last executing test programs: 24m14.388602768s ago: executing program 32 (id=91): socket$nl_generic(0x10, 0x3, 0x10) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) 23m56.590610959s ago: executing program 33 (id=178): syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_cache\x00') 21m5.111252976s ago: executing program 34 (id=676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 19m56.615742447s ago: executing program 35 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r2, 0x40086604, &(0x7f0000000040)) 19m50.015923098s ago: executing program 36 (id=814): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 17m21.948615901s ago: executing program 37 (id=1162): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r2, 0x1000006) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x1000000}) 17m16.00678385s ago: executing program 38 (id=1171): socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1000}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f8000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f4000020000000000000800000000000000000100"], 0xf8}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) r3 = dup2(r2, r2) sendmmsg$unix(r3, &(0x7f0000008380), 0x400000000000174, 0x4008890) 16m10.513286972s ago: executing program 39 (id=1323): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') read$FUSE(r2, &(0x7f00000003c0)={0x2020}, 0xd5b) 13m38.158079784s ago: executing program 7 (id=1634): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) connect$phonet_pipe(r2, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x2, 0x2001) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 13m37.828239056s ago: executing program 7 (id=1637): memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) connect$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setreuid(0xffffffffffffffff, 0xee01) sendmsg(0xffffffffffffffff, 0x0, 0x0) mq_open(&(0x7f0000000200)='grpid', 0x40, 0x101, &(0x7f0000000240)={0x65a2e421, 0x40000000d, 0x9, 0x6}) 13m34.963369818s ago: executing program 7 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300000800004087b1608f871e5400850000003300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13m34.011252259s ago: executing program 40 (id=1605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x10000004, 0x8000, 0x7, 0x3, 0x3, 0x7ff, 0x3, 0x4}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r3) 13m33.925822021s ago: executing program 7 (id=1649): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x11) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) connect$phonet_pipe(r2, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ptrace$ARCH_MAP_VDSO_X32(0x1e, 0x0, 0x2, 0x2001) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 13m31.571523626s ago: executing program 7 (id=1653): openat$dlm_control(0xffffffffffffff9c, 0x0, 0x321001, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$sg(0x0, 0x0, 0x802) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000180)={r7}) socket$nl_route(0x10, 0x3, 0x0) 13m29.732428208s ago: executing program 7 (id=1654): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$xfs(&(0x7f0000000440), &(0x7f0000009640)='./file0\x00', 0x8004, &(0x7f0000000480)={[{@grpquota}]}, 0x1, 0x9761, &(0x7f0000033240)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0) sendfile(r3, r3, 0x0, 0x1000000201005) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500200000040"], 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x100000000000000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000140)={[{@acl}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x200, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = memfd_create(0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f) r7 = dup(r6) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 13m19.651865982s ago: executing program 41 (id=1638): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x40}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r3, &(0x7f0000000580)="17", 0x12571144d43d7ee5, 0x10008095, 0x0, 0x0) 13m12.530535s ago: executing program 42 (id=1654): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$xfs(&(0x7f0000000440), &(0x7f0000009640)='./file0\x00', 0x8004, &(0x7f0000000480)={[{@grpquota}]}, 0x1, 0x9761, &(0x7f0000033240)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r3, 0x2007ffb) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, 0x0) sendfile(r3, r3, 0x0, 0x1000000201005) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500200000040"], 0x0) copy_file_range(r2, 0x0, r1, 0x0, 0xfffffbffa003e458, 0x100000000000000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0x4, &(0x7f0000000140)={[{@acl}]}, 0x0, 0x236, &(0x7f0000000300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x1, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x200, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = memfd_create(0x0, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x0, 0x3a, '\x02', 0x3a, ']', 0x3a, './file0/file0'}, 0x2f) r7 = dup(r6) execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 8m7.39795149s ago: executing program 4 (id=2207): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 8m5.895712471s ago: executing program 4 (id=2211): timer_create(0x4, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000340), 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$dir(0xffffffffffffff9c, 0x0, 0x4c0, 0x40) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x0) r3 = getpgrp(0x0) syz_pidfd_open(r3, 0x0) bind$nfc_llcp(r0, 0x0, 0x11) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00), 0x1, 0x2001, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) 7m59.792077298s ago: executing program 4 (id=2218): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x23456}) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 7m58.511543633s ago: executing program 4 (id=2220): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000440)={r2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 7m57.838984567s ago: executing program 4 (id=2221): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 7m57.163624913s ago: executing program 4 (id=2224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x81010000000000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 7m46.19131042s ago: executing program 2 (id=2251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0x7ffffffe, 0x4) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0", 0x7, 0x12, 0x0, 0x0) 7m45.87132398s ago: executing program 2 (id=2254): syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() read$char_usb(r1, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_disconnect(r0) 7m41.837791775s ago: executing program 43 (id=2224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) add_key$keyring(&(0x7f00000101c0), &(0x7f0000010180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, 0x0, 0x81010000000000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) 7m41.833051232s ago: executing program 2 (id=2263): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x35, "8f2559e4a8395e9d15637d1a19e0a92e133bee7686c1a5751f86d52feb3987a9a4e33276baa5b6bdcd03b18accab118cf3915eb007"}, &(0x7f0000000400)=0x3d) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf258600000008000300", @ANYRES32=r7, @ANYBLOB="081b2600a6140800"], 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000890) 7m40.589376713s ago: executing program 2 (id=2266): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x8000000000000000]}}) 7m40.058909962s ago: executing program 2 (id=2268): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) 7m39.702931995s ago: executing program 2 (id=2272): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0xffffffff}, 0x0, 0x0, 0x2, 0x4, 0xfff, 0x1, 0x9, 0x1}}], 0x58, 0x20040000}, 0x0) 7m24.549960802s ago: executing program 44 (id=2272): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x9, 0xffffffff}, 0x0, 0x0, 0x2, 0x4, 0xfff, 0x1, 0x9, 0x1}}], 0x58, 0x20040000}, 0x0) 4m29.663162188s ago: executing program 9 (id=2648): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 4m27.056552561s ago: executing program 9 (id=2652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r3, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="48000000100039042abd7000eaffffff000003e4", @ANYRES32=r4, @ANYBLOB="03000000c31006002800128008000100736974001c0002"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 4m26.70887165s ago: executing program 9 (id=2654): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xbc, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '&'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="5953fdfffffffddbdf256b000000080003007abcdaba74f9a620b5b66aa777", @ANYRES32=0x0, @ANYBLOB="10001d80060000800500090009000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 4m20.949119408s ago: executing program 9 (id=2662): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x548, 0x188, 0xc8, 0x240, 0xc8, 0x0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ip={@remote, @local, 0xffffffff, 0xff, 'tunl0\x00', 'gre0\x00', {0xff}, {0xff}, 0x24, 0x4, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x80, @rand_addr=0x64010101, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x81, 0x1}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}, {{@uncond, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@local, [0xff000000, 0xff000000, 0x0, 0xff000000], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 0x4d2, 0x3505, 0x3a, 0x0, 0x0, 0x12}, {@ipv4=@multicast2, [0x0, 0xff000000, 0xff, 0xffffffff], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xff000000, 0xffffffff, 0xff], 0x4d3, 0x3500, 0x2c, 0x1, 0x0, 0x10}, {@ipv6=@empty, [0xffffffff, 0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xff, 0xff000000, 0xff000000, 0xff], 0x4d3, 0x3507, 0x2b, 0x1, 0x0, 0x8}, {@ipv4=@multicast1, [0xffffff00, 0xff000000, 0xff], @ipv6=@mcast1, [0xff000000, 0x0, 0xff000000, 0xffffff00], 0x4d3, 0x0, 0x87, 0x1, 0x5, 0x8}], 0x2, 0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x8, 0x7, [0x15, 0x4, 0x33, 0x25, 0x2a, 0x3e, 0x30, 0x36, 0x3c, 0x37, 0x39, 0x1c, 0x2b, 0x15, 0x16, 0x2a], 0x1, 0x3, 0x380000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 4m20.671368426s ago: executing program 9 (id=2664): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000100), 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r3) 4m18.153033223s ago: executing program 1 (id=2670): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, 0x0, 0x0) getsockname$unix(r2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) 4m18.108974682s ago: executing program 9 (id=2671): timer_create(0x4, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000340), 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$dir(0xffffffffffffff9c, 0x0, 0x4c0, 0x40) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bind$nfc_llcp(r0, 0x0, 0x11) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0a000000010001", 0x7) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00), 0x1, 0x2001, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) 4m15.675087921s ago: executing program 1 (id=2679): r0 = socket(0x18, 0x2, 0x0) close(r0) fcntl$lock(r0, 0x7, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 4m11.728753674s ago: executing program 1 (id=2685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x0, 0xc, 0x3, 0x0, 0x6}}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$inet(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x1) r6 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 4m10.233404539s ago: executing program 1 (id=2688): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x570, 0x188, 0xc8, 0x240, 0xc8, 0x0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ip={@remote, @local, 0xffffffff, 0xff, 'tunl0\x00', 'gre0\x00', {0xff}, {0xff}, 0x24, 0x4, 0x40}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0x80, @rand_addr=0x64010101, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x81, 0x1}}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}, {{@uncond, 0x0, 0x1c8, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@local, [0xff000000, 0xff000000, 0x0, 0xff000000], @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 0x4d2, 0x3505, 0x3a, 0x0, 0x0, 0x12}, {@ipv4=@multicast2, [0x0, 0xff000000, 0xff, 0xffffffff], @ipv6=@rand_addr=' \x01\x00', [0xffffff00, 0xff000000, 0xffffffff, 0xff], 0x4d3, 0x3500, 0x2c, 0x1, 0x0, 0x10}, {@ipv6=@empty, [0xffffffff, 0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xff, 0xff000000, 0xff000000, 0xff], 0x4d3, 0x3507, 0x2b, 0x1, 0x0, 0x8}, {@ipv4=@multicast1, [0xffffff00, 0xff000000, 0xff], @ipv6=@mcast1, [0xff000000, 0x0, 0xff000000, 0xffffff00], 0x4d3, 0x0, 0x87, 0x1, 0x5, 0x8}], 0x2, 0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x8, 0x7, [0x15, 0x4, 0x33, 0x25, 0x2a, 0x3e, 0x30, 0x36, 0x3c, 0x37, 0x39, 0x1c, 0x2b, 0x15, 0x16, 0x2a], 0x1, 0x3, 0x380000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) setgroups(0x0, 0x0) 4m9.483779001s ago: executing program 1 (id=2692): syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) read(r1, 0x0, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xfffffffffffffffe, &(0x7f00000005c0)=""/191}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_START_REQ(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18005}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000440)={0xa, 0x1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040080}, 0x20004000) 4m7.438072352s ago: executing program 1 (id=2694): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r4, 0x2007ffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x10) sendfile(r6, r5, 0x0, 0x7ffff000) 3m52.252178288s ago: executing program 45 (id=2694): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmmsg$unix(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1451c2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) ftruncate(r4, 0x2007ffb) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c1002, 0x10) sendfile(r6, r5, 0x0, 0x7ffff000) 1m34.779359711s ago: executing program 5 (id=2934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x7c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x59, 0x33, @beacon={{{}, {0xde1}}, 0x3, @random=0x1, 0x1, @void, @val, @void, @val={0x4, 0x6, {0xf8, 0x97, 0x2, 0x2}}, @val={0x6, 0x2, 0x7}, @val={0x5, 0x3, {0xd0, 0xf1, 0x4}}, @val={0x25, 0x3, {0x1, 0xa9, 0x3}}, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0xf6, 0x40}}, @val={0x76, 0x6, {0x5, 0x10, 0x5, 0x2}}}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 1m32.415686032s ago: executing program 5 (id=2940): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r1, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 1m28.962812703s ago: executing program 5 (id=2944): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40)=[{&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000003c0)='M', 0x1}], 0x2) 1m28.519311179s ago: executing program 5 (id=2947): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYBLOB='\x00'/13], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2) 1m28.188620876s ago: executing program 5 (id=2950): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac1414000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002000020", @ANYRES32], 0x254}}, 0x0) 1m26.141882499s ago: executing program 5 (id=2953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000340)=""/254, 0xfe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300"], 0x2d) 1m21.005509847s ago: executing program 0 (id=2966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x504}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000002c0), 0xcdd, r0}, 0x38) 1m19.045186268s ago: executing program 0 (id=2970): openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) epoll_create1(0x0) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000000580)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7e99, 0x100, 0x0, 0x3af, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x262, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xe) socket(0x1000000010, 0x3, 0x9) socket$vsock_stream(0x28, 0x1, 0x0) 1m16.639062406s ago: executing program 0 (id=2974): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYBLOB='\x00'/13], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2) 1m15.353722702s ago: executing program 0 (id=2978): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/237) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="11d82a6ecc81", 0x6}, {0x0}, {0x0}], 0x3) 1m11.237612219s ago: executing program 0 (id=2981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x6, 0x504}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f00000002c0), 0xcdd, r0}, 0x38) 1m10.636693934s ago: executing program 46 (id=2953): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x18, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000340)=""/254, 0xfe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c82028002400010007d3040007c4faff020c04000300"], 0x2d) 1m6.751576575s ago: executing program 0 (id=2986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 51.123584028s ago: executing program 47 (id=2986): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 18.116317624s ago: executing program 3 (id=3060): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r4) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)="42f7a85b"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r0}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x60, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_RATE={0x14, 0x6, {0x8, 0xff, 0x3, 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x0) sendto$packet(r5, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x8100, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = syz_clone(0x12848000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r11, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_CONNECT={0x10, 0x52, 0x0, r7, 0x80, &(0x7f00000005c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x0, 0x0, 0x1}) setns(r12, 0x10000000) 16.069072528s ago: executing program 3 (id=3063): unshare(0x2c000080) syz_clone(0x2140080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00'}, 0x18) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010d8044b00000000000001090224000100000000090400000103000000092105000001220500090581030002000007e97e6c0d00c355ffb673f43ba5e8f004b7552ec0b2f28ea74986152164174ba5f0d6a558726455d820f3b334ffef122bd0e55a8f47809ca48c6fd527d7f720425040bf45324465ae0990dc6de9da845ff01eeb58f52c42efb95ec6c012b41fc7b41a226558b8b7898bdd2cb8f5e9a597ed5ade58d3ad407c820269cd05d5994c767740e9e241efa3113d59baee"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000640), &(0x7f0000000580)=[0x0], 0x0, 0x78, &(0x7f0000000580), 