last executing test programs: 25m48.801663636s ago: executing program 32 (id=154): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x24040084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 24m45.008753887s ago: executing program 33 (id=226): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) mount_setattr(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x9800, &(0x7f0000000580)={0x100003, 0x1, 0x180000}, 0x20) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d849346f819f47ab95f021ec4546c903c9b", @ANYRESOCT=r4], 0xc4}}, 0x8044) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000080) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)="ca6ab0"}, 0x20) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0xddd, @mcast1, 0x7}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x10b8}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000400)=ANY=[@ANYBLOB="fffffffffffe8eff80ec003108004570007400000000000190780a010101ac1414aa0400907800000000460000000000000000110000ffffffff000000000186400000000000109e0cec69d2dae06de9173b3f60c80005f34629000b3033a70f1c0f9d1bfd000a3aba454f6dc54cc6000bdebbd3e9f1fdeefc2c"], 0x0) 18m20.586238423s ago: executing program 34 (id=1142): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x1c9) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x3666a5802dfc8431) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x1, 0x5000003a, r2, 0x0) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r4 = open(&(0x7f0000000200)='.\x00', 0x400, 0x0) renameat2(r4, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x12) 17m23.723858155s ago: executing program 35 (id=1523): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x912}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 17m22.921941501s ago: executing program 36 (id=1532): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) 16m41.116861674s ago: executing program 37 (id=1809): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r0, 0x0, 0x20000094) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000002240)={0x0, 0x0, 0x0}, 0x4004) 15m53.747298382s ago: executing program 3 (id=2036): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@newlink={0x54, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42028}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_OKEY={0x8, 0x5, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r1, {0x6}}}, 0x24}}, 0x0) 15m52.100891418s ago: executing program 3 (id=2042): io_submit(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000600)) pipe(&(0x7f0000000500)) socket(0x2, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r1, r1, 0x2f}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 15m51.469315182s ago: executing program 3 (id=2053): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) 15m51.318846264s ago: executing program 3 (id=2056): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) umount2(0x0, 0x0) 15m49.968087355s ago: executing program 3 (id=2058): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x7, 0x7, 0x0, 0x3, {{0x7, 0x4, 0x3, 0xb, 0x1c, 0x68, 0x0, 0x47, 0x4, 0x0, @broadcast, @local, {[@cipso={0x86, 0x6}]}}}}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0xc015, &(0x7f00000004c0)={0x11, 0x4, r2, 0x1, 0x7, 0x6, @local}, 0x14) 15m49.344297684s ago: executing program 3 (id=2065): r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28a}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 15m48.492219221s ago: executing program 38 (id=2065): r0 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x28a}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 15m46.233602215s ago: executing program 8 (id=2079): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba", 0x29}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) 15m45.98202553s ago: executing program 8 (id=2081): syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x0, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200009, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x7, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x8001, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x9, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x10006, 0xa, 0xffffffff, 0x80000000, 0x5, 0x2, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xf8a4, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 15m44.523405567s ago: executing program 8 (id=2086): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/95, 0x5f}], 0x1) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)) 15m43.538240112s ago: executing program 8 (id=2090): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) umount2(0x0, 0x0) 15m43.129020096s ago: executing program 8 (id=2091): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba", 0x29}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) 15m35.764038287s ago: executing program 8 (id=2105): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x87, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2136, 0x2, &(0x7f0000000100), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 15m35.59327464s ago: executing program 39 (id=2105): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x87, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2136, 0x2, &(0x7f0000000100), &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 13m59.779541726s ago: executing program 4 (id=2419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 13m59.367331667s ago: executing program 4 (id=2426): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1000, 0x103) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80800, 0x180) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) pselect6(0x40, &(0x7f0000000080)={0x2, 0x0, 0x120000000002, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000340)={0x3fe, 0x7, 0x0, 0x693, 0x86, 0x800, 0x80000002}, 0x0, 0x0) 13m57.297375022s ago: executing program 4 (id=2430): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xe5dc, 0x8, 0x3, 0x2f0}, &(0x7f0000000280), &(0x7f0000002c00)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 13m56.848175925s ago: executing program 4 (id=2435): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 13m56.697012957s ago: executing program 4 (id=2436): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000000000)=""/42, 0x0, 0x2a, 0x1, 0x6}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_cancel(0x0, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x51, 0x0, 0x0, {0xffff, 0x1}, {0x4f, 0x3}, @cond=[{0x8, 0x5388, 0x8001, 0x800, 0x4, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000340)={@dev}, &(0x7f0000000380)=0x14) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) 13m54.94987542s ago: executing program 4 (id=2446): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 13m53.983660657s ago: executing program 40 (id=2446): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) 10m35.971712638s ago: executing program 1 (id=3033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x80000001}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) 10m34.549625061s ago: executing program 1 (id=3037): openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_open_dev$vim2m(&(0x7f0000000480), 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, 0x0, &(0x7f0000000740)) 10m33.250849153s ago: executing program 1 (id=3043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x87, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, 0x0) 10m32.307249538s ago: executing program 1 (id=3045): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x77}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)}], 0x2) socket$nl_route(0x10, 0x3, 0x0) 10m31.060176096s ago: executing program 1 (id=3046): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="8a226ff432407a7f5fd09590d734f795e12e57ce9f00f0ffffffffffff559a85603b", 0x22}], 0x1) socket$rxrpc(0x21, 0x2, 0x2) syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ptrace(0x10, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) syz_io_uring_setup(0xd1, 0x0, &(0x7f0000000080)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') unlinkat(r3, 0x0, 0x200) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) 10m30.355704635s ago: executing program 1 (id=3050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 10m15.286121462s ago: executing program 41 (id=3050): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef) 6m40.112446493s ago: executing program 0 (id=3627): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c17ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034612aa0c151345546b876b53e9f2c06e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2d852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e112f4f046d87feec3be04461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afa92fd0291fa96b05daa6beb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf319e37199e98486a8d145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fd0874dfa502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m40.052524355s ago: executing program 0 (id=3628): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x891a, 0x0) 6m37.241447032s ago: executing program 0 (id=3643): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r0 = syz_io_uring_setup(0xbdc, 0x0, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m34.589837172s ago: executing program 0 (id=3649): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80002) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000300)={0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000", @ANYRES16=r3, @ANYBLOB="01007161971da5e380f8100000000400018055ea"], 0x18}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) 6m34.507777533s ago: executing program 0 (id=3650): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x1a1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) fchdir(r4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='cubic', 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) socket$key(0xf, 0x3, 0x2) 6m32.961999507s ago: executing program 0 (id=3653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() prlimit64(r2, 0xd, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0x404, 0x21) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r3, 0x0, 0x20000000000002, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 6m17.859150431s ago: executing program 42 (id=3653): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() prlimit64(r2, 0xd, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0x404, 0x21) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r8, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r7, 0x0, r3, 0x0, 0x20000000000002, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m16.6319138s ago: executing program 7 (id=3092): socket$nl_route(0x10, 0x3, 0x0) rename(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2m14.863048776s ago: executing program 7 (id=4344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2m13.414679595s ago: executing program 7 (id=4348): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x143a41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x400, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x19, 0x1, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) 2m13.167731358s ago: executing program 7 (id=4352): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) r2 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x1882, 0x10100, 0x1, 0x200002be}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r2, 0x48eb, 0x1158, 0xa, 0x0, 0x0) 2m11.366460502s ago: executing program 7 (id=4360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x1a, 0x0) r4 = userfaultfd(0x80801) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) write$FUSE_INIT(r5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0xc000, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 2m9.706814165s ago: executing program 7 (id=4364): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x80000001, 0x420386) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40044149, &(0x7f0000000340)=0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) syz_clone(0x1010000, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 1m54.162150434s ago: executing program 43 (id=4364): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x80000001, 0x420386) ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x40044149, &(0x7f0000000340)=0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) syz_clone(0x1010000, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}]}}) 5.923134687s ago: executing program 5 (id=4657): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd29, 0x4, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfffffffffffffff7) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 5.661474601s ago: executing program 2 (id=4659): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000000007010400000000060000000000000208000540000000030900010073797a31000000006ef0670fedff"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 5.599655987s ago: executing program 5 (id=4661): r0 = io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x1000168}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000340), &(0x7f0000000080)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 4.609712508s ago: executing program 2 (id=4662): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f00000034c0), 0x0, 0x40000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) 4.465237718s ago: executing program 5 (id=4664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.459815315s ago: executing program 9 (id=4665): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 4.142588238s ago: executing program 2 (id=4666): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) accept$unix(r2, &(0x7f0000000740)=@abs, &(0x7f0000000800)=0x6e) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) syz_io_uring_setup(0x835, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') r6 = fanotify_init(0x4, 0x101000) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000000b80)={0x2020}, 0x2020) 4.141726978s ago: executing program 6 (id=4667): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0}, 0x94) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) 3.912170698s ago: executing program 9 (id=4668): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}, 0x106}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0xffffff7f}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000540)=""/4124, 0x101c}, {0x0}, {&(0x7f0000000440)=""/247, 0xf7}, {&(0x7f0000000180)=""/61, 0x3d}], 0x4}, 0xb}], 0x4, 0x10100, 0x0) 3.79799946s ago: executing program 5 (id=4669): socket(0x80000000000000a, 0x2, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000e40)=ANY=[@ANYBLOB="7f454c4604070003040000000000000002000300030000000903000038000000ce0000000e0000000b0020000100050005000000000000000300000008000000f30000007f00"], 0x258) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "8527d2413790af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589ddb3c101840af347c1a253ec5fb", 0x18}, 0x48, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2.811115663s ago: executing program 6 (id=4670): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32], 0x38}}, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x80, 0x0, 0x4, 0x70bd29, 0x4, {}, [@GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x34}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xfffffffffffffff7) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) 2.55330921s ago: executing program 5 (id=4671): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x39b3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r3}, 0x20) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x2, 0x21, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 2.552403861s ago: executing program 9 (id=4672): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002000)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x7f}, 0x18) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f0000000300)='l3', 0x2}], 0x2}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.551798662s ago: executing program 6 (id=4673): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffdbe}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x8, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 2.24796594s ago: executing program 2 (id=4674): r0 = io_uring_setup(0x12b9, &(0x7f00000002c0)={0x0, 0x48c7, 0x810, 0xfffffffc, 0x1000168}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000340), &(0x7f0000000080)=r1}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.247456723s ago: executing program 9 (id=4675): bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_hsr\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}], 0x1, 0x40000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) 2.225272994s ago: executing program 6 (id=4676): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="010000002d637075"], 