last executing test programs: 26m6.481908542s ago: executing program 4 (id=73): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r0, 0x89e7, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r1, 0x0, r2, 0x0, 0x15, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x14b042, 0x83) ftruncate(r3, 0x3000000) sendfile(r0, r3, 0x0, 0x7bffffff) 26m5.307824027s ago: executing program 4 (id=75): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x40000008}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000, 0x3, &(0x7f00001c3000/0x2000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) 26m1.892285166s ago: executing program 4 (id=84): ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000000)=ANY=[]) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) 25m59.860779098s ago: executing program 4 (id=88): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000400)=[@request_death], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25m59.674473158s ago: executing program 4 (id=89): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_io_uring_setup(0x1e7f, &(0x7f0000000140)={0x0, 0xac24, 0x2, 0x2, 0x361}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0xa0002) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x4) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000180)={[{0x2b, 'cpuset'}]}, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r4, 0x4b4d, &(0x7f00000013c0)={0x5, 0x8d9}) io_uring_enter(r1, 0x6149, 0x8f8e, 0x8, &(0x7f0000000040)={[0xfffffff6]}, 0x8) 25m59.008000735s ago: executing program 4 (id=93): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r3, &(0x7f0000000000)=0x400, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0x800000d1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1, 0x2, 0xd, 0x50, 0xef1f}, 0x20) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2, 0x400000000000003, 0x0, 0x9, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x5}, @sadb_address={0x5, 0x6, 0x6c, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x70000001}, @sadb_address={0x3, 0x17, 0x0, 0x120, 0x0, @in={0x2, 0x4e21, @local}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd26}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd28, 0x3502}]}, 0xc0}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041319000200c90000000000000000"], 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 25m42.723381772s ago: executing program 32 (id=93): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r3, &(0x7f0000000000)=0x400, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0x800000d1}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) socket(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x44840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mknod$loop(0x0, 0x2000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x240008c4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5, 0x1, 0x2, 0xd, 0x50, 0xef1f}, 0x20) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x80c1}, 0x50) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)={0x2, 0x400000000000003, 0x0, 0x9, 0x18, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x5}, @sadb_address={0x5, 0x6, 0x6c, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x70000001}, @sadb_address={0x3, 0x17, 0x0, 0x120, 0x0, @in={0x2, 0x4e21, @local}}, @sadb_x_sa2={0x2, 0x13, 0x6, 0x0, 0x0, 0x70bd26}, @sadb_x_sa2={0x2, 0x13, 0x7, 0x0, 0x0, 0x70bd28, 0x3502}]}, 0xc0}}, 0x8080) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041319000200c90000000000000000"], 0x1c) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 24m38.167537233s ago: executing program 2 (id=251): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000012f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x4040) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4004) 24m38.064598197s ago: executing program 2 (id=253): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 24m37.979572151s ago: executing program 2 (id=254): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x30, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 24m37.89958554s ago: executing program 2 (id=255): mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f00000005c0), 0x4004, &(0x7f0000000600)={'trans=virtio,', {[{@dfltuid}]}}) 24m37.644605726s ago: executing program 2 (id=256): r0 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r0, 0x0, 0x480, 0x0, &(0x7f0000000080)) 24m37.397326637s ago: executing program 2 (id=258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) dup(0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e3100000000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000008ae72ba8724be28929561418ee1192dc0fcc0d2a096a5736397cca91da60e7167c4dd93530df5b3715c21678d22e214ae67632ac360a8726400246360be3dcff0af0f418ce9a57cbe1eef829be55a55efa3f7a232412ce2879ef5a3123cb06b15fa7cbd4315835888c11be1279b77acf67ecde54a09b1b76a62d4b70dcc60618e7ee117d93444283e73fc18470a38fa58c979f"], 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) socket$nl_generic(0x10, 0x3, 0x10) io_destroy(r6) 24m22.284430297s ago: executing program 33 (id=258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) dup(0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000314010000000000000000000900020073797a3000000000080041007369770014003300766c616e3100000000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000008ae72ba8724be28929561418ee1192dc0fcc0d2a096a5736397cca91da60e7167c4dd93530df5b3715c21678d22e214ae67632ac360a8726400246360be3dcff0af0f418ce9a57cbe1eef829be55a55efa3f7a232412ce2879ef5a3123cb06b15fa7cbd4315835888c11be1279b77acf67ecde54a09b1b76a62d4b70dcc60618e7ee117d93444283e73fc18470a38fa58c979f"], 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) socket$nl_generic(0x10, 0x3, 0x10) io_destroy(r6) 12m49.304823186s ago: executing program 0 (id=1508): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000800)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) 12m49.262787506s ago: executing program 0 (id=1510): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000000018001280080001"], 0x38}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) listen(r6, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0}) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 12m45.295816629s ago: executing program 0 (id=1517): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000002240)={0x0, 0x6e5c1dbd, 0x0, @thr={0x0, 0x0}}) r3 = gettid() mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000000300)=0x9, 0x4) 12m39.835142981s ago: executing program 0 (id=1528): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x10, r0) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x7) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 12m38.356142263s ago: executing program 0 (id=1531): r0 = socket$tipc(0x1e, 0x2, 0x0) shutdown(r0, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r5 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000001480), 0x0, 0x101000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0xc0804124, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r7, 0xc044560f, &(0x7f0000000080)=@mmap={0x0, 0x2, 0x4, 0x0, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "10110401"}}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r8, &(0x7f0000000140)={'full'}, 0xfffffdef) 12m36.403666718s ago: executing program 0 (id=1533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x480, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="09000000010001", 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000002f80)='task_rename\x00', r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000340)=@req3={0x0, 0xa, 0x0, 0xb6, 0x8, 0x1d, 0x54e2acb8}, 0x1c) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) unshare(0x40020000) 12m20.636025285s ago: executing program 34 (id=1533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x480, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000080)="09000000010001", 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000002f80)='task_rename\x00', r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sched_getattr(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000340)=@req3={0x0, 0xa, 0x0, 0xb6, 0x8, 0x1d, 0x54e2acb8}, 0x1c) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) unshare(0x40020000) 11m40.548722394s ago: executing program 3 (id=1610): socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0xf8f98ced9c9c1015) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) socket(0x29, 0x800, 0x7) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x2200892, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$snddsp_control(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x110, r0, 0x83000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) r2 = syz_io_uring_setup(0x498, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) write$FUSE_LK(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x18, 0x0, @fd_index=0x6, 0x4, {}, 0x7, 0xd}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) 11m39.377475382s ago: executing program 3 (id=1611): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffff21, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdc2504"], 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x24000080) socket$can_bcm(0x1d, 0x2, 0x2) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r5, 0xc06855c8, &(0x7f0000000080)={0x10, 0x480, {0x57, 0x6a19, 0x24, {0x1000, 0x7f}, {0x7, 0x5}, @period={0x59, 0xa888, 0x8, 0xe6, 0x80, {0x8fbe, 0x1000, 0x2, 0xb}, 0x0, 0x0}}, {0x54, 0x5, 0x8, {0x7, 0x7fff}, {0x3, 0x5}, @cond=[{0xff2f, 0x3, 0x3, 0x8, 0x7, 0x8}, {0xd33, 0x7, 0x10, 0x5, 0x3, 0x4}]}}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_to_bond\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x12, 0x9b4, 0x7ff, 0xfb}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) syz_io_uring_setup(0x835, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 11m36.615988544s ago: executing program 3 (id=1613): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000001c0)={0x24, 0x14, 0x105, 0x70bc2a, 0x2ddfdb7b, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "053e3e71ed07348ace"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8086}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) fsopen(&(0x7f0000000000)='udf\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1e00000003000000000000000e000000000a0600", @ANYRES32, @ANYBLOB="f8ff03ff7d070000000000000000000000c1e30f1106e3389f01fc8355eda2e1042cc1c948d42bd58e410241df409373e722866083c35007a6ca32902f64c08f17287f80ce35425aea07ec0e51c07e68bb0215618a76fc8562ff10faebaaccf8402b8204972703f3a860733991cf035b38972cbd3bb850a0008288cc6a04cfafd1f361f083eb6e9831d54725d8b76bff6d61e93e28f58e7bdebed1d3cc1abf3e77c29653bcb42a1477592117c705425a3c8d444ac428caadb03b9df4ed1c5f5a89e45b522622ade5821470216e0151b8a4f6bbb5416590b29f6d0d", @ANYRES32=r0, @ANYBLOB], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0xf}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x2000000, 0x0, 0x10}, 0x84) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) 11m31.774750564s ago: executing program 3 (id=1618): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) set_mempolicy(0x3, &(0x7f0000000080)=0xffff, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x20}) 11m31.603749567s ago: executing program 3 (id=1619): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140), 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="eabdefac6c5799b2000100000400000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES64=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000010000085000000500000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)='+\fER', 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f0000000400)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="52fb64364baa3f901787a470c8b8767a87fb253f9cb6730f011facb0c2b0800a9976b7fd8a3083ebc241", @ANYRES32=r5, @ANYRES8], 0x34}, 0x1, 0x0, 0x0, 0x4b9702dee4ac411b}, 0x4004854) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r8, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x20044054) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) socket$nl_audit(0x10, 0x3, 0x9) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2003041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x18) r9 = signalfd4(r0, &(0x7f00000008c0)={[0x60000]}, 0x8, 0x1800) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000940)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000900), 0x13f, 0x1}}, 0x20) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000560900a1004daf25cee2d5d1c1"], 0x0}, 0x0) 11m28.381581673s ago: executing program 3 (id=1627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r5, 0x0) r6 = getpgid(r5) setpgid(0x0, r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd27, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008041) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) 11m12.87907748s ago: executing program 35 (id=1627): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r5, 0x0) r6 = getpgid(r5) setpgid(0x0, r6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd27, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008041) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008800}, 0x8000) r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) 8m43.655926002s ago: executing program 1 (id=1807): socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @remote, 0x0, "12ceaac82ab7d944df1b26e3617810c9b81bede26c85ee73daab4158e800", 0x3, 0x7, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 8m42.278905611s ago: executing program 1 (id=1808): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2, 0x1bd}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x28, 0x0, r3, 0x0, 0x0, 0xa4}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8m42.239853029s ago: executing program 1 (id=1809): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0) ioperm(0x284, 0x7f, 0xe3) ioperm(0x7fffffff, 0x1, 0x8) socket$netlink(0x10, 0x3, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000060000002900"], 0x28}}], 0x1, 0x44010) r6 = io_uring_setup(0x2c48, &(0x7f0000000280)={0x0, 0xdfc8, 0x80, 0x2, 0x1af}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x18, 0x0, 0x1) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x7aad, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r8}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r7, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r9, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r12, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) readv(r12, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4085, 0xff5}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8m41.132547971s ago: executing program 1 (id=1810): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7db000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e83a02650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) socket(0x10, 0x3, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r3, 0x4c00, 0x3) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c06c6800820f9039bffbcc25415ed71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x207]}) 8m40.936712437s ago: executing program 1 (id=1811): mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000007c0), 0x10) 8m40.261914131s ago: executing program 1 (id=1812): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) close(r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318300000001000000021900000018000180140002006475084e0603269c64647d6d6d79"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r5 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="45000000060000000000000000000000000000000000000000000000000003001c000000000000002f7379732fa41ab30afc41cdf6c652366b65726e656c2f64656275672f73796e632f696e666f0000"], 0x45) 8m40.078692338s ago: executing program 36 (id=1812): mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) close(r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="318300000001000000021900000018000180140002006475084e0603269c64647d6d6d79"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') r5 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="45000000060000000000000000000000000000000000000000000000000003001c000000000000002f7379732fa41ab30afc41cdf6c652366b65726e656c2f64656275672f73796e632f696e666f0000"], 0x45) 6m16.613421119s ago: executing program 9 (id=2022): socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000000100d8ea3fa1a08f361a6037b4c655b416"], 0x14}}, 0x40) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x4004) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) 6m12.044677047s ago: executing program 6 (id=2033): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9c, 0x10000}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) memfd_secret(0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0), 0x0) 6m10.767237951s ago: executing program 6 (id=2035): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d3abc8a75ac1f30e53a0eff506f6e6b369ba6c5306e91acaa94e89d3bff4e52cd151235f3defff171c60b91c0c5aeb29736830a09b262dbe4c7ed149885a054de1d7ff5bcecd7a50061814ceefb", 0x9d}, {&(0x7f0000000900)="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", 0x3e4}], 0x2}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x18, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x18}}, 0x0) 6m10.394138076s ago: executing program 9 (id=2037): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)={0x40000008}) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000, 0x3, &(0x7f00001c3000/0x2000)=nil) close_range(r4, 0xffffffffffffffff, 0x0) 6m10.361493253s ago: executing program 5 (id=2039): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xab, &(0x7f0000000140)=""/171, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x64048044) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) umount2(0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef", 0x6f}], 0x3}], 0x1, 0x40800) recvmsg$qrtr(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000700)=""/195, 0xc3}], 0x2, 0x0, 0x0, 0x10000}, 0x38, 0x10020) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x57}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000031}, 0x840) 6m10.28048719s ago: executing program 6 (id=2040): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x194, 0x30, 0x1, 0x1}, 