0x0, 0x0, 0x0, &(0x7f0000000740), 0x8, 0x87, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x7, 0x99, &(0x7f0000000400)=""/153, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0xd, 0x9, 0x1}, 0x10, r4, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000900)=[{0x3, 0x2, 0xa, 0x2}, {0x2, 0x1, 0x8, 0x6}, {0x1, 0x5, 0x8, 0x1}, {0x0, 0x4, 0x3}], 0x10, 0x3f}, 0x94) accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)={'#! ', './file0'}, 0xb) 13.336643742s ago: executing program 6 (id=3067): pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x200, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x3134da121b5383f4, 0xffff}, {0xa, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b0568000800", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000"], 0x3}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r7, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x41}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) creat(0x0, 0x24) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043, r5}) semctl$IPC_INFO(0x0, 0x3, 0x3, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f00000000c0)={0x1, 0x5d5c, 0x9}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r9, 0x100300) 10.691964568s ago: executing program 3 (id=3068): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000280)=0x3f) write(0xffffffffffffffff, &(0x7f0000000000)="3c00000043001f001307f4f9002304000a04d65f080008", 0x17) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) syz_usbip_server_init(0x5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000500)={"a02200", 0x0, 0x6, 0x2, 0x0, 0x200, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b', '2\x00', "0200", "be4d22a4", ["c38600008000080000e6fc00", '1Lxt\x00\x00\x00\x00\x00 \x00', "2c09000000ffd8ffffff02ff"]}) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003140)=ANY=[], 0x18c0}}, 0x44041) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, 0x0, 0x4000836) gettid() ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f0000002080)=0x64, 0x21c) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x40040}, 0x40004) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 7.622602077s ago: executing program 8 (id=3071): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffe85, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x4) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='ubifs\x00', 0x2208004, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.532409193s ago: executing program 8 (id=3072): r0 = socket(0x10, 0x2, 0x6) close_range(r0, 0xffffffffffffffff, 0x6) 6.387649249s ago: executing program 8 (id=3073): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) sendto$inet(r4, 0x0, 0x0, 0x2004c7f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b03", 0x3b, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000000008d3fb93e80000000000000300000505000300060000000900010073797a310000000006000240910000001c000480080008400000000408000a40000000800800074000000008"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) setresuid(0xee01, 0xee00, 0x0) fchown(r0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r6, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 5.344919097s ago: executing program 8 (id=3074): r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042) writev(r0, &(0x7f0000000c40), 0x0) 5.24993368s ago: executing program 8 (id=3075): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x3b3803) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x108000) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, &(0x7f0000000980)={0x2020}, 0x2020) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x9) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000300)=0xa, 0x4) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3.956763128s ago: executing program 6 (id=3076): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000002c0), 0xc, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0cba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34201113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed00083fe5c5ca033dfce0a82575ef14eee686be0fc58bbf5993943aea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f61e00"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)={0x18, 0x0, {0x1, @remote, 'veth0_to_team\x00'}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000180)={0xcf4a, 0x4cc, 0x6, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 3.810482335s ago: executing program 3 (id=3077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.217332443s ago: executing program 3 (id=3078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x89b32000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 1.940802499s ago: executing program 6 (id=3079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff00000085"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='sys_exit\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r1, &(0x7f0000000080)='./mnt\x00', r1, &(0x7f0000000100)='./mnt\x00') 1.488340515s ago: executing program 6 (id=3080): r0 = syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r0, @ANYBLOB='\x00'/13], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) sync_file_range(r1, 0x0, 0x0, 0x0) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_io_uring_setup(0x286, &(0x7f0000000440)={0x0, 0xfad9, 0x400, 0x0, 0x0, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2) 1.251906742s ago: executing program 6 (id=3081): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2cc00000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffe85, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x4) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='ubifs\x00', 0x2208004, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000380)='\x00'/14, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.000582862s ago: executing program 3 (id=3082): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x40) openat$uinput(0xffffff9c, &(0x7f0000000180), 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) 17.869208ms ago: executing program 8 (id=3083): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='stat\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) sendto$inet(r4, 0x0, 0x0, 0x2004c7f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b03", 0x3b, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000000008d3fb93e80000000000000300000505000300060000000900010073797a310000000006000240910000001c000480080008400000000408000a40000000800800074000000008"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044) setresuid(0xee01, 0xee00, 0x0) fchown(r0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r6, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0) 0s ago: executing program 6 (id=3084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f0000000180)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56", 0x2) kernel console output (not intermixed with test programs): 1][ T6030] bridge_slave_0: left allmulticast mode [ 1186.973655][ T6030] bridge_slave_0: left promiscuous mode [ 1186.979529][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.027837][T15996] overlayfs: failed to clone upperpath [ 1187.395254][ T6040] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1187.488095][T11333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1187.506823][T11333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1187.523661][T11333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1187.543998][T11333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1187.571730][ T6040] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1187.581453][T11333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1187.600583][ T6040] usb 1-1: config 0 has no interface number 0 [ 1187.631642][ T6040] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1187.641238][ T6040] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.650392][ T6040] usb 1-1: Product: syz [ 1187.658104][ T6040] usb 1-1: Manufacturer: syz [ 1187.753492][ T6040] usb 1-1: SerialNumber: syz [ 1187.805895][ T6040] usb 1-1: config 0 descriptor?? [ 1188.143475][ T6040] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1188.157030][ T6040] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1188.168919][ T6040] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1188.177849][ T6040] usb 1-1: media controller created [ 1188.206342][ T6040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1188.428609][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1188.443510][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1188.454953][ T6030] bond0 (unregistering): Released all slaves [ 1188.518511][T15696] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.664487][ T6030] hsr_slave_0: left promiscuous mode [ 1188.671424][ T6030] hsr_slave_1: left promiscuous mode [ 1188.679794][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1188.688737][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.172293][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 1189.228958][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 1189.365937][ T6040] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1189.435616][ T6040] usb 1-1: USB disconnect, device number 24 [ 1189.744486][T14684] Bluetooth: hci3: command tx timeout [ 1190.233970][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.241209][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1190.334470][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1190.343651][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.350903][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1190.673242][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 1190.682845][ T24] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1190.691218][ T24] usb 1-1: config 0 has no interface number 0 [ 1190.700955][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1190.712623][ T24] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1190.742087][ T24] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1190.767650][ T24] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1190.789959][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1190.799937][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.880883][ T24] usb 1-1: config 0 descriptor?? [ 1190.915045][ T24] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1191.297956][T15306] usb 1-1: USB disconnect, device number 25 [ 1191.297974][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 1191.367698][T15306] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1191.367715][T16015] ldusb: No device or device unplugged -19 [ 1191.391069][T15723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1191.414252][T15696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1191.697546][T15723] 8021q: adding VLAN 0 to HW filter on device team0 [ 1191.827743][T14684] Bluetooth: hci3: command tx timeout [ 1191.879453][T16030] overlayfs: failed to clone upperpath [ 1192.064583][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.071786][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.160775][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.168014][ T9812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.231118][T16002] chnl_net:caif_netlink_parms(): no params data found [ 1193.766142][T15830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1193.902906][T14684] Bluetooth: hci3: command tx timeout [ 1193.953064][T15830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1194.107613][T15830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1194.554490][T15830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1194.764943][T16002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.772228][T16002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.792954][T16002] bridge_slave_0: entered allmulticast mode [ 1194.801094][T16002] bridge_slave_0: entered promiscuous mode [ 1194.873112][T16002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.883171][T16002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.890411][T16002] bridge_slave_1: entered allmulticast mode [ 1194.931921][T16002] bridge_slave_1: entered promiscuous mode [ 1195.364885][T16067] overlayfs: failed to clone upperpath [ 1196.463027][T14684] Bluetooth: hci3: command tx timeout [ 1197.070426][T15696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.101792][T16002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.246008][T16002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.310966][ T6030] bridge_slave_1: left allmulticast mode [ 1197.321595][ T6030] bridge_slave_1: left promiscuous mode [ 1197.331535][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.387439][ T6030] bridge_slave_0: left allmulticast mode [ 1197.402753][ T6030] bridge_slave_0: left promiscuous mode [ 1197.408597][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.943521][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.984656][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1200.012175][ T6030] bond0 (unregistering): Released all slaves [ 1200.133167][T15306] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1200.179830][T16002] team0: Port device team_slave_0 added [ 1200.211115][T16002] team0: Port device team_slave_1 added [ 1200.314321][T15306] usb 1-1: Using ep0 maxpacket: 8 [ 1200.323887][ T6030] hsr_slave_0: left promiscuous mode [ 1200.352492][T15306] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1200.360719][T15306] usb 1-1: config 0 has no interface number 0 [ 1200.368002][T15306] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1200.395124][T15306] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1200.395188][ T6030] hsr_slave_1: left promiscuous mode [ 1200.433110][T15306] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1200.434292][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1200.461944][T15306] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1200.475273][T15306] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1200.476088][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.505489][T15306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.531008][T15306] usb 1-1: config 0 descriptor?? [ 1200.553286][T15306] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1200.829711][T15306] usb 1-1: USB disconnect, device number 26 [ 1200.829852][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 1200.868497][T15306] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1200.868508][T16076] ldusb: No device or device unplugged -19 [ 1201.280062][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 1201.344419][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 1202.243949][T11333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1202.254572][T11333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1202.262710][T11333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1202.270743][T11333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1202.278716][T11333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1202.700326][T16002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.710145][T16002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.748049][T16002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1202.787742][T16002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1202.807182][T16002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1202.981933][T16002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.419825][T11333] Bluetooth: hci4: command tx timeout [ 1204.710233][T16002] hsr_slave_0: entered promiscuous mode [ 1204.744558][T16002] hsr_slave_1: entered promiscuous mode [ 1204.783422][T16002] debugfs: 'hsr0' already exists in 'hsr' [ 1204.789210][T16002] Cannot create hsr debugfs directory [ 1204.900727][T14684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1204.928386][T14684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1204.938689][T14684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1204.947182][T14684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1204.955402][T14684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1206.037443][T16115] overlayfs: failed to clone upperpath [ 1206.324113][T15830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.472599][T11333] Bluetooth: hci4: command tx timeout [ 1206.696958][T16087] chnl_net:caif_netlink_parms(): no params data found [ 1206.772207][T15830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.022784][T11333] Bluetooth: hci0: command tx timeout [ 1208.677338][T11333] Bluetooth: hci4: command tx timeout [ 1208.689148][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.696346][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.973949][T16087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.981151][T16087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.013000][T16087] bridge_slave_0: entered allmulticast mode [ 1209.021210][T16087] bridge_slave_0: entered promiscuous mode [ 1209.103220][T16106] chnl_net:caif_netlink_parms(): no params data found [ 1209.112589][T11333] Bluetooth: hci0: command tx timeout [ 1209.136903][T16087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.152989][T16087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.160291][T16087] bridge_slave_1: entered allmulticast mode [ 1209.183768][T16144] overlayfs: failed to resolve './file1/file0': -2 [ 1209.185046][T16087] bridge_slave_1: entered promiscuous mode [ 1209.253010][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.260201][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.315908][T16002] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1209.444220][T16087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.454629][T16002] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1209.575706][T16087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.604641][T16002] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1209.708693][T16002] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1209.778699][T16087] team0: Port device team_slave_0 added [ 1209.789738][T16087] team0: Port device team_slave_1 added [ 1209.885110][ T6030] bridge_slave_1: left allmulticast mode [ 1209.890811][ T6030] bridge_slave_1: left promiscuous mode [ 1209.898880][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.910118][ T6030] bridge_slave_0: left allmulticast mode [ 1209.916378][ T6030] bridge_slave_0: left promiscuous mode [ 1209.922151][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.702680][T11333] Bluetooth: hci4: command tx timeout [ 1211.193764][T11333] Bluetooth: hci0: command tx timeout [ 1211.236713][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1211.255981][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1211.281403][ T6030] bond0 (unregistering): Released all slaves [ 1211.302342][T16106] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.309631][T16106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.322753][T16106] bridge_slave_0: entered allmulticast mode [ 1211.331181][T16106] bridge_slave_0: entered promiscuous mode [ 1211.425043][T16106] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.434366][T16106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.441656][T16106] bridge_slave_1: entered allmulticast mode [ 1211.485093][T16106] bridge_slave_1: entered promiscuous mode [ 1211.504193][T16087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.511693][T16087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.548144][T16087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.633488][T16087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.640474][T16087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.721898][T16087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.813666][ T6030] hsr_slave_0: left promiscuous mode [ 1212.819750][ T6030] hsr_slave_1: left promiscuous mode [ 1212.825904][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1212.834270][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1213.322471][T11333] Bluetooth: hci0: command tx timeout [ 1214.606577][T16181] overlayfs: failed to resolve './file1/file0': -2 [ 1215.162987][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 1215.256376][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 1216.418789][T16197] netlink: 'syz.9.2427': attribute type 2 has an invalid length. [ 1216.480977][T16198] netlink: 'syz.9.2427': attribute type 2 has an invalid length. [ 1216.591554][T16193] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2425'. [ 1216.609870][T16197] !: entered promiscuous mode [ 1216.629957][T16106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1216.709235][T16198] !: left promiscuous mode [ 1216.990863][T16106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1217.393253][T16087] hsr_slave_0: entered promiscuous mode [ 1217.403960][T16087] hsr_slave_1: entered promiscuous mode [ 1217.414276][T16087] debugfs: 'hsr0' already exists in 'hsr' [ 1217.427121][T16087] Cannot create hsr debugfs directory [ 1217.620739][T16106] team0: Port device team_slave_0 added [ 1217.748858][T16106] team0: Port device team_slave_1 added [ 1217.920717][T16106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.939780][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.137144][T16106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1219.737441][T16106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1219.747666][T16106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1219.777607][T16106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.187353][T16106] hsr_slave_0: entered promiscuous mode [ 1220.249733][T16106] hsr_slave_1: entered promiscuous mode [ 1220.349314][T16106] debugfs: 'hsr0' already exists in 'hsr' [ 1220.362704][T16106] Cannot create hsr debugfs directory [ 1220.807167][T16002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.821032][T16002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.863088][T15830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1222.118930][ T6088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.126153][ T6088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.477124][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.484375][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.864524][ T6030] bridge_slave_1: left allmulticast mode [ 1223.870233][ T6030] bridge_slave_1: left promiscuous mode [ 1223.893228][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1223.904290][ T6030] bridge_slave_0: left allmulticast mode [ 1223.909983][ T6030] bridge_slave_0: left promiscuous mode [ 1223.932943][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.954662][T14684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1224.972701][T14684] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1224.981013][T14684] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1224.990248][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.990763][T14684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1225.010019][T14684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1225.043717][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1225.067278][ T6030] bond0 (unregistering): Released all slaves [ 1225.108809][T16087] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1225.187933][T16087] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1225.223736][T16087] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1226.094945][T16087] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1226.448380][ T6030] hsr_slave_0: left promiscuous mode [ 1226.468725][ T6030] hsr_slave_1: left promiscuous mode [ 1226.477560][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.527466][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1227.102481][T14684] Bluetooth: hci5: command tx timeout [ 1229.164265][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 1229.197274][T14684] Bluetooth: hci5: command tx timeout [ 1229.254683][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 1230.465926][T16358] netlink: 'syz.9.2455': attribute type 2 has an invalid length. [ 1230.537181][T16359] netlink: 'syz.9.2455': attribute type 2 has an invalid length. [ 1230.598330][T16358] !: entered promiscuous mode [ 1230.663201][T16002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1230.706492][T16359] !: left promiscuous mode [ 1231.282418][T14684] Bluetooth: hci5: command tx timeout [ 1232.026158][T16106] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1232.103595][T16106] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1232.269516][T16106] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1232.499995][T16087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.542186][T16087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.702879][T16106] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1233.124716][T16406] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2462'. [ 1233.150137][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.157326][ T9812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.182304][T16002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.232295][T16296] chnl_net:caif_netlink_parms(): no params data found [ 1233.349145][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.356559][ T9812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.365919][T14684] Bluetooth: hci5: command tx timeout [ 1235.187381][T16296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.240074][T16296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.252640][T16296] bridge_slave_0: entered allmulticast mode [ 1235.296619][T16296] bridge_slave_0: entered promiscuous mode [ 1235.614070][T16296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1235.645730][T16296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.684243][T16296] bridge_slave_1: entered allmulticast mode [ 1235.711552][T16296] bridge_slave_1: entered promiscuous mode [ 1236.039760][T16296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.298405][T16296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.578096][ T6030] bridge_slave_1: left allmulticast mode [ 1237.595236][ T6030] bridge_slave_1: left promiscuous mode [ 1237.607656][ T6030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.627251][ T6030] bridge_slave_0: left allmulticast mode [ 1237.652614][ T6030] bridge_slave_0: left promiscuous mode [ 1237.662782][ T6030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.318154][ T6030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1240.404256][ T6030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1240.472793][ T6030] bond0 (unregistering): Released all slaves [ 1240.581675][T16296] team0: Port device team_slave_0 added [ 1240.607265][T16296] team0: Port device team_slave_1 added [ 1240.896641][ T6030] hsr_slave_0: left promiscuous mode [ 1240.933738][ T6030] hsr_slave_1: left promiscuous mode [ 1240.940060][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.006505][ T6030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.492304][T16498] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2474'. [ 1243.825611][ T6030] team0 (unregistering): Port device team_slave_1 removed [ 1243.919974][ T6030] team0 (unregistering): Port device team_slave_0 removed [ 1244.650057][T16296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.683431][T16296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.792513][T16296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.845998][T16296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.870043][T16296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.941771][T16296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1245.149213][T16002] veth0_vlan: entered promiscuous mode [ 1245.309326][T16296] hsr_slave_0: entered promiscuous mode [ 1245.461776][T16296] hsr_slave_1: entered promiscuous mode [ 1245.757142][T16106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.911820][T16002] veth1_vlan: entered promiscuous mode [ 1246.029718][T16087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.835740][T16543] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2482'. [ 1247.147250][T16106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1247.483235][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.490483][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1247.594301][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.601531][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.047084][T11333] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1248.058080][T11333] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1248.067171][T11333] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1248.075439][T11333] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1248.083390][T11333] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1248.309744][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1248.316425][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.878307][T16087] veth0_vlan: entered promiscuous mode [ 1248.935423][T16087] veth1_vlan: entered promiscuous mode [ 1249.242027][T16585] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2487'. [ 1250.142741][T14684] Bluetooth: hci2: command tx timeout [ 1250.656459][T16296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1250.681971][T16106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.830643][T16296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1250.887480][T16296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1251.132814][T16296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1251.176569][T16087] veth0_macvtap: entered promiscuous mode [ 1251.221627][T16087] veth1_macvtap: entered promiscuous mode [ 1251.255693][T16564] chnl_net:caif_netlink_parms(): no params data found [ 1251.845198][T16087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.885222][T16606] loop0: detected capacity change from 0 to 32768 [ 1251.985816][T16606] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1252.118203][T16606] XFS (loop0): Ending clean mount [ 1252.134158][T16606] XFS (loop0): Quotacheck needed: Please wait. [ 1252.207810][T16606] XFS (loop0): Quotacheck: Done. [ 1252.220113][ T31] audit: type=1800 audit(1766979088.638:1249): pid=16606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2491" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 1252.242863][T14684] Bluetooth: hci2: command tx timeout [ 1252.288576][T16087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1252.621696][T16564] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.348222][T16564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.356587][T16564] bridge_slave_0: entered allmulticast mode [ 1253.365029][T16564] bridge_slave_0: entered promiscuous mode [ 1253.375933][ T6030] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.385964][ T6030] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.402566][ T9] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 1253.453859][T16564] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.461145][T16564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.496474][T16564] bridge_slave_1: entered allmulticast mode [ 1253.518935][T16564] bridge_slave_1: entered promiscuous mode [ 1253.545031][ T6030] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.612994][ T9] usb 1-1: device descriptor read/64, error -71 [ 1253.653446][ T6030] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1253.785333][T16564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.810906][T16106] veth0_vlan: entered promiscuous mode [ 1253.817262][T11778] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1253.826357][ T3462] bridge_slave_1: left allmulticast mode [ 1253.832026][ T3462] bridge_slave_1: left promiscuous mode [ 1253.839035][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.877119][ T3462] bridge_slave_0: left allmulticast mode [ 1253.885035][ T3462] bridge_slave_0: left promiscuous mode [ 1253.900552][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.312563][T14684] Bluetooth: hci2: command tx timeout [ 1255.609336][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.622008][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.632989][ T3462] bond0 (unregistering): Released all slaves [ 1255.652229][T16564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1256.019996][ T3462] hsr_slave_0: left promiscuous mode [ 1256.035024][ T3462] hsr_slave_1: left promiscuous mode [ 1256.051461][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.232453][T16680] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1257.962342][T14684] Bluetooth: hci2: command tx timeout [ 1258.021780][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1258.160832][ T3462] veth1_vlan: left promiscuous mode [ 1258.173923][ T3462] veth0_vlan: left promiscuous mode [ 1261.061755][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 1261.194820][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 1262.032257][T16714] loop0: detected capacity change from 0 to 32768 [ 1262.081185][T16714] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1262.247703][T16714] XFS (loop0): Ending clean mount [ 1262.266950][T16714] XFS (loop0): Quotacheck needed: Please wait. [ 1262.287768][T16106] veth1_vlan: entered promiscuous mode [ 1262.340034][T16564] team0: Port device team_slave_0 added [ 1262.373396][T16714] XFS (loop0): Quotacheck: Done. [ 1262.397245][T16564] team0: Port device team_slave_1 added [ 1262.435194][ T31] audit: type=1800 audit(1766979098.858:1250): pid=16714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2502" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 1262.680854][T16564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.706190][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.752802][T16564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.810804][T16564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.826739][T16564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.862803][ T6040] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 1262.908480][T16564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.024459][ T6040] usb 1-1: device descriptor read/64, error -71 [ 1263.057029][T16106] veth0_macvtap: entered promiscuous mode [ 1263.197697][T16296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1263.277920][ T6040] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1263.415324][T16744] overlayfs: failed to clone lowerpath [ 1263.426139][T16744] overlayfs: failed to clone upperpath [ 1263.435802][ T6040] usb 1-1: device descriptor read/64, error -71 [ 1263.498241][T16564] hsr_slave_0: entered promiscuous mode [ 1263.514813][T11333] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1263.519550][T16564] hsr_slave_1: entered promiscuous mode [ 1263.540544][T11333] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1263.552159][T11333] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1263.560603][T16564] debugfs: 'hsr0' already exists in 'hsr' [ 1263.568225][T11333] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1263.575913][ T6040] usb usb1-port1: attempt power cycle [ 1263.581534][T11333] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1263.610193][T16564] Cannot create hsr debugfs directory [ 1263.642729][T16106] veth1_macvtap: entered promiscuous mode [ 1263.786831][T16106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1263.817003][T16106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1264.076764][ T6040] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1264.237527][ T6040] usb 1-1: device descriptor read/8, error -71 [ 1264.242059][ T6030] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.274291][ T6030] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.421386][ T3462] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.502559][ T6040] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 1264.557467][T11778] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1264.745659][ T6040] usb 1-1: device not accepting address 32, error -71 [ 1264.792925][ T6040] usb usb1-port1: unable to enumerate USB device [ 1264.902538][ T6030] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1264.963699][ T6030] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.665659][T11333] Bluetooth: hci3: command tx timeout [ 1265.824979][T14684] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1265.834603][T14684] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1265.842429][T14684] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1265.850513][T14684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1265.858215][T14684] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1266.276580][ T3462] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.382083][T16783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2507'. [ 1266.884841][T16296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.182489][T14684] Bluetooth: hci3: command tx timeout [ 1268.188064][T14684] Bluetooth: hci4: command tx timeout [ 1268.615389][ T3462] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.685633][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.692841][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.938982][ T3462] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.662713][T16806] netlink: 300 bytes leftover after parsing attributes in process `syz.9.2517'. [ 1270.325528][T11333] Bluetooth: hci4: command tx timeout [ 1270.325560][T14684] Bluetooth: hci3: command tx timeout [ 