0x5) 1.646795806s ago: executing program 2 (id=4677): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 1.606175144s ago: executing program 9 (id=4678): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.369951585s ago: executing program 6 (id=4679): mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0}, 0x94) bind$netlink(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) 1.204038002s ago: executing program 9 (id=4680): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) getpid() getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f000000c2c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40880) 333.277872ms ago: executing program 6 (id=4681): socket$can_bcm(0x1d, 0x2, 0x2) memfd_create(0x0, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffe, 0xd1}]}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0) 311.531161ms ago: executing program 2 (id=4682): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x35a, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)={0x20, 0xc, 0x1, "bc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 0s ago: executing program 5 (id=4683): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) accept$unix(r2, &(0x7f0000000740)=@abs, &(0x7f0000000800)=0x6e) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) syz_io_uring_setup(0x835, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') r6 = fanotify_init(0x4, 0x101000) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f0000000b80)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 5525][T16982] bridge_slave_0: entered allmulticast mode [ 1217.518316][T16982] bridge_slave_0: entered promiscuous mode [ 1217.531978][T16982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.532110][T16982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.532405][T16982] bridge_slave_1: entered allmulticast mode [ 1217.535422][T16982] bridge_slave_1: entered promiscuous mode [ 1217.536234][T16540] Bluetooth: hci1: command tx timeout [ 1217.626199][ T9958] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1217.745308][T16982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1217.756800][ T9958] usb 7-1: device descriptor read/64, error -71 [ 1217.763108][T16982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.839541][ T68] bridge_slave_1: left allmulticast mode [ 1217.839568][ T68] bridge_slave_1: left promiscuous mode [ 1217.839874][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.866822][ T9958] usb usb7-port1: attempt power cycle [ 1217.917100][ T68] bridge_slave_0: left allmulticast mode [ 1217.917119][ T68] bridge_slave_0: left promiscuous mode [ 1217.917296][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.216364][ T9958] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1218.254554][ T9958] usb 7-1: device descriptor read/8, error -71 [ 1218.394930][T17088] netlink: 'syz.5.3270': attribute type 10 has an invalid length. [ 1218.593458][ T9958] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1218.616915][ T9958] usb 7-1: device descriptor read/8, error -71 [ 1218.646807][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1219.257579][ T9958] usb usb7-port1: unable to enumerate USB device [ 1219.463024][T16540] Bluetooth: hci2: command tx timeout [ 1219.511795][T17097] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3273'. [ 1219.511820][T17097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3273'. [ 1219.696760][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1219.779113][ T68] bond0 (unregistering): Released all slaves [ 1220.064423][T16982] team0: Port device team_slave_0 added [ 1220.088277][T16982] team0: Port device team_slave_1 added [ 1220.185178][T17107] netlink: 'syz.0.3277': attribute type 10 has an invalid length. [ 1220.572793][T17108] bond4: (slave macvlan4): Error -98 calling set_mac_address [ 1220.856275][ T68] hsr_slave_0: left promiscuous mode [ 1220.896376][ T68] hsr_slave_1: left promiscuous mode [ 1220.898908][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.928700][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1221.331780][T17121] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3282'. [ 1221.331806][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3282'. [ 1221.391810][T17123] netlink: 'syz.5.3283': attribute type 10 has an invalid length. [ 1221.547927][T16540] Bluetooth: hci2: command tx timeout [ 1221.818273][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1221.956771][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1223.022432][T16982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1223.022450][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.022476][T16982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1223.142913][T16982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1223.142930][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1223.142957][T16982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1223.396433][T16540] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1223.700316][T16982] hsr_slave_0: entered promiscuous mode [ 1223.703006][T16982] hsr_slave_1: entered promiscuous mode [ 1223.705149][T16982] debugfs: 'hsr0' already exists in 'hsr' [ 1223.705174][T16982] Cannot create hsr debugfs directory [ 1223.705878][T17027] chnl_net:caif_netlink_parms(): no params data found [ 1224.229654][T17149] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3291'. [ 1224.229672][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3291'. [ 1225.707233][T17162] netlink: 'syz.0.3295': attribute type 10 has an invalid length. [ 1226.024410][T17171] netlink: 'syz.0.3299': attribute type 10 has an invalid length. [ 1226.100956][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1226.101363][ T1432] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1226.104353][T17172] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1226.120082][T17174] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3300'. [ 1226.128417][ T12] bond4: (slave macvlan3): link status up again after 0 ms [ 1226.147038][ T1409] bond4: (slave macvlan3): link status up again after 0 ms [ 1226.165405][T17027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.165609][T17027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1226.165918][T17027] bridge_slave_0: entered allmulticast mode [ 1226.166343][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1226.169602][T17027] bridge_slave_0: entered promiscuous mode [ 1226.188734][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1226.204090][T17171] bond4: (slave macvlan4): Error -98 calling set_mac_address [ 1226.206409][ T1163] bond4: (slave macvlan3): link status up again after 0 ms [ 1226.206512][ T1163] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1226.236567][ T1163] bond4: (slave macvlan3): link status up again after 0 ms [ 1226.253721][T16540] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1226.256635][ T12] bond4: (slave macvlan3): link status up again after 0 ms [ 1226.318731][T17027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.318875][T17027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1226.319123][T17027] bridge_slave_1: entered allmulticast mode [ 1226.327598][T17027] bridge_slave_1: entered promiscuous mode [ 1228.175179][T17188] netlink: 'syz.5.3305': attribute type 10 has an invalid length. [ 1228.291827][T17027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.317423][T17027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.775365][T17199] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3309'. [ 1228.856676][T17027] team0: Port device team_slave_0 added [ 1229.084750][T17027] team0: Port device team_slave_1 added [ 1229.555469][T17212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3314'. [ 1229.663935][T17027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1229.663952][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.663978][T17027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1229.770090][T17027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1229.770107][T17027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1229.770130][T17027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1229.881199][T17220] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3318'. [ 1230.119825][ T5115] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1230.909572][T17027] hsr_slave_0: entered promiscuous mode [ 1230.910730][T17027] hsr_slave_1: entered promiscuous mode [ 1230.911334][T17027] debugfs: 'hsr0' already exists in 'hsr' [ 1230.911357][T17027] Cannot create hsr debugfs directory [ 1231.119557][ T1432] net_ratelimit: 176 callbacks suppressed [ 1231.119580][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.137454][ T1409] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.156335][ T1409] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.176376][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.196352][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.235420][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.360143][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.387640][ T7189] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.409884][ T7189] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.427861][ T1409] bond4: (slave macvlan3): link status up again after 0 ms [ 1231.725370][T17248] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3327'. [ 1232.523551][ T68] bridge_slave_1: left allmulticast mode [ 1232.523579][ T68] bridge_slave_1: left promiscuous mode [ 1232.523819][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1232.561790][ T5115] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1232.609446][ T68] bridge_slave_0: left allmulticast mode [ 1232.609476][ T68] bridge_slave_0: left promiscuous mode [ 1232.609745][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.326572][ T9958] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1233.538086][ T9958] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 1233.538142][ T9958] usb 7-1: config 0 has no interface number 0 [ 1233.538305][ T9958] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1233.588508][ T9958] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1233.588538][ T9958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.588558][ T9958] usb 7-1: Product: syz [ 1233.588571][ T9958] usb 7-1: Manufacturer: syz [ 1233.588807][ T9958] usb 7-1: SerialNumber: syz [ 1233.761610][ T9958] usb 7-1: config 0 descriptor?? [ 1237.110574][ T9958] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1237.262405][ T9958] usb 7-1: invalid MIDI out EP 0 [ 1237.657218][T17274] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3336'. [ 1237.707744][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1237.786522][ T9958] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 1237.791204][ T9958] usb 7-1: USB disconnect, device number 26 [ 1238.530622][T17287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3340'. [ 1238.942603][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1239.092772][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.092937][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.383190][ T68] bond0 (unregistering): Released all slaves [ 1241.634300][T16982] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1241.678045][T16982] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1241.748981][T16982] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1241.938664][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3345'. [ 1241.988132][T16982] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1242.406729][ T9] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1242.631837][ T9] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 1242.631894][ T9] usb 7-1: config 0 has no interface number 0 [ 1242.632008][ T9] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1242.696751][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1242.696924][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.697002][ T9] usb 7-1: Product: syz [ 1242.697016][ T9] usb 7-1: Manufacturer: syz [ 1242.697030][ T9] usb 7-1: SerialNumber: syz [ 1242.832990][ T9] usb 7-1: config 0 descriptor?? [ 1244.388059][T17316] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3347'. [ 1245.105101][ T68] hsr_slave_0: left promiscuous mode [ 1245.373662][ T68] hsr_slave_1: left promiscuous mode [ 1245.438400][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1245.757879][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1246.154445][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1246.162054][ T9] usb 7-1: invalid MIDI out EP 0 [ 1246.799107][ T9] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 1246.824078][ T9] usb 7-1: USB disconnect, device number 27 [ 1249.228210][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1249.346759][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1250.276231][ T1163] net_ratelimit: 4 callbacks suppressed [ 1250.276251][ T1163] bond4: (slave macvlan3): failed to get link speed/duplex [ 1251.295507][T17352] netlink: 140 bytes leftover after parsing attributes in process `syz.6.3356'. [ 1251.506541][ T1409] bond4: (slave macvlan3): failed to get link speed/duplex [ 1251.534561][T16982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.715158][ T7189] bond4: (slave macvlan3): failed to get link speed/duplex [ 1251.801504][T16982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.874254][ T1409] bond4: (slave macvlan3): failed to get link speed/duplex [ 1251.997084][ T9958] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1252.245034][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 1252.245305][ T7189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.365120][ T9958] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 1253.365148][ T9958] usb 7-1: config 0 has no interface number 0 [ 1253.365271][ T9958] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1253.455970][T16022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.485719][T16022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.496012][ T9958] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1253.496110][ T9958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.496170][ T9958] usb 7-1: Product: syz [ 1253.496185][ T9958] usb 7-1: Manufacturer: syz [ 1253.496199][ T9958] usb 7-1: SerialNumber: syz [ 1253.636853][ T1432] bond4: (slave macvlan3): failed to get link speed/duplex [ 1253.694134][ T9958] usb 7-1: config 0 descriptor?? [ 1254.166954][ T5924] bond4: (slave macvlan3): failed to get link speed/duplex [ 1257.133382][ T9958] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1257.157798][ T9958] usb 7-1: invalid MIDI out EP 0 [ 1257.751803][ T9958] snd-usb-audio 7-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 1257.787982][ T9958] usb 7-1: USB disconnect, device number 28 [ 1258.228694][T17027] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1258.936906][T17027] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1258.970390][T17027] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1259.087681][T17027] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1259.204992][T17389] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3365'. [ 1259.417044][T17389] veth3: entered promiscuous mode [ 1259.417276][T17389] bridge1: port 1(veth3) entered blocking state [ 1259.417455][T17389] bridge1: port 1(veth3) entered disabled state [ 1259.417682][T17389] veth3: entered allmulticast mode [ 1259.534207][ T1432] bond4: (slave macvlan3): failed to get link speed/duplex [ 1259.970887][T17027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1259.999071][T17027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.089688][T16022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.090022][T16022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.135673][T16022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.135858][T16022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.344627][T16982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1260.495201][ T13] bond4: (slave macvlan3): failed to get link speed/duplex [ 1260.616515][ T1432] bond4: (slave macvlan3): failed to get link speed/duplex [ 1260.726179][ T68] bond4: (slave macvlan3): failed to get link speed/duplex [ 1260.866481][ T1432] bond4: (slave macvlan3): failed to get link speed/duplex [ 1260.985159][ T1396] bond4: (slave macvlan3): failed to get link speed/duplex [ 1261.277699][ T1432] bond4: (slave macvlan3): failed to get link speed/duplex [ 1261.394527][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3374'. [ 1261.394726][T17425] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3374'. [ 1262.338060][ T68] bond4: (slave macvlan3): failed to get link speed/duplex [ 1263.832694][T17027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.220220][T16982] veth0_vlan: entered promiscuous mode [ 1264.249807][ T1432] bond4: (slave macvlan3): failed to get link speed/duplex [ 1265.067703][T16982] veth1_vlan: entered promiscuous mode [ 1265.215094][T17027] veth0_vlan: entered promiscuous mode [ 1265.329179][T17027] veth1_vlan: entered promiscuous mode [ 1265.347248][ T13] bond4: (slave macvlan3): failed to get link speed/duplex [ 1265.356348][T16982] veth0_macvtap: entered promiscuous mode [ 1265.373218][T16982] veth1_macvtap: entered promiscuous mode [ 1265.716404][ T1409] bond4: (slave macvlan3): failed to get link speed/duplex [ 1265.721225][T17027] veth0_macvtap: entered promiscuous mode [ 1265.742772][T16982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.762212][T17027] veth1_macvtap: entered promiscuous mode [ 1265.773306][T16982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.803643][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.804422][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.804712][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.804749][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.881749][T17027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.415106][T17027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.513398][T16022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.551025][T16022] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.568076][ T1432] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.569979][ T1432] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.846884][T16022] bond4: (slave macvlan3): failed to get link speed/duplex [ 1267.370364][T16982] ieee80211 phy40: Failed to add default virtual iface [ 1268.309712][T17477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 1268.366718][T17478] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3387'. [ 1268.534920][T16540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1268.555957][T16540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1268.564338][T16540] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1268.581911][T16540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1268.582693][T16540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1268.855397][T17479] veth11: entered promiscuous mode [ 1268.855629][T17479] bridge0: port 1(veth11) entered blocking state [ 1268.855702][T17479] bridge0: port 1(veth11) entered disabled state [ 1268.855810][T17479] veth11: entered allmulticast mode [ 1270.224300][T16022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1270.224319][T16022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.656164][T16540] Bluetooth: hci5: command tx timeout [ 1272.412344][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1272.471458][T17513] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3397'. [ 1272.726171][T17480] hsr0 speed is unknown, defaulting to 1000 [ 1272.736222][T16540] Bluetooth: hci5: command tx timeout [ 1273.060857][T17514] veth13: entered promiscuous mode [ 1273.061260][T17514] bridge2: port 1(veth13) entered blocking state [ 1273.061395][T17514] bridge2: port 1(veth13) entered disabled state [ 1273.061592][T17514] veth13: entered allmulticast mode [ 1273.124213][T17480] lo speed is unknown, defaulting to 1000 [ 1273.709072][T16022] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.119803][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1274.140121][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1274.141410][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1274.144369][ T5115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1274.169081][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1274.425745][T16022] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.819329][ T5115] Bluetooth: hci5: command tx timeout [ 1275.358152][ T5115] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1275.530323][T16022] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.416270][ T5115] Bluetooth: hci1: command tx timeout [ 1277.200573][ T5115] Bluetooth: hci5: command tx timeout [ 1278.350570][T16022] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.496543][ T5115] Bluetooth: hci1: command tx timeout [ 1278.516228][T17528] hsr0 speed is unknown, defaulting to 1000 [ 1278.524034][T17528] lo speed is unknown, defaulting to 1000 [ 1278.835965][T17480] chnl_net:caif_netlink_parms(): no params data found [ 1280.489407][T17581] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3417'. [ 1280.544630][T17582] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3417'. [ 1280.576279][ T5115] Bluetooth: hci1: command tx timeout [ 1280.786955][T17585] veth5: entered promiscuous mode [ 1280.787212][T17585] bridge2: port 1(veth5) entered blocking state [ 1280.787285][T17585] bridge2: port 1(veth5) entered disabled state [ 1280.787406][T17585] veth5: entered allmulticast mode [ 1281.131193][T17480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.131275][T17480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.131624][T17480] bridge_slave_0: entered allmulticast mode [ 1281.133652][T17480] bridge_slave_0: entered promiscuous mode [ 1281.150691][T17592] siw: device registration error -23 [ 1281.252845][T17480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.252920][T17480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.253093][T17480] bridge_slave_1: entered allmulticast mode [ 1281.279315][T17480] bridge_slave_1: entered promiscuous mode [ 1281.613401][T17480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.627068][T17480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.708196][T16022] bridge_slave_1: left allmulticast mode [ 1281.708216][T16022] bridge_slave_1: left promiscuous mode [ 1281.708373][T16022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.857985][T16022] bridge_slave_0: left allmulticast mode [ 1281.858015][T16022] bridge_slave_0: left promiscuous mode [ 1281.858253][T16022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.676369][ T5115] Bluetooth: hci1: command tx timeout [ 1282.678374][T17610] netlink: 'syz.6.3427': attribute type 1 has an invalid length. [ 1282.678387][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3427'. [ 1284.807466][T16022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.876766][T16022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.918928][T16022] bond0 (unregistering): Released all slaves [ 1285.201093][T17608] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1285.311845][T17480] team0: Port device team_slave_0 added [ 1285.360764][T17480] team0: Port device team_slave_1 added [ 1285.402850][T17528] chnl_net:caif_netlink_parms(): no params data found [ 1286.191766][T17635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3435'. [ 1286.250843][T17638] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3435'. [ 1286.416346][T16022] hsr_slave_0: left promiscuous mode [ 1286.456211][T16022] hsr_slave_1: left promiscuous mode [ 1286.456918][T16022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1286.456944][T16022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1286.497469][T16022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1286.497494][T16022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.592283][T16022] veth1_macvtap: left promiscuous mode [ 1286.592353][T16022] veth0_macvtap: left promiscuous mode [ 1286.592498][T16022] veth1_vlan: left promiscuous mode [ 1286.592606][T16022] veth0_vlan: left promiscuous mode [ 1290.827078][T16022] team0 (unregistering): Port device team_slave_1 removed [ 1291.096838][T16022] team0 (unregistering): Port device team_slave_0 removed [ 1294.228071][T17480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.228083][T17480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.228097][T17480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.436645][T17635] veth15: entered promiscuous mode [ 1294.436890][T17635] bridge3: port 1(veth15) entered blocking state [ 1294.437028][T17635] bridge3: port 1(veth15) entered disabled state [ 1294.437145][T17635] veth15: entered allmulticast mode [ 1294.450256][T17480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.450272][T17480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.450297][T17480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.632867][T17697] 9pnet_fd: Insufficient options for proto=fd [ 1295.090545][T17480] hsr_slave_0: entered promiscuous mode [ 1295.091988][T17480] hsr_slave_1: entered promiscuous mode [ 1295.092956][T17480] debugfs: 'hsr0' already exists in 'hsr' [ 1295.092980][T17480] Cannot create hsr debugfs directory [ 1295.484056][T17528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.493982][T17528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.494243][T17528] bridge_slave_0: entered allmulticast mode [ 1295.584891][T17528] bridge_slave_0: entered promiscuous mode [ 1295.728500][T17528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.728637][T17528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.728853][T17528] bridge_slave_1: entered allmulticast mode [ 1295.731743][T17528] bridge_slave_1: entered promiscuous mode [ 1295.746977][T17716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1295.812305][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1295.812325][T17717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3464'. [ 1296.307105][T17718] veth3: entered promiscuous mode [ 1296.307520][T17718] bridge1: port 1(veth3) entered blocking state [ 1296.307654][T17718] bridge1: port 1(veth3) entered disabled state [ 1296.307876][T17718] veth3: entered allmulticast mode [ 1296.463756][T17528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1296.533957][T17528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1296.857431][T17725] 9pnet_fd: Insufficient options for proto=fd [ 1296.974697][T17528] team0: Port device team_slave_0 added [ 1297.168234][T17528] team0: Port device team_slave_1 added [ 1298.755895][T17739] siw: device registration error -23 [ 1299.825146][T17759] 9pnet_fd: Insufficient options for proto=fd [ 1300.184880][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.184948][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.336956][T17528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1300.336973][T17528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.336999][T17528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1300.406248][T17528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1300.406265][T17528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1300.406290][T17528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.073056][T16022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.688706][T16022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.219066][T17528] hsr_slave_0: entered promiscuous mode [ 1303.236949][T17528] hsr_slave_1: entered promiscuous mode [ 1303.254052][T17528] debugfs: 'hsr0' already exists in 'hsr' [ 1303.256426][T17528] Cannot create hsr debugfs directory [ 1304.710350][T16022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.799701][T17798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3486'. [ 1305.253307][T17790] tipc: Enabling of bearer rejected, failed to enable media [ 1305.830192][T16022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.874141][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3496'. [ 1306.946472][T17829] netlink: 'syz.5.3496': attribute type 10 has an invalid length. [ 1307.889929][ T7189] bond4: (slave macvlan3): failed to get link speed/duplex [ 1308.154641][T17840] 9pnet_fd: Insufficient options for proto=fd [ 1308.338803][T16022] bridge_slave_1: left allmulticast mode [ 1308.338828][T16022] bridge_slave_1: left promiscuous mode [ 1308.339041][T16022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.519796][T16022] bridge_slave_0: left allmulticast mode [ 1308.519820][T16022] bridge_slave_0: left promiscuous mode [ 1308.556277][T16022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.233337][T17851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'. [ 1309.274244][T17851] netlink: 'syz.0.3505': attribute type 10 has an invalid length. [ 1310.896987][T16022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1310.979425][T16022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1310.999304][T16022] bond0 (unregistering): Released all slaves [ 1311.215975][T17862] 9pnet_fd: Insufficient options for proto=fd [ 1311.228874][T17861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3509'. [ 1311.273150][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3509'. [ 1311.311255][T17866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3511'. [ 1311.576604][ T68] bond4: (slave macvlan3): link status up again after 0 ms [ 1311.596861][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1311.616446][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1311.646192][ T68] bond4: (slave macvlan3): link status up again after 0 ms [ 1311.667627][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1311.677000][T17867] veth7: entered promiscuous mode [ 1311.677387][T17867] bridge3: port 1(veth7) entered blocking state [ 1311.677523][T17867] bridge3: port 1(veth7) entered disabled state [ 1311.677733][T17867] veth7: entered allmulticast mode [ 1311.687577][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1311.706655][ T1432] bond4: (slave macvlan3): link status up again after 0 ms [ 1311.727126][ T13] bond4: (slave macvlan3): link status up again after 0 ms [ 1311.746190][ T68] bond4: (slave macvlan3): link status up again after 0 ms [ 1313.633664][T17881] netlink: 'syz.6.3516': attribute type 10 has an invalid length. [ 1313.766171][T16022] hsr_slave_0: left promiscuous mode [ 1313.816212][T16022] hsr_slave_1: left promiscuous mode [ 1313.816890][T16022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1313.816906][T16022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.848740][T16022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1313.848768][T16022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.964301][T16022] veth1_macvtap: left promiscuous mode [ 1313.964403][T16022] veth0_macvtap: left promiscuous mode [ 1313.964675][T16022] veth1_vlan: left promiscuous mode [ 1313.964961][T16022] veth0_vlan: left promiscuous mode [ 1316.418404][T16022] team0 (unregistering): Port device team_slave_1 removed [ 1316.656937][T16022] team0 (unregistering): Port device team_slave_0 removed [ 1319.249879][T17881] veth1_macvtap: left promiscuous mode [ 1319.526235][ T7382] net_ratelimit: 15 callbacks suppressed [ 1319.526253][ T7382] bond4: (slave macvlan3): failed to get link speed/duplex [ 1319.571599][T17480] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1319.653958][T17480] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1319.692124][T17480] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1319.800313][T17480] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1319.850902][T17899] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1319.876994][ T7382] bond4: (slave macvlan3): failed to get link speed/duplex [ 1319.996472][T17904] wireguard0: entered promiscuous mode [ 1319.996490][T17904] wireguard0: entered allmulticast mode [ 1320.678648][T17528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1320.713497][T17528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1320.831524][T17528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1320.908349][T17528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1321.191537][T17925] netlink: 'syz.0.3529': attribute type 10 has an invalid length. [ 1321.402114][T17480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.473609][T17480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.501975][T16022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.502168][T16022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.533885][T16022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.534112][T16022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.760047][T17528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1321.873975][T17528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1321.900961][ T1432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1321.901122][ T1432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.930684][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.930886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.268828][T16022] bond4: (slave macvlan3): failed to get link speed/duplex [ 1322.396631][ T7382] bond4: (slave macvlan3): failed to get link speed/duplex [ 1322.506215][ T1409] bond4: (slave macvlan3): failed to get link speed/duplex [ 1322.563304][T17480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.617015][ T13] bond4: (slave macvlan3): failed to get link speed/duplex [ 1322.726264][ T13] bond4: (slave macvlan3): failed to get link