0x194}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89b0, &(0x7f0000000180)={'veth0_to_hsr\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x7d7d800]}}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x9, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000003000000000000000f0000ee176200000f00000000000000f90000ff18110000", @ANYRES32=0x1, @ANYBLOB="290fe20ccf1f1f27b702000000000000850000008600000095000000000000006a20ad316827dd8717d0dd130d2096f9fe37562fc3878c60496e726dd0950439269eec97221592504010e47d84764f"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x40, &(0x7f0000000400)=""/64, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x5, 0xb, 0x5}, {0x3, 0x3, 0x2b, 0x1}, {0x2, 0x1, 0x9, 0xa}], 0x10, 0xffffffff}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0xa4050, &(0x7f0000000300)=ANY=[@ANYBLOB="9fd43d", @ANYRESHEX=r4, @ANYRESHEX, @ANYRESDEC=r4, @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYRES64=r4, @ANYRES32=r4]) 6m9.287386891s ago: executing program 5 (id=2043): socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r4}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r4, 0x0, 0x100000000000000}, 0x38) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000080)='udf\x00', 0x2008087, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe, 0x1}, 0x3c) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @remote, 0x0, "12ceaac82ab7d944df1b26e3617810c9b81bede26c85ee73daab4158e800", 0x3, 0x7, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 6m7.50306957s ago: executing program 5 (id=2046): r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m6.197363493s ago: executing program 5 (id=2047): ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000000)) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'amplc_pc236\x00', [0x4f27, 0x0, 0xc139, 0x4, 0x5, 0xad, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0x7f, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x7fff, 0x3, 0x7c, 0x3, 0x8, 0x4086, 0x0, 0x1]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000040)={0x5, 0x6, 0x1, 0x8, 0x3, [0x6, 0x7, 0x7, 0x5]}) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x10}, 0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat6\x00') read$FUSE(r5, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) tkill(r6, 0x13) 6m5.472651274s ago: executing program 9 (id=2048): mount$cgroup2(0x0, 0x0, 0x0, 0x1004000, &(0x7f00000004c0)=ANY=[@ANYBLOB]) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0xff8e}}, 0x40) 6m5.022566342s ago: executing program 5 (id=2049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 6m4.757373221s ago: executing program 6 (id=2051): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000012f00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}], 0x1, 0x4040) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="b001000043000701fefffffffcdbdf25017c00000c014d804a00bd8009e382565597d96e128ab9528cf251184e4a680ce3edb95c253b970c4a11fdca41def61711e4d0b5f9f7af8cdb02e618ff6616bdd6e0b99e52dd36f9340c040016800400788000000400ae00a9008280244b958a566ad5682a9f7ecc4117cb2296a1b668d080cc8d08de649a366de73fa35b8bc18c1a7a60e39a4a848dd8f3bec09c56f48afb7e6ac2235ec5f1b60bac32f4f188d377ba8aa1d642f7d57bb82b923f5f2d1aa8e70f300b1d40f70d5e9a71ceaf8b0fedfc89a10297032f4f05c5aff8d6999366553c8b147388fbc6c2ebce12d8b3c05e00a6598862e573a9f06ee7ceee98db627d70057599efac9198e61623dd1132"], 0x1b0}}, 0x4004) 6m4.600696956s ago: executing program 9 (id=2053): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x15, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x500008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/snmp6\x00') read$sequencer(r1, &(0x7f00000003c0)=""/130, 0x82) 6m4.391256736s ago: executing program 6 (id=2056): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x2, 0x1bd}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x28, 0x0, r3, 0x0, 0x0, 0xa4}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6m2.692542038s ago: executing program 9 (id=2057): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRES8=r1], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xab, &(0x7f0000000140)=""/171, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x64048044) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) umount2(0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000001c0)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef", 0x6f}], 0x3}], 0x1, 0x40800) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x40, 0x57}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000031}, 0x840) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x7, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@rthdrdstopts={{0x14, 0x29, 0x37, {0x33}}}], 0x14}}], 0x1, 0x5000) 6m2.616619872s ago: executing program 6 (id=2059): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = open_tree(r2, 0x0, 0x89901) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000400)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x3c63, @rand_addr=' \x01\x00', 0x8}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@o_path={0x0, r0, 0x4000, r4}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffef4, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r9, 0x3, 0x1, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5b}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) r12 = add_key$keyring(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r12) 6m2.450470724s ago: executing program 5 (id=2060): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9c, 0x10000}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) memfd_secret(0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0), 0x0) 6m2.405807s ago: executing program 9 (id=2061): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1de0, &(0x7f0000000440)) socket(0x25, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a7, 0xc}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5m47.132109115s ago: executing program 37 (id=2061): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1de0, &(0x7f0000000440)) socket(0x25, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881a7, 0xc}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 5m46.971332292s ago: executing program 38 (id=2059): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = open_tree(r2, 0x0, 0x89901) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000400)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x3c63, @rand_addr=' \x01\x00', 0x8}, 0x1c) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@o_path={0x0, r0, 0x4000, r4}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000580)={0x0, 0xfffffef4, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r9, 0x3, 0x1, 0x5, 0x3, [0x0, 0x0, 0x0, 0x0], [0x80000001], [0x20, 0x1001000, 0xfffffffb, 0xffffffff], [0x1, 0x401, 0x9, 0x2]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r10, 0x0, 0x0, r11], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe5b}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000080)) r12 = add_key$keyring(&(0x7f0000000280), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, r12) 5m46.792963963s ago: executing program 39 (id=2060): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) fsopen(&(0x7f00000000c0)='jffs2\x00', 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9c, 0x10000}, 0x28) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x64}]}, 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) memfd_secret(0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0), 0x0) 7.420403598s ago: executing program 8 (id=2605): socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) fcntl$getownex(r1, 0x10, &(0x7f0000000d80)) sendmsg$unix(r2, &(0x7f0000000e40)={&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[], 0x54, 0x20000040}, 0x4000880) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) inotify_rm_watch(r4, r5) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000), &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {0x0}], 0x2) 4.861231619s ago: executing program 8 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x4000008) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) mount$tmpfs(0x0, 0x0, 0x0, 0x10a40a2, &(0x7f0000000040)=ANY=[@ANYBLOB="f4697a653d"]) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 4.611723349s ago: executing program 8 (id=2609): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) dup3(r0, r0, 0x80000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x56e40e99, 0x4) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x541b, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xfffffffffffffffd, 0x183003) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f00000011c0)=""/230) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f00000003c0)={&(0x7f0000000500)=@can={{0x2, 0x0, 0x1, 0x1}, 0x2, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) 3.667097747s ago: executing program 7 (id=2610): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendfile(r3, r4, 0x0, 0x200002) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) 2.572193657s ago: executing program 7 (id=2611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) 2.488385196s ago: executing program 7 (id=2612): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7feee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.38297283s ago: executing program 7 (id=2613): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r1, &(0x7f00000001c0)="007c35801b12d7ad1f047246921201004b2a126db492031972949937159ff7f266fb22125103c8e7fd02a622369a3862cf53dd1e", 0x34) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0xf2ffffff) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090b0000000000000000000000030006000000000002000000e00000090000000000000000020001000200000000000002000000000300050000000000020000007f00000100000000000000000100140000000000d56b652a1066dd7f9bc421c9ab806eaf4857d5c020625d761eae1f205b361b5ed36661ee640ca92941e32aca2af1d490c00f"], 0x58}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) mq_open(0x0, 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8f}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000002680)={0x0, 0x1, 0x0, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xa4242, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@my=0x1}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 1.180666585s ago: executing program 8 (id=2614): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.052120673s ago: executing program 8 (id=2615): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x3010}, 0x1}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) ppoll(&(0x7f00000000c0)=[{r4, 0x747}], 0x1, 0x0, 0x0, 0x0) 446.565403ms ago: executing program 7 (id=2616): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x4000008) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) mount$tmpfs(0x0, 0x0, 0x0, 0x10a40a2, &(0x7f0000000040)=ANY=[@ANYBLOB="f4697a653d"]) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 96.088053ms ago: executing program 7 (id=2617): r0 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40046f41, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r4, 0x0, 0x5}, 0xfffffe2e) r5 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000100)=0x21) r6 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f00000000c0)=0x32) 0s ago: executing program 8 (id=2618): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendfile(r3, r4, 0x0, 0x200002) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) kernel console output (not intermixed with test programs): d: batadv_slave_0 [ 1427.991962][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.022389][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.022417][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.088045][T15478] 9pnet_virtio: no channels available for device syz [ 1428.211872][ T43] hsr_slave_0: left promiscuous mode [ 1428.601199][ T43] hsr_slave_1: left promiscuous mode [ 1428.611607][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1428.611672][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1428.911785][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1428.911845][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1428.981662][ T43] veth1_macvtap: left promiscuous mode [ 1428.981728][ T43] veth0_macvtap: left promiscuous mode [ 1428.981871][ T43] veth1_vlan: left promiscuous mode [ 1428.981969][ T43] veth0_vlan: left promiscuous mode [ 1429.071679][ T43] veth1_macvtap: left promiscuous mode [ 1429.071788][ T43] veth0_macvtap: left promiscuous mode [ 1429.072052][ T43] veth1_vlan: left promiscuous mode [ 1429.072233][ T43] veth0_vlan: left promiscuous mode [ 1431.341742][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1431.572280][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1436.021825][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1436.231785][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1438.510453][T15480] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2195'. [ 1439.864314][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2200'. [ 1439.888983][T15495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2199'. [ 1441.385664][T15506] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2203'. [ 1441.600186][T15507] 9pnet_virtio: no channels available for device syz [ 1442.760340][T15519] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1442.765665][T15519] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1442.785762][T15519] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1442.789210][T15519] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1442.802810][T15519] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1442.806103][T15519] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1442.817903][T15519] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1442.820503][T15519] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1442.820567][T15519] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1443.447559][T15393] chnl_net:caif_netlink_parms(): no params data found [ 1443.560146][T15391] chnl_net:caif_netlink_parms(): no params data found [ 1443.573430][T15385] chnl_net:caif_netlink_parms(): no params data found [ 1444.652163][T15529] uprobe: syz.8.2209:15529 failed to unregister, leaking uprobe [ 1446.329880][T15547] 9pnet_fd: Insufficient options for proto=fd [ 1447.593036][T15393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.593112][T15393] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.593245][T15393] bridge_slave_0: entered allmulticast mode [ 1447.594915][T15393] bridge_slave_0: entered promiscuous mode [ 1447.682611][T15393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.682685][T15393] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.682835][T15393] bridge_slave_1: entered allmulticast mode [ 1447.684503][T15393] bridge_slave_1: entered promiscuous mode [ 1448.111719][T15385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.111857][T15385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.112771][T15385] bridge_slave_0: entered allmulticast mode [ 1448.117361][T15385] bridge_slave_0: entered promiscuous mode [ 1448.163705][T15391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.163835][T15391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.164068][T15391] bridge_slave_0: entered allmulticast mode [ 1448.166968][T15391] bridge_slave_0: entered promiscuous mode [ 1448.303427][T15385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.304135][T15385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.306682][T15385] bridge_slave_1: entered allmulticast mode [ 1448.336281][T15385] bridge_slave_1: entered promiscuous mode [ 1448.382921][T15391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.383230][T15391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.384214][T15391] bridge_slave_1: entered allmulticast mode [ 1448.401912][T15391] bridge_slave_1: entered promiscuous mode [ 1448.430570][T15393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.508154][T15581] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2219'. [ 1449.508191][T15581] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2219'. [ 1450.244090][T15393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.599550][T15385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.613613][T15391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1450.705984][T15385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.708396][T15391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.714546][T15393] team0: Port device team_slave_0 added [ 1450.876122][T15393] team0: Port device team_slave_1 added [ 1451.094509][T15385] team0: Port device team_slave_0 added [ 1451.098316][T15391] team0: Port device team_slave_0 added [ 1451.198227][T15385] team0: Port device team_slave_1 added [ 1451.200233][T15391] team0: Port device team_slave_1 added [ 1451.293931][T15393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1451.293948][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1451.293976][T15393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.005129][T15393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1453.005276][T15393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1453.005338][T15393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.028816][T15604] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2225'. [ 1454.029981][T15385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.029991][T15385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.030005][T15385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.094903][T15391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.094920][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.094954][T15391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.272899][T15385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.272912][T15385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.272928][T15385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.274471][T15391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.274480][T15391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1454.274495][T15391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.746998][T15393] hsr_slave_0: entered promiscuous mode [ 1454.747938][T15393] hsr_slave_1: entered promiscuous mode [ 1455.107892][T15385] hsr_slave_0: entered promiscuous mode [ 1455.108940][T15385] hsr_slave_1: entered promiscuous mode [ 1455.109607][T15385] debugfs: 'hsr0' already