1270.436347][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.443562][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.617514][T16800] loop0: detected capacity change from 0 to 32768 [ 1270.732953][T16800] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1270.941143][T16800] XFS (loop0): Ending clean mount [ 1270.968092][T16800] XFS (loop0): Quotacheck needed: Please wait. [ 1271.019573][T16800] XFS (loop0): Quotacheck: Done. [ 1271.062649][ T31] audit: type=1800 audit(1766979107.478:1251): pid=16800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2515" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 1271.521109][T16296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1271.522459][T12284] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 1271.585379][ T3462] bridge_slave_1: left allmulticast mode [ 1271.592560][ T3462] bridge_slave_1: left promiscuous mode [ 1271.598508][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.680983][ T3462] bridge_slave_0: left allmulticast mode [ 1271.688774][ T3462] bridge_slave_0: left promiscuous mode [ 1271.705778][T12284] usb 1-1: device descriptor read/64, error -71 [ 1271.722213][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1271.942611][T12284] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 1272.098473][T12284] usb 1-1: device descriptor read/64, error -71 [ 1272.212887][T12284] usb usb1-port1: attempt power cycle [ 1272.283272][T11778] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1272.382459][T14684] Bluetooth: hci4: command tx timeout [ 1272.396756][T11333] Bluetooth: hci3: command tx timeout [ 1272.550079][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1272.561910][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1272.574490][ T3462] bond0 (unregistering): Released all slaves [ 1273.088867][T16770] chnl_net:caif_netlink_parms(): no params data found [ 1273.236898][T16745] chnl_net:caif_netlink_parms(): no params data found [ 1274.176693][T16867] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2526'. [ 1275.424295][T11333] Bluetooth: hci4: command tx timeout [ 1275.546275][ T3462] hsr_slave_0: left promiscuous mode [ 1275.574237][ T3462] hsr_slave_1: left promiscuous mode [ 1275.585101][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.604524][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.623311][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.640888][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1275.693643][ T3462] veth1_macvtap: left promiscuous mode [ 1275.699236][ T3462] veth0_macvtap: left promiscuous mode [ 1275.712623][ T3462] veth1_vlan: left promiscuous mode [ 1275.717937][ T3462] veth0_vlan: left promiscuous mode [ 1277.868671][T16890] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2536'. [ 1277.933585][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 1278.027897][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 1278.539324][T16564] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1278.632330][T16564] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1278.732227][T16564] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1278.747235][T16564] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1278.780498][T16745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.793226][T16745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.810263][T16745] bridge_slave_0: entered allmulticast mode [ 1278.820766][T16745] bridge_slave_0: entered promiscuous mode [ 1278.905728][T16745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.919949][T16745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.931097][T16745] bridge_slave_1: entered allmulticast mode [ 1278.939660][T16745] bridge_slave_1: entered promiscuous mode [ 1278.957820][T16770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.965992][T16770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.973444][T16770] bridge_slave_0: entered allmulticast mode [ 1278.981408][T16770] bridge_slave_0: entered promiscuous mode [ 1279.067541][T16296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.088472][T16770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.096316][T16770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.104149][T16770] bridge_slave_1: entered allmulticast mode [ 1279.113836][T16770] bridge_slave_1: entered promiscuous mode [ 1279.149530][T16745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.287758][T16745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.354414][T16770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.388404][T16745] team0: Port device team_slave_0 added [ 1281.417829][T16770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.451973][T16745] team0: Port device team_slave_1 added [ 1281.621218][T16770] team0: Port device team_slave_0 added [ 1281.645784][T16745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.663130][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.722645][T16745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.749219][T16770] team0: Port device team_slave_1 added [ 1281.801079][T16745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.818564][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1281.872489][T16745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.008639][ T3462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.064439][T16770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.071427][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.117326][T16770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.162909][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2548'. [ 1282.209639][T16770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.228536][T16770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1282.271043][T16770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.334715][ T3462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.392313][T16928] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1282.429574][T16745] hsr_slave_0: entered promiscuous mode [ 1282.456806][T16745] hsr_slave_1: entered promiscuous mode [ 1282.471578][T16745] debugfs: 'hsr0' already exists in 'hsr' [ 1282.479942][T16745] Cannot create hsr debugfs directory [ 1282.565608][ T3462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.751175][T16770] hsr_slave_0: entered promiscuous mode [ 1282.771360][T16770] hsr_slave_1: entered promiscuous mode [ 1282.789209][T16770] debugfs: 'hsr0' already exists in 'hsr' [ 1282.803644][T16770] Cannot create hsr debugfs directory [ 1282.969994][ T3462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.082541][T16296] veth0_vlan: entered promiscuous mode [ 1284.303903][T16296] veth1_vlan: entered promiscuous mode [ 1284.595990][ T3462] bridge_slave_1: left allmulticast mode [ 1284.601684][ T3462] bridge_slave_1: left promiscuous mode [ 1284.612645][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.625857][ T3462] bridge_slave_0: left allmulticast mode [ 1284.635341][ T3462] bridge_slave_0: left promiscuous mode [ 1284.641103][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.208664][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.224028][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.235468][ T3462] bond0 (unregistering): Released all slaves [ 1285.342107][T16564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.432507][ T3462] hsr_slave_0: left promiscuous mode [ 1285.449689][ T3462] hsr_slave_1: left promiscuous mode [ 1285.477214][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.494156][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.514477][ T3462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.522116][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.567204][ T3462] veth1_macvtap: left promiscuous mode [ 1285.584275][ T3462] veth0_macvtap: left promiscuous mode [ 1285.592098][ T3462] veth1_vlan: left promiscuous mode [ 1285.600142][ T3462] veth0_vlan: left promiscuous mode [ 1286.058969][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 1286.108606][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 1286.517453][T14684] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1286.562537][T14684] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1286.625234][T14684] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1286.722467][T14684] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1286.768979][T14684] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1286.841618][T11333] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1286.858047][T11333] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1286.871932][T11333] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1286.925141][T11333] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1286.955224][T11333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1288.309543][T16564] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.388397][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.395889][T11257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.559896][T16564] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1288.592464][T16564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1288.697027][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.704214][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.029598][T11333] Bluetooth: hci0: command tx timeout [ 1290.060656][T16564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.102948][T11333] Bluetooth: hci0: command tx timeout [ 1291.327217][T16961] chnl_net:caif_netlink_parms(): no params data found [ 1291.966615][T16961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.991192][T16961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.029717][T16961] bridge_slave_0: entered allmulticast mode [ 1292.042536][T16961] bridge_slave_0: entered promiscuous mode [ 1292.200341][T16961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.208698][T16961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.216496][T16961] bridge_slave_1: entered allmulticast mode [ 1292.226764][T16961] bridge_slave_1: entered promiscuous mode [ 1292.254554][T16770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1292.542143][T17012] Bluetooth: MGMT ver 1.23 [ 1292.595520][T16770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1293.052919][T16770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1293.084905][T16770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1293.177952][T16961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.470699][T16961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.480436][T16745] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1294.045515][T16745] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1294.143506][T16745] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1294.182853][T16961] team0: Port device team_slave_0 added [ 1294.189150][T16745] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1294.336598][T16961] team0: Port device team_slave_1 added [ 1294.561991][T16564] veth0_vlan: entered promiscuous mode [ 1294.573633][T16961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.582182][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.609828][T16961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.647759][ T3462] bridge_slave_1: left allmulticast mode [ 1294.654597][ T3462] bridge_slave_1: left promiscuous mode [ 1294.660361][ T3462] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.677502][ T3462] bridge_slave_0: left allmulticast mode [ 1294.684140][ T3462] bridge_slave_0: left promiscuous mode [ 1294.702250][ T3462] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.331708][ T3462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1295.355450][ T3462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1295.445498][ T3462] bond0 (unregistering): Released all slaves [ 1295.493185][T16961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.500161][T16961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.550593][T16961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.676918][ T3462] hsr_slave_0: left promiscuous mode [ 1295.683330][ T3462] hsr_slave_1: left promiscuous mode [ 1295.689441][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1295.733738][ T3462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1295.757711][ T3462] veth1_vlan: left promiscuous mode [ 1295.766007][ T3462] veth0_vlan: left promiscuous mode [ 1296.288421][ T3462] team0 (unregistering): Port device team_slave_1 removed [ 1296.375111][ T3462] team0 (unregistering): Port device team_slave_0 removed [ 1296.747575][T16564] veth1_vlan: entered promiscuous mode [ 1298.185227][T16961] hsr_slave_0: entered promiscuous mode [ 1298.202929][T16961] hsr_slave_1: entered promiscuous mode [ 1298.798240][T16564] veth0_macvtap: entered promiscuous mode [ 1298.828891][T16564] veth1_macvtap: entered promiscuous mode [ 1298.983425][T16564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1299.066987][T16770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.088458][T16564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.177598][T15355] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.221532][T15355] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.240516][T15355] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.267139][T16745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.313573][T16745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.412705][T16745] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1299.450492][T16745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1299.503233][ T31] audit: type=1326 audit(1766979135.928:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.9.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893058f749 code=0x7ffc0000 [ 1299.529110][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.536258][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.564762][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.571968][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.572537][ T31] audit: type=1326 audit(1766979135.948:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.9.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893058f749 code=0x7ffc0000 [ 1299.631182][ T31] audit: type=1326 audit(1766979135.948:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.9.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f893058df90 code=0x7ffc0000 [ 1299.653811][T15355] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.665136][ T31] audit: type=1326 audit(1766979135.948:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.9.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893058f749 code=0x7ffc0000 [ 1299.704235][T16770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.729600][ T31] audit: type=1326 audit(1766979135.948:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17071 comm="syz.9.2586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893058f749 code=0x7ffc0000 [ 1299.813042][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.820223][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.848833][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.856084][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.991205][ T6434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.024642][ T6434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.176682][T16961] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1300.205983][T16961] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1300.238406][T16961] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1300.238475][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.271577][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.283075][T16961] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1300.329882][T16745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.781416][T16961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.848514][T17096] overlay: Unknown parameter 'smackfshat' [ 1300.927032][T16961] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.014564][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.021753][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.074768][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.081951][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1301.320524][T17106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2594'. [ 1301.391573][ T9] IPVS: starting estimator thread 0... [ 1302.241845][T16770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.273629][T17108] IPVS: using max 22 ests per chain, 52800 per kthread [ 1302.587236][T16745] veth0_vlan: entered promiscuous mode [ 1304.094894][T16770] veth0_vlan: entered promiscuous mode [ 1304.110025][T16770] veth1_vlan: entered promiscuous mode [ 1304.164850][T16745] veth1_vlan: entered promiscuous mode [ 1304.378517][T16770] veth0_macvtap: entered promiscuous mode [ 1304.442413][T16770] veth1_macvtap: entered promiscuous mode [ 1304.460445][T16745] veth0_macvtap: entered promiscuous mode [ 1304.507707][T16961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.560010][T16745] veth1_macvtap: entered promiscuous mode [ 1304.667878][T16770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.737601][T16770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.789054][T16745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1304.831030][ T6281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.907637][ T6281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1304.931840][T16745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1304.953070][ T6281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.044557][ T6281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.121962][ T6344] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1305.724761][T17142] overlayfs: overlapping lowerdir path [ 1306.361103][ T2983] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.491468][ T2983] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.525852][ T2983] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1306.600566][T16961] veth0_vlan: entered promiscuous mode [ 1306.797902][T16961] veth1_vlan: entered promiscuous mode [ 1307.043137][T15355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.080896][T15355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.262954][T16961] veth0_macvtap: entered promiscuous mode [ 1307.380132][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1307.437079][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1307.704307][T16961] veth1_macvtap: entered promiscuous mode [ 1308.233934][ T9812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.275607][ T9812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.330334][T16961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1308.407966][ T9812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1308.570713][T16961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1308.578048][ T9812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1308.719624][T15355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.467969][T17184] overlayfs: overlapping lowerdir path [ 1309.702219][T15355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.712956][ T6088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.721800][ T6088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.751694][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.758135][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.454378][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.494015][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.794551][ T6088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.848151][ T6088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.183669][T17232] overlayfs: overlapping lowerdir path [ 1312.257444][T17233] netlink: 'syz.6.2630': attribute type 13 has an invalid length. [ 1312.377340][T17233] gretap0: refused to change device tx_queue_len [ 1312.396347][T17233] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1313.164628][T17243] netlink: 300 bytes leftover after parsing attributes in process `syz.8.2633'. [ 1321.084905][ T31] audit: type=1326 audit(1766979156.268:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17285 comm="syz.0.2649" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d8f38f749 code=0x0 [ 1321.453405][T17296] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2652'. [ 1324.342892][T17324] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2654'. [ 1330.011648][T17361] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2667'. [ 1331.264752][T14684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1331.275223][T14684] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1331.361167][T14684] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1331.378030][T14684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1331.386847][T14684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1332.712874][ T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1333.504916][T14684] Bluetooth: hci5: command tx timeout [ 1333.793136][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.852486][ T24] usb 7-1: config 0 has no interfaces? [ 1333.885551][T17384] chnl_net:caif_netlink_parms(): no params data found [ 1333.890136][ T24] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1333.917446][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.990265][T17420] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2674'. [ 1335.941413][T14684] Bluetooth: hci5: command tx timeout [ 1336.042434][ T24] usb 7-1: Product: syz [ 1336.046655][ T24] usb 7-1: Manufacturer: syz [ 1336.051243][ T24] usb 7-1: SerialNumber: syz [ 1336.260095][ T24] usb 7-1: config 0 descriptor?? [ 1336.303002][ T24] usb 7-1: can't set config #0, error -71 [ 1336.393800][ T24] usb 7-1: USB disconnect, device number 4 [ 1336.878193][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.106010][T17384] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.150767][T17384] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.182976][T17384] bridge_slave_0: entered allmulticast mode [ 1337.224584][T17384] bridge_slave_0: entered promiscuous mode [ 1337.607041][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1337.806945][T17384] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.852741][T17448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2687'. [ 1337.862669][T17384] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.871336][T17384] bridge_slave_1: entered allmulticast mode [ 1337.947573][T17448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2687'. [ 1337.958809][T17384] bridge_slave_1: entered promiscuous mode [ 1337.982735][T14684] Bluetooth: hci5: command tx timeout [ 1338.310396][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.302740][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.035157][T17384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1340.158550][T14684] Bluetooth: hci5: command tx timeout [ 1340.941001][T17384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1341.603330][T17384] team0: Port device team_slave_0 added [ 1341.660967][T17384] team0: Port device team_slave_1 added [ 1341.806882][T17487] netlink: 'syz.8.2695': attribute type 83 has an invalid length. [ 1343.037990][T17384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.053466][T17491] 9pnet: Found fid 0 not clunked [ 1343.092763][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.343524][T17384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.576269][T17384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.647385][T17384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.782485][T17384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.857721][ T12] bridge_slave_1: left allmulticast mode [ 1343.866601][ T12] bridge_slave_1: left promiscuous mode [ 1343.872486][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.985826][ T12] bridge_slave_0: left allmulticast mode [ 1344.022843][ T12] bridge_slave_0: left promiscuous mode [ 1344.046461][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.582569][T15306] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1352.761922][T15306] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1353.092481][T15306] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1353.101423][T15306] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1353.133089][T15306] usb 9-1: string descriptor 0 read error: -71 [ 1353.139398][T15306] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1353.149697][T15306] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.185205][T15306] usb 9-1: can't set config #1, error -71 [ 1353.197775][T15306] usb 9-1: USB disconnect, device number 2 [ 1356.153228][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.204689][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.253226][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 1357.495146][ T12] bond0 (unregistering): Released all slaves [ 1357.956699][T11333] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1357.984693][T11333] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1357.992522][T11333] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1358.000518][T11333] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1358.008553][T11333] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1359.539048][ T12] bond1 (unregistering): Released all slaves [ 1360.075525][T11333] Bluetooth: hci1: command tx timeout [ 1360.928478][T17384] hsr_slave_0: entered promiscuous mode [ 1360.979187][T17384] hsr_slave_1: entered promiscuous mode [ 1361.034670][T17384] debugfs: 'hsr0' already exists in 'hsr' [ 1361.040425][T17384] Cannot create hsr debugfs directory [ 1362.166477][T11333] Bluetooth: hci1: command tx timeout [ 1362.357175][T17638] Invalid source name [ 1363.855242][T17652] netlink: 'syz.6.2736': attribute type 13 has an invalid length. [ 1364.272616][T11333] Bluetooth: hci1: command tx timeout [ 1364.829838][ T12] hsr_slave_0: left promiscuous mode [ 1364.852859][ T12] hsr_slave_1: left promiscuous mode [ 1364.866825][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.882197][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.911586][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.928680][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1366.756333][T14684] Bluetooth: hci1: command tx timeout [ 1366.842776][ T12] veth1_macvtap: left promiscuous mode [ 1366.849949][ T12] veth0_macvtap: left promiscuous mode [ 1366.855803][ T12] veth1_vlan: left promiscuous mode [ 1366.861221][ T12] veth0_vlan: left promiscuous mode [ 1368.448499][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1368.655736][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1371.296647][T17685] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2745'. [ 1372.568373][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1372.594401][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.192696][T17652] gretap0: refused to change device tx_queue_len [ 1373.222613][T17652] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1374.627708][T14684] Bluetooth: hci2: command 0x0406 tx timeout [ 1377.279754][ T31] audit: type=1326 audit(1766979212.418:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17716 comm="syz.0.2752" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d8f38f749 code=0x0 [ 1377.481239][T17600] chnl_net:caif_netlink_parms(): no params data found [ 1378.676528][T17731] netlink: 300 bytes leftover after parsing attributes in process `syz.8.2756'. [ 1380.478037][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1380.615323][T17600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1380.822755][T17600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1381.665715][T17600] bridge_slave_0: entered allmulticast mode [ 1381.697499][T17600] bridge_slave_0: entered promiscuous mode [ 1382.649525][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.730500][T17600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.775593][T17600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.802668][T17600] bridge_slave_1: entered allmulticast mode [ 1382.810660][T17600] bridge_slave_1: entered promiscuous mode [ 1383.079537][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1384.222108][T17384] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1384.346741][T17600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1384.410382][T11333] Bluetooth: hci7: unexpected cc 0x204b length: 9 > 3 [ 1384.418402][T11333] Bluetooth: hci7: unexpected event for opcode 0x204b [ 1386.060331][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1386.161108][T17600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.374617][T17600] team0: Port device team_slave_0 added [ 1386.415084][T17600] team0: Port device team_slave_1 added [ 1386.745396][T17600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.762707][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.853499][ T5894] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1386.871335][T17600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.974040][T17600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.001322][T17600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1387.073820][ T5894] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1387.092417][T17600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.103456][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.122043][ T5894] usb 1-1: Product: syz [ 1387.127367][T17384] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1387.132607][ T5894] usb 1-1: Manufacturer: syz [ 1387.148890][ T5894] usb 1-1: SerialNumber: syz [ 1387.212553][T17384] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1387.315468][T17384] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1387.666426][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1388.229264][ T12] bridge_slave_1: left allmulticast mode [ 1388.236063][ T12] bridge_slave_1: left promiscuous mode [ 1388.241915][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.250660][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1388.265187][ T12] bridge_slave_0: left allmulticast mode [ 1388.270883][ T12] bridge_slave_0: left promiscuous mode [ 1388.282629][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.625228][T11333] Bluetooth: hci3: command 0x0406 tx timeout [ 1389.230112][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1389.272845][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1389.303694][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1389.341036][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1389.385028][ T5894] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1389.422471][ T5894] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1389.425933][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1389.463135][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1389.478275][ T5894] usb 1-1: USB disconnect, device number 36 [ 1389.656348][ T12] bond0 (unregistering): Released all slaves [ 1390.438810][T17600] hsr_slave_0: entered promiscuous mode [ 1390.486090][T17600] hsr_slave_1: entered promiscuous mode [ 1390.513750][T17600] debugfs: 'hsr0' already exists in 'hsr' [ 1390.519556][T17600] Cannot create hsr debugfs directory [ 1391.609997][T17833] netlink: 252 bytes leftover after parsing attributes in process `syz.0.2773'. [ 1393.679171][T11333] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1393.693164][T11333] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1393.702291][T11333] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1393.713854][T11333] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1393.733067][T11333] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1394.991172][ T12] hsr_slave_0: left promiscuous mode [ 1395.034291][ T12] hsr_slave_1: left promiscuous mode [ 1395.050710][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1395.070034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1395.982552][T11333] Bluetooth: hci4: command tx timeout [ 1396.155120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1396.203520][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1396.382217][ T12] veth1_macvtap: left promiscuous mode [ 1396.450999][ T12] veth0_macvtap: left promiscuous mode [ 1396.477589][ T12] veth1_vlan: left promiscuous mode [ 1396.508008][ T12] veth0_vlan: left promiscuous mode [ 1398.122640][T11333] Bluetooth: hci4: command tx timeout [ 1398.744326][T17893] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2786'. [ 1400.742926][T11333] Bluetooth: hci4: command tx timeout [ 1401.483450][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1401.492749][T17571] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1401.545710][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1401.647222][T17571] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1401.674649][T17571] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1401.695804][T17571] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1401.705355][T17571] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1401.729200][T17571] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1401.755673][T17571] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1401.780581][T17571] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1401.791669][T17571] usb 9-1: Product: syz [ 1401.797470][T17571] usb 9-1: Manufacturer: syz [ 1401.855808][T17571] cdc_wdm 9-1:1.0: skipping garbage [ 1401.861051][T17571] cdc_wdm 9-1:1.0: skipping garbage [ 1401.881278][T17571] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1401.890095][T17571] cdc_wdm 9-1:1.0: Unknown control protocol [ 1402.822538][T11333] Bluetooth: hci4: command tx timeout [ 1403.021762][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2792'. [ 1403.041446][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -EPIPE [ 1405.631592][T12548] usb 9-1: USB disconnect, device number 3 [ 1406.919586][ T31] audit: type=1326 audit(1766979243.338:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1407.017154][ T31] audit: type=1326 audit(1766979243.338:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1407.098719][ T31] audit: type=1326 audit(1766979243.338:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1407.352472][ T31] audit: type=1326 audit(1766979243.338:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1407.602749][ T31] audit: type=1326 audit(1766979243.338:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1407.687110][ T31] audit: type=1326 audit(1766979243.338:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1407.823929][ T31] audit: type=1326 audit(1766979243.338:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1408.001335][ T31] audit: type=1326 audit(1766979243.338:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1408.180589][ T31] audit: type=1326 audit(1766979243.338:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1408.294103][ T31] audit: type=1326 audit(1766979243.618:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17937 comm="syz.0.2797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d8f38f749 code=0x7ffc0000 [ 1410.150004][T17853] chnl_net:caif_netlink_parms(): no params data found [ 1410.218418][T17600] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1410.486409][T17600] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1411.794127][T17600] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1412.146185][T17600] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1415.206423][T17853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.529635][T17853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.662767][T17853] bridge_slave_0: entered allmulticast mode [ 1415.670761][T17853] bridge_slave_0: entered promiscuous mode [ 1415.761513][T17853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.799370][T17853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.822689][T17853] bridge_slave_1: entered allmulticast mode [ 1415.866014][T17853] bridge_slave_1: entered promiscuous mode [ 1417.476762][T17853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1417.564866][T17853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.001864][ T12] bridge_slave_1: left allmulticast mode [ 1418.011093][ T12] bridge_slave_1: left promiscuous mode [ 1418.040801][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.116734][ T12] bridge_slave_0: left allmulticast mode [ 1418.126292][ T12] bridge_slave_0: left promiscuous mode [ 1418.163917][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.796731][T18047] netlink: 300 bytes leftover after parsing attributes in process `syz.8.2817'. [ 1420.126256][T14684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1420.153221][T14684] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1420.173395][T14684] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1420.181623][T14684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1420.197496][T14684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1420.669890][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1420.782995][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1420.874231][ T12] bond0 (unregistering): Released all slaves [ 1420.965416][T17853] team0: Port device team_slave_0 added [ 1421.177402][T17853] team0: Port device team_slave_1 added [ 1421.230585][ T12] hsr_slave_0: left promiscuous mode [ 1421.249570][ T12] hsr_slave_1: left promiscuous mode [ 1421.277627][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.294683][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1422.123378][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1422.224220][T14684] Bluetooth: hci5: command tx timeout [ 1422.381281][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1423.026079][T18073] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2818'. [ 1423.167618][T18075] netlink: 'syz.3.2825': attribute type 2 has an invalid length. [ 1423.341169][T18075] !: entered promiscuous mode [ 1423.357831][T18078] netlink: 'syz.3.2825': attribute type 2 has an invalid length. [ 1423.421995][T17853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.456560][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.490515][T17853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.503488][T17853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.510425][T17853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1423.536816][T17853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.267430][T18078] !: left promiscuous mode [ 1424.302934][T14684] Bluetooth: hci5: command tx timeout [ 1424.876328][T18086] netlink: 300 bytes leftover after parsing attributes in process `syz.8.2828'. [ 1426.384529][T11333] Bluetooth: hci5: command tx timeout [ 1426.567150][T17853] hsr_slave_0: entered promiscuous mode [ 1426.614510][T17853] hsr_slave_1: entered promiscuous mode [ 1426.729597][T17853] debugfs: 'hsr0' already exists in 'hsr' [ 1426.885474][T17853] Cannot create hsr debugfs directory [ 1428.463155][T11333] Bluetooth: hci5: command tx timeout [ 1430.983554][T18049] chnl_net:caif_netlink_parms(): no params data found [ 1431.116668][ T12] bridge_slave_1: left allmulticast mode [ 1431.122344][ T12] bridge_slave_1: left promiscuous mode [ 1431.183434][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.232303][ T12] bridge_slave_0: left allmulticast mode [ 1431.262729][ T12] bridge_slave_0: left promiscuous mode [ 1431.268541][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.852095][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1431.889425][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1431.926908][ T12] bond0 (unregistering): Released all slaves [ 1432.164702][ T12] hsr_slave_0: left promiscuous mode [ 1432.190525][ T12] hsr_slave_1: left promiscuous mode [ 1432.211511][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1432.257461][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1432.649878][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.656765][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.346439][T18135] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2840'. [ 1434.711905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1434.805683][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1434.983083][T17571] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 1435.154745][T17571] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 1435.172505][T17571] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 1435.190857][T17571] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1435.211102][T17571] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1435.243864][T17571] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1435.262571][T17571] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F is Bulk; changing to Interrupt [ 1435.293749][T17571] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1435.327148][T17571] usb 9-1: string descriptor 0 read error: -22 [ 1435.335246][T17571] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1436.010991][T17853] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1436.098397][T17571] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.109508][T17571] usb 9-1: config 0 descriptor?? [ 1436.116373][T17853] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1436.116702][T18139] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1436.153724][T17571] hub 9-1:0.0: bad descriptor, ignoring hub [ 1436.159654][T17571] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1436.215704][T17571] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input7 [ 1436.275440][T17853] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1438.561223][ C0] usb_acecad 9-1:0.0: can't resubmit intr, dummy_hcd.8-1/input0, status -1 [ 1438.654283][ T5999] usb 9-1: USB disconnect, device number 4 [ 1438.660187][ C1] usb_acecad 9-1:0.0: can't resubmit intr, dummy_hcd.8-1/input0, status -19 [ 1438.767408][T17853] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1438.846609][T18049] bridge0: port 1(bridge_slave_0) entered blocking state [ 1438.867231][T18049] bridge0: port 1(bridge_slave_0) entered disabled state [ 1438.891833][T18049] bridge_slave_0: entered allmulticast mode [ 1438.922057][T18049] bridge_slave_0: entered promiscuous mode [ 1438.944411][T18049] bridge0: port 2(bridge_slave_1) entered blocking state [ 1438.951554][T18049] bridge0: port 2(bridge_slave_1) entered disabled state [ 1438.958956][T18159] netlink: 'syz.3.2842': attribute type 2 has an invalid length. [ 1439.033014][T18049] bridge_slave_1: entered allmulticast mode [ 1439.227016][T18049] bridge_slave_1: entered promiscuous mode [ 1439.233481][T18161] netlink: 'syz.3.2842': attribute type 2 has an invalid length. [ 1439.274058][T18159] !: entered promiscuous mode [ 1439.326484][T18161] !: left promiscuous mode [ 1439.417688][T18049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1439.472854][T18049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1439.715153][T18049] team0: Port device team_slave_0 added [ 1439.728754][T18049] team0: Port device team_slave_1 added [ 1440.552995][T18049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1440.553023][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.553068][T18049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1440.637107][T18049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1440.637135][T18049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1440.637184][T18049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1440.813405][T18049] hsr_slave_0: entered promiscuous mode [ 1440.814582][T18049] hsr_slave_1: entered promiscuous mode [ 1440.815410][T18049] debugfs: 'hsr0' already exists in 'hsr' [ 1440.815440][T18049] Cannot create hsr debugfs directory [ 1441.294937][T17853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1441.450297][T17853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1441.643348][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.650572][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.749425][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.756591][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.468831][T18049] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1443.507086][T18049] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1443.537506][T18049] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1445.407100][T18049] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1445.686641][T17853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1446.710413][T18049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.281246][T18049] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.314832][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.322006][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.430815][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.438015][ T6281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1447.611447][T18049] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1447.644356][T18049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1448.341529][T17853] veth0_vlan: entered promiscuous mode [ 1448.400693][T17853] veth1_vlan: entered promiscuous mode [ 1448.531905][T17853] veth0_macvtap: entered promiscuous mode [ 1448.571730][T17853] veth1_macvtap: entered promiscuous mode [ 1448.619480][T17853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.668826][T17853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.757325][ T6344] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.796095][ T6344] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.917200][ T6344] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.024945][ T6344] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.204884][T18247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2866'. [ 1449.264512][T18049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.421891][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.484744][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.401162][ T6344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.434361][ T6344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.845906][T18272] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 1451.852477][T18272] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1451.874816][T18275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2870'. [ 1451.894199][T18272] vhci_hcd vhci_hcd.0: Device attached [ 1452.232680][ T9] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 1452.787325][T18273] vhci_hcd: connection reset by peer [ 1453.043298][ T6367] vhci_hcd vhci_hcd.0: stop threads [ 1453.150480][ T6367] vhci_hcd vhci_hcd.0: release socket [ 1453.303683][ T6367] vhci_hcd vhci_hcd.0: disconnect device [ 1456.065809][T14684] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1456.084061][T14684] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1456.096793][T14684] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1456.106385][T14684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1456.107838][T18049] veth0_vlan: entered promiscuous mode [ 1456.129716][T14684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1456.306440][T18049] veth1_vlan: entered promiscuous mode [ 1456.560694][T18049] veth0_macvtap: entered promiscuous mode [ 1456.642194][T18049] veth1_macvtap: entered promiscuous mode [ 1456.831751][T18049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1456.962909][T18049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.001014][ T6434] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.031607][ T6434] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.085273][ T6434] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.288941][ C1] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 1458.932451][T11333] Bluetooth: hci1: command tx timeout [ 1458.982593][ T9] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1459.101745][ T6434] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.481458][T18290] chnl_net:caif_netlink_parms(): no params data found [ 1461.343813][T11333] Bluetooth: hci1: command tx timeout [ 1461.800064][ T3555] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.906485][T18324] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1462.008264][T18324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.018227][T18324] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.147485][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1462.199040][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1462.246515][ T3555] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.375994][T18336] netlink: 'syz.3.2873': attribute type 13 has an invalid length. [ 1462.587928][T18341] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2878'. [ 1462.606751][T18336] gretap0: refused to change device tx_queue_len [ 1462.623262][T18336] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1462.968014][ T3555] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.434343][T11333] Bluetooth: hci1: command tx timeout [ 1463.745730][T18290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.812650][T18290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.832955][T18290] bridge_slave_0: entered allmulticast mode [ 1463.840971][T18290] bridge_slave_0: entered promiscuous mode [ 1465.851032][T11333] Bluetooth: hci1: command tx timeout [ 1465.949646][ T3555] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1466.099334][T18290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.120485][T18290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.139333][T18290] bridge_slave_1: entered allmulticast mode [ 1466.164555][T18290] bridge_slave_1: entered promiscuous mode [ 1466.185613][T17687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1466.195032][T17687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1466.425315][T18373] afs: Bad value for 'flock' [ 1466.484242][T18290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.537671][T18290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.290340][ T3555] bridge_slave_1: left allmulticast mode [ 1469.298040][ T3555] bridge_slave_1: left promiscuous mode [ 1469.326064][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.599941][ T3555] bridge_slave_0: left allmulticast mode [ 1469.621475][ T3555] bridge_slave_0: left promiscuous mode [ 1469.652758][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1470.624898][T18404] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2895'. [ 1472.645642][T18412] netlink: 'syz.8.2896': attribute type 13 has an invalid length. [ 1474.373433][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1474.399397][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1474.417594][ T3555] bond0 (unregistering): Released all slaves [ 1474.480350][T18290] team0: Port device team_slave_0 added [ 1474.501033][T18290] team0: Port device team_slave_1 added [ 1474.524649][T15292] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1474.625219][T18412] gretap0: refused to change device tx_queue_len [ 1474.631603][T18412] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1474.722757][T15292] usb 4-1: Using ep0 maxpacket: 16 [ 1474.735210][T15292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.789215][T15292] usb 4-1: New USB device found, idVendor=04d8, idProduct=004b, bcdDevice= 0.00 [ 1474.829605][T15292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.355936][T15292] usb 4-1: config 0 descriptor?? [ 1475.947621][T18454] overlayfs: missing 'lowerdir' [ 1475.963714][T18290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.033441][T15292] usbhid 4-1:0.0: can't add hid device: -71 [ 1477.039484][T15292] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1477.060062][T18290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.115703][T15292] usb 4-1: USB disconnect, device number 2 [ 1477.192484][T18290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.300747][T18463] binder: 18462:18463 ioctl c0306201 0 returned -14 [ 1480.514450][T18290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1480.548867][T18290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.871974][T18290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1480.956442][T18483] qrtr: Invalid version 0 [ 1483.155675][ T3555] hsr_slave_0: left promiscuous mode [ 1483.157860][ T3555] hsr_slave_1: left promiscuous mode [ 1483.161932][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1483.161964][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.175968][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1483.176003][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.208124][T18490] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2914'. [ 1483.257151][ T3555] veth1_macvtap: left promiscuous mode [ 1483.257252][ T3555] veth0_macvtap: left promiscuous mode [ 1483.257462][ T3555] veth1_vlan: left promiscuous mode [ 1483.257609][ T3555] veth0_vlan: left promiscuous mode [ 1485.610912][T18512] overlayfs: missing 'lowerdir' [ 1486.169617][T18525] afs: Bad value for 'flock' [ 1487.245922][T18527] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2923'. [ 1488.799728][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2927'. [ 1489.887529][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1489.925344][T18051] udevd[18051]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1491.192736][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 1492.517417][T18558] 9pnet_virtio: no channels available for device syz [ 1493.472062][T18567] overlayfs: missing 'lowerdir' [ 1494.426458][T18576] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2936'. [ 1495.679766][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1495.689414][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1496.162194][T18290] hsr_slave_0: entered promiscuous mode [ 1498.139409][T18290] hsr_slave_1: entered promiscuous mode [ 1498.934166][T18290] debugfs: 'hsr0' already exists in 'hsr' [ 1498.939957][T18290] Cannot create hsr debugfs directory [ 1499.623008][T18608] overlayfs: missing 'lowerdir' [ 1500.092265][T18620] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2948'. [ 1500.856771][T18626] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2950'. [ 1504.170741][T18658] overlayfs: missing 'lowerdir' [ 1504.324283][T18290] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1504.367588][T18290] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1504.426357][T18290] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1504.474207][T18290] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1504.522604][T18640] loop6: detected capacity change from 0 to 32768 [ 1504.580668][T18640] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1504.765917][T18640] XFS (loop6): Ending clean mount [ 1504.815283][T18640] XFS (loop6): Quotacheck needed: Please wait. [ 1504.919085][T18640] XFS (loop6): Quotacheck: Done. [ 1504.956057][T18290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1504.998786][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 1504.998810][ T31] audit: type=1800 audit(1766979341.418:1283): pid=18640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2954" name="file1" dev="loop6" ino=9286 res=0 errno=0 [ 1505.033775][T18290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1505.118163][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1505.125422][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1505.254414][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1505.261591][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.472513][T12284] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1506.046368][T18698] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2964'. [ 1507.734973][T16564] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1509.512503][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1509.738160][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1509.788797][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.849526][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1509.858925][T18290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1509.921684][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1509.960008][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.981459][ T9] usb 9-1: Product: syz [ 1510.064794][ T9] usb 9-1: Manufacturer: syz [ 1510.179849][ T9] usb 9-1: SerialNumber: syz [ 1510.636549][ T9] usb 9-1: 0:2 : does not exist [ 1510.764437][ T9] usb 9-1: USB disconnect, device number 5 [ 1510.957468][T18051] udevd[18051]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1511.177908][T18740] overlayfs: missing 'lowerdir' [ 1511.448187][T11333] Bluetooth: hci5: link tx timeout [ 1511.454589][T11333] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 1511.975320][T18290] veth0_vlan: entered promiscuous mode [ 1512.075611][T18290] veth1_vlan: entered promiscuous mode [ 1512.190544][T18290] veth0_macvtap: entered promiscuous mode [ 1512.220401][T18290] veth1_macvtap: entered promiscuous mode [ 1512.373705][T18290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1512.398930][T18290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1512.433374][T15354] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.510082][T15354] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.571789][T15354] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1512.602860][T15354] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.503103][T14684] Bluetooth: hci5: command 0x0406 tx timeout [ 1515.856255][T14684] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1515.885980][T14684] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1515.902852][T14684] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1515.933328][T14684] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1515.943191][T14684] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1518.882804][T11333] Bluetooth: hci4: command tx timeout [ 1521.022505][T11333] Bluetooth: hci4: command tx timeout [ 1521.823865][T18812] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1521.871151][T18812] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1521.933937][ T5999] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1522.286514][T14684] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1522.298065][T14684] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1522.313995][T14684] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1522.322234][T14684] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1522.322698][T18818] afs: Bad value for 'flock' [ 1522.343077][T14684] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1523.112525][T11333] Bluetooth: hci4: command tx timeout [ 1523.646220][ T3555] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1524.383069][T11333] Bluetooth: hci1: command tx timeout [ 1525.183054][T11333] Bluetooth: hci4: command tx timeout [ 1526.462800][T11333] Bluetooth: hci1: command tx timeout [ 1526.511332][ T3555] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.189371][T11333] Bluetooth: hci1: command tx timeout [ 1529.375036][T18866] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1529.442600][T18866] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1529.467910][ T3555] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1529.554026][T18781] chnl_net:caif_netlink_parms(): no params data found [ 1529.856456][ T3555] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1531.045123][T18781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1531.064019][T18781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1531.071530][T18781] bridge_slave_0: entered allmulticast mode [ 1531.103409][T18781] bridge_slave_0: entered promiscuous mode [ 1531.244528][T18781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1531.251712][T18781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1531.273721][T11333] Bluetooth: hci1: command tx timeout [ 1531.292802][T18781] bridge_slave_1: entered allmulticast mode [ 1531.393564][T18781] bridge_slave_1: entered promiscuous mode [ 1531.826256][T18781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1531.874111][T18815] chnl_net:caif_netlink_parms(): no params data found [ 1531.925214][T18781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1531.983258][ T3555] bridge_slave_1: left allmulticast mode [ 1531.993178][ T3555] bridge_slave_1: left promiscuous mode [ 1531.999041][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1532.083657][ T3555] bridge_slave_0: left allmulticast mode [ 1532.120417][ T3555] bridge_slave_0: left promiscuous mode [ 1532.138400][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.975445][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1536.286467][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1536.300298][ T3555] bond0 (unregistering): Released all slaves [ 1537.308136][T18923] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1537.317387][T18923] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1539.135281][T18781] team0: Port device team_slave_0 added [ 1539.313765][T14684] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1539.325395][T14684] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1539.334318][T14684] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1539.342496][T14684] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1539.350303][T14684] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1539.415799][ T3555] hsr_slave_0: left promiscuous mode [ 1539.478298][ T3555] hsr_slave_1: left promiscuous mode [ 1539.515062][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1539.532488][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.583678][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.591092][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.726849][ T3555] veth1_macvtap: left promiscuous mode [ 1539.754456][ T3555] veth0_macvtap: left promiscuous mode [ 1539.760117][ T3555] veth1_vlan: left promiscuous mode [ 1539.782900][ T3555] veth0_vlan: left promiscuous mode [ 1540.481185][T18932] loop3: detected capacity change from 0 to 32768 [ 1540.563964][T18932] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1540.780687][T18932] XFS (loop3): Ending clean mount [ 1540.817834][T18932] XFS (loop3): Quotacheck needed: Please wait. [ 1540.903881][T18932] XFS (loop3): Quotacheck: Done. [ 1540.964670][ T31] audit: type=1800 audit(1766979377.388:1284): pid=18932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3011" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 1541.432577][T12284] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1541.433988][T14684] Bluetooth: hci5: command tx timeout [ 1541.999134][T18945] XFS (loop3): User initiated shutdown received. [ 1542.015348][T18945] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x67/0x190 (fs/xfs/xfs_fsops.c:472). Shutting down filesystem. [ 1542.057334][T18945] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 1542.164682][T12284] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1542.215828][T12284] usb 4-1: no configurations [ 1542.241061][T12284] usb 4-1: can't read configurations, error -22 [ 1542.268230][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1542.443727][ T5999] kernel read not supported for file /258/net/arp (pid: 5999 comm: kworker/1:8) [ 1542.506478][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 1542.813306][T16961] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1543.502829][T14684] Bluetooth: hci5: command tx timeout [ 1543.603855][T18962] binder: 18961:18962 ioctl c0306201 200000000680 returned -14 [ 1543.976092][T18781] team0: Port device team_slave_1 added [ 1545.349149][T18969] netlink: 'syz.3.3019': attribute type 2 has an invalid length. [ 1545.409094][T18781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1545.421965][T18972] netlink: 'syz.3.3019': attribute type 2 has an invalid length. [ 1545.462664][T18781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.542871][T18781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1545.582583][T14684] Bluetooth: hci5: command tx timeout [ 1545.591615][T18969] !: entered promiscuous mode [ 1545.675505][T18781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1545.688933][T18781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1545.770493][T18781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1545.782967][T18972] !: left promiscuous mode [ 1547.434420][T18981] autofs: Unknown parameter '0x0000000000000000' [ 1547.483485][T18815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.492647][T18815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1547.532741][T18815] bridge_slave_0: entered allmulticast mode [ 1547.552485][T18815] bridge_slave_0: entered promiscuous mode [ 1547.576307][T18815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.595231][T18815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.615579][T18815] bridge_slave_1: entered allmulticast mode [ 1547.637205][T18815] bridge_slave_1: entered promiscuous mode [ 1547.662516][T14684] Bluetooth: hci5: command tx timeout [ 1547.827686][T18781] hsr_slave_0: entered promiscuous mode [ 1547.846330][T18781] hsr_slave_1: entered promiscuous mode [ 1547.876780][T18781] debugfs: 'hsr0' already exists in 'hsr' [ 1547.895893][T18781] Cannot create hsr debugfs directory [ 1548.004469][T18987] afs: Bad value for 'flock' [ 1548.017299][T18815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1548.076637][T18815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.416084][T18815] team0: Port device team_slave_0 added [ 1549.571951][ T3555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.705745][T18815] team0: Port device team_slave_1 added [ 1549.979300][ T3555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.102308][T19014] autofs: Unknown parameter '0x0000000000000000' [ 1550.438873][T18815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1550.471596][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1550.528564][T18815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.170826][ T3555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.241631][T18929] chnl_net:caif_netlink_parms(): no params data found [ 1552.260757][T18815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.286823][T18815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.362534][T18815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.507686][ T3555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1552.911649][T18815] hsr_slave_0: entered promiscuous mode [ 1552.940347][T18815] hsr_slave_1: entered promiscuous mode [ 1552.975679][T18815] debugfs: 'hsr0' already exists in 'hsr' [ 1553.005119][T18815] Cannot create hsr debugfs directory [ 1553.302973][T18929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.322175][T18929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.343050][T18929] bridge_slave_0: entered allmulticast mode [ 1553.351107][T18929] bridge_slave_0: entered promiscuous mode [ 1553.557537][T18929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.594700][T18929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.602031][T18929] bridge_slave_1: entered allmulticast mode [ 1553.626440][T18929] bridge_slave_1: entered promiscuous mode [ 1554.091806][ T3555] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.168356][T18929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.272912][T18929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1554.344605][ T3555] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.881351][ T3555] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1554.992490][T19071] 9pnet_virtio: no channels available for device syz [ 1555.507682][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.536565][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.712148][T19074] afs: Bad value for 'flock' [ 1555.820989][T18929] team0: Port device team_slave_0 added [ 1556.349626][T19084] autofs: Unknown parameter '0x0000000000000000' [ 1556.546843][T18929] team0: Port device team_slave_1 added [ 1556.713879][ T3555] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.073070][T18781] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1557.236968][T18929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1557.259797][T18929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.386989][T18929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1557.483028][T18781] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1557.534957][T18929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1557.564702][T18929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1557.606372][T18929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1557.635578][T18781] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1559.228271][T18781] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1559.932856][T18929] hsr_slave_0: entered promiscuous mode [ 1560.073869][T18929] hsr_slave_1: entered promiscuous mode [ 1560.104113][T18929] debugfs: 'hsr0' already exists in 'hsr' [ 1560.109887][T18929] Cannot create hsr debugfs directory [ 1561.279263][ T3555] bridge_slave_1: left allmulticast mode [ 1561.316435][ T3555] bridge_slave_1: left promiscuous mode [ 1561.324725][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.430812][ T3555] bridge_slave_0: left allmulticast mode [ 1561.436872][ T3555] bridge_slave_0: left promiscuous mode [ 1561.472724][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.487647][ T3555] bridge_slave_1: left allmulticast mode [ 1561.509595][ T3555] bridge_slave_1: left promiscuous mode [ 1561.523996][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.553241][ T3555] bridge_slave_0: left allmulticast mode [ 1561.562511][ T3555] bridge_slave_0: left promiscuous mode [ 1561.592771][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1562.539603][T19139] Invalid source name [ 1563.374190][T19146] 9pnet_virtio: no channels available for device syz [ 1564.008079][T19148] autofs: Unknown parameter '0x0000000000000000' [ 1565.048463][T19155] netlink: 'syz.3.3054': attribute type 30 has an invalid length. [ 1565.118320][T19156] 9pnet_virtio: no channels available for device syz [ 1568.621655][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1568.639427][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1568.657348][ T3555] bond0 (unregistering): Released all slaves [ 1569.346418][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1569.359038][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1569.371341][ T3555] bond0 (unregistering): Released all slaves [ 1570.435981][T19182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'. [ 1570.834849][T19192] Invalid source name [ 1572.205709][ T3555] hsr_slave_0: left promiscuous mode [ 1572.219171][ T3555] hsr_slave_1: left promiscuous mode [ 1572.241512][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.268090][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.290228][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.301796][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.345225][ T3555] hsr_slave_0: left promiscuous mode [ 1572.369000][ T3555] hsr_slave_1: left promiscuous mode [ 1572.377323][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.385693][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.416267][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.432039][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.723686][ T3555] veth1_macvtap: left promiscuous mode [ 1572.733950][ T3555] veth0_macvtap: left promiscuous mode [ 1572.743562][ T3555] veth1_vlan: left promiscuous mode [ 1572.748897][ T3555] veth0_vlan: left promiscuous mode [ 1572.760096][T19215] autofs: Unknown parameter '0x0000000000000000' [ 1572.802606][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1572.830706][ T3555] veth1_macvtap: left promiscuous mode [ 1572.882645][ T3555] veth0_macvtap: left promiscuous mode [ 1572.892276][ T3555] veth1_vlan: left promiscuous mode [ 1572.917911][ T3555] veth0_vlan: left promiscuous mode [ 1572.982815][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1572.997126][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.023170][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=004b, bcdDevice= 0.00 [ 1573.040075][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1573.070774][ T9] usb 4-1: config 0 descriptor?? [ 1574.553455][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1574.602616][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1574.634328][ T9] usb 4-1: USB disconnect, device number 5 [ 1574.890574][T19225] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3066'. [ 1574.926745][ T9] IPVS: starting estimator thread 0... [ 1575.022600][T19226] IPVS: using max 23 ests per chain, 55200 per kthread [ 1575.565507][T19231] faux_driver vkms: [drm] Unknown color mode 9; guessing buffer size. [ 1577.583275][T11333] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1577.595173][T11333] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1577.603593][T11333] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1577.611653][T11333] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1577.636592][T11333] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1577.913715][T19236] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1577.920282][T19236] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1577.942525][T19236] vhci_hcd vhci_hcd.0: Device attached [ 1578.941599][T19237] vhci_hcd: connection closed [ 1578.942311][ T6434] vhci_hcd vhci_hcd.3: stop threads [ 1578.963235][ T6434] vhci_hcd vhci_hcd.3: release socket [ 1579.188813][T19236] syz.3.3068 (19236): drop_caches: 2 [ 1579.210132][ T6434] vhci_hcd vhci_hcd.3: disconnect device [ 1579.254346][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1579.447080][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 1579.754944][T11333] Bluetooth: hci6: command tx timeout [ 1579.973624][T14684] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1580.001012][T14684] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1580.013341][T14684] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1580.038296][T14684] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1580.052651][T14684] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1581.104567][T19254] Invalid source name [ 1581.833290][T14684] Bluetooth: hci6: command tx timeout [ 1582.153868][T14684] Bluetooth: hci7: command tx timeout [ 1582.404066][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1582.502912][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 1583.420866][T18815] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1583.907050][T14684] Bluetooth: hci6: command tx timeout [ 1584.272837][T14684] Bluetooth: hci7: command tx timeout [ 1585.034040][T19267] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.603357][T19276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1585.610613][T19276] IPv6: NLM_F_CREATE should be set when creating new route [ 1586.102686][T14684] Bluetooth: hci6: command tx timeout [ 1586.302623][T14684] Bluetooth: hci7: command tx timeout [ 1586.373730][T19267] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.001722][T19267] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.125648][T19267] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.616173][T19293] Invalid source name [ 1588.286580][ T6434] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.382639][T14684] Bluetooth: hci7: command tx timeout [ 1588.526359][ T6434] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.714181][ T6434] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.765062][T19298] [ 1588.767407][T19298] ====================================================== [ 1588.774410][T19298] WARNING: possible circular locking dependency detected [ 1588.781415][T19298] syzkaller #0 Not tainted [ 1588.785811][T19298] ------------------------------------------------------ [ 1588.792812][T19298] syz.3.3082/19298 is trying to acquire lock: [ 1588.798862][T19298] ffff888055e27148 (&sbi->pipe_mutex){+.