_slave_1: entered promiscuous mode [ 1740.756374][T16752] debugfs: 'hsr0' already exists in 'hsr' [ 1740.763074][T16752] Cannot create hsr debugfs directory [ 1740.930329][T16730] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1740.995990][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.201335][T16730] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1741.250604][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.347484][T16730] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1741.476258][T16730] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1742.162081][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.256174][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.341852][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.425032][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.525822][T16730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1742.589059][T16730] 8021q: adding VLAN 0 to HW filter on device team0 [ 1742.673714][T14957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.681975][T14957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1742.765881][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.773992][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1742.833006][ T35] bridge_slave_1: left allmulticast mode [ 1742.839985][ T35] bridge_slave_1: left promiscuous mode [ 1742.850549][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.869804][ T35] bridge_slave_0: left allmulticast mode [ 1742.876152][ T35] bridge_slave_0: left promiscuous mode [ 1742.884747][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.899630][ T35] bridge_slave_1: left allmulticast mode [ 1742.905968][ T35] bridge_slave_1: left promiscuous mode [ 1742.914286][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.930013][ T35] bridge_slave_0: left allmulticast mode [ 1742.936338][ T35] bridge_slave_0: left promiscuous mode [ 1742.948758][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.965156][ T35] bridge_slave_1: left allmulticast mode [ 1742.972095][ T35] bridge_slave_1: left promiscuous mode [ 1742.983336][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.995256][ T35] bridge_slave_0: left allmulticast mode [ 1743.002064][ T35] bridge_slave_0: left promiscuous mode [ 1743.015002][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.570711][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.586365][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.606376][ T35] bond0 (unregistering): Released all slaves [ 1743.794221][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1743.811204][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1743.835470][ T35] bond0 (unregistering): Released all slaves [ 1744.614960][T16742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1744.645402][T16742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1744.732494][T16742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1744.768464][T16742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1745.005689][ T35] hsr_slave_0: left promiscuous mode [ 1745.014655][ T35] hsr_slave_1: left promiscuous mode [ 1745.023859][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.032565][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.043724][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.054500][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.073898][ T35] hsr_slave_0: left promiscuous mode [ 1745.082430][ T35] hsr_slave_1: left promiscuous mode [ 1745.092249][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.101483][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.114357][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.122778][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.145410][ T35] hsr_slave_0: left promiscuous mode [ 1745.153321][ T35] hsr_slave_1: left promiscuous mode [ 1745.190381][ T35] veth1_macvtap: left promiscuous mode [ 1745.197470][ T35] veth0_macvtap: left promiscuous mode [ 1745.203779][ T35] veth1_vlan: left promiscuous mode [ 1745.212451][ T35] veth0_vlan: left promiscuous mode [ 1745.220828][ T35] veth1_macvtap: left promiscuous mode [ 1745.227543][ T35] veth0_macvtap: left promiscuous mode [ 1745.234046][ T35] veth1_vlan: left promiscuous mode [ 1745.242512][ T35] veth0_vlan: left promiscuous mode [ 1745.251350][ T35] veth1_macvtap: left promiscuous mode [ 1745.260883][ T35] veth0_macvtap: left promiscuous mode [ 1745.267341][ T35] veth1_vlan: left promiscuous mode [ 1745.273281][ T35] veth0_vlan: left promiscuous mode [ 1746.131977][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1746.159957][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1746.578743][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1746.604708][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1746.980330][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1747.044002][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1747.449514][T16733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1747.532009][T16733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1747.563588][T16733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1747.671066][T16733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1748.036129][T16730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1748.475036][T16746] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1748.562598][T16746] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1748.599918][T16742