exists in 'hsr' [ 1455.109624][T15385] Cannot create hsr debugfs directory [ 1455.167542][T15391] hsr_slave_0: entered promiscuous mode [ 1455.168434][T15391] hsr_slave_1: entered promiscuous mode [ 1455.169050][T15391] debugfs: 'hsr0' already exists in 'hsr' [ 1455.169067][T15391] Cannot create hsr debugfs directory [ 1458.203576][T15630] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2233'. [ 1460.695139][T15650] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2238'. [ 1460.975516][ T43] bridge_slave_1: left allmulticast mode [ 1460.975544][ T43] bridge_slave_1: left promiscuous mode [ 1460.976214][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.052144][ T43] bridge_slave_0: left allmulticast mode [ 1461.052165][ T43] bridge_slave_0: left promiscuous mode [ 1461.052339][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.064174][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1461.153670][ T43] bridge_slave_1: left allmulticast mode [ 1461.153691][ T43] bridge_slave_1: left promiscuous mode [ 1461.153845][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.211153][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1461.215434][ T9] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1461.215462][ T9] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1461.215482][ T9] usb 9-1: Product: syz [ 1461.215493][ T9] usb 9-1: Manufacturer: syz [ 1461.215501][ T9] usb 9-1: SerialNumber: syz [ 1461.218918][ T9] usb 9-1: config 0 descriptor?? [ 1461.241226][ T5977] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1461.246648][ T43] bridge_slave_0: left allmulticast mode [ 1461.246676][ T43] bridge_slave_0: left promiscuous mode [ 1461.248651][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.355440][ T43] bridge_slave_1: left allmulticast mode [ 1461.355469][ T43] bridge_slave_1: left promiscuous mode [ 1461.355729][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.393840][ T5977] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 1461.395651][ T5977] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1461.395677][ T5977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.395691][ T5977] usb 8-1: Product: syz [ 1461.395699][ T5977] usb 8-1: Manufacturer: syz [ 1461.395706][ T5977] usb 8-1: SerialNumber: syz [ 1461.401262][T15660] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1461.472776][ T43] bridge_slave_0: left allmulticast mode [ 1461.472807][ T43] bridge_slave_0: left promiscuous mode [ 1461.473126][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 1461.507905][T15656] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2239'. [ 1461.507921][T15656] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2239'. [ 1461.754278][ T5977] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1461.771763][ T5977] usb 8-1: USB disconnect, device number 4 [ 1461.842035][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.931967][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.013600][ T43] bond0 (unregistering): Released all slaves [ 1462.231670][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.352162][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.413105][ T43] bond0 (unregistering): Released all slaves [ 1462.652231][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.734406][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.795602][ T43] bond0 (unregistering): Released all slaves [ 1463.739997][T10266] usb 9-1: USB disconnect, device number 2 [ 1464.803114][ T43] hsr_slave_0: left promiscuous mode [ 1464.831328][ T43] hsr_slave_1: left promiscuous mode [ 1464.832306][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.882809][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.081261][ T43] hsr_slave_0: left promiscuous mode [ 1465.101921][ T43] hsr_slave_1: left promiscuous mode [ 1465.103405][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.161777][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1465.311222][ T43] hsr_slave_0: left promiscuous mode [ 1465.332838][ T43] hsr_slave_1: left promiscuous mode [ 1465.335275][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.371934][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1466.022696][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1466.181984][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1467.241749][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1467.361671][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1468.381904][ T43] team0 (unregistering): Port device team_slave_1 removed [ 1468.542437][ T43] team0 (unregistering): Port device team_slave_0 removed [ 1469.058865][T15674] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2243'. [ 1470.447307][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2246'. [ 1470.447888][T15686] x_tables: ip_tables: udp match: only valid for protocol 17 [ 1471.215642][T15693] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2248'. [ 1471.556507][T15393] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1472.447098][T15393] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1472.509456][T15393] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1472.924644][T15393] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1473.547135][T15385] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1473.771113][ T5977] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1474.228147][T15385] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1474.580598][T15385] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1474.662049][ T5977] usb 8-1: Using ep0 maxpacket: 16 [ 1474.684659][ T5977] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1474.684690][ T5977] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1474.684710][ T5977] usb 8-1: Product: syz [ 1474.684725][ T5977] usb 8-1: Manufacturer: syz [ 1474.684739][ T5977] usb 8-1: SerialNumber: syz [ 1474.777246][T15385] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1474.800332][ T5977] usb 8-1: config 0 descriptor?? [ 1475.675112][T14028] usb 8-1: USB disconnect, device number 5 [ 1475.968794][T15391] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1476.019465][T15391] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1476.078863][T15391] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1476.137830][T15391] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1476.480405][T15393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1476.677955][T15393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1476.756159][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1476.756408][T12003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1476.852134][ T1486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1476.852285][ T1486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.114696][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1478.118028][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1478.123525][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1478.152505][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1478.153812][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1478.208236][T12647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1478.223091][T12647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1478.233025][T12647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1478.255481][T12647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1478.261771][T12647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1479.108691][T12647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1479.155835][T12647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1479.165444][T12647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1479.166983][T12647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1479.168131][T12647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1480.211672][ T5818] Bluetooth: hci0: command tx timeout [ 1480.299200][ T5818] Bluetooth: hci4: command tx timeout [ 1481.131184][ T6006] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1481.251193][ T5818] Bluetooth: hci2: command tx timeout [ 1481.301157][ T6006] usb 8-1: Using ep0 maxpacket: 16 [ 1481.306495][ T6006] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1481.306516][ T6006] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1481.306527][ T6006] usb 8-1: Product: syz [ 1481.306534][ T6006] usb 8-1: Manufacturer: syz [ 1481.306542][ T6006] usb 8-1: SerialNumber: syz [ 1481.310650][ T6006] usb 8-1: config 0 descriptor?? [ 1481.519507][T14028] usb 8-1: USB disconnect, device number 6 [ 1482.291565][ T5818] Bluetooth: hci0: command tx timeout [ 1482.344795][T15845] binder: BINDER_SET_CONTEXT_MGR already set [ 1482.344811][T15845] binder: 15844:15845 ioctl 4018620d 2000000002c0 returned -16 [ 1482.371843][ T5818] Bluetooth: hci4: command tx timeout [ 1482.695020][T15756] chnl_net:caif_netlink_parms(): no params data found [ 1482.816368][T15760] chnl_net:caif_netlink_parms(): no params data found [ 1483.129576][T15772] chnl_net:caif_netlink_parms(): no params data found [ 1483.140805][T12002] bridge_slave_1: left allmulticast mode [ 1483.140833][T12002] bridge_slave_1: left promiscuous mode [ 1483.143565][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.214182][T12002] bridge_slave_0: left allmulticast mode [ 1483.214212][T12002] bridge_slave_0: left promiscuous mode [ 1483.214461][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.331131][ T5818] Bluetooth: hci2: command tx timeout [ 1484.392112][ T5818] Bluetooth: hci0: command tx timeout [ 1484.451185][ T5818] Bluetooth: hci4: command tx timeout [ 1484.536431][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.536530][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.081950][T12002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1485.182041][T12002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.248166][T12002] bond0 (unregistering): Released all slaves [ 1485.419863][ T5818] Bluetooth: hci2: command tx timeout [ 1485.523792][T15884] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2275'. [ 1485.955228][T15915] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2279'. [ 1486.417577][ T5818] Bluetooth: hci6: SCO packet for unknown connection handle 0 [ 1486.451996][ T5818] Bluetooth: hci0: command tx timeout [ 1486.541293][T12647] Bluetooth: hci4: command tx timeout [ 1486.763298][T15915] 9pnet_virtio: no channels available for device syz [ 1487.149157][T12002] hsr_slave_0: left promiscuous mode [ 1487.187792][T12002] hsr_slave_1: left promiscuous mode [ 1487.271355][T12002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.503224][T12647] Bluetooth: hci2: command tx timeout [ 1487.744152][T12002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.222741][T12002] team0 (unregistering): Port device team_slave_1 removed [ 1489.431852][T12002] team0 (unregistering): Port device team_slave_0 removed [ 1490.615752][T15945] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2284'. [ 1490.618420][T15756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1490.618615][T15756] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.618844][T15756] bridge_slave_0: entered allmulticast mode [ 1490.653425][T15756] bridge_slave_0: entered promiscuous mode [ 1491.568488][T15756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1491.568611][T15756] bridge0: port 2(bridge_slave_1) entered disabled state [ 1491.568811][T15756] bridge_slave_1: entered allmulticast mode [ 1491.570751][T15756] bridge_slave_1: entered promiscuous mode [ 1491.618795][T15991] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2289'. [ 1491.621910][T15760] bridge0: port 1(bridge_slave_0) entered blocking state [ 1491.622025][T15760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1491.622282][T15760] bridge_slave_0: entered allmulticast mode [ 1491.628652][T15760] bridge_slave_0: entered promiscuous mode [ 1491.819065][T16000] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2291'. [ 1492.579089][T16000] 9pnet_virtio: no channels available for device syz [ 1493.141813][T15760] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.141944][T15760] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.142189][T15760] bridge_slave_1: entered allmulticast mode [ 1493.144977][T15760] bridge_slave_1: entered promiscuous mode [ 1493.612738][T15772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1493.612874][T15772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1493.613079][T15772] bridge_slave_0: entered allmulticast mode [ 1493.615998][T15772] bridge_slave_0: entered promiscuous mode [ 1493.624125][T15756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1493.757555][T15756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1493.757790][T15772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1493.757918][T15772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1493.758097][T15772] bridge_slave_1: entered allmulticast mode [ 1493.808095][T15772] bridge_slave_1: entered promiscuous mode [ 1493.832525][T15760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.239164][T15760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.834493][T15756] team0: Port device team_slave_0 added [ 1494.840773][T15772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1495.183907][T15756] team0: Port device team_slave_1 added [ 1495.366815][T15772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1495.434291][T15760] team0: Port device team_slave_0 added [ 1497.242799][T16070] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2299'. [ 1497.754094][T16071] 9pnet_virtio: no channels available for device syz [ 1497.778765][T15760] team0: Port device team_slave_1 added [ 1498.970271][T16066] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2297'. [ 1499.177809][T16083] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2300'. [ 1499.179237][T15756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.179250][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.179271][T15756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.483331][T15772] team0: Port device team_slave_0 added [ 1499.497811][T15756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.497828][T15756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.497855][T15756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1499.525195][T15760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1499.525212][T15760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.525240][T15760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1499.557087][T15772] team0: Port device team_slave_1 added [ 1499.569573][T15760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1499.569591][T15760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.569616][T15760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1500.678146][T15772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1500.678164][T15772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1500.687783][T15772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1501.554155][T15772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1501.554172][T15772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1501.554201][T15772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1502.604121][T16137] comedi: valid board names for 8255 driver are: [ 1502.604139][T16137] 8255 [ 1502.604147][T16137] comedi: valid board names for vmk80xx driver are: [ 1502.604155][T16137] vmk80xx [ 1502.604163][T16137] comedi: valid board names for usbduxsigma driver are: [ 1502.604173][T16137] usbduxsigma [ 1502.604181][T16137] comedi: valid board names for usbduxfast driver are: [ 1502.604190][T16137] usbduxfast [ 1502.604198][T16137] comedi: valid board names for usbdux driver are: [ 1502.604208][T16137] usbdux [ 1502.604216][T16137] comedi: valid board names for ni6501 driver are: [ 1502.604225][T16137] ni6501 [ 1502.604232][T16137] comedi: valid board names for dt9812 driver are: [ 1502.604242][T16137] dt9812 [ 1502.604249][T16137] comedi: valid board names for ni_labpc_cs driver are: [ 1502.604259][T16137] ni_labpc_cs [ 1502.604267][T16137] comedi: valid board names for ni_daq_700 driver are: [ 1502.604277][T16137] ni_daq_700 [ 1502.604284][T16137] comedi: valid board names for labpc_pci driver are: [ 1502.604294][T16137] labpc_pci [ 1502.604302][T16137] comedi: valid board names for adl_pci9118 driver are: [ 1502.604312][T16137] pci9118dg [ 1502.604319][T16137] pci9118hg [ 1502.604327][T16137] pci9118hr [ 1502.604334][T16137] comedi: valid board names for 8255_pci driver are: [ 1502.604344][T16137] 8255_pci [ 1502.604351][T16137] comedi: valid board names for s526 driver are: [ 1502.604361][T16137] s526 [ 1502.604367][T16137] comedi: valid board names for multiq3 driver are: [ 1502.604377][T16137] multiq3 [ 1502.604385][T16137] comedi: valid board names for pcmuio driver are: [ 1502.604394][T16137] pcmuio48 [ 1502.604409][T16137] pcmuio96 [ 1502.604416][T16137] comedi: valid board names for pcmmio driver are: [ 1502.604426][T16137] pcmmio [ 1502.604433][T16137] comedi: valid board names for pcmda12 driver are: [ 1502.604443][T16137] pcmda12 [ 1502.604450][T16137] comedi: valid board names for pcmad driver are: [ 1502.604460][T16137] pcmad12 [ 1502.604466][T16137] pcmad16 [ 1502.604473][T16137] comedi: valid board names for ni_labpc driver are: [ 1502.604483][T16137] lab-pc-1200 [ 1502.604491][T16137] lab-pc-1200ai [ 1502.604498][T16137] lab-pc+ [ 1502.604506][T16137] comedi: valid board names for atmio16 driver are: [ 1502.604515][T16137] atmio16 [ 1502.604522][T16137] atmio16d [ 1502.604529][T16137] comedi: valid board names for ni_at_ao driver are: [ 1502.604539][T16137] at-ao-6 [ 1502.604546][T16137] at-ao-10 [ 1502.604554][T16137] comedi: valid board names for ni_at_a2150 driver are: [ 1502.604564][T16137] ni_at_a2150 [ 1502.604571][T16137] comedi: valid board names for adq12b driver are: [ 1502.604582][T16137] adq12b [ 1502.604588][T16137] comedi: valid board names for mpc624 driver are: [ 1502.604599][T16137] mpc624 [ 1502.604605][T16137] comedi: valid board names for c6xdigio driver are: [ 1502.604615][T16137] c6xdigio [ 1502.604623][T16137] comedi: valid board names for aio_iiro_16 driver are: [ 1502.604633][T16137] aio_iiro_16 [ 1502.604641][T16137] comedi: valid board names for aio_aio12_8 driver are: [ 1502.604650][T16137] aio_aio12_8 [ 