+.}-{4:4}, at: autofs_notify_daemon+0x4a6/0xd60 [ 1588.808625][T19298] [ 1588.808625][T19298] but task is already holding lock: [ 1588.815979][T19298] ffff888056435888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1588.825315][T19298] [ 1588.825315][T19298] which lock already depends on the new lock. [ 1588.825315][T19298] [ 1588.835699][T19298] [ 1588.835699][T19298] the existing dependency chain (in reverse order) is: [ 1588.844696][T19298] [ 1588.844696][T19298] -> #2 (&of->mutex){+.+.}-{4:4}: [ 1588.851925][T19298] __mutex_lock+0x1aa/0x1ca0 [ 1588.857027][T19298] kernfs_fop_write_iter+0x28f/0x570 [ 1588.862840][T19298] iter_file_splice_write+0xa24/0x12b0 [ 1588.868827][T19298] do_splice+0x1478/0x1fc0 [ 1588.873773][T19298] __do_splice+0x32a/0x360 [ 1588.878835][T19298] __x64_sys_splice+0x187/0x250 [ 1588.884216][T19298] do_syscall_64+0xcd/0xf80 [ 1588.889269][T19298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.895678][T19298] [ 1588.895678][T19298] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 1588.903076][T19298] __mutex_lock+0x1aa/0x1ca0 [ 1588.908187][T19298] anon_pipe_write+0x15d/0x1bd0 [ 1588.913570][T19298] __kernel_write_iter+0x720/0xb10 [ 1588.919202][T19298] __kernel_write+0xf5/0x140 [ 1588.924306][T19298] autofs_notify_daemon+0x4db/0xd60 [ 1588.930027][T19298] autofs_wait+0x10f3/0x1ac0 [ 1588.935128][T19298] autofs_do_expire_multi+0x14e/0x500 [ 1588.941015][T19298] autofs_expire_multi+0x68/0x90 [ 1588.946468][T19298] autofs_root_ioctl_unlocked+0x6c7/0x920 [ 1588.952721][T19298] autofs_root_ioctl+0x41/0x60 [ 1588.958015][T19298] __x64_sys_ioctl+0x18e/0x210 [ 1588.963291][T19298] do_syscall_64+0xcd/0xf80 [ 1588.968325][T19298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.974736][T19298] [ 1588.974736][T19298] -> #0 (&sbi->pipe_mutex){+.+.}-{4:4}: [ 1588.982477][T19298] __lock_acquire+0x1669/0x2890 [ 1588.987847][T19298] lock_acquire+0x179/0x330 [ 1588.992865][T19298] __mutex_lock+0x1aa/0x1ca0 [ 1588.997968][T19298] autofs_notify_daemon+0x4a6/0xd60 [ 1589.003679][T19298] autofs_wait+0x10f3/0x1ac0 [ 1589.008779][T19298] autofs_mount_wait+0x132/0x3c0 [ 1589.014245][T19298] autofs_d_automount+0x4b2/0x960 [ 1589.019781][T19298] __traverse_mounts+0x1b9/0x830 [ 1589.025242][T19298] step_into_slowpath+0x772/0xf50 [ 1589.030778][T19298] path_lookupat+0x627/0xc40 [ 1589.035880][T19298] filename_lookup+0x224/0x5f0 [ 1589.041160][T19298] kern_path+0x35/0x50 [ 1589.045740][T19298] lookup_bdev+0xd8/0x280 [ 1589.050584][T19298] resume_store+0x1d6/0x490 [ 1589.055613][T19298] kobj_attr_store+0x58/0x80 [ 1589.060737][T19298] sysfs_kf_write+0xf2/0x150 [ 1589.065855][T19298] kernfs_fop_write_iter+0x3af/0x570 [ 1589.071664][T19298] vfs_write+0x7d3/0x11d0 [ 1589.076505][T19298] ksys_write+0x12a/0x250 [ 1589.081373][T19298] do_syscall_64+0xcd/0xf80 [ 1589.086506][T19298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.092915][T19298] [ 1589.092915][T19298] other info that might help us debug this: [ 1589.092915][T19298] [ 1589.103122][T19298] Chain exists of: [ 1589.103122][T19298] &sbi->pipe_mutex --> &pipe->mutex --> &of->mutex [ 1589.103122][T19298] [ 1589.115558][T19298] Possible unsafe locking scenario: [ 1589.115558][T19298] [ 1589.122987][T19298] CPU0 CPU1 [ 1589.128337][T19298] ---- ---- [ 1589.133682][T19298] lock(&of->mutex); [ 1589.137657][T19298] lock(&pipe->mutex); [ 1589.144323][T19298] lock(&of->mutex); [ 1589.150817][T19298] lock(&sbi->pipe_mutex); [ 1589.155313][T19298] [ 1589.155313][T19298] *** DEADLOCK *** [ 1589.155313][T19298] [ 1589.163445][T19298] 4 locks held by syz.3.3082/19298: [ 1589.168624][T19298] #0: ffff88807548f278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1589.177709][T19298] #1: ffff88803318a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1589.186700][T19298] #2: ffff888056435888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 1589.196822][T19298] #3: ffff88814169e008 (kn->active#67){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 1589.206868][T19298] [ 1589.206868][T19298] stack backtrace: [ 1589.212742][T19298] CPU: 0 UID: 0 PID: 19298 Comm: syz.3.3082 Not tainted syzkaller #0 PREEMPT(full) [ 1589.212776][T19298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1589.212794][T19298] Call Trace: [ 1589.212804][T19298] [ 1589.212815][T19298] dump_stack_lvl+0x116/0x1f0 [ 1589.212862][T19298] print_circular_bug+0x275/0x340 [ 1589.212897][T19298] check_noncircular+0x146/0x160 [ 1589.212934][T19298] __lock_acquire+0x1669/0x2890 [ 1589.212974][T19298] lock_acquire+0x179/0x330 [ 1589.213006][T19298] ? autofs_notify_daemon+0x4a6/0xd60 [ 1589.213038][T19298] ? __pfx___might_resched+0x10/0x10 [ 1589.213066][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213104][T19298] __mutex_lock+0x1aa/0x1ca0 [ 1589.213129][T19298] ? autofs_notify_daemon+0x4a6/0xd60 [ 1589.213156][T19298] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 1589.213193][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213227][T19298] ? find_held_lock+0x2b/0x80 [ 1589.213269][T19298] ? autofs_notify_daemon+0x4a6/0xd60 [ 1589.213298][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213332][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213367][T19298] ? __pfx___mutex_lock+0x10/0x10 [ 1589.213397][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213431][T19298] ? __mutex_unlock_slowpath+0x161/0x790 [ 1589.213479][T19298] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1589.213528][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213562][T19298] ? from_kgid_munged+0xab/0x130 [ 1589.213600][T19298] ? autofs_notify_daemon+0x4a6/0xd60 [ 1589.213627][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213661][T19298] autofs_notify_daemon+0x4a6/0xd60 [ 1589.213691][T19298] ? __pfx_autofs_notify_daemon+0x10/0x10 [ 1589.213720][T19298] ? kernfs_fop_write_iter+0x3af/0x570 [ 1589.213757][T19298] ? vfs_write+0x7d3/0x11d0 [ 1589.213786][T19298] ? ksys_write+0x12a/0x250 [ 1589.213831][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213865][T19298] ? lockdep_init_map_type+0x5c/0x270 [ 1589.213900][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213933][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.213967][T19298] ? lockdep_init_map_type+0x5c/0x270 [ 1589.214001][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214038][T19298] autofs_wait+0x10f3/0x1ac0 [ 1589.214069][T19298] ? __pfx_autofs_wait+0x10/0x10 [ 1589.214096][T19298] ? __pfx_path_check_mount+0x10/0x10 [ 1589.214137][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214171][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214205][T19298] ? find_held_lock+0x2b/0x80 [ 1589.214247][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214283][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214317][T19298] ? do_raw_spin_unlock+0x172/0x230 [ 1589.214356][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214393][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214426][T19298] ? find_held_lock+0x2b/0x80 [ 1589.214471][T19298] autofs_mount_wait+0x132/0x3c0 [ 1589.214519][T19298] autofs_d_automount+0x4b2/0x960 [ 1589.214548][T19298] __traverse_mounts+0x1b9/0x830 [ 1589.214593][T19298] step_into_slowpath+0x772/0xf50 [ 1589.214621][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214655][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214689][T19298] ? __up_read+0x2d1/0x700 [ 1589.214726][T19298] ? __pfx_step_into_slowpath+0x10/0x10 [ 1589.214756][T19298] ? __entry_text_end+0x1020b5/0x1020b9 [ 1589.214795][T19298] path_lookupat+0x627/0xc40 [ 1589.214827][T19298] filename_lookup+0x224/0x5f0 [ 1589.214860][T19298] ? __pfx_filename_lookup+0x10/0x10 [ 1589.214905][T19298] ? getname_kernel+0x52/0x370 [ 1589.214945][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.214978][T19298] ? __asan_memcpy+0x3c/0x60 [ 1589.215021][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.215058][T19298] kern_path+0x35/0x50 [ 1589.215087][T19298] lookup_bdev+0xd8/0x280 [ 1589.215114][T19298] ? __pfx_lookup_bdev+0x10/0x10 [ 1589.215140][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.215174][T19298] ? __asan_memcpy+0x3c/0x60 [ 1589.215219][T19298] resume_store+0x1d6/0x490 [ 1589.215260][T19298] ? __pfx_resume_store+0x10/0x10 [ 1589.215303][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.215339][T19298] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1589.215372][T19298] ? find_held_lock+0x2b/0x80 [ 1589.215424][T19298] ? __pfx_resume_store+0x10/0x10 [ 1589.215463][T19298] kobj_attr_store+0x58/0x80 [ 1589.215508][T19298] ? __pfx_kobj_attr_store+0x10/0x10 [ 1589.215553][T19298] sysfs_kf_write+0xf2/0x150 [ 1589.215598][T19298] kernfs_fop_write_iter+0x3af/0x570 [ 1589.215636][T19298] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1589.215682][T19298] vfs_write+0x7d3/0x11d0 [ 1589.215712][T19298] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1589.215754][T19298] ? __pfx_vfs_write+0x10/0x10 [ 1589.215797][T19298] ksys_write+0x12a/0x250 [ 1589.215826][T19298] ? __pfx_ksys_write+0x10/0x10 [ 1589.215862][T19298] do_syscall_64+0xcd/0xf80 [ 1589.215907][T19298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1589.215936][T19298] RIP: 0033:0x7f8287b8f749 [ 1589.215959][T19298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1589.215987][T19298] RSP: 002b:00007f8288a7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1589.216014][T19298] RAX: ffffffffffffffda RBX: 00007f8287de6090 RCX: 00007f8287b8f749 [ 1589.216033][T19298] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000008 [ 1589.216051][T19298] RBP: 00007f8287c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1589.216069][T19298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1589.216087][T19298] R13: 00007f8287de6128 R14: 00007f8287de6090 R15: 00007ffd515d5638 [ 1589.216116][T19298] [ 1589.777195][ T6434] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1590.173817][T19298] PM: Image not found (code -22) [ 1591.004215][ T3555] IPVS: stop unused estimator thread 0... [ 1592.674272][ T3555] bridge_slave_1: left allmulticast mode [ 1592.679945][ T3555] bridge_slave_1: left promiscuous mode [ 1592.697677][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.713148][ T3555] bridge_slave_0: left allmulticast mode [ 1592.718827][ T3555] bridge_slave_0: left promiscuous mode [ 1592.741330][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.763493][ T3555] bridge_slave_1: left allmulticast mode [ 1592.769159][ T3555] bridge_slave_1: left promiscuous mode [ 1592.785773][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.804504][ T3555] bridge_slave_0: left allmulticast mode [ 1592.810149][ T3555] bridge_slave_0: left promiscuous mode [ 1592.821957][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.833256][ T3555] bridge_slave_1: left allmulticast mode [ 1592.838929][ T3555] bridge_slave_1: left promiscuous mode [ 1592.847620][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1592.856996][ T3555] bridge_slave_0: left allmulticast mode [ 1592.865544][ T3555] bridge_slave_0: left promiscuous mode [ 1592.871240][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1592.969846][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1592.981215][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1592.991531][ T3555] bond0 (unregistering): Released all slaves [ 1593.070270][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.081439][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.092214][ T3555] bond0 (unregistering): Released all slaves [ 1593.187450][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.198212][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.208837][ T3555] bond0 (unregistering): Released all slaves [ 1593.413446][ T3555] hsr_slave_0: left promiscuous mode [ 1593.429973][ T3555] hsr_slave_1: left promiscuous mode [ 1593.442227][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.451803][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.474985][ T3555] hsr_slave_0: left promiscuous mode [ 1593.489552][ T3555] hsr_slave_1: left promiscuous mode [ 1593.504403][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.524555][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.543765][ T3555] hsr_slave_0: left promiscuous mode [ 1593.552845][ T3555] hsr_slave_1: left promiscuous mode [ 1593.558596][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1593.584184][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1593.808208][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1593.830567][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 1594.026000][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1594.047112][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 1594.421125][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1594.450691][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 1595.259257][ T3555] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.305147][ T3555] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.366122][ T3555] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.434629][ T3555] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.543008][ T3555] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.596797][ T3555] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.649737][ T3555] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.699681][ T3555] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.797276][ T3555] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.820730][ T3555] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.884395][ T3555] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.911739][ T3555] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.041250][ T3555] bridge_slave_1: left allmulticast mode [ 1596.048500][ T3555] bridge_slave_1: left promiscuous mode [ 1596.055883][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.067886][ T3555] bridge_slave_0: left allmulticast mode [ 1596.073598][ T3555] bridge_slave_0: left promiscuous mode [ 1596.079308][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.089695][ T3555] bridge_slave_1: left allmulticast mode [ 1596.095362][ T3555] bridge_slave_1: left promiscuous mode [ 1596.101021][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.109976][ T3555] bridge_slave_0: left allmulticast mode [ 1596.115855][ T3555] bridge_slave_0: left promiscuous mode [ 1596.122129][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.131433][ T3555] bridge_slave_1: left allmulticast mode [ 1596.137136][ T3555] bridge_slave_1: left promiscuous mode [ 1596.143146][ T3555] bridge0: port 2(bridge_slave_1) entered disabled state [ 1596.151308][ T3555] bridge_slave_0: left allmulticast mode [ 1596.157024][ T3555] bridge_slave_0: left promiscuous mode [ 1596.163675][ T3555] bridge0: port 1(bridge_slave_0) entered disabled state [ 1596.377350][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.388029][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.397708][ T3555] bond0 (unregistering): Released all slaves [ 1596.489084][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.500215][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.510029][ T3555] bond0 (unregistering): Released all slaves [ 1596.583376][ T3555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1596.593742][ T3555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1596.603429][ T3555] bond0 (unregistering): Released all slaves [ 1596.656706][ T3555] bond0 (unregistering): Released all slaves [ 1597.183675][ T3555] hsr_slave_0: left promiscuous mode [ 1597.189684][ T3555] hsr_slave_1: left promiscuous mode [ 1597.199379][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.207265][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.217544][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.225877][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.237191][ T3555] hsr_slave_0: left promiscuous mode [ 1597.243390][ T3555] hsr_slave_1: left promiscuous mode [ 1597.249274][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.257902][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.268839][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.277738][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.289152][ T3555] hsr_slave_0: left promiscuous mode [ 1597.295261][ T3555] hsr_slave_1: left promiscuous mode [ 1597.301001][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1597.309571][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1597.317638][ T3555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1597.325356][ T3555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1597.345744][ T3555] veth1_macvtap: left promiscuous mode [ 1597.353352][ T3555] veth0_macvtap: left promiscuous mode [ 1597.358976][ T3555] veth1_vlan: left promiscuous mode [ 1597.364600][ T3555] veth0_vlan: left promiscuous mode [ 1597.371128][ T3555] veth1_macvtap: left promiscuous mode [ 1597.379846][ T3555] veth0_macvtap: left promiscuous mode [ 1597.385536][ T3555] veth1_vlan: left promiscuous mode [ 1597.390833][ T3555] veth0_vlan: left promiscuous mode [ 1597.397347][ T3555] veth1_macvtap: left promiscuous mode [ 1597.403016][ T3555] veth0_macvtap: left promiscuous mode [ 1597.408617][ T3555] veth1_vlan: left promiscuous mode [ 1597.414384][ T3555] veth0_vlan: left promiscuous mode [ 1597.714151][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1597.738704][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 1597.919562][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1597.946964][ T3555] team0 (unregistering): Port device team_slave_0 removed [ 1598.135037][ T3555] team0 (unregistering): Port device team_slave_1 removed [ 1598.147630][ T3555] team0 (unregistering): Port device team_slave_0 removed