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.654664][T16746] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1748.701452][T16746] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1749.000066][T16742] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.110044][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.118220][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.132270][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.140405][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.578922][T16752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1749.600226][T16752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1749.662420][T16733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.674291][T16752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1749.697695][T16752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1749.800063][T16730] veth0_vlan: entered promiscuous mode [ 1749.960383][T16733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.991980][T16730] veth1_vlan: entered promiscuous mode [ 1750.109593][ T5981] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.117813][ T5981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.233876][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.241993][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.290858][T16746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.566864][T16730] veth0_macvtap: entered promiscuous mode [ 1750.611216][T16746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.670307][T16730] veth1_macvtap: entered promiscuous mode [ 1750.697527][T15093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.705586][T15093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.748394][T16742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1750.844939][T15093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.853051][T15093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.938283][T16730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1750.965085][T16752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1751.030844][T16730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1751.189013][T14898] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.201839][T14898] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.263537][T14898] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.279893][T14898] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.379456][T16752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1751.520156][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1751.528380][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1751.673872][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.682144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.721226][T16742] veth0_vlan: entered promiscuous mode [ 1751.878197][T16742] veth1_vlan: entered promiscuous mode [ 1752.190546][T16733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.344724][T16742] veth0_macvtap: entered promiscuous mode [ 1752.567942][T16742] veth1_macvtap: entered promiscuous mode [ 1752.919738][T16746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.983630][T16733] veth0_vlan: entered promiscuous mode [ 1753.003682][T16742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1753.095780][T16742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1753.236814][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.271392][T16733] veth1_vlan: entered promiscuous mode [ 1753.324423][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.357038][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.455432][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.783450][T16733] veth0_macvtap: entered promiscuous mode [ 1753.889892][T16733] veth1_macvtap: entered promiscuous mode [ 1754.142375][T16733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1754.192815][T16752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1754.278816][T16733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1754.445740][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.463693][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.570588][T14898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1754.596781][T14898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.058259][T16752] veth0_vlan: entered promiscuous mode [ 1755.270330][T16752] veth1_vlan: entered promiscuous mode [ 1755.307220][T16746] veth0_vlan: entered promiscuous mode [ 1755.431763][T16746] veth1_vlan: entered promiscuous mode [ 1755.713285][T16752] veth0_macvtap: entered promiscuous mode [ 1755.852690][T16752] veth1_macvtap: entered promiscuous mode [ 1756.051833][T16746] veth0_macvtap: entered promiscuous mode [ 1756.097248][T14957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.106010][T14957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.199551][T16752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1756.258137][T16746] veth1_macvtap: entered promiscuous mode [ 1756.346309][T16752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1756.430042][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.462616][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.530841][T14898] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.639268][T14898] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.667526][T14898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.748814][T16746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1756.816346][T14898] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.894862][T16746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.089962][ T8615] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.120727][ T6021] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.208882][ T6021] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.242095][ T6021] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.608776][ T5096] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1757.776796][ T5096] usb 5-1: device descriptor read/64, error -71 [ 1758.038636][ T5096] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1758.228802][ T5096] usb 5-1: device descriptor read/64, error -71 [ 1758.337871][ T5096] usb usb5-port1: attempt power cycle [ 1758.726717][ T5096] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1758.778590][ T5096] usb 5-1: device descriptor read/8, error -71 [ 1758.843867][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.906885][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.067286][ T5096] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1759.148223][ T5096] usb 5-1: device descriptor read/8, error -71 [ 1759.235284][ T5981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.280169][ T5981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.298125][ T5096] usb usb5-port1: unable to enumerate USB device [ 1760.530325][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1760.562173][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1760.992372][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.055538][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.585691][T14957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.656746][T14957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.910282][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.963694][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.807176][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1765.816090][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.916946][T11003] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1766.106866][T11003] usb 3-1: device descriptor read/64, error -71 [ 1766.118970][T14898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.146072][T14898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.367544][T11003] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1766.548088][T11003] usb 3-1: device descriptor read/64, error -71 [ 1766.677770][T11003] usb usb3-port1: attempt power cycle [ 1767.286820][T11003] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1767.362891][T14347] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1767.388918][T11003] usb 3-1: device descriptor read/8, error -71 [ 1767.565392][T14347] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1767.621021][T14347] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1767.662989][T14347] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1767.686823][T11003] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1767.723695][T14347] usb 8-1: Product: syz [ 1767.736914][T11003] usb 3-1: device descriptor read/8, error -71 [ 1767.766121][T14347] usb 8-1: Manufacturer: syz [ 1767.794501][T14347] usb 8-1: SerialNumber: syz [ 1767.910838][T11003] usb usb3-port1: unable to enumerate USB device [ 1770.178020][T14347] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1771.159176][T14347] usb 8-1: USB disconnect, device number 3 [ 1771.206361][T14347] usblp0: removed [ 1771.774149][T17047] binder: BINDER_SET_CONTEXT_MGR already set [ 1771.797916][T17047] binder: 17046:17047 ioctl 4018620d 80004a80 returned -16 [ 1773.270056][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2295'. [ 1773.452558][T17064] input: syz1 as /devices/virtual/input/input12 [ 1773.657941][T17070] binder: BINDER_SET_CONTEXT_MGR already set [ 1773.695144][T17070] binder: 17069:17070 ioctl 4018620d 80004a80 returned -16 [ 1776.703111][T17086] [U] [ 1776.706380][T17086] [U] [ 1776.709590][T17086] [U] [ 1776.712789][T17086] [U] [ 1776.774722][T17086] [U] [ 1776.777983][T17086] [U] [ 1776.781190][T17086] [U] [ 1776.784392][T17086] [U] [ 1776.857052][T14347] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1776.888701][T17084] [U] [ 1777.031950][T14347] usb 1-1: device descriptor read/64, error -71 [ 1777.115857][T17095] binder: BINDER_SET_CONTEXT_MGR already set [ 1777.175767][T17095] binder: 17094:17095 ioctl 4018620d 80004a80 returned -16 [ 1777.334077][T14347] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1777.586874][T14347] usb 1-1: device descriptor read/64, error -71 [ 1777.697801][T14347] usb usb1-port1: attempt power cycle [ 1778.099824][T14347] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1782.106731][T14347] usb 1-1: device descriptor read/8, error -71 [ 1786.565612][ T29] audit: type=1326 audit(1775399738.743:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17131 comm="syz.2.2312" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70aef6c code=0x0 [ 1787.395039][T17142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1787.433863][T17142] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1787.447770][T17142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1787.461031][T17142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1787.475244][T17142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1790.262128][T17142] Bluetooth: hci1: command tx timeout [ 1790.591732][T17153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1791.357058][T16808] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1791.480865][T17161] binder: BINDER_SET_CONTEXT_MGR already set [ 1791.567264][T17161] binder: 17159:17161 ioctl 4018620d 80004a80 returned -16 [ 1791.660106][T16808] usb 3-1: Using ep0 maxpacket: 8 [ 1791.731363][T16808] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1791.801755][T16808] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1791.866893][T16808] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1791.922581][T16808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.977836][T17141] chnl_net:caif_netlink_parms(): no params data found [ 1792.286904][ T5783] Bluetooth: hci1: command tx timeout [ 1794.184786][T17141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.209727][T17141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.238971][T17141] bridge_slave_0: entered allmulticast mode [ 1794.289322][T17141] bridge_slave_0: entered promiscuous mode [ 1794.343424][T17141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.367396][ T5783] Bluetooth: hci1: command tx timeout [ 1794.374224][T11003] usb 3-1: USB disconnect, device number 9 [ 1794.446244][T17141] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.503186][T17141] bridge_slave_1: entered allmulticast mode [ 1794.542059][T17141] bridge_slave_1: entered promiscuous mode [ 1795.038235][T11003] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1795.167581][T17141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1795.232770][T11003] usb 8-1: Using ep0 maxpacket: 8 [ 1795.268361][T11003] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1795.292902][T17141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1795.321131][T11003] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1795.351264][T11003] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1795.376756][T11003] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1795.402711][ T5981] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.426724][T11003] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1795.471387][T11003] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.752354][T11003] usb 8-1: GET_CAPABILITIES returned 70 [ 1795.769717][T11003] usbtmc 8-1:16.0: can't read capabilities [ 1795.900528][ T5981] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1795.957302][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1795.974715][T17191] binder: 17190:17191 ioctl c0306201 0 returned -14 [ 1795.983087][T17191] binder: 17190:17191 ioctl 8008662c 800002c0 returned -22 [ 1795.992570][T17191] binder: 17190:17191 ioctl 80184540 800000c0 returned -22 [ 1796.077818][T16808] usb 8-1: USB disconnect, device number 4 [ 1796.082224][T17141] team0: Port device team_slave_0 added [ 1796.218827][T17141] team0: Port device team_slave_1 added [ 1796.322600][ T5981] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.446966][ T5783] Bluetooth: hci1: command tx timeout [ 1796.903209][ T5981] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.979601][T17141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1798.033005][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.124316][T17141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.191625][T17141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.232631][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.466772][T17141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.301435][T17141] hsr_slave_0: entered promiscuous mode [ 1799.682847][T17141] hsr_slave_1: entered promiscuous mode [ 1800.099070][T17141] debugfs: 'hsr0' already exists in 'hsr' [ 1800.266057][T17141] Cannot create hsr debugfs directory [ 1801.530387][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.740868][ T5981] bridge_slave_1: left allmulticast mode [ 1802.797885][ T5981] bridge_slave_1: left promiscuous mode [ 1802.804645][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.818687][T17142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1802.829206][T17142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1802.844813][T17142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1802.866011][T17142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1802.879022][T17142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1802.898706][ T5981] bridge_slave_0: left allmulticast mode [ 1802.905204][ T5981] bridge_slave_0: left promiscuous mode [ 1802.912391][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.676957][ T5783] Bluetooth: hci0: command tx timeout [ 1808.678448][T17142] Bluetooth: hci0: command tx timeout [ 1810.700271][ T5783] Bluetooth: hci0: command tx timeout [ 1812.767218][ T5783] Bluetooth: hci0: command tx timeout [ 1813.511395][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1813.617026][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1813.682712][ T5981] bond0 (unregistering): Released all slaves [ 1816.404493][ T5981] hsr_slave_0: left promiscuous mode [ 1816.435229][ T5981] hsr_slave_1: left promiscuous mode [ 1816.469656][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1816.516711][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1816.592003][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1816.616927][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1816.692161][ T5981] veth1_macvtap: left promiscuous mode [ 1816.717032][ T5981] veth0_macvtap: left promiscuous mode [ 1816.729066][ T5981] veth1_vlan: left promiscuous mode [ 1816.735113][ T5981] veth0_vlan: left promiscuous mode [ 1817.466963][T17312] random: crng reseeded on system resumption [ 1818.753520][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 1818.861170][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 1819.096253][T17324] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2358'. [ 1820.868078][ T5981] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.177741][ T5981] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.443165][ T5981] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.628880][T17141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1821.712302][T17141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1821.793363][T17244] chnl_net:caif_netlink_parms(): no params data found [ 1821.977286][ T5981] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.029713][T17346] Bluetooth: MGMT ver 1.23 [ 1822.051935][T17141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1822.543289][T17141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1823.138318][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2362'. [ 1824.107214][T17142] Bluetooth: hci0: command 0x0c1a tx timeout [ 1824.114845][ T5783] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1826.553126][ T5981] bridge_slave_1: left allmulticast mode [ 1826.577203][ T5981] bridge_slave_1: left promiscuous mode [ 1826.607712][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.711284][ T5981] bridge_slave_0: left allmulticast mode [ 1826.765020][ T5981] bridge_slave_0: left promiscuous mode [ 1826.807787][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.634166][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1829.691499][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1829.775972][ T5981] bond0 (unregistering): Released all slaves [ 1837.909942][T17244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.922079][T17244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.930698][T17244] bridge_slave_0: entered allmulticast mode [ 1837.949943][T17244] bridge_slave_0: entered promiscuous mode [ 1837.971611][T17244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.981354][T17244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.989660][T17244] bridge_slave_1: entered allmulticast mode [ 1837.998461][T17244] bridge_slave_1: entered promiscuous mode [ 1838.170140][T17244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1838.603135][T17244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1839.174324][ T5981] hsr_slave_0: left promiscuous mode [ 1839.214732][ T5981] hsr_slave_1: left promiscuous mode [ 1839.238776][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1839.253830][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1839.303673][ T5981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1839.353128][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1839.467534][ T5981] veth1_macvtap: left promiscuous mode [ 1839.473824][ T5981] veth0_macvtap: left promiscuous mode [ 1839.499043][ T5981] veth1_vlan: left promiscuous mode [ 1839.505218][ T5981] veth0_vlan: left promiscuous mode [ 1841.153451][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 1841.202472][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 1841.841844][T17244] team0: Port device team_slave_0 added [ 1841.937611][T17244] team0: Port device team_slave_1 added [ 1841.951662][T17141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1842.217931][T17461] netlink: 'syz.2.2385': attribute type 10 has an invalid length. [ 1842.236164][T17244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1842.245725][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.294451][T17244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1842.401101][T17461] team0: Port device macvlan0 added [ 1842.448971][T17244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1842.477282][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1842.601061][T17244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1843.811159][T17480] 9pnet_virtio: no channels available for device syz [ 1845.037892][T17142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1845.064655][T17142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1845.075372][T17142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1845.099937][T17142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1845.112455][T17142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1845.670129][T17244] hsr_slave_0: entered promiscuous mode [ 1845.690859][T17244] hsr_slave_1: entered promiscuous mode [ 1845.797132][T17244] debugfs: 'hsr0' already exists in 'hsr' [ 1845.824552][T17244] Cannot create hsr debugfs directory [ 1847.178997][T17142] Bluetooth: hci2: command tx timeout [ 1849.254814][T17142] Bluetooth: hci2: command tx timeout [ 1851.327677][T17142] Bluetooth: hci2: command tx timeout [ 1853.631686][T17522] Bluetooth: hci2: command tx timeout [ 1854.686908][T17522] Bluetooth: hci6: command 0x0406 tx timeout [ 1854.693736][T17522] Bluetooth: hci7: command 0x0406 tx timeout [ 1854.709164][T17522] Bluetooth: hci8: command 0x0406 tx timeout [ 1855.403623][T14957] bridge_slave_1: left allmulticast mode [ 1855.474326][T14957] bridge_slave_1: left promiscuous mode [ 1855.691985][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1855.725285][T14957] bridge_slave_0: left allmulticast mode [ 1855.762114][T14957] bridge_slave_0: left promiscuous mode [ 