speed/duplex [ 1322.794493][T17528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1322.985726][T17528] veth0_vlan: entered promiscuous mode [ 1323.028420][T17528] veth1_vlan: entered promiscuous mode [ 1323.057134][T16022] bond4: (slave macvlan3): failed to get link speed/duplex [ 1323.101356][T17528] veth0_macvtap: entered promiscuous mode [ 1323.148429][T17528] veth1_macvtap: entered promiscuous mode [ 1323.214649][T17528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.266784][T17528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.306990][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.316435][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.337765][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.342073][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.667453][ T7382] bond4: (slave macvlan3): failed to get link speed/duplex [ 1323.911615][ T7382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1323.911635][ T7382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.014944][T17480] veth0_vlan: entered promiscuous mode [ 1324.026571][ T7189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.026592][ T7189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.309239][T17480] veth1_vlan: entered promiscuous mode [ 1324.416988][T17967] netlink: 'syz.0.3538': attribute type 10 has an invalid length. [ 1324.438223][T17480] veth0_macvtap: entered promiscuous mode [ 1324.453847][T17480] veth1_macvtap: entered promiscuous mode [ 1324.536197][ T7382] net_ratelimit: 1 callbacks suppressed [ 1324.536216][ T7382] bond4: (slave macvlan3): failed to get link speed/duplex [ 1324.561485][T17480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.577577][T17480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.597905][ T7189] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.617174][ T7189] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.618295][ T7189] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.618806][ T7189] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.316989][ T1396] bond4: (slave macvlan3): failed to get link speed/duplex [ 1327.391466][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1327.391487][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1328.086589][T16022] bond4: (slave macvlan3): failed to get link speed/duplex [ 1328.299628][ T1396] bond4: (slave macvlan3): failed to get link speed/duplex [ 1328.539011][ T7382] bond4: (slave macvlan3): failed to get link speed/duplex [ 1328.655040][ T7382] bond4: (slave macvlan3): failed to get link speed/duplex [ 1328.956714][ T7382] bond4: (slave macvlan3): failed to get link speed/duplex [ 1329.375905][T16540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1329.396932][T16540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1329.399013][T16540] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1329.401284][T16540] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1329.431360][T16540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1329.590445][T18012] hsr0 speed is unknown, defaulting to 1000 [ 1329.593152][T18012] lo speed is unknown, defaulting to 1000 [ 1331.130039][ T7382] bond4: (slave macvlan3): failed to get link speed/duplex [ 1333.305221][T18053] siw: device registration error -23 [ 1333.335987][ T5115] Bluetooth: hci2: command tx timeout [ 1335.948068][ T5115] Bluetooth: hci2: command tx timeout [ 1338.252777][ T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.800345][T16540] Bluetooth: hci2: command tx timeout [ 1339.828423][ T1409] bond4: (slave macvlan3): failed to get link speed/duplex [ 1339.974974][ T5924] bond4: (slave macvlan3): failed to get link speed/duplex [ 1340.504992][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1341.920437][ T5115] Bluetooth: hci2: command tx timeout [ 1341.925949][T18012] chnl_net:caif_netlink_parms(): no params data found [ 1342.159438][T18124] fuse: Bad value for 'fd' [ 1342.316498][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.561419][T18141] siw: device registration error -23 [ 1343.716662][T16843] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1343.882537][T16843] usb 3-1: config 0 has an invalid interface number: 151 but max is 0 [ 1343.882565][T16843] usb 3-1: config 0 has no interface number 0 [ 1343.882617][T16843] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1343.921898][T16843] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1343.921927][T16843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.921947][T16843] usb 3-1: Product: syz [ 1343.921960][T16843] usb 3-1: Manufacturer: syz [ 1343.921975][T16843] usb 3-1: SerialNumber: syz [ 1343.987521][T16843] usb 3-1: config 0 descriptor?? [ 1346.249535][T16843] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1346.426409][T16843] usb 3-1: invalid MIDI out EP 0 [ 1347.672670][T16843] snd-usb-audio 3-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 1347.687452][T16843] usb 3-1: USB disconnect, device number 2 [ 1347.963767][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1348.007911][T18012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.009666][T18012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.009923][T18012] bridge_slave_0: entered allmulticast mode [ 1348.025303][T18012] bridge_slave_0: entered promiscuous mode [ 1348.026441][T16843] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1348.675439][T18012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.685869][T18012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.693944][T18012] bridge_slave_1: entered allmulticast mode [ 1348.699828][T18012] bridge_slave_1: entered promiscuous mode [ 1348.764645][T16843] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1348.764683][T16843] usb 3-1: can't read configurations, error -61 [ 1348.936193][T16843] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1349.109068][T16843] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1349.109106][T16843] usb 3-1: can't read configurations, error -61 [ 1349.109877][T16843] usb usb3-port1: attempt power cycle [ 1349.216031][T18012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.247409][T18012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.606224][T16843] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1349.642195][T16843] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1349.642234][T16843] usb 3-1: can't read configurations, error -61 [ 1349.686687][T18181] siw: device registration error -23 [ 1349.766462][T16843] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1349.785112][T18012] team0: Port device team_slave_0 added [ 1349.804716][T16843] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1349.804753][T16843] usb 3-1: can't read configurations, error -61 [ 1349.805181][T16843] usb usb3-port1: unable to enumerate USB device [ 1349.882757][T18012] team0: Port device team_slave_1 added [ 1351.510317][T18012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1351.510334][T18012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.510359][T18012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.567304][T18012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1351.567321][T18012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1351.567348][T18012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1351.666875][ T68] bond4: (slave macvlan3): failed to get link speed/duplex [ 1351.809272][ T13] bridge_slave_1: left allmulticast mode [ 1351.809300][ T13] bridge_slave_1: left promiscuous mode [ 1351.809550][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.811073][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3606'. [ 1351.864030][T18195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3606'. [ 1351.908064][ T13] bridge_slave_0: left allmulticast mode [ 1351.908092][ T13] bridge_slave_0: left promiscuous mode [ 1351.908354][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.447289][T18230] siw: device registration error -23 [ 1359.257119][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.358386][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.380424][ T13] bond0 (unregistering): Released all slaves [ 1360.596450][T18196] veth5: entered promiscuous mode [ 1360.599549][T18196] bridge2: port 1(veth5) entered blocking state [ 1360.599700][T18196] bridge2: port 1(veth5) entered disabled state [ 1360.599926][T18196] veth5: entered allmulticast mode [ 1360.664655][T18012] hsr_slave_0: entered promiscuous mode [ 1360.681475][T18012] hsr_slave_1: entered promiscuous mode [ 1360.696389][T18012] debugfs: 'hsr0' already exists in 'hsr' [ 1360.696418][T18012] Cannot create hsr debugfs directory [ 1361.916401][ T12] bond4: (slave macvlan3): failed to get link speed/duplex [ 1361.954017][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.954092][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.128869][T18278] atomic_op ffff88806721a218 conn xmit_atomic 0000000000000000 [ 1362.198403][T18280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3633'. [ 1362.251370][T18282] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3633'. [ 1364.037795][T18284] veth9: entered promiscuous mode [ 1367.897125][ T13] hsr_slave_0: left promiscuous mode [ 1368.032201][ T13] hsr_slave_1: left promiscuous mode [ 1368.033257][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1368.033280][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1368.077970][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1368.077998][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.351839][ T13] veth1_macvtap: left promiscuous mode [ 1368.351906][ T13] veth0_macvtap: left promiscuous mode [ 1368.352075][ T13] veth1_vlan: left promiscuous mode [ 1368.352269][ T13] veth0_vlan: left promiscuous mode [ 1370.873404][ T37] audit: type=1326 audit(2000000921.802:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18376 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1370.876890][ T37] audit: type=1326 audit(2000000921.802:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18376 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1370.877976][ T37] audit: type=1326 audit(2000000921.812:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18376 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1370.879828][ T37] audit: type=1326 audit(2000000921.812:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18376 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1370.879876][ T37] audit: type=1326 audit(2000000921.812:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18376 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1370.880093][ T37] audit: type=1326 audit(2000000921.812:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18376 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1370.880495][ T37] audit: type=1326 audit(2000000921.812:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18376 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1370.881756][ T37] audit: type=1326 audit(2000000921.812:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18376 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=2 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 1370.904445][ T37] audit: type=1326 audit(2000000921.832:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18382 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1370.904499][ T37] audit: type=1326 audit(2000000921.832:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18382 comm="syz.6.3665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1373.774077][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3674'. [ 1378.849662][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1380.086970][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1383.522374][T16540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1383.525571][T16540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1383.528185][T16540] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1383.530426][T16540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1383.531199][T16540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1385.026229][ T6084] bond4: (slave macvlan3): failed to get link speed/duplex [ 1385.363499][T18464] hsr0 speed is unknown, defaulting to 1000 [ 1385.366299][ T1396] bond4: (slave macvlan3): failed to get link speed/duplex [ 1385.380895][T18464] lo speed is unknown, defaulting to 1000 [ 1385.516232][ T6084] bond4: (slave macvlan3): failed to get link speed/duplex [ 1385.656156][ T5115] Bluetooth: hci5: command tx timeout [ 1386.486269][ T6084] bond4: (slave macvlan3): failed to get link speed/duplex [ 1386.544133][T18464] chnl_net:caif_netlink_parms(): no params data found [ 1387.576200][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3704'. [ 1387.781576][ T5115] Bluetooth: hci5: command tx timeout [ 1389.156220][ T6084] bond4: (slave macvlan3): failed to get link speed/duplex [ 1389.521792][T18464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.521933][T18464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1389.522163][T18464] bridge_slave_0: entered allmulticast mode [ 1389.525069][T18464] bridge_slave_0: entered promiscuous mode [ 1389.568502][T18464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.568689][T18464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1389.568942][T18464] bridge_slave_1: entered allmulticast mode [ 1389.622256][T18464] bridge_slave_1: entered promiscuous mode [ 1389.657464][T16540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1389.672484][T16540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1389.674102][T16540] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1389.678468][T16540] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1389.680065][T16540] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1389.856233][ T5115] Bluetooth: hci5: command tx timeout [ 1390.054512][T18464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1390.211652][T18464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.914577][ T5115] Bluetooth: hci0: command tx timeout [ 1392.915237][ T5115] Bluetooth: hci5: command tx timeout [ 1395.030592][T16540] Bluetooth: hci0: command tx timeout [ 1396.038825][T18535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1397.007855][T18537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1397.011284][T18464] team0: Port device team_slave_0 added [ 1397.056199][T16540] Bluetooth: hci0: command tx timeout [ 1397.381059][T18569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3723'. [ 1398.039078][T18464] team0: Port device team_slave_1 added [ 1398.039989][T18514] hsr0 speed is unknown, defaulting to 1000 [ 1398.242963][T18514] lo speed is unknown, defaulting to 1000 [ 1400.074656][T16540] Bluetooth: hci0: command tx timeout [ 1400.078022][T16540] Bluetooth: hci1: command 0x0406 tx timeout [ 1401.108522][T18464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1401.108538][T18464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.108562][T18464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1401.169100][T18464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1401.169117][T18464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1401.169144][T18464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1404.059128][T18464] hsr_slave_0: entered promiscuous mode [ 1404.064070][T18464] hsr_slave_1: entered promiscuous mode [ 1404.092220][T18464] debugfs: 'hsr0' already exists in 'hsr' [ 1404.092249][T18464] Cannot create hsr debugfs directory [ 1406.753957][ T13] veth7: left allmulticast mode [ 1406.754204][ T13] bridge1: port 1(veth7) entered disabled state [ 1406.831134][ T13] veth11: left allmulticast mode [ 1406.831360][ T13] bridge0: port 1(veth11) entered disabled state [ 1406.919705][ T13] veth13: left allmulticast mode [ 1406.919856][ T13] bridge2: port 1(veth13) entered disabled state [ 1406.990894][ T13] veth15: left allmulticast mode [ 1406.991146][ T13] bridge3: port 1(veth15) entered disabled state [ 1413.322240][T18683] 9pnet_fd: Insufficient options for proto=fd [ 1413.455794][T18687] fuse: Unknown parameter '0x0000000000000006' [ 1415.069543][ T13] bond4 (unregistering): (slave macvlan2): Releasing backup interface [ 1415.069558][ T13] bond4 (unregistering): (slave macvlan2): the permanent HWaddr of slave - 8a:0c:44:ae:05:42 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1415.346578][ T13] bond4 (unregistering): (slave macvlan3): Removing an active aggregator [ 1415.356915][ T13] bond4 (unregistering): (slave macvlan3): Releasing backup interface [ 1415.747133][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.711551][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.782447][T18710] 9pnet_fd: Insufficient options for proto=fd [ 1416.793345][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1416.827365][ T13] bond0 (unregistering): Released all slaves [ 1417.848537][ T13] bond1 (unregistering): left promiscuous mode [ 1417.898338][ T13] team0: Port device bond1 removed [ 1417.902419][ T13] bond1 (unregistering): Released all slaves [ 1417.916624][ T13] bond2 (unregistering): Released all slaves [ 1418.830133][ T13] bond3 (unregistering): Released all slaves [ 1419.668789][ T13] bond4 (unregistering): Released all slaves [ 1420.169164][T18728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3771'. [ 1420.957730][T18514] chnl_net:caif_netlink_parms(): no params data found [ 1422.596249][ T13] tipc: Left network mode [ 1422.997287][T18514] bridge0: port 1(bridge_slave_0) entered blocking state [ 1422.997504][T18514] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.997753][T18514] bridge_slave_0: entered allmulticast mode [ 1423.000768][T18514] bridge_slave_0: entered promiscuous mode [ 1423.063237][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.063292][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.128394][T18514] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.128577][T18514] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.128844][T18514] bridge_slave_1: entered allmulticast mode [ 1423.130606][T18514] bridge_slave_1: entered promiscuous mode [ 1423.898193][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3783'. [ 1424.717307][T18758] tipc: Started in network mode [ 1424.717326][T18758] tipc: Node identity ac14140f, cluster identity 4711 [ 1424.717545][T18758] tipc: New replicast peer: 255.255.255.255 [ 1424.718602][T18758] tipc: Enabled bearer , priority 10 [ 1424.722504][T18514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.750845][T18514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.088099][T18777] ptrace attach of "./syz-executor exec"[13736] was attempted by ""[18777] [ 1425.819911][T16838] tipc: Node number set to 2886997007 [ 1425.992587][T18514] team0: Port device team_slave_0 added [ 1426.898022][T18514] team0: Port device team_slave_1 added [ 1427.149762][T18793] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3791'. [ 1427.396307][T18796] tipc: Started in network mode [ 1427.396338][T18796] tipc: Node identity ac14140f, cluster identity 4711 [ 1427.396738][T18796] tipc: New replicast peer: 255.255.255.255 [ 1427.397880][T18796] tipc: Enabled bearer , priority 10 [ 1428.712519][T18808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3794'. [ 1429.821292][T16838] tipc: Node number set to 2886997007 [ 1430.258715][T18823] 9pnet_fd: Insufficient options for proto=fd [ 1430.480658][T18514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.480670][T18514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.480685][T18514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1430.539180][T18514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1430.539198][T18514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.539223][T18514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.429152][T18514] hsr_slave_0: entered promiscuous mode [ 1431.430561][T18514] hsr_slave_1: entered promiscuous mode [ 1431.431522][T18514] debugfs: 'hsr0' already exists in 'hsr' [ 1431.431545][T18514] Cannot create hsr debugfs directory [ 1432.997408][T18464] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1433.155646][T18860] netlink: 'syz.6.3812': attribute type 4 has an invalid length. [ 1433.343048][T18464] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1433.436407][T18464] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1434.209427][ T13] hsr_slave_0: left promiscuous mode [ 1434.246236][ T13] hsr_slave_1: left promiscuous mode [ 1434.247051][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1434.287646][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1439.526930][ T13] team_slave_1 (unregistering): left promiscuous mode [ 1439.568329][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1439.788001][ T13] team_slave_0 (unregistering): left promiscuous mode [ 1439.827238][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1442.757202][T18464] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1443.860497][T18934] siw: device registration error -23 [ 1445.097327][T16540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1445.121931][T16540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1445.123455][T16540] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1445.125729][T16540] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1445.126859][T16540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1446.017830][T18948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3839'. [ 1446.354080][T18941] lo speed is unknown, defaulting to 1000 [ 1446.372154][T18514] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1446.419268][T18514] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1446.518042][T18514] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1446.602490][T18514] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1446.847824][T18973] fuse: Unknown parameter 'group_id00000000000000000000' [ 1446.899065][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3848'. [ 1447.298665][T16540] Bluetooth: hci2: command tx timeout [ 1447.657506][T18941] chnl_net:caif_netlink_parms(): no params data found [ 1447.754523][T18514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.394174][T19010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3857'. [ 1448.406881][T19012] fuse: Bad value for 'user_id' [ 1448.406900][T19012] fuse: Bad value for 'user_id' [ 1448.472090][T18514] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.485015][T18941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.485156][T18941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.485408][T18941] bridge_slave_0: entered allmulticast mode [ 1448.506705][T18941] bridge_slave_0: entered promiscuous mode [ 1448.512408][T18941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.512543][T18941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.512765][T18941] bridge_slave_1: entered allmulticast mode [ 1448.531481][T18941] bridge_slave_1: entered promiscuous mode [ 1449.376341][T16540] Bluetooth: hci2: command tx timeout [ 1449.506628][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.506849][ T6084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.750356][T18941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.887892][T18941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.184387][ T5115] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1450.275174][ T5115] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1450.284002][ T5115] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1450.292664][ T5115] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1452.263068][ T5115] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1452.324748][T16540] Bluetooth: hci2: command tx timeout [ 1454.162435][T18941] team0: Port device team_slave_0 added [ 1454.336426][T16540] Bluetooth: hci2: command tx timeout [ 1454.336496][T16540] Bluetooth: hci5: command tx timeout [ 1455.485933][ T5115] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1455.518246][T18941] team0: Port device team_slave_1 added [ 1456.736622][ T5115] Bluetooth: hci5: command tx timeout [ 1458.713534][T18941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.713551][T18941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.713578][T18941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.730364][T19031] lo speed is unknown, defaulting to 1000 [ 1458.775864][T18941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.775880][T18941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.775907][T18941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.816415][ T5115] Bluetooth: hci5: command tx timeout [ 1458.998037][ T5115] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1460.896468][ T5115] Bluetooth: hci5: command tx timeout [ 1461.478222][T18941] hsr_slave_0: entered promiscuous mode [ 1461.479836][T18941] hsr_slave_1: entered promiscuous mode [ 1461.944204][ T5115] Bluetooth: hci3: Malformed LE Event: 0x1d [ 1464.401498][T19149] siw: device registration error -23 [ 1465.179734][ T13] bridge_slave_1: left allmulticast mode [ 1465.179762][ T13] bridge_slave_1: left promiscuous mode [ 1465.180006][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.507692][ T13] bridge_slave_0: left allmulticast mode [ 1465.507722][ T13] bridge_slave_0: left promiscuous mode [ 1465.507989][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.481541][ T13] bridge_slave_1: left allmulticast mode [ 1466.481572][ T13] bridge_slave_1: left promiscuous mode [ 1466.481831][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.601375][ T5115] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1467.567636][ T13] bridge_slave_0: left allmulticast mode [ 1467.567666][ T13] bridge_slave_0: left promiscuous mode [ 1467.567907][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.343099][T19186] siw: device registration error -23 [ 1470.638107][ T5115] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1470.677555][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1471.520355][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1471.520367][ T37] audit: type=1326 audit(2000001022.452:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19209 comm="syz.2.3920" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08b2e0eec9 code=0x0 [ 1471.520878][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1471.598824][ T13] bond0 (unregistering): Released all slaves [ 1473.037210][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.905571][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1474.086914][ T13] bond0 (unregistering): Released all slaves [ 1475.137568][T19230] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3926'. [ 1475.286759][T19230] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3926'. [ 1475.421029][ T5115] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1475.506939][T19230] veth7: entered promiscuous mode [ 1475.507347][T19230] bridge3: port 1(veth7) entered blocking state [ 1475.507494][T19230] bridge3: port 1(veth7) entered disabled state [ 1475.507698][T19230] veth7: entered allmulticast mode [ 1476.706709][ T5115] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1476.706734][ T5115] CPU: 0 UID: 0 PID: 5115 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1476.706755][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1476.706767][ T5115] Workqueue: hci1 hci_rx_work [ 1476.706796][ T5115] Call Trace: [ 1476.706804][ T5115] [ 1476.706814][ T5115] dump_stack_lvl+0x189/0x250 [ 1476.706843][ T5115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1476.706865][ T5115] ? __pfx__printk+0x10/0x10 [ 1476.706892][ T5115] ? kernfs_path_from_node+0x2c/0x280 [ 1476.706916][ T5115] ? kernfs_path_from_node+0x243/0x280 [ 1476.706938][ T5115] ? kernfs_path_from_node+0x2c/0x280 [ 1476.706967][ T5115] sysfs_create_dir_ns+0x259/0x280 [ 1476.706992][ T5115] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1476.707019][ T5115] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1476.707047][ T5115] ? rt_spin_unlock+0x161/0x200 [ 1476.707073][ T5115] kobject_add_internal+0x5a5/0xb50 [ 1476.707104][ T5115] kobject_add+0x155/0x220 [ 1476.707130][ T5115] ? __pfx_kobject_add+0x10/0x10 [ 1476.707159][ T5115] ? get_device_parent+0x370/0x3a0 [ 1476.707204][ T5115] device_add+0x408/0xb50 [ 1476.707230][ T5115] hci_conn_add_sysfs+0xd5/0x1e0 [ 1476.707255][ T5115] le_conn_complete_evt+0xf39/0x1500 [ 1476.707296][ T5115] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1476.707323][ T5115] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1476.707348][ T5115] ? lockdep_hardirqs_on+0x9c/0x150 [ 1476.707376][ T5115] ? skb_pull_data+0xfb/0x200 [ 1476.707401][ T5115] hci_le_conn_complete_evt+0x187/0x450 [ 1476.707436][ T5115] hci_event_packet+0x78f/0x1200 [ 1476.707463][ T5115] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1476.707489][ T5115] ? __pfx_hci_event_packet+0x10/0x10 [ 1476.707521][ T5115] ? hci_send_to_monitor+0xe2/0x570 [ 1476.707552][ T5115] hci_rx_work+0x46a/0xe80 [ 1476.707581][ T5115] ? process_scheduled_works+0x9ef/0x17b0 [ 1476.707609][ T5115] process_scheduled_works+0xae1/0x17b0 [ 1476.707664][ T5115] ? __pfx_process_scheduled_works+0x10/0x10 [ 1476.707708][ T5115] worker_thread+0x8a0/0xda0 [ 1476.707728][ T5115] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1476.707762][ T5115] ? __kthread_parkme+0x7b/0x200 [ 1476.707794][ T5115] kthread+0x711/0x8a0 [ 1476.707820][ T5115] ? __pfx_worker_thread+0x10/0x10 [ 1476.707837][ T5115] ? __pfx_kthread+0x10/0x10 [ 1476.707855][ T5115] ? rt_spin_unlock+0x150/0x200 [ 1476.707881][ T5115] ? rt_spin_unlock+0x161/0x200 [ 1476.707900][ T5115] ? __pfx_kthread+0x10/0x10 [ 1476.707923][ T5115] ret_from_fork+0x4bc/0x870 [ 1476.707951][ T5115] ? __pfx_ret_from_fork+0x10/0x10 [ 1476.707986][ T5115] ? __switch_to_asm+0x39/0x70 [ 1476.708008][ T5115] ? __switch_to_asm+0x33/0x70 [ 1476.708029][ T5115] ? __pfx_kthread+0x10/0x10 [ 1476.708051][ T5115] ret_from_fork_asm+0x1a/0x30 [ 1476.708094][ T5115] [ 1476.708124][ T5115] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1476.708163][ T5115] Bluetooth: hci1: failed to register connection device [ 1476.765443][T19258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1477.943484][T16540] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1477.960710][T19031] chnl_net:caif_netlink_parms(): no params data found [ 1478.397744][ T37] audit: type=1326 audit(2000001029.332:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19277 comm="syz.5.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2439e6eec9 code=0x7ffc0000 [ 1478.400835][ T37] audit: type=1326 audit(2000001029.332:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19277 comm="syz.5.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2439e6eec9 code=0x7ffc0000 [ 1478.401150][ T37] audit: type=1326 audit(2000001029.332:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19277 comm="syz.5.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f2439e6eec9 code=0x7ffc0000 [ 1478.401634][ T37] audit: type=1326 audit(2000001029.332:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19277 comm="syz.5.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2439e6eec9 code=0x7ffc0000 [ 1478.401907][ T37] audit: type=1326 audit(2000001029.332:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19277 comm="syz.5.3945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2439e6eec9 code=0x7ffc0000 [ 1480.376134][ T13] hsr_slave_0: left promiscuous mode [ 1480.417040][T16540] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1480.433341][ T13] hsr_slave_1: left promiscuous mode [ 1480.435712][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.477336][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1480.490794][T19300] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3952'. [ 1480.627190][ T13] hsr_slave_0: left promiscuous mode [ 1480.666920][ T13] hsr_slave_1: left promiscuous mode [ 1480.667894][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.717627][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1481.386790][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1481.527290][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1482.677281][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1482.817027][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1483.435380][T19298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3951'. [ 1485.671055][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.671224][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.960093][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3959'. [ 1485.960115][T19323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3959'. [ 1485.960137][T19323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3959'. [ 1487.075981][T19031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1487.076200][T19031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1487.076450][T19031] bridge_slave_0: entered allmulticast mode [ 1487.102241][T19031] bridge_slave_0: entered promiscuous mode [ 1487.158293][T19031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1487.158471][T19031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1487.158725][T19031] bridge_slave_1: entered allmulticast mode [ 1487.192864][T19031] bridge_slave_1: entered promiscuous mode [ 1487.510936][T19335] siw: device registration error -23 [ 1487.534779][T19031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.558430][T19031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1488.067117][T19031] team0: Port device team_slave_0 added [ 1488.111513][T19031] team0: Port device team_slave_1 added [ 