last executing test programs: 2m32.17703486s ago: executing program 32 (id=274): r0 = dup(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) write$UHID_INPUT(r0, &(0x7f0000000080)={0x8, {"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", 0x102b}}, 0x2000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008007}, 0x4040844) sendto$packet(r1, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1m54.378375325s ago: executing program 1 (id=591): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008506ba50639c1973d8500b1c26a1", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) sendmsg$NFT_BATCH(r0, 0x0, 0x84001) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m53.955758824s ago: executing program 1 (id=595): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1m53.814526597s ago: executing program 1 (id=596): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="66b9034d564b0f320f20e06635010000000f22e0660fc7330f20d86635200000000f22d836f20ff065d7b800068ec80f01d4dbe00f820600f30f09", 0x3b}], 0x1, 0x58, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m53.416542515s ago: executing program 1 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xd}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1m53.111601142s ago: executing program 1 (id=601): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m52.468877495s ago: executing program 2 (id=606): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x1a09}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m52.123197983s ago: executing program 1 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.997088505s ago: executing program 2 (id=609): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m51.663711392s ago: executing program 2 (id=611): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x7) 1m51.506945246s ago: executing program 2 (id=613): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008506ba50639c1973d8500b1c26a1", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) sendmsg$NFT_BATCH(r0, 0x0, 0x84001) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m51.207207982s ago: executing program 2 (id=616): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 1m50.255116622s ago: executing program 2 (id=619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m49.818666212s ago: executing program 4 (id=623): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1m49.752256553s ago: executing program 4 (id=624): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008506ba50639c1973d8500b1c26a1", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) sendmsg$NFT_BATCH(r0, 0x0, 0x84001) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m49.639914526s ago: executing program 4 (id=625): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x9, 0x6a, 0x10001, 0x2000000000000000, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x10000009, 0x9, 0x2}) 1m49.068201018s ago: executing program 4 (id=626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m48.913055731s ago: executing program 4 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 1m47.982711611s ago: executing program 4 (id=628): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.959543584s ago: executing program 33 (id=542): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m43.068003796s ago: executing program 5 (id=632): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0xb}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x6}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xd}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1m42.925728428s ago: executing program 5 (id=633): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008506ba50639c1973d8500b1c26a1", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) sendmsg$NFT_BATCH(r0, 0x0, 0x84001) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m42.84697731s ago: executing program 5 (id=634): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x9, 0x6a, 0x10001, 0x2000000000000000, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x10000009, 0x9, 0x2}) 1m42.263314303s ago: executing program 5 (id=635): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m39.514069631s ago: executing program 5 (id=636): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 1m38.579707961s ago: executing program 5 (id=637): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1m36.544096574s ago: executing program 34 (id=608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m35.063704146s ago: executing program 35 (id=619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m32.06255086s ago: executing program 36 (id=628): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.679955338s ago: executing program 6 (id=641): syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04080000"], 0x7) 1m31.355670525s ago: executing program 6 (id=642): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008506ba50639c1973d8500b1c26a1", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) sendmsg$NFT_BATCH(r0, 0x0, 0x84001) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m31.163275469s ago: executing program 6 (id=643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m30.535435102s ago: executing program 6 (id=644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m27.695492113s ago: executing program 6 (id=645): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m26.757483493s ago: executing program 6 (id=646): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') socket(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 1m23.547456991s ago: executing program 37 (id=637): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 1m18.44303506s ago: executing program 7 (id=648): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='task\x00') fchown(r0, 0x0, 0x0) 1m18.311512233s ago: executing program 7 (id=649): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010008506ba50639c1973d8500b1c26a1", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8010) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'bridge0\x00'}) sendmsg$NFT_BATCH(r0, 0x0, 0x84001) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m18.191925165s ago: executing program 7 (id=650): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m17.801734534s ago: executing program 7 (id=651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1m15.459645403s ago: executing program 7 (id=652): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x128) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 1m15.295000647s ago: executing program 7 (id=653): ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x202403, 0x0) flistxattr(r0, 0x0, 0x0) flock(r0, 0x1) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x4080211, 0x0, 0x0, 0x0, 0x0, 0x0) 1m10.9405795s ago: executing program 38 (id=646): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') socket(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x6a) 1m0.177788448s ago: executing program 39 (id=653): ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x202403, 0x0) flistxattr(r0, 0x0, 0x0) flock(r0, 0x1) openat$yama_ptrace_scope(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_clone(0x4080211, 0x0, 0x0, 0x0, 0x0, 0x0) 32.147958625s ago: executing program 3 (id=757): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000006400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303235342c6c6f6e6761642c756d61736b3d30303030303030303030303030303030303137373737372c646d6f64653d30303030303030303030303030303030303030303430302c756e686964652c73686f727461642c616e63686f723d30303030303030303030303030303030303030372c6e6f7374726963742c696f636861727365743d6b6f69382d72752c00263468691e626cd4f6d91d6fed4bb42a4515346a98d55253771fadd9bb31ceaa8d7647a551ee49f3b17bfc6ae1090b228307b8fdc1935c7e8cbbf9aea203bd"], 0x1, 0xc65, &(0x7f0000000f40)="$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") syz_io_uring_setup(0x4f6, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0x7}}, 0x0, 0x6}, 0x90) sendmsg$rds(r0, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r7 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) fsmount(r8, 0x0, 0x3) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 30.9912312s ago: executing program 3 (id=762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x80000001, 0x7}, 0x1d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 27.427652825s ago: executing program 3 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 27.059670424s ago: executing program 3 (id=772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRES16, @ANYRES32, @ANYRES32, @ANYRESHEX=0x0, @ANYRES64], &(0x7f0000000000)='GPL\x00', 0x9, 0xb5, &(0x7f0000000140)=""/181, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x34}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(0xffffffffffffffff, &(0x7f0000011240)=[{{0x0, 0x0, &(0x7f0000003ec0)=[{&(0x7f0000001900)}], 0x1}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000000000000040500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 24.719218483s ago: executing program 3 (id=774): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x1a, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = fsopen(&(0x7f0000000200)='efivarfs\x00', 0x1) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') 21.451474633s ago: executing program 3 (id=779): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0386f505"], 0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2}}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="880000000314010026bd7000ffdbdf250900020073797a3100000000080041007278650014003300677265300000000000000000000000000900020073797a32000000f708004100736977001400330076657468315f746f5fe2056e640000000900020073797a3000000000080041007278650014003300626f6e645f736c6176655f3000000000bea957e88e3960fb064873d908dd43468ffa256364"], 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044840, 0x0, 0x0) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x40000006, '\x00', @p_u32=0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) iopl(0x3) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x40000000, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x48, 0x0) 10.663965683s ago: executing program 8 (id=786): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x1f, 0x0, 0x30) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r2 = syz_io_uring_setup(0x7611, &(0x7f00000023c0)={0x0, 0x595a, 0x400, 0x2000000, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000002440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) fchdir(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = inotify_init() inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x91000a7a) r10 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r10, 0x1, 0x0) fchdir(r11) io_uring_enter(r2, 0x2eca, 0xfffffffd, 0x9, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast2}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000000038bd70d4fedb9f25037c00000c000180080001", @ANYRES32=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) r13 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r13, 0x1, 0x2b, &(0x7f0000000040)=0x8, 0x4) write$rfkill(r12, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) 10.068229815s ago: executing program 9 (id=788): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) openat$userio(0xffffff9c, 0x0, 0x84180, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) 7.175194187s ago: executing program 0 (id=789): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xaaa9, 0x0, 0x0, 0x41100, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'veth0_to_batadv\x00', {0x1}, 0x2a}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x45af}, 0x1c, 0x0}}], 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) creat(&(0x7f00000000c0)='./file0\x00', 0x48) 7.121636888s ago: executing program 9 (id=790): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x3, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x1, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x3, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x4, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x1, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x9, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="500000000206010400000000000001000600000005000500020000000500040000000c0005000400010000001300030068616966616365000000000000000000"], 0x50}}, 0x0) getpgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x8b) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x26020400) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)={0x298, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}, @nested={0x26e, 0x77, 0x0, 0x1, [@generic="814bf8207f6668126cf24b2e57cb2fc72fec4c0a59401e5a1705a51541d18f8c2e7fade1e37b616eb15b086207c693d4e9c0c43a9e95266520ae95dbfb66c5204e5cd7b29d23384edaea26538095eccf1d270ce49a0c13d2bef00ee33d29f3e94a7f802feb3abde4f59b813a492e721c76ccefa742a4470c972b5aa3ce9ca2c08ed21ca65cbf474db6df21a500621eef817c", @nested={0xd1, 0xdc, 0x0, 0x1, [@typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@empty}, @generic="84e9591f4f31f862b4288f792326a6f3cf93cb1bdba11482e0e828ce7adc09d3299cd22b15bfa3f7449e5e734f4396d01cf637c10a59ae09a583d18772ce232edd6d4a5a336b6f7a42abde4e34f27d7ce6546f4fc88f39cd7e534003b1730b0aebca0a6baf1e46e047a7944fab75039c331bca325f8164f43cb09e78f0ee9ec3edda26886298568baac1108c41e8a2e8c8e5c10bfb802001405a9ae2cad897359f565ea22b01a88972282b0a071ef51cf747300137508558f2"]}, @nested={0x102, 0x61, 0x0, 0x1, [@generic="6831996022eca2987c6d68e772e6c7fd4a2d39253c6ece125a77cd286c8a7451db810d34da963cf534d5868fe1baa8030877539d612f025afca756b34adbe1c4817250a0e26c9108c5d941144a37a7d6853deb294a5390ba95d46f62de37862ddff890a16a9bfd4b5ee463550c439e00e461c6630a", @typed={0x8, 0x82, 0x0, 0x0, @uid}, @nested={0x4, 0x16}, @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@local}, @generic="3da58bafb043f2dc9d750b68b7d60f37d047c8f1209cb17d94474c96ab992dbcbcbeca28897e770b4d1eb01a95d847fb2a1b6f690ce3ee385b6d86080b37a8c7333b462aa03b20e8dfed242227f0da3a98fd534c4de7260f60ee835adf99114dacd0d730861850913c"]}]}]}, 0x298}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) 5.660289629s ago: executing program 40 (id=779): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0386f505"], 0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2}}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="880000000314010026bd7000ffdbdf250900020073797a3100000000080041007278650014003300677265300000000000000000000000000900020073797a32000000f708004100736977001400330076657468315f746f5fe2056e640000000900020073797a3000000000080041007278650014003300626f6e645f736c6176655f3000000000bea957e88e3960fb064873d908dd43468ffa256364"], 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044840, 0x0, 0x0) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x40000006, '\x00', @p_u32=0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) iopl(0x3) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x40000000, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x48, 0x0) 5.651349129s ago: executing program 0 (id=792): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d40009"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 5.517033932s ago: executing program 9 (id=793): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0xfffffdce) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffb, 0x20000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000180)=""/220) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10], 0x0, [0xb8, 0xfffe, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0xda8c, 0x0, 0x0, 0x3dc, 0x4], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xfff, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24008810}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0xb4, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x48}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0x0, 0x8, 0xff}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x10) close(r4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x727, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f00000000c0)=0xfffffb6c, 0x4) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r9, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000040), 0x2, r11}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r11], &(0x7f00000000c0), &(0x7f0000000640)=[r13, r12, r12], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 5.302235627s ago: executing program 0 (id=794): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) syz_open_dev$dvb_demux(0x0, 0x0, 0x62400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x8000000, 0x0, 0xff, 0x1, 0xffff, 0x5}, 0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002980)={'ip6_vti0\x00', &(0x7f0000002900)={'ip6tnl0\x00', 0x0, 0x29, 0x6f, 0x5, 0x7, 0x2c, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x7, 0x20, 0x2, 0x8}}) 3.846847268s ago: executing program 8 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) 3.707577171s ago: executing program 9 (id=796): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) unshare(0x2c060000) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "e4fffffffffffbff", "9da152000004b4991192c0029200", "b6730761", "cbc5f9dc4dab64ec"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000000)="5366b1b827f6001000493700", 0x10) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x80800) shutdown(r2, 0x1) 2.222806242s ago: executing program 8 (id=797): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x3, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x1, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x3, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x4, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x1, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) getrlimit(0x9, &(0x7f0000000000)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYBLOB="500000000206010400000000000001000600000005000500020000000500040000000c0005000400010000001300030068616966616365000000000000000000"], 