1502.604658][T16137] aio_ai12_8 [ 1502.604665][T16137] aio_ao12_4 [ 1502.604672][T16137] comedi: valid board names for fl512 driver are: [ 1502.604682][T16137] fl512 [ 1502.604689][T16137] comedi: valid board names for dmm32at driver are: [ 1502.604698][T16137] dmm32at [ 1502.604706][T16137] comedi: valid board names for dt282x driver are: [ 1502.604716][T16137] dt2821 [ 1502.604723][T16137] dt2821-f [ 1502.604730][T16137] dt2821-g [ 1502.604737][T16137] dt2823 [ 1502.604744][T16137] dt2824-pgh [ 1502.604751][T16137] dt2824-pgl [ 1502.604759][T16137] dt2825 [ 1502.604766][T16137] dt2827 [ 1502.604773][T16137] dt2828 [ 1502.604779][T16137] dt2829 [ 1502.604785][T16137] dt21-ez [ 1502.604792][T16137] dt23-ez [ 1502.604798][T16137] dt24-ez [ 1502.604805][T16137] dt24-ez-pgl [ 1502.604811][T16137] comedi: valid board names for dt2817 driver are: [ 1502.604820][T16137] dt2817 [ 1502.604827][T16137] comedi: valid board names for dt2815 driver are: [ 1502.604836][T16137] dt2815 [ 1502.604842][T16137] comedi: valid board names for dt2814 driver are: [ 1502.604851][T16137] dt2814 [ 1502.604858][T16137] comedi: valid board names for dt2811 driver are: [ 1502.604867][T16137] dt2811-pgh [ 1502.604874][T16137] dt2811-pgl [ 1502.604882][T16137] comedi: valid board names for dt2801 driver are: [ 1502.604891][T16137] dt2801 [ 1502.604898][T16137] comedi: valid board names for das6402 driver are: [ 1502.604908][T16137] das6402-12 [ 1502.604915][T16137] das6402-16 [ 1502.604922][T16137] comedi: valid board names for das1800 driver are: [ 1502.604931][T16137] das-1701st [ 1502.604938][T16137] das-1701st-da [ 1502.604946][T16137] das-1702st [ 1502.604953][T16137] das-1702st-da [ 1502.604961][T16137] das-1702hr [ 1502.604968][T16137] das-1702hr-da [ 1502.604975][T16137] das-1701ao [ 1502.604982][T16137] das-1702ao [ 1502.604990][T16137] das-1801st [ 1502.604997][T16137] das-1801st-da [ 1502.605004][T16137] das-1802st [ 1502.605012][T16137] das-1802st-da [ 1502.605019][T16137] das-1802hr [ 1502.605027][T16137] das-1802hr-da [ 1502.605034][T16137] das-1801hc [ 1502.605041][T16137] das-1802hc [ 1502.605048][T16137] das-1801ao [ 1502.605055][T16137] das-1802ao [ 1502.605062][T16137] comedi: valid board names for das800 driver are: [ 1502.605072][T16137] das-800 [ 1502.605079][T16137] cio-das800 [ 1502.605086][T16137] das-801 [ 1502.605093][T16137] cio-das801 [ 1502.605100][T16137] das-802 [ 1502.605107][T16137] cio-das802 [ 1502.605114][T16137] cio-das802/16 [ 1502.605121][T16137] comedi: valid board names for isa-das08 driver are: [ 1502.605131][T16137] isa-das08 [ 1502.605138][T16137] das08-pgm [ 1502.605145][T16137] das08-pgh [ 1502.605152][T16137] das08-pgl [ 1502.605158][T16137] das08-aoh [ 1502.605166][T16137] das08-aol [ 1502.605172][T16137] das08-aom [ 1502.605179][T16137] das08/jr-ao [ 1502.605185][T16137] das08jr-16-ao [ 1502.605192][T16137] pc104-das08 [ 1502.605199][T16137] das08jr/16 [ 1502.605206][T16137] comedi: valid board names for das16m1 driver are: [ 1502.605215][T16137] das16m1 [ 1502.605222][T16137] comedi: valid board names for dac02 driver are: [ 1502.605232][T16137] dac02 [ 1502.605239][T16137] comedi: valid board names for rti802 driver are: [ 1502.605249][T16137] rti802 [ 1502.605256][T16137] comedi: valid board names for rti800 driver are: [ 1502.605265][T16137] rti800 [ 1502.605272][T16137] rti815 [ 1502.605279][T16137] comedi: valid board names for pcm3724 driver are: [ 1502.605289][T16137] pcm3724 [ 1502.605296][T16137] comedi: valid board names for pcl818 driver are: [ 1502.605306][T16137] pcl818l [ 1502.605313][T16137] pcl818h [ 1502.605320][T16137] pcl818hd [ 1502.605327][T16137] pcl818hg [ 1502.605334][T16137] pcl818 [ 1502.605341][T16137] pcl718 [ 1502.605348][T16137] pcm3718 [ 1502.605355][T16137] comedi: valid board names for pcl816 driver are: [ 1502.605364][T16137] pcl816 [ 1502.605371][T16137] pcl814b [ 1502.605378][T16137] comedi: valid board names for pcl812 driver are: [ 1502.605389][T16137] pcl812 [ 1502.605396][T16137] pcl812pg [ 1502.605409][T16137] acl8112pg [ 1502.605417][T16137] acl8112dg [ 1502.605424][T16137] acl8112hg [ 1502.605431][T16137] a821pgl [ 1502.605439][T16137] a821pglnda [ 1502.605446][T16137] a821pgh [ 1502.605453][T16137] a822pgl [ 1502.605460][T16137] a822pgh [ 1502.605467][T16137] a823pgl [ 1502.605474][T16137] a823pgh [ 1502.605480][T16137] pcl813 [ 1502.605488][T16137] pcl813b [ 1502.605495][T16137] acl8113 [ 1502.605502][T16137] iso813 [ 1502.605509][T16137] acl8216 [ 1502.605516][T16137] a826pg [ 1502.605523][T16137] comedi: valid board names for pcl730 driver are: [ 1502.605533][T16137] pcl730 [ 1502.605540][T16137] iso730 [ 1502.605547][T16137] acl7130 [ 1502.605554][T16137] pcm3730 [ 1502.605561][T16137] pcl725 [ 1502.605568][T16137] p8r8dio [ 1502.605575][T16137] acl7225b [ 1502.605582][T16137] p16r16dio [ 1502.605589][T16137] pcl733 [ 1502.605596][T16137] pcl734 [ 1502.605603][T16137] opmm-1616-xt [ 1502.605611][T16137] pearl-mm-p [ 1502.605618][T16137] ir104-pbf [ 1502.605625][T16137] comedi: valid board names for pcl726 driver are: [ 1502.605635][T16137] pcl726 [ 1502.605642][T16137] pcl727 [ 1502.605648][T16137] pcl728 [ 1502.605655][T16137] acl6126 [ 1502.605662][T16137] acl6128 [ 1502.605669][T16137] comedi: valid board names for pcl724 driver are: [ 1502.605679][T16137] pcl724 [ 1502.605686][T16137] pcl722 [ 1502.605693][T16137] pcl731 [ 1502.605700][T16137] acl7122 [ 1502.605707][T16137] acl7124 [ 1502.605714][T16137] pet48dio [ 1502.605721][T16137] pcmio48 [ 1502.605728][T16137] onyx-mm-dio [ 1502.605736][T16137] comedi: valid board names for pcl711 driver are: [ 1502.605746][T16137] pcl711 [ 1502.605752][T16137] pcl711b [ 1502.605760][T16137] acl8112hg [ 1502.605767][T16137] acl8112dg [ 1502.605774][T16137] comedi: valid board names for amplc_pc263 driver are: [ 1502.605784][T16137] pc263 [ 1502.605791][T16137] comedi: valid board names for amplc_pc236 driver are: [ 1502.605801][T16137] pc36at [ 1502.605809][T16137] comedi: valid board names for amplc_dio200 driver are: [ 1502.605819][T16137] pc212e [ 1502.605826][T16137] pc214e [ 1502.605833][T16137] pc215e [ 1502.605840][T16137] pc218e [ 1502.605846][T16137] pc272e [ 1502.605854][T16137] comedi: valid board names for comedi_parport driver are: [ 1502.605864][T16137] comedi_parport [ 1502.605871][T16137] comedi: valid board names for comedi_test driver are: [ 1502.605882][T16137] comedi_test [ 1502.605889][T16137] comedi: valid board names for comedi_bond driver are: [ 1502.605898][T16137] comedi_bond [ 1503.624079][T15756] hsr_slave_0: entered promiscuous mode [ 1503.638374][T15756] hsr_slave_1: entered promiscuous mode [ 1503.648309][T15756] debugfs: 'hsr0' already exists in 'hsr' [ 1503.648336][T15756] Cannot create hsr debugfs directory [ 1504.951622][T16143] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2310'. [ 1504.986264][T15760] hsr_slave_0: entered promiscuous mode [ 1505.003198][T15760] hsr_slave_1: entered promiscuous mode [ 1505.009232][T15760] debugfs: 'hsr0' already exists in 'hsr' [ 1505.009261][T15760] Cannot create hsr debugfs directory [ 1506.639501][T12348] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1506.801751][T12348] usb 9-1: Using ep0 maxpacket: 8 [ 1506.811920][T12348] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1506.811947][T12348] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.812003][T12348] usb 9-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1506.812047][T12348] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1506.812070][T12348] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.913289][T12348] usbtmc 9-1:16.0: bulk endpoints not found [ 1507.428589][T15772] hsr_slave_0: entered promiscuous mode [ 1507.429941][T15772] hsr_slave_1: entered promiscuous mode [ 1507.450716][T15772] debugfs: 'hsr0' already exists in 'hsr' [ 1507.450772][T15772] Cannot create hsr debugfs directory [ 1508.442895][T16203] autofs: Bad value for 'fd' [ 1509.478502][T12348] usb 9-1: USB disconnect, device number 3 [ 1509.615668][T16230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2319'. [ 1510.278677][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2321'. [ 1510.278707][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2321'. [ 1511.837615][T16267] autofs: Bad value for 'fd' [ 1513.421449][ T5977] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1513.576125][ T5977] usb 9-1: Using ep0 maxpacket: 8 [ 1513.579871][ T5977] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1513.579899][ T5977] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.579947][ T5977] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1513.579968][ T5977] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1513.579990][ T5977] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1513.580032][ T5977] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1513.580054][ T5977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.669800][ T5977] usbtmc 9-1:16.0: bulk endpoints not found [ 1514.815861][T12002] bridge_slave_1: left allmulticast mode [ 1514.815890][T12002] bridge_slave_1: left promiscuous mode [ 1514.816149][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.892734][T12002] bridge_slave_0: left allmulticast mode [ 1514.892764][T12002] bridge_slave_0: left promiscuous mode [ 1514.893028][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.976418][T12002] bridge_slave_1: left allmulticast mode [ 1514.976448][T12002] bridge_slave_1: left promiscuous mode [ 1514.976819][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.075783][T16313] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2329'. [ 1515.139434][T12002] bridge_slave_0: left allmulticast mode [ 1515.139555][T12002] bridge_slave_0: left promiscuous mode [ 1515.139806][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.376848][T16316] 9pnet_virtio: no channels available for device syz [ 1516.043198][T12002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1516.132090][T12002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.193821][T12002] bond0 (unregistering): Released all slaves [ 1516.248346][ T6006] usb 9-1: USB disconnect, device number 4 [ 1516.265252][T16318] binder: BINDER_SET_CONTEXT_MGR already set [ 1516.265276][T16318] binder: 16317:16318 ioctl 4018620d 2000000002c0 returned -16 [ 1517.186290][T16321] autofs: Unknown parameter '0x0000000000000000' [ 1517.460790][T16330] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2334'. [ 1517.831752][T12002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.892360][T12002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.933484][T12002] bond0 (unregistering): Released all slaves [ 1518.273421][T16341] fuse: Bad value for 'fd' [ 1518.665616][T16353] binder: BINDER_SET_CONTEXT_MGR already set [ 1518.665633][T16353] binder: 16352:16353 ioctl 4018620d 2000000002c0 returned -16 [ 1518.758685][T16357] autofs: Unknown parameter '0x0000000000000000' [ 1519.034890][T12002] hsr_slave_0: left promiscuous mode [ 1519.071393][T12002] hsr_slave_1: left promiscuous mode [ 1519.072499][T12002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.131852][T12002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.281233][T12002] hsr_slave_0: left promiscuous mode [ 1519.301218][T12002] hsr_slave_1: left promiscuous mode [ 1519.302081][T12002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1519.351897][T12002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1519.533476][T16366] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2343'. [ 1519.589970][T16367] 9pnet_virtio: no channels available for device syz [ 1519.923468][T16371] fuse: Bad value for 'fd' [ 1520.051877][T12002] team0 (unregistering): Port device team_slave_1 removed [ 1520.221794][T12002] team0 (unregistering): Port device team_slave_0 removed [ 1520.546308][T16377] autofs: Unknown parameter '0x0000000000000000' [ 1522.381690][T12002] team0 (unregistering): Port device team_slave_1 removed [ 1522.521893][T12002] team0 (unregistering): Port device team_slave_0 removed [ 1522.848720][T16388] binder: BINDER_SET_CONTEXT_MGR already set [ 1522.848736][T16388] binder: 16387:16388 ioctl 4018620d 2000000002c0 returned -16 [ 1523.717842][T16391] fuse: Bad value for 'fd' [ 1524.394398][T16399] autofs: Unknown parameter '0x0000000000000000' [ 1524.492166][T16401] overlayfs: failed to resolve './file1': -2 [ 1525.841319][ T6006] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1526.031299][ T6006] usb 8-1: Using ep0 maxpacket: 16 [ 1526.035148][ T5879] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1526.037136][ T6006] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1526.037165][ T6006] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1526.037178][ T6006] usb 8-1: Product: syz [ 1526.037186][ T6006] usb 8-1: Manufacturer: syz [ 1526.037194][ T6006] usb 8-1: SerialNumber: syz [ 1526.041354][ T6006] usb 8-1: config 0 descriptor?? [ 1526.212029][ T5879] usb 9-1: Using ep0 maxpacket: 8 [ 1526.214288][ T5879] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1526.214316][ T5879] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.214367][ T5879] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1526.214399][ T5879] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1526.214424][ T5879] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1526.214466][ T5879] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1526.214490][ T5879] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.240194][ T5879] usbtmc 9-1:16.0: bulk endpoints not found [ 1526.271827][ T6006] usb 8-1: USB disconnect, device number 7 [ 1526.763149][T15756] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1526.868741][T15756] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1526.967370][T15756] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1527.010304][T16441] binder: BINDER_SET_CONTEXT_MGR already set [ 1527.010320][T16441] binder: 16440:16441 ioctl 4018620d 2000000002c0 returned -16 [ 1527.098841][T15756] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1527.394894][T15760] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1527.464290][T15760] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1527.667027][T15760] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1527.786743][T15760] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1528.998297][T15772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1529.105866][ T9] usb 9-1: USB disconnect, device number 5 [ 1529.146722][T15772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1529.244565][T15772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1529.246441][T16498] netlink: 620 bytes leftover after parsing attributes in process `syz.8.2364'. [ 1529.348676][T15772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1529.904942][T16509] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2365'. [ 1532.418116][T16515] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2366'. [ 1532.477047][T16516] 9pnet_virtio: no channels available for device syz [ 1532.788327][T15756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.937930][T15756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.991719][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.991885][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.068718][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.068866][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.107904][T15760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.161243][ T6006] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1533.333861][ T6006] usb 9-1: Using ep0 maxpacket: 16 [ 1533.339954][ T6006] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1533.339984][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1533.340006][ T6006] usb 9-1: Product: syz [ 1533.340020][ T6006] usb 9-1: Manufacturer: syz [ 1533.340035][ T6006] usb 9-1: SerialNumber: syz [ 1533.385811][ T6006] usb 9-1: config 0 descriptor?? [ 1533.500913][T15760] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.758116][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.769806][T12002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.908535][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.985891][T12003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.022604][T15772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1534.350561][T15772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1534.483872][T12529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1534.485459][T12529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1534.579356][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1534.580532][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1534.997447][T15756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.183592][T15760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.481715][T15760] veth0_vlan: entered promiscuous mode [ 1535.515485][T15760] veth1_vlan: entered promiscuous mode [ 1535.673683][T15772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.678057][T15760] veth0_macvtap: entered promiscuous mode [ 1535.687987][ T5977] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1535.730447][T15760] veth1_macvtap: entered promiscuous mode [ 1535.779114][T10266] usb 9-1: USB disconnect, device number 6 [ 1535.851202][ T5977] usb 8-1: Using ep0 maxpacket: 8 [ 1535.869721][ T5977] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1535.869781][ T5977] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1535.869801][ T5977] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1535.869824][ T5977] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1535.869841][ T5977] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1535.869880][ T5977] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1535.869902][ T5977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.935257][T15760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1535.984179][T15760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1536.043610][ T5977] usbtmc 8-1:16.0: bulk endpoints not found [ 1536.050155][T12529] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.091209][T12529] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.115456][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.137631][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1536.190488][T16592] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2374'. [ 