1488.704562][T19031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.704574][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1488.704588][T19031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.524136][T19031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.524154][T19031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1489.524180][T19031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1489.581594][T18941] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1489.680713][ T5867] kworker/1:3 (5867) used greatest stack depth: 13136 bytes left [ 1489.816852][T18941] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1491.303156][T18941] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1491.795675][T18941] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1493.193799][T19031] hsr_slave_0: entered promiscuous mode [ 1493.195288][T19031] hsr_slave_1: entered promiscuous mode [ 1493.208392][T19031] debugfs: 'hsr0' already exists in 'hsr' [ 1493.208421][T19031] Cannot create hsr debugfs directory [ 1493.976637][T19392] siw: device registration error -23 [ 1496.602261][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3983'. [ 1496.602284][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3983'. [ 1501.505940][T18941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1502.058177][T18941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1502.090702][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.090949][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1502.123011][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.124079][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1502.577571][T19459] netlink: 'syz.2.3995': attribute type 10 has an invalid length. [ 1502.577595][T19459] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3995'. [ 1502.631505][T19460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3995'. [ 1502.869317][T19458] bridge_slave_0: left allmulticast mode [ 1502.869346][T19458] bridge_slave_0: left promiscuous mode [ 1502.869694][T19458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.858616][T19458] bridge_slave_1: left allmulticast mode [ 1503.858645][T19458] bridge_slave_1: left promiscuous mode [ 1503.858879][T19458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.990816][T19458] bond0: (slave bond_slave_0): Releasing backup interface [ 1504.077061][T19458] bond0: (slave bond_slave_1): Releasing backup interface [ 1504.235280][T19458] team0: Port device team_slave_0 removed [ 1504.453952][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1504.459925][T19458] team0: Port device team_slave_1 removed [ 1504.461090][T19458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1504.461115][T19458] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.462917][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1504.533038][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1504.900005][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1504.961418][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1505.308302][T19458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.308331][T19458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.348415][T19458] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1505.349849][T19459] team0: entered promiscuous mode [ 1505.350084][T19459] bridge0: port 1(team0) entered blocking state [ 1505.350159][T19459] bridge0: port 1(team0) entered disabled state [ 1505.350283][T19459] team0: entered allmulticast mode [ 1505.355947][T19459] bridge0: port 1(team0) entered blocking state [ 1505.356032][T19459] bridge0: port 1(team0) entered forwarding state [ 1505.409890][T19460] team0: left allmulticast mode [ 1505.410717][T19460] bridge0: port 1(team0) entered disabled state [ 1506.132596][T19493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4003'. [ 1506.153375][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4001'. [ 1506.712085][T19476] lo speed is unknown, defaulting to 1000 [ 1507.792824][ T5115] Bluetooth: hci0: command tx timeout [ 1507.803515][T19503] netlink: 'syz.5.4005': attribute type 16 has an invalid length. [ 1507.803529][T19503] netlink: 'syz.5.4005': attribute type 3 has an invalid length. [ 1507.803536][T19503] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.4005'. [ 1507.867669][ T13] bridge_slave_1: left allmulticast mode [ 1507.867688][ T13] bridge_slave_1: left promiscuous mode [ 1507.871620][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.020131][ T13] bridge_slave_0: left allmulticast mode [ 1508.020160][ T13] bridge_slave_0: left promiscuous mode [ 1508.020425][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1509.856610][ T5115] Bluetooth: hci0: command tx timeout [ 1510.233417][T19525] fuse: Unknown parameter '0xffffffffffffffff' [ 1510.727672][T16540] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1511.094368][T16540] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1511.131686][T16540] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1511.193485][T16540] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1511.215690][T16540] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1513.567082][ T5115] Bluetooth: hci0: command tx timeout [ 1513.567155][ T5115] Bluetooth: hci2: command tx timeout [ 1513.793968][T19555] fuse: Unknown parameter '0xffffffffffffffff' [ 1514.187961][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.266777][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.321952][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4024'. [ 1514.350876][ T13] bond0 (unregistering): Released all slaves [ 1514.478538][T19560] bridge0: port 1(ip6gretap1) entered blocking state [ 1514.478666][T19560] bridge0: port 1(ip6gretap1) entered disabled state [ 1514.478926][T19560] ip6gretap1: entered allmulticast mode [ 1514.503316][T19560] ip6gretap1: entered promiscuous mode [ 1516.187477][T19570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4025'. [ 1516.187514][T19570] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4025'. [ 1516.196479][T16540] Bluetooth: hci2: command tx timeout [ 1516.196510][T16540] Bluetooth: hci0: command tx timeout [ 1517.656511][ T13] hsr_slave_0: left promiscuous mode [ 1517.703561][ T13] hsr_slave_1: left promiscuous mode [ 1517.712303][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.737240][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.256758][ T5115] Bluetooth: hci2: command tx timeout [ 1518.324586][T19596] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4035'. [ 1518.986745][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1519.139677][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1520.336674][ T5115] Bluetooth: hci2: command tx timeout [ 1521.591624][T19619] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4042'. [ 1521.591660][T19619] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4042'. [ 1523.619018][T19621] vlan1: entered promiscuous mode [ 1523.631742][T19621] vlan1: entered allmulticast mode [ 1523.631888][T19621] veth0_vlan: entered allmulticast mode [ 1524.235982][T19625] siw: device registration error -23 [ 1524.655986][T19530] lo speed is unknown, defaulting to 1000 [ 1524.864910][T19634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4048'. [ 1524.864929][T19634] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4048'. [ 1525.758581][T19655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4054'. [ 1526.616016][T19476] chnl_net:caif_netlink_parms(): no params data found [ 1527.430355][T19669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1527.430565][T19669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4055'. [ 1529.006375][T19674] netlink: 'syz.5.4056': attribute type 3 has an invalid length. [ 1529.007291][T19476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.007418][T19476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1529.007663][T19476] bridge_slave_0: entered allmulticast mode [ 1529.010506][T19476] bridge_slave_0: entered promiscuous mode [ 1529.013136][T19530] chnl_net:caif_netlink_parms(): no params data found [ 1529.072233][T19476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.072374][T19476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1529.072599][T19476] bridge_slave_1: entered allmulticast mode [ 1529.075332][T19476] bridge_slave_1: entered promiscuous mode [ 1530.814556][T19699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4064'. [ 1530.814733][T19699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4064'. [ 1531.794389][T19476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.917677][T19705] fuse: Unknown parameter 'user_i00000000000000000000' [ 1531.981006][T19476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1532.775158][T19729] /dev/nullb0: Can't lookup blockdev [ 1533.125196][T19730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1533.125233][T19730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4075'. [ 1533.612290][T19732] siw: device registration error -23 [ 1536.095227][T19761] /dev/nullb0: Can't lookup blockdev [ 1536.874552][T19476] team0: Port device team_slave_0 added [ 1537.232018][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4087'. [ 1537.232054][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4087'. [ 1537.559930][T19770] siw: device registration error -23 [ 1538.122385][T19476] team0: Port device team_slave_1 added [ 1538.224525][T19783] fuse: Unknown parameter '0xffffffffffffffff' [ 1538.786185][T19803] /dev/nullb0: Can't lookup blockdev [ 1539.540969][T19807] fuse: Unknown parameter '0xffffffffffffffff' [ 1539.867676][T19530] bridge0: port 1(bridge_slave_0) entered blocking state [ 1539.867968][T19530] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.868171][T19530] bridge_slave_0: entered allmulticast mode [ 1539.873051][T19530] bridge_slave_0: entered promiscuous mode [ 1541.099753][T19530] bridge0: port 2(bridge_slave_1) entered blocking state [ 1541.099907][T19530] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.100125][T19530] bridge_slave_1: entered allmulticast mode [ 1541.102857][T19530] bridge_slave_1: entered promiscuous mode [ 1541.359589][T19476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1541.359602][T19476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.359623][T19476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1541.918663][T19838] tipc: Started in network mode [ 1541.918682][T19838] tipc: Node identity ac14140f, cluster identity 4711 [ 1541.928610][T19838] tipc: New replicast peer: 255.255.255.255 [ 1541.930351][T19838] tipc: Enabled bearer , priority 10 [ 1541.951987][T19476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1541.952005][T19476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1541.952030][T19476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.729709][T16842] tipc: Node number set to 2886997007 [ 1544.155135][T19874] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4129'. [ 1544.234871][T19530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1544.253208][T19530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1546.317969][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.318441][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.833791][T19901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1546.833814][T19901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1547.212593][T19476] hsr_slave_0: entered promiscuous mode [ 1547.214277][T19476] hsr_slave_1: entered promiscuous mode [ 1547.234719][T19476] debugfs: 'hsr0' already exists in 'hsr' [ 1547.234748][T19476] Cannot create hsr debugfs directory [ 1547.339874][T19530] team0: Port device team_slave_0 added [ 1547.363161][T19530] team0: Port device team_slave_1 added [ 1548.630492][T19919] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4142'. [ 1550.642123][T19530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.642141][T19530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.642164][T19530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1551.775633][T19530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1551.775651][T19530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1551.775677][T19530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1553.770459][T19530] hsr_slave_0: entered promiscuous mode [ 1553.771900][T19530] hsr_slave_1: entered promiscuous mode [ 1553.772885][T19530] debugfs: 'hsr0' already exists in 'hsr' [ 1553.772909][T19530] Cannot create hsr debugfs directory [ 1554.276958][T19966] siw: device registration error -23 [ 1554.597225][ T13] bridge_slave_1: left allmulticast mode [ 1554.597253][ T13] bridge_slave_1: left promiscuous mode [ 1554.597486][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1554.688150][ T13] bridge_slave_0: left allmulticast mode [ 1554.688179][ T13] bridge_slave_0: left promiscuous mode [ 1554.688549][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.010836][ T13] bridge_slave_1: left allmulticast mode [ 1555.010865][ T13] bridge_slave_1: left promiscuous mode [ 1555.011221][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.024591][ T13] bridge_slave_0: left allmulticast mode [ 1556.024621][ T13] bridge_slave_0: left promiscuous mode [ 1556.024867][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.487067][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1561.607003][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1561.694099][ T13] bond0 (unregistering): Released all slaves [ 1562.443534][T20034] netlink: 'syz.6.4175': attribute type 2 has an invalid length. [ 1564.696175][T20050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4180'. [ 1565.758639][T16540] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1565.779428][T16540] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1565.782063][T16540] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1565.806374][T16540] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1565.807419][T16540] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1567.141760][T20077] overlayfs: failed to clone lowerpath [ 1567.152429][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1567.237187][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1567.281509][ T13] bond0 (unregistering): Released all slaves [ 1567.357635][T20072] tipc: Enabling of bearer rejected, already enabled [ 1567.878557][ T5115] Bluetooth: hci5: command tx timeout [ 1568.605999][T20098] fuse: Unknown parameter '0xffffffffffffffff' [ 1568.613490][T20067] lo speed is unknown, defaulting to 1000 [ 1568.936254][ T13] hsr_slave_0: left promiscuous mode [ 1568.956489][ T13] hsr_slave_1: left promiscuous mode [ 1568.957532][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.008281][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.166329][ T13] hsr_slave_0: left promiscuous mode [ 1569.206285][ T13] hsr_slave_1: left promiscuous mode [ 1569.207453][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1569.229582][ T5115] Bluetooth: hci1: Malformed LE Event: 0x1d [ 1569.257304][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1569.942988][ T5115] Bluetooth: hci5: command tx timeout [ 1571.006919][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1571.632295][T16540] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1571.651152][T16540] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1571.653994][T16540] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1571.655764][T16540] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1571.680095][T16540] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1572.118240][T16540] Bluetooth: hci5: command tx timeout [ 1572.138574][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1574.271381][T16540] Bluetooth: hci6: command tx timeout [ 1574.272047][T16540] Bluetooth: hci5: command tx timeout [ 1575.829597][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1576.057248][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1576.336184][ T5115] Bluetooth: hci6: command tx timeout [ 1577.754730][T20164] openvswitch: netlink: Flow actions attr not present in new flow. [ 1578.416232][ T5115] Bluetooth: hci6: command tx timeout [ 1579.910060][T20128] lo speed is unknown, defaulting to 1000 [ 1580.496427][ T5115] Bluetooth: hci6: command tx timeout [ 1581.636593][T20067] chnl_net:caif_netlink_parms(): no params data found [ 1583.062976][T20215] openvswitch: netlink: Flow key attr not present in new flow. [ 1583.107397][ T37] audit: type=1326 audit(2000001158.036:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.107453][ T37] audit: type=1326 audit(2000001158.046:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.107496][ T37] audit: type=1326 audit(2000001158.046:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.107539][ T37] audit: type=1326 audit(2000001158.046:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.107583][ T37] audit: type=1326 audit(2000001158.046:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.108196][ T37] audit: type=1326 audit(2000001158.046:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.108243][ T37] audit: type=1326 audit(2000001158.046:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.108285][ T37] audit: type=1326 audit(2000001158.046:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.108682][ T37] audit: type=1326 audit(2000001158.046:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.109605][ T37] audit: type=1326 audit(2000001158.046:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20211 comm="syz.6.4231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fede095eec9 code=0x7ffc0000 [ 1583.120794][T20067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.120941][T20067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.121149][T20067] bridge_slave_0: entered allmulticast mode [ 1583.123826][T20067] bridge_slave_0: entered promiscuous mode [ 1583.127550][T20067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.127672][T20067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.127878][T20067] bridge_slave_1: entered allmulticast mode [ 1583.130554][T20067] bridge_slave_1: entered promiscuous mode [ 1583.483012][T20128] chnl_net:caif_netlink_parms(): no params data found [ 1583.685855][T20067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1583.692693][T20067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.088110][T20224] tipc: Enabling of bearer rejected, already enabled [ 1584.228223][T20067] team0: Port device team_slave_0 added [ 1584.269701][T20067] team0: Port device team_slave_1 added [ 1584.649796][T20067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.649813][T20067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.649839][T20067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.801010][T20067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.801027][T20067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1584.801052][T20067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.525706][T20247] openvswitch: netlink: Flow key attr not present in new flow. [ 1585.564547][T20128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1585.564679][T20128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.564923][T20128] bridge_slave_0: entered allmulticast mode [ 1585.573547][T20128] bridge_slave_0: entered promiscuous mode [ 1585.579832][T20245] bridge0: port 3(erspan0) entered blocking state [ 1585.579903][T20245] bridge0: port 3(erspan0) entered disabled state [ 1585.582344][T20245] erspan0: entered allmulticast mode [ 1585.587780][T20245] erspan0: entered promiscuous mode [ 1585.593314][T20245] bridge0: port 3(erspan0) entered blocking state [ 1585.594583][T20245] bridge0: port 3(erspan0) entered forwarding state [ 1585.714437][T20128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.714571][T20128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.714763][T20128] bridge_slave_1: entered allmulticast mode [ 1585.739043][T20128] bridge_slave_1: entered promiscuous mode [ 1586.108592][T20243] erspan0: left allmulticast mode [ 1586.108612][T20243] erspan0: left promiscuous mode [ 1586.113479][T20243] bridge0: port 3(erspan0) entered disabled state [ 1586.760043][ T13] bridge_slave_1: left allmulticast mode [ 1586.760070][ T13] bridge_slave_1: left promiscuous mode [ 1586.760334][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1586.974481][ T13] bridge_slave_0: left allmulticast mode [ 1586.974510][ T13] bridge_slave_0: left promiscuous mode [ 1586.975576][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.939000][ T13] bridge_slave_1: left allmulticast mode [ 1587.939029][ T13] bridge_slave_1: left promiscuous mode [ 1587.939269][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.017995][ T13] bridge_slave_0: left allmulticast mode [ 1588.018023][ T13] bridge_slave_0: left promiscuous mode [ 1588.018272][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.776939][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.921067][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.999497][ T13] bond0 (unregistering): Released all slaves [ 1589.258330][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1589.356908][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.422266][ T13] bond0 (unregistering): Released all slaves [ 1589.612926][T20128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1589.651527][T20067] hsr_slave_0: entered promiscuous mode [ 1589.652308][T20067] hsr_slave_1: entered promiscuous mode [ 1589.668910][T20128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1590.321312][T20128] team0: Port device team_slave_0 added [ 1590.347760][T20128] team0: Port device team_slave_1 added [ 1591.426337][ T13] hsr_slave_0: left promiscuous mode [ 1592.531872][ T13] hsr_slave_1: left promiscuous mode [ 1592.532843][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.587367][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.667739][ T13] hsr_slave_0: left promiscuous mode [ 1593.710073][ T13] hsr_slave_1: left promiscuous mode [ 1593.711078][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.759984][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1595.866780][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1596.197116][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1597.996803][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1598.148174][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1598.760287][T20128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.760304][T20128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.760331][T20128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.763324][T20327] syz_tun: entered allmulticast mode [ 1598.847120][T20128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.847137][T20128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.847163][T20128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.863869][T20334] syz_tun: left allmulticast mode [ 1600.458544][T20128] hsr_slave_0: entered promiscuous mode [ 1600.460443][T20128] hsr_slave_1: entered promiscuous mode [ 1600.461395][T20128] debugfs: 'hsr0' already exists in 'hsr' [ 1600.461418][T20128] Cannot create hsr debugfs directory [ 1605.116991][T20067] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1605.819481][T20067] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1606.053381][T20067] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1606.055435][T20397] overlayfs: failed to clone upperpath [ 1606.101133][T20067] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1606.480213][T20128] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1606.601506][T20413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4297'. [ 1606.634139][T20413] vlan0: entered promiscuous mode [ 1606.693359][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4296'. [ 1606.693495][T20417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4296'. [ 1607.262306][T20128] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1607.494071][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.494144][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.539266][T20128] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1607.574107][T20128] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1607.785342][T20067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.839716][T20067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1607.892845][T20128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.950052][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.951985][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1607.953636][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.953727][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1608.768841][T20128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.801374][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.801597][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.822761][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.822978][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1609.991288][T20128] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1610.262910][T20067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1612.289255][T20128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.278587][T20067] veth0_vlan: entered promiscuous mode [ 1613.300760][T20067] veth1_vlan: entered promiscuous mode [ 1613.440932][T20067] veth0_macvtap: entered promiscuous mode [ 1613.466748][T20067] veth1_macvtap: entered promiscuous mode [ 1613.532870][T20067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1613.588444][T20067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1613.629512][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.630940][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.631192][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1613.631423][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.119434][T20128] veth0_vlan: entered promiscuous mode [ 1614.146557][ T7189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.146578][ T7189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.193138][T20128] veth1_vlan: entered promiscuous mode [ 1614.322823][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4321'. [ 1614.359019][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1614.359039][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1614.420657][T20128] veth0_macvtap: entered promiscuous mode [ 1614.461376][T20128] veth1_macvtap: entered promiscuous mode [ 1614.490512][T20128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.511004][T20128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.532896][ T1163] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.533165][ T1163] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.533221][ T1163] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.533257][ T1163] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.798596][T20522] tipc: Enabling of bearer rejected, already enabled [ 1617.692592][T20540] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1620.587023][T20540] wireguard0: entered promiscuous mode [ 1620.587042][T20540] wireguard0: entered allmulticast mode [ 1622.581047][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1622.581068][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1623.003834][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.003854][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.532028][T20581] tipc: Started in network mode [ 1624.532057][T20581] tipc: Node identity ac14140f, cluster identity 4711 [ 1624.532384][T20581] tipc: New replicast peer: 255.255.255.255 [ 1624.565595][T20581] tipc: Enabled bearer , priority 10 [ 1626.046905][ T9958] tipc: Node number set to 2886997007 [ 1629.327776][T20625] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4354'. [ 1629.378594][T20628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4355'. [ 1631.369906][T20648] siw: device registration error -23 [ 1637.105697][T20695] siw: device registration error -23 [ 1640.067485][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4385'. [ 1640.067518][T20718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4385'. [ 1640.264140][T20718] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1640.979931][T16540] Bluetooth: hci6: command 0x0405 tx timeout [ 1641.182263][T20717] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1643.810222][T20743] siw: device registration error -23 [ 1649.192548][T16540] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1649.215787][T16540] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1649.230398][T16540] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1649.231455][T16540] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1649.232059][T16540] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1649.842428][T20785] lo speed is unknown, defaulting to 1000 [ 1651.300401][ T5115] Bluetooth: hci0: command tx timeout [ 1653.380082][ T5115] Bluetooth: hci0: command tx timeout [ 1654.030171][ T7189] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1654.082950][T20824] gtp0: entered promiscuous mode [ 1656.821208][ T5115] Bluetooth: hci0: command tx timeout [ 1656.856440][ T7189] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1657.103177][T20785] chnl_net:caif_netlink_parms(): no params data found [ 1659.261294][ T7189] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1659.716524][T16540] Bluetooth: hci0: command tx timeout [ 1660.856383][T20885] gtp0: entered promiscuous mode [ 1664.008331][ T7189] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.058891][T20785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1664.059785][T20785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1664.060808][T20785] bridge_slave_0: entered allmulticast mode [ 1664.065277][T20785] bridge_slave_0: entered promiscuous mode [ 1664.101887][T20785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1664.102073][T20785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1664.102324][T20785] bridge_slave_1: entered allmulticast mode [ 1664.128605][T20785] bridge_slave_1: entered promiscuous mode [ 1664.627844][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4446'. [ 1664.627859][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4446'. [ 1664.833234][T20785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.883036][T20785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.333241][T20785] team0: Port device team_slave_0 added [ 1665.385178][T20785] team0: Port device team_slave_1 added [ 1665.783914][T20785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1665.783931][T20785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1665.783957][T20785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1665.786541][T20785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1665.786555][T20785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1665.786578][T20785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1666.018515][ T7189] bridge_slave_1: left allmulticast mode [ 1666.018545][ T7189] bridge_slave_1: left promiscuous mode [ 1666.018798][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.238851][ T7189] bridge_slave_0: left allmulticast mode [ 1667.238881][ T7189] bridge_slave_0: left promiscuous mode [ 1667.239158][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.333840][T20947] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4453'. [ 1668.680840][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1668.680857][ T37] audit: type=1326 audit(2000001251.608:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20953 comm="syz.9.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1668.680905][ T37] audit: type=1326 audit(2000001251.608:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20953 comm="syz.9.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1668.731831][ T37] audit: type=1326 audit(2000001251.658:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20953 comm="syz.9.