1855.780106][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1856.324610][T14957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1856.558717][T14957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1856.624029][T14957] bond0 (unregistering): Released all slaves [ 1858.638232][T16808] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1858.988519][T16808] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1859.019099][T16808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1859.055058][T16808] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1859.787678][ T29] audit: type=1326 audit(1775399812.313:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17556 comm="syz.0.2404" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd4f6c code=0x0 [ 1859.806881][T16808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1860.239108][T16808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1860.249804][T16808] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1860.282440][T16808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1860.293734][T16808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1860.325582][T17244] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1860.368495][T16808] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1860.460827][T16808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1860.480074][T16808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1860.534566][T16808] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1860.606871][T16808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1860.663598][T17244] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1860.667374][T16808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1860.757593][T16808] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1860.786633][T16808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1860.829451][T17485] chnl_net:caif_netlink_parms(): no params data found [ 1860.868312][T16808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1860.899701][T16808] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1860.972588][T16808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1861.024500][T16808] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1861.086762][T14957] hsr_slave_0: left promiscuous mode [ 1861.094981][T16808] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1861.149524][T14957] hsr_slave_1: left promiscuous mode [ 1861.159305][T16808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1861.197988][T14957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.271805][T14957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.417787][T16808] usb 3-1: unable to read config index 7 descriptor/start: -71 [ 1861.444467][T16808] usb 3-1: can't read configurations, error -71 [ 1862.080079][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1862.094791][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1862.137313][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1862.347313][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1862.382336][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1862.716774][T14957] team0 (unregistering): Port device team_slave_1 removed [ 1862.872007][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1862.872619][T14957] team0 (unregistering): Port device team_slave_0 removed [ 1864.449882][ T5778] Bluetooth: hci1: command tx timeout [ 1865.747323][T17485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.771805][T17485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.797226][T17485] bridge_slave_0: entered allmulticast mode [ 1865.832971][T17485] bridge_slave_0: entered promiscuous mode [ 1865.977231][T17485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.985372][T17485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.034255][T17485] bridge_slave_1: entered allmulticast mode [ 1866.065140][T17485] bridge_slave_1: entered promiscuous mode [ 1866.483834][T17485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1866.526879][ T5778] Bluetooth: hci1: command tx timeout [ 1866.713153][T17485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1867.294889][T17485] team0: Port device team_slave_0 added [ 1867.412405][T17485] team0: Port device team_slave_1 added [ 1868.707011][ T5778] Bluetooth: hci1: command tx timeout [ 1870.123672][T17577] chnl_net:caif_netlink_parms(): no params data found [ 1870.504823][T17485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1870.600075][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1870.767614][ T5778] Bluetooth: hci1: command tx timeout [ 1870.794610][T17485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.169413][T17485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.264269][T17485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.435369][T17485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1876.445343][T17485] hsr_slave_0: entered promiscuous mode [ 1877.521316][T17485] hsr_slave_1: entered promiscuous mode [ 1879.410919][T14957] bridge_slave_1: left allmulticast mode [ 1879.426829][T14957] bridge_slave_1: left promiscuous mode [ 1879.433902][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.487383][T14957] bridge_slave_0: left allmulticast mode [ 1879.493786][T14957] bridge_slave_0: left promiscuous mode [ 1879.586307][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.720248][T14957] bridge_slave_1: left allmulticast mode [ 1879.735748][T14957] bridge_slave_1: left promiscuous mode [ 