1536.215047][T16592] 9pnet_virtio: no channels available for device syz [ 1536.366390][T16596] autofs: Unknown parameter 'fd0x0000000000000000' [ 1536.430308][T15772] veth0_vlan: entered promiscuous mode [ 1536.520025][T15772] veth1_vlan: entered promiscuous mode [ 1536.624046][T12529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.624068][T12529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.842680][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1536.842700][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1536.927140][T15772] veth0_macvtap: entered promiscuous mode [ 1537.466235][T15772] veth1_macvtap: entered promiscuous mode [ 1537.810727][T16612] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2377'. [ 1538.210723][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1538.251464][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1538.288073][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1538.289603][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1538.290363][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1539.698371][T12348] usb 8-1: USB disconnect, device number 8 [ 1540.253588][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.349751][T14913] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1540.361624][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1540.365396][T14913] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1540.368885][T14913] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1540.372768][ T5813] Bluetooth: hci3: command tx timeout [ 1540.379486][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1540.389595][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1540.391353][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1540.392206][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1540.447331][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1540.449085][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1540.634657][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.765080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1540.802312][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.400614][ C0] vkms_vblank_simulate: vblank timer overrun [ 1541.402411][T12682] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1541.581183][T12682] usb 9-1: Using ep0 maxpacket: 16 [ 1541.592970][T12682] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1541.592999][T12682] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1541.593020][T12682] usb 9-1: Product: syz [ 1541.593034][T12682] usb 9-1: Manufacturer: syz [ 1541.593048][T12682] usb 9-1: SerialNumber: syz [ 1541.598532][T12682] usb 9-1: config 0 descriptor?? [ 1541.986554][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.124722][T16679] autofs: Unknown parameter 'fd0x0000000000000000' [ 1542.452189][ T5813] Bluetooth: hci0: command tx timeout [ 1542.452674][ T5813] Bluetooth: hci3: command tx timeout [ 1542.698352][T12647] Bluetooth: hci2: command tx timeout [ 1542.785268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.494176][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.663088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.738591][T14028] usb 9-1: USB disconnect, device number 7 [ 1543.873255][T12682] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1544.059447][ C0] vkms_vblank_simulate: vblank timer overrun [ 1544.059760][T12682] usb 8-1: Using ep0 maxpacket: 8 [ 1544.068532][T12682] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1544.068604][T12682] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1544.068626][T12682] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1544.068650][T12682] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1544.068672][T12682] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1544.068722][T12682] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1544.068745][T12682] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.079872][T12682] usbtmc 8-1:16.0: bulk endpoints not found [ 1544.317212][T16713] comedi: valid board names for 8255 driver are: [ 1544.317228][T16713] 8255 [ 1544.317235][T16713] comedi: valid board names for vmk80xx driver are: [ 1544.317245][T16713] vmk80xx [ 1544.317252][T16713] comedi: valid board names for usbduxsigma driver are: [ 1544.317262][T16713] usbduxsigma [ 1544.317270][T16713] comedi: valid board names for usbduxfast driver are: [ 1544.317280][T16713] usbduxfast [ 1544.317287][T16713] comedi: valid board names for usbdux driver are: [ 1544.317297][T16713] usbdux [ 1544.317305][T16713] comedi: valid board names for ni6501 driver are: [ 1544.317315][T16713] ni6501 [ 1544.317322][T16713] comedi: valid board names for dt9812 driver are: [ 1544.317331][T16713] dt9812 [ 1544.317337][T16713] comedi: valid board names for ni_labpc_cs driver are: [ 1544.317347][T16713] ni_labpc_cs [ 1544.317354][T16713] comedi: valid board names for ni_daq_700 driver are: [ 1544.317364][T16713] ni_daq_700 [ 1544.317371][T16713] comedi: valid board names for labpc_pci driver are: [ 1544.317380][T16713] labpc_pci [ 1544.317388][T16713] comedi: valid board names for adl_pci9118 driver are: [ 1544.317398][T16713] pci9118dg [ 1544.317405][T16713] pci9118hg [ 1544.317412][T16713] pci9118hr [ 1544.317420][T16713] comedi: valid board names for 8255_pci driver are: [ 1544.317430][T16713] 8255_pci [ 1544.317437][T16713] comedi: valid board names for s526 driver are: [ 1544.317447][T16713] s526 [ 1544.317453][T16713] comedi: valid board names for multiq3 driver are: [ 1544.317463][T16713] multiq3 [ 1544.317470][T16713] comedi: valid board names for pcmuio driver are: [ 1544.317479][T16713] pcmuio48 [ 1544.317487][T16713] pcmuio96 [ 1544.317494][T16713] comedi: valid board names for pcmmio driver are: [ 1544.317504][T16713] pcmmio [ 1544.317510][T16713] comedi: valid board names for pcmda12 driver are: [ 1544.317520][T16713] pcmda12 [ 1544.317527][T16713] comedi: valid board names for pcmad driver are: [ 1544.317536][T16713] pcmad12 [ 1544.317543][T16713] pcmad16 [ 1544.317550][T16713] comedi: valid board names for ni_labpc driver are: [ 1544.317560][T16713] lab-pc-1200 [ 1544.317567][T16713] lab-pc-1200ai [ 1544.317574][T16713] lab-pc+ [ 1544.317582][T16713] comedi: valid board names for atmio16 driver are: [ 1544.317591][T16713] atmio16 [ 1544.317598][T16713] atmio16d [ 1544.317606][T16713] comedi: valid board names for ni_at_ao driver are: [ 1544.317616][T16713] at-ao-6 [ 1544.317623][T16713] at-ao-10 [ 1544.317629][T16713] comedi: valid board names for ni_at_a2150 driver are: [ 1544.317640][T16713] ni_at_a2150 [ 1544.317647][T16713] comedi: valid board names for adq12b driver are: [ 1544.317656][T16713] adq12b [ 1544.317664][T16713] comedi: valid board names for mpc624 driver are: [ 1544.317673][T16713] mpc624 [ 1544.317680][T16713] comedi: valid board names for c6xdigio driver are: [ 1544.317689][T16713] c6xdigio [ 1544.317705][T16713] comedi: valid board names for aio_iiro_16 driver are: [ 1544.317716][T16713] aio_iiro_16 [ 1544.317723][T16713] comedi: valid board names for aio_aio12_8 driver are: [ 1544.317733][T16713] aio_aio12_8 [ 1544.317740][T16713] aio_ai12_8 [ 1544.317748][T16713] aio_ao12_4 [ 1544.317755][T16713] comedi: valid board names for fl512 driver are: [ 1544.317764][T16713] fl512 [ 1544.317771][T16713] comedi: valid board names for dmm32at driver are: [ 1544.317780][T16713] dmm32at [ 1544.317788][T16713] comedi: valid board names for dt282x driver are: [ 1544.317798][T16713] dt2821 [ 1544.317805][T16713] dt2821-f [ 1544.317812][T16713] dt2821-g [ 1544.317820][T16713] dt2823 [ 1544.317826][T16713] dt2824-pgh [ 1544.317833][T16713] dt2824-pgl [ 1544.317841][T16713] dt2825 [ 1544.317847][T16713] dt2827 [ 1544.317854][T16713] dt2828 [ 1544.317861][T16713] dt2829 [ 1544.317868][T16713] dt21-ez [ 1544.317874][T16713] dt23-ez [ 1544.317882][T16713] dt24-ez [ 1544.317888][T16713] dt24-ez-pgl [ 1544.317897][T16713] comedi: valid board names for dt2817 driver are: [ 1544.317905][T16713] dt2817 [ 1544.317912][T16713] comedi: valid board names for dt2815 driver are: [ 1544.317921][T16713] dt2815 [ 1544.317928][T16713] comedi: valid board names for dt2814 driver are: [ 1544.317937][T16713] dt2814 [ 1544.317943][T16713] comedi: valid board names for dt2811 driver are: [ 1544.317952][T16713] dt2811-pgh [ 1544.317959][T16713] dt2811-pgl [ 1544.317966][T16713] comedi: valid board names for dt2801 driver are: [ 1544.317975][T16713] dt2801 [ 1544.317982][T16713] comedi: valid board names for das6402 driver are: [ 1544.319290][T16713] das6402-12 [ 1544.319301][T16713] das6402-16 [ 1544.319310][T16713] comedi: valid board names for das1800 driver are: [ 1544.319320][T16713] das-1701st [ 1544.319327][T16713] das-1701st-da [ 1544.319335][T16713] das-1702st [ 1544.319342][T16713] das-1702st-da [ 1544.319350][T16713] das-1702hr [ 1544.319358][T16713] das-1702hr-da [ 1544.319366][T16713] das-1701ao [ 1544.319373][T16713] das-1702ao [ 1544.319380][T16713] das-1801st [ 1544.319388][T16713] das-1801st-da [ 1544.319395][T16713] das-1802st [ 1544.319402][T16713] das-1802st-da [ 1544.319409][T16713] das-1802hr [ 1544.319417][T16713] das-1802hr-da [ 1544.319424][T16713] das-1801hc [ 1544.319432][T16713] das-1802hc [ 1544.319439][T16713] das-1801ao [ 1544.319446][T16713] das-1802ao [ 1544.319453][T16713] comedi: valid board names for das800 driver are: [ 1544.319463][T16713] das-800 [ 1544.319470][T16713] cio-das800 [ 1544.319477][T16713] das-801 [ 1544.319484][T16713] cio-das801 [ 1544.319491][T16713] das-802 [ 1544.319498][T16713] cio-das802 [ 1544.319504][T16713] cio-das802/16 [ 1544.319511][T16713] comedi: valid board names for isa-das08 driver are: [ 1544.319520][T16713] isa-das08 [ 1544.319528][T16713] das08-pgm [ 1544.319534][T16713] das08-pgh [ 1544.319540][T16713] das08-pgl [ 1544.319548][T16713] das08-aoh [ 1544.319554][T16713] das08-aol [ 1544.319561][T16713] das08-aom [ 1544.319566][T16713] das08/jr-ao [ 1544.319573][T16713] das08jr-16-ao [ 1544.319580][T16713] pc104-das08 [ 1544.319587][T16713] das08jr/16 [ 1544.319593][T16713] comedi: valid board names for das16m1 driver are: [ 1544.319602][T16713] das16m1 [ 1544.319609][T16713] comedi: valid board names for dac02 driver are: [ 1544.319617][T16713] dac02 [ 1544.319623][T16713] comedi: valid board names for rti802 driver are: [ 1544.319632][T16713] rti802 [ 1544.319639][T16713] comedi: valid board names for rti800 driver are: [ 1544.319648][T16713] rti800 [ 1544.319654][T16713] rti815 [ 1544.319662][T16713] comedi: valid board names for pcm3724 driver are: [ 1544.319670][T16713] pcm3724 [ 1544.319677][T16713] comedi: valid board names for pcl818 driver are: [ 1544.319686][T16713] pcl818l [ 1544.319692][T16713] pcl818h [ 1544.319699][T16713] pcl818hd [ 1544.319706][T16713] pcl818hg [ 1544.319712][T16713] pcl818 [ 1544.319716][T16713] pcl718 [ 1544.319722][T16713] pcm3718 [ 1544.319729][T16713] comedi: valid board names for pcl816 driver are: [ 1544.319738][T16713] pcl816 [ 1544.319744][T16713] pcl814b [ 1544.319751][T16713] comedi: valid board names for pcl812 driver are: [ 1544.319760][T16713] pcl812 [ 1544.319766][T16713] pcl812pg [ 1544.319773][T16713] acl8112pg [ 1544.319780][T16713] acl8112dg [ 1544.319787][T16713] acl8112hg [ 1544.319794][T16713] a821pgl [ 1544.319801][T16713] a821pglnda [ 1544.319808][T16713] a821pgh [ 1544.319815][T16713] a822pgl [ 1544.319821][T16713] a822pgh [ 1544.319828][T16713] a823pgl [ 1544.319835][T16713] a823pgh [ 1544.319842][T16713] pcl813 [ 1544.319849][T16713] pcl813b [ 1544.319855][T16713] acl8113 [ 1544.319861][T16713] iso813 [ 1544.319868][T16713] acl8216 [ 1544.319874][T16713] a826pg [ 1544.319882][T16713] comedi: valid board names for pcl730 driver are: [ 1544.319891][T16713] pcl730 [ 1544.319897][T16713] iso730 [ 1544.319904][T16713] acl7130 [ 1544.319911][T16713] pcm3730 [ 1544.319918][T16713] pcl725 [ 1544.319924][T16713] p8r8dio [ 1544.319931][T16713] acl7225b [ 1544.319938][T16713] p16r16dio [ 1544.319952][T16713] pcl733 [ 1544.319959][T16713] pcl734 [ 1544.319966][T16713] opmm-1616-xt [ 1544.319973][T16713] pearl-mm-p [ 1544.319980][T16713] ir104-pbf [ 1544.319987][T16713] comedi: valid board names for pcl726 driver are: [ 1544.319997][T16713] pcl726 [ 1544.320004][T16713] pcl727 [ 1544.320011][T16713] pcl728 [ 1544.320018][T16713] acl6126 [ 1544.320025][T16713] acl6128 [ 1544.320032][T16713] comedi: valid board names for pcl724 driver are: [ 1544.320041][T16713] pcl724 [ 1544.320048][T16713] pcl722 [ 1544.320056][T16713] pcl731 [ 1544.320062][T16713] acl7122 [ 1544.320070][T16713] acl7124 [ 1544.320077][T16713] pet48dio [ 1544.320083][T16713] pcmio48 [ 1544.320090][T16713] onyx-mm-dio [ 1544.320097][T16713] comedi: valid board names for pcl711 driver are: [ 1544.320106][T16713] pcl711 [ 1544.320112][T16713] pcl711b [ 1544.320119][T16713] acl8112hg [ 1544.320126][T16713] acl8112dg [ 1544.320133][T16713] comedi: valid board names for amplc_pc263 driver are: [ 1544.320142][T16713] pc263 [ 1544.320149][T16713] comedi: valid board names for amplc_pc236 driver are: [ 1544.320159][T16713] pc36at [ 1544.320166][T16713] comedi: valid board names for amplc_dio200 driver are: [ 1544.320175][T16713] pc212e [ 1544.320182][T16713] pc214e [ 1544.320189][T16713] pc215e [ 1544.320196][T16713] pc218e [ 1544.320202][T16713] pc272e [ 1544.320209][T16713] comedi: valid board names for comedi_parport driver are: [ 1544.320219][T16713] comedi_parport [ 1544.320227][T16713] comedi: valid board names for comedi_test driver are: [ 1544.320236][T16713] comedi_test [ 1544.320243][T16713] comedi: valid board names for comedi_bond driver are: [ 1544.320253][T16713] comedi_bond [ 1544.407606][T16618] chnl_net:caif_netlink_parms(): no params data found [ 1544.531335][T12647] Bluetooth: hci3: command tx timeout [ 1544.531366][T12647] Bluetooth: hci0: command tx timeout [ 1544.771195][ T5813] Bluetooth: hci2: command tx timeout [ 1545.976404][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.432737][T16618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.432863][T16618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.433099][T16618] bridge_slave_0: entered allmulticast mode [ 1546.471340][T16618] bridge_slave_0: entered promiscuous mode [ 1546.612282][ T5813] Bluetooth: hci0: command tx timeout [ 1546.612291][T12647] Bluetooth: hci3: command tx timeout [ 1546.737016][T16618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.737145][T16618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.737400][T16618] bridge_slave_1: entered allmulticast mode [ 1546.740256][T16618] bridge_slave_1: entered promiscuous mode [ 1546.776904][T12682] usb 8-1: USB disconnect, device number 9 [ 1546.851190][ T5813] Bluetooth: hci2: command tx timeout [ 1546.856396][T16750] autofs: Unknown parameter 'fd0x0000000000000000' [ 1548.741821][ T5813] Bluetooth: hci0: command tx timeout [ 1548.976746][ T5813] Bluetooth: hci2: command tx timeout [ 1549.648586][T16618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.863662][T16618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.991262][ T5977] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1550.141185][ T5977] usb 9-1: Using ep0 maxpacket: 8 [ 1550.143417][ T5977] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1550.143469][ T5977] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1550.143489][ T5977] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1550.143510][ T5977] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1550.143529][ T5977] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1550.143573][ T5977] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1550.143595][ T5977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.145251][T16639] chnl_net:caif_netlink_parms(): no params data found [ 1550.227299][T16618] team0: Port device team_slave_0 added [ 1550.268769][T16637] chnl_net:caif_netlink_parms(): no params data found [ 1550.290941][ T58] bridge_slave_1: left allmulticast mode [ 1550.290970][ T58] bridge_slave_1: left promiscuous mode [ 1550.298983][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.317425][ T5977] usbtmc 9-1:16.0: bulk endpoints not found [ 1550.411526][ T58] bridge_slave_0: left allmulticast mode [ 1550.411556][ T58] bridge_slave_0: left promiscuous mode [ 1550.411827][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.300852][T13917] usb 9-1: USB disconnect, device number 8 [ 1556.303702][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1556.382430][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1556.445598][ T58] bond0 (unregistering): Released all slaves [ 1556.524302][T16618] team0: Port device team_slave_1 added [ 1559.937756][T16618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.937773][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1559.937798][T16618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1560.037783][T16934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2415'. [ 1560.121209][T14028] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1560.141222][ T58] hsr_slave_0: left promiscuous mode [ 1560.161314][ T58] hsr_slave_1: left promiscuous mode [ 1560.162949][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1560.212438][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1560.271198][T14028] usb 9-1: Using ep0 maxpacket: 8 [ 1560.280529][T14028] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1560.280591][T14028] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1560.280614][T14028] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1560.280638][T14028] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1560.280659][T14028] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1560.280681][T14028] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1560.280710][T14028] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1560.280722][T14028] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.387432][T14028] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 1561.576252][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1561.831820][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1562.908772][T14028] usb 9-1: USB disconnect, device number 9 [ 