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1668.731880][ T37] audit: type=1326 audit(2000001251.658:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20953 comm="syz.9.4455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1668.997070][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.997142][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.416160][T20964] netlink: 'syz.6.4457': attribute type 2 has an invalid length. [ 1673.656293][T21001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4469'. [ 1674.692728][ T7189] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1674.766941][ T7189] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1674.810398][ T7189] bond0 (unregistering): Released all slaves [ 1675.465696][T20785] hsr_slave_0: entered promiscuous mode [ 1675.476865][T20785] hsr_slave_1: entered promiscuous mode [ 1675.478796][T20785] debugfs: 'hsr0' already exists in 'hsr' [ 1675.478820][T20785] Cannot create hsr debugfs directory [ 1676.503257][T21021] netlink: 'syz.5.4476': attribute type 2 has an invalid length. [ 1676.899181][T21026] fuse: Unknown parameter '0xffffffffffffffff' [ 1678.736841][ T7189] hsr_slave_0: left promiscuous mode [ 1678.761283][ T7189] hsr_slave_1: left promiscuous mode [ 1678.892795][ T7189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1678.894128][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1679.634002][ T7189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1679.634031][ T7189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1679.755060][ T7189] veth1_macvtap: left promiscuous mode [ 1679.755162][ T7189] veth0_macvtap: left promiscuous mode [ 1679.755445][ T7189] veth1_vlan: left promiscuous mode [ 1679.755623][ T7189] veth0_vlan: left promiscuous mode [ 1683.978031][ T7189] team0 (unregistering): Port device team_slave_1 removed [ 1684.267050][ T7189] team0 (unregistering): Port device team_slave_0 removed [ 1685.130986][T21073] siw: device registration error -23 [ 1688.340281][T21080] veth0_to_bridge: entered allmulticast mode [ 1691.071274][T16540] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 1691.101028][T16540] Bluetooth: hci3: unexpected event for opcode 0x203e [ 1691.472474][T21111] siw: device registration error -23 [ 1691.487728][T16540] Bluetooth: hci5: command 0x0406 tx timeout [ 1695.148223][ T5115] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1695.149383][ T5115] Bluetooth: hci3: Injecting HCI hardware error event [ 1695.161675][T16540] Bluetooth: hci3: hardware error 0x00 [ 1700.116182][T16540] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1700.341601][ T37] audit: type=1800 audit(2000001283.268:249): pid=21155 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.4518" name="nullb0" dev="tmpfs" ino=2160 res=0 errno=0 [ 1700.375447][T20785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1700.532217][T20785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1700.696576][T20785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1700.755744][T20785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1701.933561][T21162] dvmrp0: entered allmulticast mode [ 1702.382483][T20785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.450318][T20785] 8021q: adding VLAN 0 to HW filter on device team0 [ 1702.457932][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.458074][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.509652][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.509797][ T7189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.540495][T20785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1705.712472][T20785] veth0_vlan: entered promiscuous mode [ 1706.688510][T20785] veth1_vlan: entered promiscuous mode [ 1706.734548][T20785] veth0_macvtap: entered promiscuous mode [ 1706.747849][T20785] veth1_macvtap: entered promiscuous mode [ 1706.784273][T20785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1706.804410][T20785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1706.836869][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.838933][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.839832][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1706.840243][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1708.517468][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1708.537351][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1708.538884][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1708.541129][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1708.716222][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1710.304814][T21227] lo speed is unknown, defaulting to 1000 [ 1711.059095][T16540] Bluetooth: hci0: command tx timeout [ 1713.136233][T16540] Bluetooth: hci0: command tx timeout [ 1713.410049][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1714.386581][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4550'. [ 1714.394511][T21265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1715.221799][T16540] Bluetooth: hci0: command tx timeout [ 1715.724679][T21265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1717.446667][T16540] Bluetooth: hci0: command tx timeout [ 1720.812049][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.126566][T21330] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1722.377543][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.318995][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.322496][T21361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4581'. [ 1726.302818][T21227] chnl_net:caif_netlink_parms(): no params data found [ 1727.104894][ T37] audit: type=1326 audit(2000001310.028:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21381 comm="syz.9.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1727.105463][ T37] audit: type=1326 audit(2000001310.028:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21381 comm="syz.9.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1727.105840][ T37] audit: type=1326 audit(2000001310.028:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21381 comm="syz.9.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1727.178626][ T37] audit: type=1326 audit(2000001310.028:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21381 comm="syz.9.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1727.178993][ T37] audit: type=1326 audit(2000001310.108:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21381 comm="syz.9.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1727.179531][ T37] audit: type=1326 audit(2000001310.108:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21381 comm="syz.9.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1727.180811][ T37] audit: type=1326 audit(2000001310.108:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21381 comm="syz.9.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62e6beec9 code=0x7ffc0000 [ 1727.396627][T21380] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4585'. [ 1730.366585][T21404] gtp0: entered promiscuous mode [ 1730.372644][T21227] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.372782][T21227] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.373001][T21227] bridge_slave_0: entered allmulticast mode [ 1730.375744][T21227] bridge_slave_0: entered promiscuous mode [ 1730.427085][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.427154][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.434495][T21227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.434625][T21227] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.434885][T21227] bridge_slave_1: entered allmulticast mode [ 1730.438526][T21227] bridge_slave_1: entered promiscuous mode [ 1732.680126][T21227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.701071][T21227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.982781][ T13] bridge_slave_1: left allmulticast mode [ 1733.982810][ T13] bridge_slave_1: left promiscuous mode [ 1733.983071][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.072040][T21441] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4604'. [ 1734.100037][ T13] bridge_slave_0: left allmulticast mode [ 1734.100066][ T13] bridge_slave_0: left promiscuous mode [ 1734.100336][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.844895][T21459] 9pnet_fd: Insufficient options for proto=fd [ 1738.477910][T21475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4615'. [ 1741.170648][T21504] siw: device registration error -23 [ 1742.287026][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.366811][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.388743][ T13] bond0 (unregistering): Released all slaves [ 1742.442990][T21227] team0: Port device team_slave_0 added [ 1742.557106][T21227] team0: Port device team_slave_1 added [ 1742.726328][T21517] fuse: Unknown parameter '0xffffffffffffffff' [ 1745.434446][T21542] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4638'. [ 1745.586264][ T13] hsr_slave_0: left promiscuous mode [ 1745.595537][T21544] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4639'. [ 1745.595573][T21544] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4639'. [ 1745.636222][ T13] hsr_slave_1: left promiscuous mode [ 1745.637394][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.637419][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.670729][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.670756][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.825393][ T13] veth1_macvtap: left promiscuous mode [ 1745.835780][ T13] veth0_macvtap: left promiscuous mode [ 1745.835982][ T13] veth1_vlan: left promiscuous mode [ 1745.836223][ T13] veth0_vlan: left promiscuous mode [ 1748.686877][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1748.936808][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1751.548007][T21227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1751.548024][T21227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.548050][T21227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1751.612193][T21227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1751.612208][T21227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1751.612233][T21227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1753.969798][T21227] hsr_slave_0: entered promiscuous mode [ 1753.971218][T21227] hsr_slave_1: entered promiscuous mode [ 1753.972163][T21227] debugfs: 'hsr0' already exists in 'hsr' [ 1753.972187][T21227] Cannot create hsr debugfs directory [ 1753.991416][T21583] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4652'. [ 1753.991452][T21583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4652'. [ 1760.929056][T21668] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 1760.929079][T21668] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 21668, name: syz.6.4681 [ 1760.929097][T21668] preempt_count: 1, expected: 0 [ 1760.929107][T21668] RCU nest depth: 2, expected: 2 [ 1760.929125][T21668] 5 locks held by syz.6.4681/21668: [ 1760.929138][T21668] #0: ffff888023e4ce90 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x152/0xe20 [ 1760.929204][T21668] #1: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x500 [ 1760.929255][T21668] #2: ffff8880b8832c88 ((stream_local_lock)){+.+.}-{3:3}, at: __bpf_stream_push_str+0x211/0xbe0 [ 1760.929309][T21668] #3: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 1760.929361][T21668] #4: ffff8880b883f6e8 (&s->lock_key#5){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13f0 [ 1760.929418][T21668] Preemption disabled at: [ 1760.929423][T21668] [] __slab_alloc+0xea/0x1f0 [ 1760.929457][T21668] CPU: 0 UID: 0 PID: 21668 Comm: syz.6.4681 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1760.929478][T21668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1760.929491][T21668] Call Trace: [ 1760.929498][T21668] [ 1760.929508][T21668] dump_stack_lvl+0x189/0x250 [ 1760.929536][T21668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1760.929561][T21668] ? __pfx__printk+0x10/0x10 [ 1760.929589][T21668] ? print_lock_name+0xde/0x100 [ 1760.929611][T21668] ? __slab_alloc+0xea/0x1f0 [ 1760.929637][T21668] __might_resched+0x44b/0x5d0 [ 1760.929669][T21668] ? __slab_alloc+0xea/0x1f0 [ 1760.929691][T21668] ? __pfx___might_resched+0x10/0x10 [ 1760.929718][T21668] ? ___slab_alloc+0x12f/0x13f0 [ 1760.929746][T21668] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1760.929774][T21668] ? lockdep_hardirqs_on+0x9c/0x150 [ 1760.929807][T21668] rt_spin_lock+0xc7/0x3e0 [ 1760.929834][T21668] ? __pfx_rt_spin_lock+0x10/0x10 [ 1760.929857][T21668] ? __lock_acquire+0xab9/0xd20 [ 1760.929895][T21668] ___slab_alloc+0x12f/0x13f0 [ 1760.929925][T21668] ? __set_page_owner+0x25c/0x490 [ 1760.929953][T21668] __slab_alloc+0xc6/0x1f0 [ 1760.929976][T21668] ? __set_page_owner+0x25c/0x490 [ 1760.929998][T21668] __kmalloc_cache_noprof+0xec/0x6c0 [ 1760.930020][T21668] ? __set_page_owner+0x25c/0x490 [ 1760.930045][T21668] __set_page_owner+0x25c/0x490 [ 1760.930068][T21668] ? __pfx___set_page_owner+0x10/0x10 [ 1760.930087][T21668] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1760.930120][T21668] post_alloc_hook+0x240/0x2a0 [ 1760.930146][T21668] get_page_from_freelist+0x28c0/0x2960 [ 1760.930188][T21668] ? lockdep_unlock+0x89/0x120 [ 1760.930212][T21668] ? __lock_acquire+0xab9/0xd20 [ 1760.930255][T21668] alloc_frozen_pages_nolock_noprof+0xbc/0x150 [ 1760.930292][T21668] alloc_pages_nolock_noprof+0xa/0x30 [ 1760.930318][T21668] bpf_stream_page_replace+0x19/0x1e0 [ 1760.930345][T21668] __bpf_stream_push_str+0x35c/0xbe0 [ 1760.930378][T21668] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 1760.930416][T21668] bpf_stream_stage_printk+0x14e/0x1c0 [ 1760.930440][T21668] ? __pfx_find_from_stack_cb+0x10/0x10 [ 1760.930461][T21668] ? arch_bpf_stack_walk+0x112/0x170 [ 1760.930488][T21668] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 1760.930517][T21668] ? arch_stack_walk+0xfc/0x150 [ 1760.930547][T21668] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 1760.930576][T21668] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 1760.930603][T21668] ? irqentry_exit+0x74/0x90 [ 1760.930633][T21668] ? read_tsc+0x9/0x20 [ 1760.930661][T21668] bpf_check_timed_may_goto+0xaa/0xb0 [ 1760.930691][T21668] arch_bpf_timed_may_goto+0x21/0x40 [ 1760.930720][T21668] bpf_prog_6fd842a53d323cc5+0x53/0x5f [ 1760.930740][T21668] bpf_trace_run9+0x2de/0x500 [ 1760.930762][T21668] ? bpf_trace_run9+0x1ec/0x500 [ 1760.930783][T21668] ? __pfx_bpf_trace_run9+0x10/0x10 [ 1760.930830][T21668] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 1760.930866][T21668] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 1760.930892][T21668] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 1760.930918][T21668] ? __alloc_skb+0x112/0x2d0 [ 1760.930954][T21668] ? __alloc_skb+0x1bc/0x2d0 [ 1760.930984][T21668] ? __local_bh_enable+0x28c/0x410 [ 1760.931019][T21668] virtio_transport_alloc_skb+0x10cc/0x1130 [ 1760.931063][T21668] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 1760.931095][T21668] ? rt_spin_unlock+0x150/0x200 [ 1760.931124][T21668] virtio_transport_send_pkt_info+0x6be/0x1100 [ 1760.931172][T21668] virtio_transport_connect+0xa7/0x100 [ 1760.931196][T21668] ? __pfx_virtio_transport_connect+0x10/0x10 [ 1760.931227][T21668] ? __pfx_vsock_auto_bind+0x10/0x10 [ 1760.931257][T21668] ? vsock_assign_transport+0x5ed/0x770 [ 1760.931285][T21668] vsock_connect+0xb8b/0xe20 [ 1760.931321][T21668] ? __might_fault+0xb0/0x130 [ 1760.931342][T21668] ? __pfx_vsock_connect+0x10/0x10 [ 1760.931374][T21668] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1760.931413][T21668] ? bpf_lsm_socket_connect+0x9/0x20 [ 1760.931439][T21668] __sys_connect+0x323/0x450 [ 1760.931471][T21668] ? __pfx___sys_connect+0x10/0x10 [ 1760.931509][T21668] ? rcu_is_watching+0x15/0xb0 [ 1760.931544][T21668] __x64_sys_connect+0x7a/0x90 [ 1760.931571][T21668] do_syscall_64+0xfa/0xfa0 [ 1760.931598][T21668] ? lockdep_hardirqs_on+0x9c/0x150 [ 1760.931627][T21668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.931647][T21668] ? clear_bhb_loop+0x60/0xb0 [ 1760.931672][T21668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1760.931693][T21668] RIP: 0033:0x7fede095eec9 [ 1760.931711][T21668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1760.931730][T21668] RSP: 002b:00007feddebbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1760.931750][T21668] RAX: ffffffffffffffda RBX: 00007fede0bb5fa0 RCX: 00007fede095eec9 [ 1760.931763][T21668] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000006 [ 1760.931774][T21668] RBP: 00007fede09e1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1760.931785][T21668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1760.931796][T21668] R13: 00007fede0bb6038 R14: 00007fede0bb5fa0 R15: 00007ffc5e1e4358 [ 1760.931829][T21668] [ 1760.975536][T21227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1761.244822][T21227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1761.284270][T21227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1761.323846][T21227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1761.858695][T21227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.885158][T21227] 8021q: adding VLAN 0 to HW filter on device team0 [ 1762.001704][ T1409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1762.002202][ T1409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1762.035865][T21366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.038997][T21366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1762.099233][T21227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1762.255470][T21227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1762.311632][T21227] veth0_vlan: entered promiscuous mode [ 1762.320435][T21227] veth1_vlan: entered promiscuous mode [ 1762.355462][T21227] veth0_macvtap: entered promiscuous mode [ 1762.363702][T21227] veth1_macvtap: entered promiscuous mode [ 1762.381378][T21227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1762.397711][T21227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1762.407540][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.409788][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.410000][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.410035][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.716699][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.716719][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.757846][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.757867][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50