1879.747346][T14957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1879.871941][T14957] bridge_slave_0: left allmulticast mode [ 1879.889647][T14957] bridge_slave_0: left promiscuous mode [ 1879.929146][T14957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1879.965594][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1879.985876][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1879.998998][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1880.157525][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1880.242136][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1880.896714][T14957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1880.934756][T14957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1880.978857][T14957] bond0 (unregistering): Released all slaves [ 1881.390115][T14957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1881.439956][T14957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1881.501193][T14957] bond0 (unregistering): Released all slaves [ 1881.644945][T17658] bond0: entered promiscuous mode [ 1881.675831][T17658] bond_slave_0: entered promiscuous mode [ 1881.691701][T17658] bond_slave_1: entered promiscuous mode [ 1881.748147][T17658] batadv0: entered promiscuous mode [ 1881.763555][T17658] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1881.898976][T17577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1881.917443][T17577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.957071][T17577] bridge_slave_0: entered allmulticast mode [ 1881.981124][T17577] bridge_slave_0: entered promiscuous mode [ 1882.182875][T17577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1882.209269][T17577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.237839][T17577] bridge_slave_1: entered allmulticast mode [ 1882.267525][T17577] bridge_slave_1: entered promiscuous mode [ 1882.364520][T14957] hsr_slave_0: left promiscuous mode [ 1882.407203][T14957] hsr_slave_1: left promiscuous mode [ 1882.418186][T14957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1882.444342][T14957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1882.446920][ T5783] Bluetooth: hci0: command tx timeout [ 1882.529160][T14957] hsr_slave_0: left promiscuous mode [ 1882.568168][T14957] hsr_slave_1: left promiscuous mode [ 1882.615360][T14957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1882.640284][T14957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1883.359324][T16808] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1883.466891][T14957] team0 (unregistering): Port device team_slave_1 removed [ 1883.517694][T16808] usb 1-1: Using ep0 maxpacket: 16 [ 1883.555129][T16808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1883.595228][T14957] team0 (unregistering): Port device team_slave_0 removed [ 1883.627552][T16808] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1883.669886][T16808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.715551][T16808] usb 1-1: Product: syz [ 1883.725093][T16808] usb 1-1: Manufacturer: syz [ 1883.741564][T16808] usb 1-1: SerialNumber: syz [ 1883.777490][T16808] usb 1-1: config 0 descriptor?? [ 1883.905262][T16808] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1883.939243][T16808] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 1884.032118][T17576] Set syz1 is full, maxelem 65536 reached [ 1884.408329][T16808] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1884.526964][ T5783] Bluetooth: hci0: command tx timeout [ 1884.733554][T17693] ===================================================== [ 1884.741821][T17693] BUG: KMSAN: uninit-value in batadv_get_vid+0x2ce/0x3b0 [ 1884.749949][T17693] batadv_get_vid+0x2ce/0x3b0 [ 1884.755250][T17693] batadv_interface_tx+0x2e8/0x1dd0 [ 1884.761431][T17693] dev_hard_start_xmit+0x24e/0xad0 [ 1884.767545][T17693] __dev_queue_xmit+0x3412/0x5980 [ 1884.773238][T17693] __bpf_redirect+0x162e/0x1760 [ 1884.779178][T17693] bpf_clone_redirect+0x4a6/0x6c0 [ 1884.784934][T17693] ___bpf_prog_run+0x13e8/0xea90 [ 1884.790841][T17693] __bpf_prog_run32+0xc2/0xf0 [ 1884.796129][T17693] bpf_test_run+0x846/0xdf0 [ 1884.801561][T17693] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1884.807875][T17693] bpf_prog_test_run+0x5bb/0x9f0 [ 1884.813532][T17693] __sys_bpf+0x925/0xee0 [ 1884.818558][T17693] __ia32_sys_bpf+0xa4/0xf0 [ 1884.823652][T17693] ia32_sys_call+0x33e7/0x4360 [ 1884.829227][T17693] __do_fast_syscall_32+0x17f/0x3f0 [ 1884.835127][T17693] do_fast_syscall_32+0x37/0x80 [ 1884.840856][T17693] do_SYSENTER_32+0x1f/0x30 [ 1884.845976][T17693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1884.853308][T17693] [ 1884.855924][T17693] Uninit was created at: [ 1884.861107][T17693] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 1884.867951][T17693] pskb_expand_head+0x2ef/0x1fb0 [ 1884.873705][T17693] skb_ensure_writable+0x44e/0x510 [ 1884.879694][T17693] bpf_clone_redirect+0x301/0x6c0 [ 1884.885376][T17693] ___bpf_prog_run+0x13e8/0xea90 [ 1884.891162][T17693] __bpf_prog_run32+0xc2/0xf0 [ 1884.896549][T17693] bpf_test_run+0x846/0xdf0 [ 1884.901655][T17693] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1884.908013][T17693] bpf_prog_test_run+0x5bb/0x9f0 [ 1884.913597][T17693] __sys_bpf+0x925/0xee0 [ 1884.918610][T17693] __ia32_sys_bpf+0xa4/0xf0 [ 1884.923710][T17693] ia32_sys_call+0x33e7/0x4360 [ 1884.929266][T17693] __do_fast_syscall_32+0x17f/0x3f0 [ 1884.935160][T17693] do_fast_syscall_32+0x37/0x80 [ 1884.940822][T17693] do_SYSENTER_32+0x1f/0x30 [ 1884.945938][T17693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1884.953262][T17693] [ 1884.955900][T17693] CPU: 0 UID: 0 PID: 17693 Comm: syz.7.2426 Not tainted syzkaller #0 PREEMPT(full) [ 1884.966614][T17693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1884.977958][T17693] ===================================================== [ 1884.985683][T17693] Disabling lock debugging due to kernel taint [ 1884.992773][T17693] Kernel panic - not syncing: kmsan.panic set ... [ 1885.000051][T17693] CPU: 0 UID: 0 PID: 17693 Comm: syz.7.2426 Tainted: G B syzkaller #0 PREEMPT(full) [ 1885.012256][T17693] Tainted: [B]=BAD_PAGE [ 1885.016905][T17693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1885.028073][T17693] Call Trace: [ 1885.031770][T17693] [ 1885.035072][T17693] __dump_stack+0x26/0x30 [ 1885.039997][T17693] dump_stack_lvl+0x50/0x1c0 [ 1885.045204][T17693] ? dump_stack+0x12/0x25 [ 1885.050134][T17693] dump_stack+0x1e/0x25 [ 1885.054860][T17693] vpanic+0x7b4/0x1430 [ 1885.059526][T17693] panic+0x15d/0x160 [ 1885.064082][T17693] kmsan_report+0x31a/0x320 [ 1885.069261][T17693] ? __msan_warning+0x1b/0x30 [ 1885.074593][T17693] ? batadv_get_vid+0x2ce/0x3b0 [ 1885.080100][T17693] ? batadv_interface_tx+0x2e8/0x1dd0 [ 1885.086188][T17693] ? dev_hard_start_xmit+0x24e/0xad0 [ 1885.092166][T17693] ? __dev_queue_xmit+0x3412/0x5980 [ 1885.098052][T17693] ? __bpf_redirect+0x162e/0x1760 [ 1885.103748][T17693] ? bpf_clone_redirect+0x4a6/0x6c0 [ 1885.109633][T17693] ? ___bpf_prog_run+0x13e8/0xea90 [ 1885.115418][T17693] ? __bpf_prog_run32+0xc2/0xf0 [ 1885.120900][T17693] ? bpf_test_run+0x846/0xdf0 [ 1885.126196][T17693] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 1885.132558][T17693] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1885.138337][T17693] ? __sys_bpf+0x925/0xee0 [ 1885.143333][T17693] ? __ia32_sys_bpf+0xa4/0xf0 [ 1885.148602][T17693] ? ia32_sys_call+0x33e7/0x4360 [ 1885.154168][T17693] ? __do_fast_syscall_32+0x17f/0x3f0 [ 1885.160259][T17693] ? do_fast_syscall_32+0x37/0x80 [ 1885.165973][T17693] ? do_SYSENTER_32+0x1f/0x30 [ 1885.171290][T17693] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1885.178622][T17693] ? kmsan_get_metadata+0xf1/0x160 [ 1885.184395][T17693] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1885.190935][T17693] ? kmsan_get_metadata+0xf1/0x160 [ 1885.196705][T17693] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1885.203247][T17693] ? batadv_interface_tx+0xc1/0x1dd0 [ 1885.209220][T17693] ? filter_irq_stacks+0x49/0x190 [ 1885.215062][T17693] ? kmsan_get_metadata+0xf1/0x160 [ 1885.220841][T17693] __msan_warning+0x1b/0x30 [ 1885.225977][T17693] batadv_get_vid+0x2ce/0x3b0 [ 1885.231283][T17693] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1885.237825][T17693] batadv_interface_tx+0x2e8/0x1dd0 [ 1885.243724][T17693] ? kmsan_report+0x2f0/0x320 [ 1885.249063][T17693] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1885.256231][T17693] ? __pfx_batadv_interface_tx+0x10/0x10 [ 1885.262602][T17693] dev_hard_start_xmit+0x24e/0xad0 [ 1885.268424][T17693] __dev_queue_xmit+0x3412/0x5980 [ 1885.274106][T17693] ? skb_release_data+0x107c/0x11b0 [ 1885.279989][T17693] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1885.287047][T17693] ? kmsan_get_metadata+0xf1/0x160 [ 1885.292813][T17693] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1885.299354][T17693] ? __dev_queue_xmit+0x27a/0x5980 [ 1885.305136][T17693] ? pskb_expand_head+0x1c0e/0x1fb0 [ 1885.311024][T17693] ? kmsan_get_metadata+0xf1/0x160 [ 1885.316813][T17693] __bpf_redirect+0x162e/0x1760 [ 1885.322325][T17693] ? kmsan_get_metadata+0xf1/0x160 [ 1885.328096][T17693] bpf_clone_redirect+0x4a6/0x6c0 [ 1885.333829][T17693] ___bpf_prog_run+0x13e8/0xea90 [ 1885.339451][T17693] __bpf_prog_run32+0xc2/0xf0 [ 1885.344779][T17693] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1885.350847][T17693] ? __pfx___bpf_prog_run32+0x10/0x10 [ 1885.356909][T17693] bpf_test_run+0x846/0xdf0 [ 1885.362033][T17693] ? csum_partial+0x424/0x480 [ 1885.367306][T17693] ? kmsan_get_metadata+0xf1/0x160 [ 1885.373081][T17693] ? bpf_test_run+0x2f4/0xdf0 [ 1885.378427][T17693] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1885.384598][T17693] ? kmsan_get_metadata+0xf1/0x160 [ 1885.390425][T17693] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1885.396979][T17693] bpf_prog_test_run+0x5bb/0x9f0 [ 1885.402585][T17693] __sys_bpf+0x925/0xee0 [ 1885.407447][T17693] __ia32_sys_bpf+0xa4/0xf0 [ 1885.412548][T17693] ia32_sys_call+0x33e7/0x4360 [ 1885.417933][T17693] __do_fast_syscall_32+0x17f/0x3f0 [ 1885.423848][T17693] do_fast_syscall_32+0x37/0x80 [ 1885.429370][T17693] do_SYSENTER_32+0x1f/0x30 [ 1885.434498][T17693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1885.441636][T17693] RIP: 0023:0xf701ef6c [ 1885.446186][T17693] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1885.467905][T17693] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1885.477247][T17693] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0 [ 1885.486097][T17693] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1885.494918][T17693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1885.503760][T17693] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1885.512643][T17693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1885.521539][T17693] [ 1885.525084][T17693] Kernel Offset: disabled [ 1885.529896][T17693] Rebooting in 86400 seconds..