1564.950050][T16618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1564.950067][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1564.950092][T16618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1565.921234][T13645] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1565.944586][T16639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.944663][T16639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.944795][T16639] bridge_slave_0: entered allmulticast mode [ 1565.946362][T16639] bridge_slave_0: entered promiscuous mode [ 1566.081599][T13645] usb 8-1: Using ep0 maxpacket: 8 [ 1566.097020][T13645] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1566.097091][T13645] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1566.097115][T13645] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1566.097138][T13645] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1566.097161][T13645] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1566.097185][T13645] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1566.097228][T13645] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1566.097251][T13645] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.141148][T16929] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1566.202620][T13645] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 1566.341154][T16929] usb 9-1: Using ep0 maxpacket: 16 [ 1566.349392][T16929] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1566.349422][T16929] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1566.349443][T16929] usb 9-1: Product: syz [ 1566.349457][T16929] usb 9-1: Manufacturer: syz [ 1566.349472][T16929] usb 9-1: SerialNumber: syz [ 1566.381552][T16639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.381685][T16639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.381924][T16639] bridge_slave_1: entered allmulticast mode [ 1566.384601][T16639] bridge_slave_1: entered promiscuous mode [ 1566.386572][T16637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1566.386707][T16637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.386891][T16637] bridge_slave_0: entered allmulticast mode [ 1566.394739][T16637] bridge_slave_0: entered promiscuous mode [ 1566.450173][T16929] usb 9-1: config 0 descriptor?? [ 1566.725037][T16637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1566.725170][T16637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.725396][T16637] bridge_slave_1: entered allmulticast mode [ 1566.759495][T16637] bridge_slave_1: entered promiscuous mode [ 1566.785482][T16618] hsr_slave_0: entered promiscuous mode [ 1566.789260][T16618] hsr_slave_1: entered promiscuous mode [ 1567.097526][T16639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.246357][T16639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.346671][T16637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.457063][T16637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.970338][T16639] team0: Port device team_slave_0 added [ 1568.097685][T16639] team0: Port device team_slave_1 added [ 1568.126166][T16637] team0: Port device team_slave_0 added [ 1568.259018][T16637] team0: Port device team_slave_1 added [ 1568.474733][T16639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1568.474755][T16639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1568.474780][T16639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.679557][T14028] usb 8-1: USB disconnect, device number 10 [ 1568.731950][ T9726] usb 9-1: USB disconnect, device number 10 [ 1569.104589][T16639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1569.104601][T16639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.104615][T16639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1569.429045][T17045] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2426'. [ 1569.572635][T16637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1569.572652][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1569.572672][T16637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1570.095302][T16637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1570.095318][T16637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1570.095341][T16637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1570.723504][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.660295][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.778735][T16639] hsr_slave_0: entered promiscuous mode [ 1571.780077][T16639] hsr_slave_1: entered promiscuous mode [ 1571.781015][T16639] debugfs: 'hsr0' already exists in 'hsr' [ 1571.833563][T16639] Cannot create hsr debugfs directory [ 1571.871211][T14028] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1571.974793][T16637] hsr_slave_0: entered promiscuous mode [ 1571.978502][T16637] hsr_slave_1: entered promiscuous mode [ 1571.979481][T16637] debugfs: 'hsr0' already exists in 'hsr' [ 1571.979505][T16637] Cannot create hsr debugfs directory [ 1572.023884][T14028] usb 8-1: Using ep0 maxpacket: 8 [ 1572.026410][T14028] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1572.026455][T14028] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1572.026468][T14028] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1572.026481][T14028] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1572.026492][T14028] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1572.026504][T14028] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1572.026527][T14028] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1572.026539][T14028] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.038085][T14028] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 1572.281183][ T9726] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1572.282160][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.441507][ T9726] usb 9-1: Using ep0 maxpacket: 16 [ 1572.448037][ T9726] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1572.448059][ T9726] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1572.448070][ T9726] usb 9-1: Product: syz [ 1572.448077][ T9726] usb 9-1: Manufacturer: syz [ 1572.448085][ T9726] usb 9-1: SerialNumber: syz [ 1572.490457][ T9726] usb 9-1: config 0 descriptor?? [ 1572.755613][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.120734][T16618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1574.174891][T16618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1574.537375][T16618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1574.575707][T16618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1574.646087][ T9726] usb 8-1: USB disconnect, device number 11 [ 1574.876236][T14028] usb 9-1: USB disconnect, device number 11 [ 1575.956218][T16618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1576.693783][T16618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1576.709021][T14466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1576.709942][T14466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1576.728445][T14466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1576.728663][T14466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1576.912246][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2442'. [ 1577.212747][T17150] overlayfs: failed to resolve './file0': -2 [ 1577.378609][ T58] bridge_slave_1: left allmulticast mode [ 1577.378640][ T58] bridge_slave_1: left promiscuous mode [ 1577.378911][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.391223][ T5977] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1577.474458][ T58] bridge_slave_0: left allmulticast mode [ 1577.474486][ T58] bridge_slave_0: left promiscuous mode [ 1577.474756][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.541271][ T5977] usb 9-1: Using ep0 maxpacket: 16 [ 1577.547456][ T5977] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1577.547487][ T5977] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1577.547508][ T5977] usb 9-1: Product: syz [ 1577.547522][ T5977] usb 9-1: Manufacturer: syz [ 1577.547537][ T5977] usb 9-1: SerialNumber: syz [ 1577.562905][ T5977] usb 9-1: config 0 descriptor?? [ 1577.656318][ T58] bridge_slave_1: left allmulticast mode [ 1577.656347][ T58] bridge_slave_1: left promiscuous mode [ 1577.656582][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.737585][ T58] bridge_slave_0: left allmulticast mode [ 1577.737612][ T58] bridge_slave_0: left promiscuous mode [ 1577.737855][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.784228][T14028] usb 9-1: USB disconnect, device number 12 [ 1580.041932][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1580.122630][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1580.165919][ T58] bond0 (unregistering): Released all slaves [ 1581.833228][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1581.891853][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1581.913402][ T58] bond0 (unregistering): Released all slaves [ 1582.330148][T16618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.080445][T17192] 9pnet_fd: Insufficient options for proto=fd [ 1584.212638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1584.325355][ C0] vkms_vblank_simulate: vblank timer overrun [ 1585.340350][T17198] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2455'. [ 1585.514642][ C0] vkms_vblank_simulate: vblank timer overrun [ 1585.535913][T17205] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2458'. [ 1585.535941][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2458'. [ 1585.807927][ T58] hsr_slave_0: left promiscuous mode [ 1585.841429][ T58] hsr_slave_1: left promiscuous mode [ 1585.842361][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1585.842386][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1585.903414][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1585.903442][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.021448][ C0] vkms_vblank_simulate: vblank timer overrun [ 1586.149238][ C0] vkms_vblank_simulate: vblank timer overrun [ 1586.236967][ C0] vkms_vblank_simulate: vblank timer overrun [ 1586.371509][ C0] vkms_vblank_simulate: vblank timer overrun [ 1586.524092][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2464'. [ 1586.581316][ T58] hsr_slave_0: left promiscuous mode [ 1586.624908][ T58] hsr_slave_1: left promiscuous mode [ 1586.625818][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.661890][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1586.777814][ T58] veth1_macvtap: left promiscuous mode [ 1586.777928][ T58] veth0_macvtap: left promiscuous mode [ 1586.778204][ T58] veth1_vlan: left promiscuous mode [ 1586.778398][ T58] veth0_vlan: left promiscuous mode [ 1586.881471][ T58] veth1_macvtap: left promiscuous mode [ 1586.881651][ T58] veth0_macvtap: left promiscuous mode [ 1586.881807][ T58] veth1_vlan: left promiscuous mode [ 1586.881906][ T58] veth0_vlan: left promiscuous mode [ 1587.394211][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.566050][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.885194][ C0] vkms_vblank_simulate: vblank timer overrun [ 1587.942629][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.098203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.791748][ C0] vkms_vblank_simulate: vblank timer overrun [ 1588.843786][ C0] vkms_vblank_simulate: vblank timer overrun [ 1589.492123][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1589.752064][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1594.241867][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1594.501664][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1597.188707][T16639] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1597.248721][T16639] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1597.307814][T16639] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1598.291101][T17231] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2465'. [ 1598.613127][T12647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1598.617760][T12647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1598.619396][T12647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1598.654042][T12647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1598.658580][T12647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1599.680044][T17243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2467'. [ 1599.680074][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2467'. [ 1600.156786][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1600.175917][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1600.183988][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1600.186889][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1600.187651][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1600.695102][T12647] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1600.698194][T12647] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1600.699468][T12647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1600.700475][T12647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1600.766744][T12647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1600.777765][T12647] Bluetooth: hci3: command tx timeout [ 1601.069420][T17256] overlayfs: failed to resolve './file0': -2 [ 1602.057064][T17237] chnl_net:caif_netlink_parms(): no params data found [ 1602.291787][ T5813] Bluetooth: hci4: command tx timeout [ 1602.851493][ T5813] Bluetooth: hci3: command tx timeout [ 1602.851524][T12647] Bluetooth: hci2: command tx timeout [ 1603.084696][T17278] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2474'. [ 1603.242312][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2475'. [ 1603.242341][T17282] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2475'. [ 1603.309073][T17251] chnl_net:caif_netlink_parms(): no params data found [ 1603.374513][T17247] chnl_net:caif_netlink_parms(): no params data found [ 1604.371242][T12647] Bluetooth: hci4: command tx timeout [ 1604.902625][T17237] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.903246][T17237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.903496][T17237] bridge_slave_0: entered allmulticast mode [ 1604.922994][T17237] bridge_slave_0: entered promiscuous mode [ 1604.933984][T12647] Bluetooth: hci3: command tx timeout [ 1604.934019][T12647] Bluetooth: hci2: command tx timeout [ 1605.435793][T17237] bridge0: port 2(bridge_slave_1) entered blocking state [ 1605.436039][T17237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1605.443800][T17237] bridge_slave_1: entered allmulticast mode [ 1605.457337][T17237] bridge_slave_1: entered promiscuous mode [ 1606.451214][ T5813] Bluetooth: hci4: command tx timeout [ 1606.586256][T17237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1606.719207][T17251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1606.719293][T17251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1606.719483][T17251] bridge_slave_0: entered allmulticast mode [ 1606.721915][T17251] bridge_slave_0: entered promiscuous mode [ 1606.864520][T17237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1606.869581][T17251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1606.898673][T17251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1606.898859][T17251] bridge_slave_1: entered allmulticast mode [ 1606.934000][T17251] bridge_slave_1: entered promiscuous mode [ 1607.016499][ T5813] Bluetooth: hci2: command tx timeout [ 1607.016526][ T5813] Bluetooth: hci3: command tx timeout [ 1607.424557][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.454445][T17247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.454528][T17247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.454655][T17247] bridge_slave_0: entered allmulticast mode [ 1607.457413][T17247] bridge_slave_0: entered promiscuous mode [ 1607.908306][T17247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.908893][T17247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.910179][T17247] bridge_slave_1: entered allmulticast mode [ 1608.049540][T17247] bridge_slave_1: entered promiscuous mode [ 1608.284700][T17237] team0: Port device team_slave_0 added [ 1608.531185][T12647] Bluetooth: hci4: command tx timeout [ 1608.604336][T17318] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2482'. [ 1608.609437][T17251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.758301][T17237] team0: Port device team_slave_1 added [ 1608.773441][T17251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.091539][T12647] Bluetooth: hci2: command tx timeout [ 1609.493536][T17247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1609.703045][T17247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1609.909410][T17251] team0: Port device team_slave_0 added [ 1609.920000][T17237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.920015][T17237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1609.920041][T17237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.185536][T17251] team0: Port device team_slave_1 added [ 1610.186773][T17237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.186788][T17237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.186814][T17237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.451354][T17247] team0: Port device team_slave_0 added [ 1610.588796][T17247] team0: Port device team_slave_1 added [ 1610.593665][T17251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1610.593681][T17251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.593705][T17251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1610.967733][T17251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1610.967751][T17251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1610.967777][T17251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.130289][T17247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.130306][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.130331][T17247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.177486][T17351] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2492'. [ 1612.194806][T17237] hsr_slave_0: entered promiscuous mode [ 1612.196206][T17237] hsr_slave_1: entered promiscuous mode [ 1612.197204][T17237] debugfs: 'hsr0' already exists in 'hsr' [ 1612.197228][T17237] Cannot create hsr debugfs directory [ 1612.252163][T17247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1612.252179][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.252205][T17247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.952757][T17251] hsr_slave_0: entered promiscuous mode [ 1612.954152][T17251] hsr_slave_1: entered promiscuous mode [ 1612.955164][T17251] debugfs: 'hsr0' already exists in 'hsr' [ 1612.955189][T17251] Cannot create hsr debugfs directory [ 1613.159832][T17364] netlink: 300 bytes leftover after parsing attributes in process `syz.8.2496'. [ 1613.530937][T17366] input: syz0 as /devices/virtual/input/input42 [ 1614.717899][T17247] hsr_slave_0: entered promiscuous mode [ 1614.718656][T17247] hsr_slave_1: entered promiscuous mode [ 1614.719228][T17247] debugfs: 'hsr0' already exists in 'hsr' [ 1614.719242][T17247] Cannot create hsr debugfs directory [ 1614.757117][T17367] netlink: 296 bytes leftover after parsing attributes in process `syz.8.2496'. [ 1614.757146][T17367] openvswitch: netlink: Flow key attr not present in new flow. [ 1615.734917][ C1] vkms_vblank_simulate: vblank timer overrun [ 1618.828034][T17393] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2501'. [ 1619.965250][ T37] kauditd_printk_skb: 293 callbacks suppressed [ 1619.965270][ T37] audit: type=1326 audit(1761084557.453:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1619.965316][ T37] audit: type=1326 audit(1761084557.453:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1619.965359][ T37] audit: type=1326 audit(1761084557.453:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1619.965400][ T37] audit: type=1326 audit(1761084557.453:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1619.965443][ T37] audit: type=1326 audit(1761084557.453:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f843fb1f003 code=0x7ffc0000 [ 1619.965484][ T37] audit: type=1326 audit(1761084557.463:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f843fb1f003 code=0x7ffc0000 [ 1619.965524][ T37] audit: type=1326 audit(1761084557.463:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1619.965564][ T37] audit: type=1326 audit(1761084557.463:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1619.965604][ T37] audit: type=1326 audit(1761084557.463:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1619.965644][ T37] audit: type=1326 audit(1761084557.463:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17401 comm="syz.8.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1620.319940][T17404] 9pnet_virtio: no channels available for device syz [ 1620.742199][T12647] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1620.742246][T12647] CPU: 1 UID: 0 PID: 12647 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1620.742272][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1620.742287][T12647] Workqueue: hci1 hci_rx_work [ 1620.742461][T12647] Call Trace: [ 1620.742473][T12647] [ 1620.742483][T12647] dump_stack_lvl+0x189/0x250 [ 1620.742572][T12647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1620.742608][T12647] ? __pfx__printk+0x10/0x10 [ 1620.742642][T12647] ? __rcu_read_unlock+0x84/0xe0 [ 1620.742679][T12647] ? kernfs_path_from_node+0x2c/0x280 [ 1620.742733][T12647] ? kernfs_path_from_node+0x243/0x280 [ 1620.742760][T12647] ? kernfs_path_from_node+0x2c/0x280 [ 1620.742791][T12647] sysfs_create_dir_ns+0x259/0x280 [ 1620.742818][T12647] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1620.742901][T12647] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1620.742933][T12647] ? rt_spin_unlock+0x161/0x200 [ 1620.742959][T12647] kobject_add_internal+0x5a5/0xb50 [ 1620.743062][T12647] kobject_add+0x155/0x220 [ 1620.743094][T12647] ? __pfx_kobject_add+0x10/0x10 [ 1620.743130][T12647] ? get_device_parent+0x370/0x3a0 [ 1620.743225][T12647] device_add+0x408/0xb50 [ 1620.743257][T12647] hci_conn_add_sysfs+0xd5/0x1e0 [ 1620.743397][T12647] le_conn_complete_evt+0xf39/0x1500 [ 1620.743485][T12647] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1620.743514][T12647] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1620.743568][T12647] ? lockdep_hardirqs_on+0x9c/0x150 [ 1620.743622][T12647] ? skb_pull_data+0xfb/0x200 [ 1620.743735][T12647] hci_le_conn_complete_evt+0x187/0x450 [ 1620.743769][T12647] hci_event_packet+0x78f/0x1200 [ 1620.743820][T12647] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1620.743848][T12647] ? __pfx_hci_event_packet+0x10/0x10 [ 1620.743871][T12647] ? __rcu_read_unlock+0x84/0xe0 [ 1620.743899][T12647] ? hci_send_to_monitor+0xe2/0x570 [ 1620.743932][T12647] hci_rx_work+0x46a/0xe80 [ 1620.743963][T12647] ? process_scheduled_works+0x9ef/0x17b0 [ 1620.744011][T12647] process_scheduled_works+0xae1/0x17b0 [ 1620.744081][T12647] ? __pfx_process_scheduled_works+0x10/0x10 [ 1620.744126][T12647] worker_thread+0x8a0/0xda0 [ 1620.744175][T12647] kthread+0x711/0x8a0 [ 1620.744203][T12647] ? __pfx_worker_thread+0x10/0x10 [ 1620.744222][T12647] ? __pfx_kthread+0x10/0x10 [ 1620.744243][T12647] ? rt_spin_unlock+0x150/0x200 [ 1620.744271][T12647] ? rt_spin_unlock+0x161/0x200 [ 1620.744295][T12647] ? __pfx_kthread+0x10/0x10 [ 1620.744322][T12647] ret_from_fork+0x4bc/0x870 [ 1620.744389][T12647] ? __pfx_ret_from_fork+0x10/0x10 [ 1620.744429][T12647] ? __switch_to_asm+0x39/0x70 [ 1620.744455][T12647] ? __switch_to_asm+0x33/0x70 [ 1620.744479][T12647] ? __pfx_kthread+0x10/0x10 [ 1620.744504][T12647] ret_from_fork_asm+0x1a/0x30 [ 1620.744551][T12647] [ 1620.744603][T12647] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1620.744645][T12647] Bluetooth: hci1: failed to register connection device [ 1620.826736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1621.577521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1621.936050][ C1] vkms_vblank_simulate: vblank timer overrun [ 1622.250897][ C1] vkms_vblank_simulate: vblank timer overrun [ 1622.362475][ T58] bridge_slave_1: left allmulticast mode [ 1622.362504][ T58] bridge_slave_1: left promiscuous mode [ 1622.362776][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.452701][ T58] bridge_slave_0: left allmulticast mode [ 1622.452730][ T58] bridge_slave_0: left promiscuous mode [ 1622.452986][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.555585][ T58] bridge_slave_1: left allmulticast mode [ 1622.555614][ T58] bridge_slave_1: left promiscuous mode [ 1622.555855][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.760887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1622.776992][ T58] bridge_slave_0: left allmulticast mode [ 1622.777011][ T58] bridge_slave_0: left promiscuous mode [ 1622.777170][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1622.880846][ T58] bridge_slave_1: left allmulticast mode [ 1622.880880][ T58] bridge_slave_1: left promiscuous mode [ 1622.893291][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 1622.952250][ T58] bridge_slave_0: left allmulticast mode [ 1622.952271][ T58] bridge_slave_0: left promiscuous mode [ 1622.952431][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 1624.582885][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1624.661881][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1624.749393][ T58] bond0 (unregistering): Released all slaves [ 1624.972068][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1625.051986][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1625.113871][ T58] bond0 (unregistering): Released all slaves [ 1625.155883][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.218775][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.314736][ C0] vkms_vblank_simulate: vblank timer overrun [ 1625.789713][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.049751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.092715][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.588621][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.634620][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.792470][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.851955][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.876779][ T58] bond0 (unregistering): Released all slaves [ 1626.919945][T17425] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2509'. [ 1627.054729][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.174911][ C0] vkms_vblank_simulate: vblank timer overrun [ 1627.331518][T12647] Bluetooth: hci1: command 0x0406 tx timeout [ 1627.976541][T17436] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2512'. [ 1628.194438][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.290262][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.432861][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.589450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.784016][ C0] vkms_vblank_simulate: vblank timer overrun [ 1628.821314][ T58] hsr_slave_0: left promiscuous mode [ 1628.871643][ T58] hsr_slave_1: left promiscuous mode [ 1628.872727][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1629.045637][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1629.956650][ C0] vkms_vblank_simulate: vblank timer overrun [ 1630.771975][ T58] hsr_slave_0: left promiscuous mode [ 1630.819832][ T58] hsr_slave_1: left promiscuous mode [ 1630.824101][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.877804][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1632.891444][ T58] hsr_slave_0: left promiscuous mode [ 1633.079009][ T58] hsr_slave_1: left promiscuous mode [ 1633.093819][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1633.983188][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1635.772496][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1635.901933][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1637.021809][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1637.151673][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1638.652141][ T58] team0 (unregistering): Port device team_slave_1 removed [ 1638.921983][ T58] team0 (unregistering): Port device team_slave_0 removed [ 1641.551218][T17462] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2521'. [ 1641.554326][T17470] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2522'. [ 1642.183241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.225238][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.255526][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.477793][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.651862][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.887148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1643.973129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.603216][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.784891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1644.936685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.016677][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.318053][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.480627][T17237] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1645.548935][T17237] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1645.592186][ C0] vkms_vblank_simulate: vblank timer overrun [ 1645.664970][T17237] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1645.700730][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.339472][ C0] vkms_vblank_simulate: vblank timer overrun [ 1646.532895][T17237] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1647.839594][T17541] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2534'. [ 1647.904009][T17251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1650.460930][ C1] vkms_vblank_simulate: vblank timer overrun [ 1651.247142][ C1] vkms_vblank_simulate: vblank timer overrun [ 1651.425493][T17251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1651.501737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1651.651131][ C1] vkms_vblank_simulate: vblank timer overrun [ 1651.743825][T17251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1651.968264][T17251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1652.051657][ C1] vkms_vblank_simulate: vblank timer overrun [ 1652.491211][T17247] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1652.572016][T17247] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1652.798812][ C1] vkms_vblank_simulate: vblank timer overrun [ 1652.835395][T17247] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1652.909911][T17247] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1653.443243][T17237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1653.613682][T17251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1653.617009][T17237] 8021q: adding VLAN 0 to HW filter on device team0 [ 1653.677497][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.678089][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1653.725007][T17251] 8021q: adding VLAN 0 to HW filter on device team0 [ 1653.729995][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1653.737511][ T1819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1653.855053][ T1819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1653.855553][ T1819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1653.889094][ C1] vkms_vblank_simulate: vblank timer overrun [ 1653.946759][T17247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1654.504254][ C1] vkms_vblank_simulate: vblank timer overrun [ 1654.670150][ T1819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.670396][ T1819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1654.836449][T17247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.888946][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.889094][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1654.967819][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1654.967971][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1655.085713][ C1] vkms_vblank_simulate: vblank timer overrun [ 1656.540946][T17251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1656.838589][T17237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1657.187250][T17251] veth0_vlan: entered promiscuous mode [ 1657.825406][T17247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1657.828789][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1657.828805][ T37] audit: type=1326 audit(1761084595.333:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1657.830798][ T37] audit: type=1326 audit(1761084595.333:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1657.832245][ T37] audit: type=1326 audit(1761084595.343:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1657.901317][ T37] audit: type=1326 audit(1761084595.343:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1657.901879][ T37] audit: type=1326 audit(1761084595.413:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1657.909721][ T37] audit: type=1326 audit(1761084595.413:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1657.997441][ T37] audit: type=1326 audit(1761084595.423:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1657.998056][ T37] audit: type=1326 audit(1761084595.503:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1658.000018][ T37] audit: type=1326 audit(1761084595.503:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1658.001627][ T37] audit: type=1326 audit(1761084595.513:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17627 comm="syz.7.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdc3a81b099 code=0x7ffc0000 [ 1658.198850][T17251] veth1_vlan: entered promiscuous mode [ 1658.482678][T17251] veth0_macvtap: entered promiscuous mode [ 1658.487773][T17247] veth0_vlan: entered promiscuous mode [ 1658.515659][T17251] veth1_macvtap: entered promiscuous mode [ 1658.551538][T17247] veth1_vlan: entered promiscuous mode [ 1658.595840][T17251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1658.624349][T17251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1658.674337][T12002] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.694977][T12002] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.699043][T14466] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.735222][T14466] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.755855][T17247] veth0_macvtap: entered promiscuous mode [ 1658.827056][T17247] veth1_macvtap: entered promiscuous mode [ 1659.165311][T14859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1659.165332][T14859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1659.623174][T12647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1659.647963][T12647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1659.660374][T12647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1659.708215][T12647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1659.709669][T12647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1660.836806][T12647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1660.842820][T12647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1660.853104][T12647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1660.881623][T12647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1660.899652][T12647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1661.257666][T17673] input: syz0 as /devices/virtual/input/input43 [ 1661.368083][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1661.398445][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1661.452873][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1661.711995][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1661.712868][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1661.971522][T12647] Bluetooth: hci0: command tx timeout [ 1663.153521][T12647] Bluetooth: hci3: command tx timeout [ 1664.236954][T12647] Bluetooth: hci4: command tx timeout [ 1664.237469][T12647] Bluetooth: hci0: command tx timeout [ 1665.171206][ T5813] Bluetooth: hci3: command tx timeout [ 1665.933281][T17650] chnl_net:caif_netlink_parms(): no params data found [ 1666.803454][ T5813] Bluetooth: hci0: command tx timeout [ 1666.803489][ T5813] Bluetooth: hci4: command tx timeout [ 1666.810089][T17741] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1666.810466][T17741] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1666.812210][T17741] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1666.812363][T17741] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1666.812909][T17741] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1666.813033][T17741] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1666.813474][T17741] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1666.813578][T17741] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1666.813589][T17741] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1667.251353][T12647] Bluetooth: hci3: command tx timeout [ 1668.852501][T12647] Bluetooth: hci4: command tx timeout [ 1668.852538][T12647] Bluetooth: hci0: command tx timeout [ 1669.044228][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.070671][T17667] chnl_net:caif_netlink_parms(): no params data found [ 1669.279671][T17676] chnl_net:caif_netlink_parms(): no params data found [ 1669.331527][ T5813] Bluetooth: hci3: command tx timeout [ 1670.126403][T17650] bridge0: port 1(bridge_slave_0) entered blocking state [ 1670.127151][T17650] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.127847][T17650] bridge_slave_0: entered allmulticast mode [ 1670.158068][T17650] bridge_slave_0: entered promiscuous mode [ 1670.195683][T14859] bridge_slave_1: left allmulticast mode [ 1670.195711][T14859] bridge_slave_1: left promiscuous mode [ 1670.195945][T14859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.284124][T14859] bridge_slave_0: left allmulticast mode [ 1670.284161][T14859] bridge_slave_0: left promiscuous mode [ 1670.284407][T14859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.931453][ T5813] Bluetooth: hci4: command tx timeout [ 1672.501437][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 1672.501457][ T37] audit: type=1800 audit(1761084609.373:583): pid=17809 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2571" name="bus" dev="overlay" ino=1640 res=0 errno=0 [ 1679.562242][T14859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1679.622115][T14859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1679.681432][T14859] bond0 (unregistering): Released all slaves [ 1679.766936][T17650] bridge0: port 2(bridge_slave_1) entered blocking state [ 1679.767069][T17650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.767292][T17650] bridge_slave_1: entered allmulticast mode [ 1679.770115][T17650] bridge_slave_1: entered promiscuous mode [ 1679.955569][T17845] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2583'. [ 1680.102354][T17847] input: syz0 as /devices/virtual/input/input47 [ 1680.737420][T17650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1680.737607][T17667] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.737680][T17667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.737804][T17667] bridge_slave_0: entered allmulticast mode [ 1680.739529][T17667] bridge_slave_0: entered promiscuous mode [ 1681.101578][T14859] hsr_slave_0: left promiscuous mode [ 1681.177008][T17871] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 1681.177050][T17871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1681.179723][T17871] vhci_hcd vhci_hcd.0: Device attached [ 1681.575537][T14859] hsr_slave_1: left promiscuous mode [ 1681.579588][T14859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1681.641289][T10266] usb 49-1: new low-speed USB device number 3 using vhci_hcd [ 1682.156945][T17872] vhci_hcd: connection reset by peer [ 1682.170869][T12003] vhci_hcd: stop threads [ 1682.170891][T12003] vhci_hcd: release socket [ 1682.174550][T12003] vhci_hcd: disconnect device [ 1682.681730][T14859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.638413][T17889] No control pipe specified [ 1685.051634][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2592'. [ 1685.442355][T14859] team0 (unregistering): Port device team_slave_1 removed [ 1685.702573][T14859] team0 (unregistering): Port device team_slave_0 removed [ 1686.777589][T10266] vhci_hcd: vhci_device speed not set [ 1688.552927][T17667] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.553022][T17667] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.553216][T17667] bridge_slave_1: entered allmulticast mode [ 1688.554883][T17667] bridge_slave_1: entered promiscuous mode [ 1688.558528][T17650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.652563][T17676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.652671][T17676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.652832][T17676] bridge_slave_0: entered allmulticast mode [ 1688.654436][T17676] bridge_slave_0: entered promiscuous mode [ 1688.872181][T17676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.872282][T17676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.872422][T17676] bridge_slave_1: entered allmulticast mode [ 1688.873962][T17676] bridge_slave_1: entered promiscuous mode [ 1692.792468][T17667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.797619][T17650] team0: Port device team_slave_0 added [ 1692.806853][T17667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.243490][T17928] netlink: 568 bytes leftover after parsing attributes in process `syz.7.2598'. [ 1694.404945][T17650] team0: Port device team_slave_1 added [ 1694.506273][T17676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1694.624063][T17667] team0: Port device team_slave_0 added [ 1694.628674][T17676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1694.848379][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2602'. [ 1694.848423][T17943] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2602'. [ 1694.889945][T17667] team0: Port device team_slave_1 added [ 1695.077396][T17650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1695.077414][T17650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1695.077438][T17650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1695.719251][T17650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1695.719269][T17650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1695.719292][T17650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1695.950360][ T37] audit: type=1326 audit(1761084633.453:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1695.950411][ T37] audit: type=1326 audit(1761084633.453:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1695.950451][ T37] audit: type=1326 audit(1761084633.453:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1695.966152][ T37] audit: type=1326 audit(1761084633.463:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1695.966200][ T37] audit: type=1326 audit(1761084633.463:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f843fb1f003 code=0x7ffc0000 [ 1695.966223][ T37] audit: type=1326 audit(1761084633.473:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f843fb1f003 code=0x7ffc0000 [ 1695.966246][ T37] audit: type=1326 audit(1761084633.473:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1695.966268][ T37] audit: type=1326 audit(1761084633.473:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1695.966291][ T37] audit: type=1326 audit(1761084633.473:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1695.966319][ T37] audit: type=1326 audit(1761084633.473:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17951 comm="syz.8.2605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f843fb1efc9 code=0x7ffc0000 [ 1696.274477][T17676] team0: Port device team_slave_0 added [ 1696.587400][T17667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1696.587412][T17667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.587426][T17667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1696.590125][T17676] team0: Port device team_slave_1 added [ 1696.692326][T17667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1696.692343][T17667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1696.692368][T17667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.199506][T17676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1698.199523][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.199547][T17676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.245907][T17650] hsr_slave_0: entered promiscuous mode [ 1698.254072][T17650] hsr_slave_1: entered promiscuous mode [ 1698.258015][T17676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.258030][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1698.258056][T17676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.375898][T17974] netlink: 620 bytes leftover after parsing attributes in process `syz.8.2608'. [ 1698.952302][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1698.960868][T17667] hsr_slave_0: entered promiscuous mode [ 1698.970897][T17667] hsr_slave_1: entered promiscuous mode [ 1698.973086][T17667] debugfs: 'hsr0' already exists in 'hsr' [ 1698.973130][T17667] Cannot create hsr debugfs directory [ 1699.111007][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1699.118245][ T9] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1699.118265][ T9] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1699.118276][ T9] usb 9-1: Product: syz [ 1699.118283][ T9] usb 9-1: Manufacturer: syz [ 1699.118291][ T9] usb 9-1: SerialNumber: syz [ 1699.169107][ T9] usb 9-1: config 0 descriptor?? [ 1700.273302][T14859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.351758][T17676] hsr_slave_0: entered promiscuous mode [ 1700.354346][T17676] hsr_slave_1: entered promiscuous mode [ 1700.356004][T17676] debugfs: 'hsr0' already exists in 'hsr' [ 1700.356024][T17676] Cannot create hsr debugfs directory [ 1700.849325][T14859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.478568][T14859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.615631][ T5879] usb 9-1: USB disconnect, device number 13 [ 1702.524135][T14859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.794003][T18041] netlink: 620 bytes leftover after parsing attributes in process `syz.7.2616'. [ 1704.371839][T14859] ------------[ cut here ]------------ [ 1704.371853][T14859] refcount_t: addition on 0; use-after-free. [ 1704.372223][T14859] WARNING: CPU: 1 PID: 14859 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 1704.372422][T14859] Modules linked in: [ 1704.372439][T14859] CPU: 1 UID: 0 PID: 14859 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1704.372458][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1704.372470][T14859] Workqueue: netns cleanup_net [ 1704.372522][T14859] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1704.372542][T14859] Code: 00 00 e8 f9 f0 3d fd 5b 41 5e e9 d1 a2 4a 06 cc e8 eb f0 3d fd c6 05 58 8c 60 0a 01 90 48 c7 c7 a0 9a 3e 8b e8 87 38 02 fd 90 <0f> 0b 90 90 eb d7 e8 cb f0 3d fd c6 05 39 8c 60 0a 01 90 48 c7 c7 [ 1704.372555][T14859] RSP: 0000:ffffc9000cd2f228 EFLAGS: 00010246 [ 1704.372568][T14859] RAX: a4ec5d55d57a3e00 RBX: 0000000000000002 RCX: ffff88803bf50000 [ 1704.372579][T14859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1704.372589][T14859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1704.372598][T14859] R10: dffffc0000000000 R11: ffffed101712487b R12: dffffc0000000000 [ 1704.372610][T14859] R13: ffff88806ab9c020 R14: ffff88802f9fd63c R15: ffff88806ab9c000 [ 1704.372622][T14859] FS: 0000000000000000(0000) GS:ffff888126cc2000(0000) knlGS:0000000000000000 [ 1704.372636][T14859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1704.372648][T14859] CR2: 000000110c2d8cc5 CR3: 00000000320b4000 CR4: 00000000003526f0 [ 1704.372664][T14859] Call Trace: [ 1704.372672][T14859] [ 1704.372684][T14859] nsim_fib_event_nb+0xec6/0x10b0 [ 1704.372783][T14859] ? leaf_walk_rcu+0x6a9/0x720 [ 1704.372850][T14859] call_fib_notifier+0x45/0x80 [ 1704.372897][T14859] fib_notify+0x359/0x5d0 [ 1704.372929][T14859] ? __pfx_fib_notify+0x10/0x10 [ 1704.372954][T14859] ? net_generic+0x1e/0x240 [ 1704.372977][T14859] ? net_generic+0x1e/0x240 [ 1704.373003][T14859] register_fib_notifier+0x184/0x360 [ 1704.373025][T14859] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 1704.373048][T14859] ? register_fib_notifier+0x6a/0x360 [ 1704.373070][T14859] nsim_fib_create+0x843/0x9d0 [ 1704.373105][T14859] ? __pfx_nsim_fib_create+0x10/0x10 [ 1704.373141][T14859] nsim_dev_reload_up+0x36b/0x780 [ 1704.373168][T14859] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 1704.373206][T14859] devlink_reload+0x4f8/0x8d0 [ 1704.373273][T14859] ? __pfx_devlink_reload+0x10/0x10 [ 1704.373289][T14859] ? xa_get_mark+0x70f/0x7b0 [ 1704.373381][T14859] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 1704.373434][T14859] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1704.373468][T14859] ? class_remove_file_ns+0x124/0x160 [ 1704.373529][T14859] ops_undo_list+0x187/0x990 [ 1704.373555][T14859] ? __pfx_ops_undo_list+0x10/0x10 [ 1704.373572][T14859] ? rt_spin_unlock+0x150/0x200 [ 1704.373598][T14859] ? rt_spin_unlock+0x161/0x200 [ 1704.373620][T14859] cleanup_net+0x4de/0x820 [ 1704.373641][T14859] ? __pfx_cleanup_net+0x10/0x10 [ 1704.373663][T14859] ? _raw_spin_unlock_irq+0x23/0x50 [ 1704.373685][T14859] ? process_scheduled_works+0x9ef/0x17b0 [ 1704.373712][T14859] ? process_scheduled_works+0x9ef/0x17b0 [ 1704.373740][T14859] process_scheduled_works+0xae1/0x17b0 [ 1704.373799][T14859] ? __pfx_process_scheduled_works+0x10/0x10 [ 1704.373846][T14859] worker_thread+0x8a0/0xda0 [ 1704.373868][T14859] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1704.373899][T14859] ? __kthread_parkme+0x7b/0x200 [ 1704.373951][T14859] kthread+0x711/0x8a0 [ 1704.373983][T14859] ? __pfx_worker_thread+0x10/0x10 [ 1704.374001][T14859] ? __pfx_kthread+0x10/0x10 [ 1704.374018][T14859] ? rt_spin_unlock+0x150/0x200 [ 1704.374047][T14859] ? rt_spin_unlock+0x161/0x200 [ 1704.374063][T14859] ? __pfx_kthread+0x10/0x10 [ 1704.374085][T14859] ret_from_fork+0x4bc/0x870 [ 1704.374114][T14859] ? __pfx_ret_from_fork+0x10/0x10 [ 1704.374148][T14859] ? __switch_to_asm+0x39/0x70 [ 1704.374171][T14859] ? __switch_to_asm+0x33/0x70 [ 1704.374191][T14859] ? __pfx_kthread+0x10/0x10 [ 1704.374213][T14859] ret_from_fork_asm+0x1a/0x30 [ 1704.374278][T14859] [ 1704.374298][T14859] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1704.374313][T14859] CPU: 1 UID: 0 PID: 14859 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1704.374333][T14859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1704.374344][T14859] Workqueue: netns cleanup_net [ 1704.374362][T14859] Call Trace: [ 1704.374370][T14859] [ 1704.374378][T14859] dump_stack_lvl+0x99/0x250 [ 1704.374399][T14859] ? __asan_memcpy+0x40/0x70 [ 1704.374443][T14859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1704.374463][T14859] ? __pfx__printk+0x10/0x10 [ 1704.374498][T14859] vpanic+0x237/0x6d0 [ 1704.374521][T14859] ? __pfx_vpanic+0x10/0x10 [ 1704.374549][T14859] panic+0xb9/0xc0 [ 1704.374566][T14859] ? __pfx_panic+0x10/0x10 [ 1704.374599][T14859] __warn+0x31b/0x4b0 [ 1704.374616][T14859] ? refcount_warn_saturate+0xfa/0x1d0 [ 1704.374639][T14859] ? refcount_warn_saturate+0xfa/0x1d0 [ 1704.374659][T14859] report_bug+0x2be/0x4f0 [ 1704.374715][T14859] ? refcount_warn_saturate+0xfa/0x1d0 [ 1704.374735][T14859] ? refcount_warn_saturate+0xfa/0x1d0 [ 1704.374754][T14859] ? refcount_warn_saturate+0xfc/0x1d0 [ 1704.374771][T14859] handle_bug+0x84/0x160 [ 1704.374796][T14859] exc_invalid_op+0x1a/0x50 [ 1704.374820][T14859] asm_exc_invalid_op+0x1a/0x20 [ 1704.374856][T14859] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 1704.374873][T14859] Code: 00 00 e8 f9 f0 3d fd 5b 41 5e e9 d1 a2 4a 06 cc e8 eb f0 3d fd c6 05 58 8c 60 0a 01 90 48 c7 c7 a0 9a 3e 8b e8 87 38 02 fd 90 <0f> 0b 90 90 eb d7 e8 cb f0 3d fd c6 05 39 8c 60 0a 01 90 48 c7 c7 [ 1704.374886][T14859] RSP: 0000:ffffc9000cd2f228 EFLAGS: 00010246 [ 1704.374901][T14859] RAX: a4ec5d55d57a3e00 RBX: 0000000000000002 RCX: ffff88803bf50000 [ 1704.374914][T14859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1704.374926][T14859] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1704.374936][T14859] R10: dffffc0000000000 R11: ffffed101712487b R12: dffffc0000000000 [ 1704.374948][T14859] R13: ffff88806ab9c020 R14: ffff88802f9fd63c R15: ffff88806ab9c000 [ 1704.374988][T14859] ? refcount_warn_saturate+0xf9/0x1d0 [ 1704.375008][T14859] nsim_fib_event_nb+0xec6/0x10b0 [ 1704.375035][T14859] ? leaf_walk_rcu+0x6a9/0x720 [ 1704.375061][T14859] call_fib_notifier+0x45/0x80 [ 1704.375080][T14859] fib_notify+0x359/0x5d0 [ 1704.375116][T14859] ? __pfx_fib_notify+0x10/0x10 [ 1704.375141][T14859] ? net_generic+0x1e/0x240 [ 1704.375155][T14859] ? net_generic+0x1e/0x240 [ 1704.375181][T14859] register_fib_notifier+0x184/0x360 [ 1704.375202][T14859] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 1704.375223][T14859] ? register_fib_notifier+0x6a/0x360 [ 1704.375246][T14859] nsim_fib_create+0x843/0x9d0 [ 1704.375281][T14859] ? __pfx_nsim_fib_create+0x10/0x10 [ 1704.375316][T14859] nsim_dev_reload_up+0x36b/0x780 [ 1704.375343][T14859] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 1704.375375][T14859] devlink_reload+0x4f8/0x8d0 [ 1704.375403][T14859] ? __pfx_devlink_reload+0x10/0x10 [ 1704.375418][T14859] ? xa_get_mark+0x70f/0x7b0 [ 1704.375455][T14859] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 1704.375484][T14859] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1704.375517][T14859] ? class_remove_file_ns+0x124/0x160 [ 1704.375538][T14859] ops_undo_list+0x187/0x990 [ 1704.375561][T14859] ? __pfx_ops_undo_list+0x10/0x10 [ 1704.375577][T14859] ? rt_spin_unlock+0x150/0x200 [ 1704.375601][T14859] ? rt_spin_unlock+0x161/0x200 [ 1704.375622][T14859] cleanup_net+0x4de/0x820 [ 1704.375643][T14859] ? __pfx_cleanup_net+0x10/0x10 [ 1704.375662][T14859] ? _raw_spin_unlock_irq+0x23/0x50 [ 1704.375684][T14859] ? process_scheduled_works+0x9ef/0x17b0 [ 1704.375706][T14859] ? process_scheduled_works+0x9ef/0x17b0 [ 1704.375731][T14859] process_scheduled_works+0xae1/0x17b0 [ 1704.375787][T14859] ? __pfx_process_scheduled_works+0x10/0x10 [ 1704.375830][T14859] worker_thread+0x8a0/0xda0 [ 1704.375851][T14859] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1704.375881][T14859] ? __kthread_parkme+0x7b/0x200 [ 1704.375910][T14859] kthread+0x711/0x8a0 [ 1704.375934][T14859] ? __pfx_worker_thread+0x10/0x10 [ 1704.375950][T14859] ? __pfx_kthread+0x10/0x10 [ 1704.375973][T14859] ? rt_spin_unlock+0x150/0x200 [ 1704.375997][T14859] ? rt_spin_unlock+0x161/0x200 [ 1704.376021][T14859] ? __pfx_kthread+0x10/0x10 [ 1704.376042][T14859] ret_from_fork+0x4bc/0x870 [ 1704.376070][T14859] ? __pfx_ret_from_fork+0x10/0x10 [ 1704.376103][T14859] ? __switch_to_asm+0x39/0x70 [ 1704.376123][T14859] ? __switch_to_asm+0x33/0x70 [ 1704.376143][T14859] ? __pfx_kthread+0x10/0x10 [ 1704.376164][T14859] ret_from_fork_asm+0x1a/0x30 [ 1704.376206][T14859] [ 1704.376505][T14859] Kernel Offset: disabled