0x50}}, 0x0) getpgid(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x8b) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$audio(0xffffffffffffff9c, 0x0, 0x22301, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) unshare(0x26020400) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000e80)={0x298, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1f}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}, @nested={0x26e, 0x77, 0x0, 0x1, [@generic="814bf8207f6668126cf24b2e57cb2fc72fec4c0a59401e5a1705a51541d18f8c2e7fade1e37b616eb15b086207c693d4e9c0c43a9e95266520ae95dbfb66c5204e5cd7b29d23384edaea26538095eccf1d270ce49a0c13d2bef00ee33d29f3e94a7f802feb3abde4f59b813a492e721c76ccefa742a4470c972b5aa3ce9ca2c08ed21ca65cbf474db6df21a500621eef817c", @nested={0xd1, 0xdc, 0x0, 0x1, [@typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@empty}, @generic="84e9591f4f31f862b4288f792326a6f3cf93cb1bdba11482e0e828ce7adc09d3299cd22b15bfa3f7449e5e734f4396d01cf637c10a59ae09a583d18772ce232edd6d4a5a336b6f7a42abde4e34f27d7ce6546f4fc88f39cd7e534003b1730b0aebca0a6baf1e46e047a7944fab75039c331bca325f8164f43cb09e78f0ee9ec3edda26886298568baac1108c41e8a2e8c8e5c10bfb802001405a9ae2cad897359f565ea22b01a88972282b0a071ef51cf747300137508558f2"]}, @nested={0x102, 0x61, 0x0, 0x1, [@generic="6831996022eca2987c6d68e772e6c7fd4a2d39253c6ece125a77cd286c8a7451db810d34da963cf534d5868fe1baa8030877539d612f025afca756b34adbe1c4817250a0e26c9108c5d941144a37a7d6853deb294a5390ba95d46f62de37862ddff890a16a9bfd4b5ee463550c439e00e461c6630a", @typed={0x8, 0x82, 0x0, 0x0, @uid}, @nested={0x4, 0x16}, @typed={0x14, 0x104, 0x0, 0x0, @ipv6=@local}, @generic="3da58bafb043f2dc9d750b68b7d60f37d047c8f1209cb17d94474c96ab992dbcbcbeca28897e770b4d1eb01a95d847fb2a1b6f690ce3ee385b6d86080b37a8c7333b462aa03b20e8dfed242227f0da3a98fd534c4de7260f60ee835adf99114dacd0d730861850913c"]}]}]}, 0x298}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/138, 0x8a}], 0x1) 1.940992039s ago: executing program 0 (id=798): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) openat$userio(0xffffff9c, 0x0, 0x84180, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300), &(0x7f0000000200), &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b00010061"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r5, 0x4148, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) io_uring_enter(r1, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) 1.451863629s ago: executing program 9 (id=799): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket(0x10, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0386f505"], 0x4) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x36c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2}}) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x4008010) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044840, 0x0, 0x0) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000080)={0x0, 0x1, 0x20000000, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x40000006, '\x00', @p_u32=0x0}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) iopl(0x3) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r5, 0x0, 0x40000000, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0), 0x48, 0x0) 950.951129ms ago: executing program 0 (id=800): socket$kcm(0x11, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0xfff, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x143843, 0x1a8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1000000, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020601020000000000000000008000000c000780080012400006000011000300686173683a6e65742c6e657400000000050005000200000005000400000000000900020073797a31000000000500010007000000"], 0x58}}, 0x4004) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) 724.994725ms ago: executing program 8 (id=801): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x6a) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 511.218369ms ago: executing program 0 (id=802): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1000, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(0x0, 0x508d48d4, 0x40902) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000180)={0x58, 0x0, 0x405, 0x70fd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000401}, 0x880) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 476.123779ms ago: executing program 9 (id=803): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x24c4436d5a174b6d, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f00000001c0)) ioctl$HIDIOCGRAWPHYS(0xffffffffffffffff, 0x80404805, &(0x7f0000000340)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, 0x0, 0x25, 0x5, @val=@netfilter={0xa, 0x0, 0xd}}, 0x20) mount$9p_virtio(&(0x7f0000000340), &(0x7f00000001c0)='.\x00', &(0x7f0000000040), 0x4004, &(0x7f0000000700)=ANY=[@ANYRES64=r0]) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020}, 0x2020) fcntl$dupfd(r4, 0x406, r4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x14a300, 0x0) 249.273184ms ago: executing program 8 (id=804): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"/306], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 0s ago: executing program 8 (id=805): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$cont(0x9, r3, 0x4, 0xcf8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prlimit64(r3, 0x6, &(0x7f0000000040)={0x5, 0x8}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) socket$netlink(0x10, 0x3, 0x14) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r4 = openat$vimc0(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fstat(r5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) kernel console output (not intermixed with test programs): criptor, ignoring hub [ 102.480506][ T27] hub: probe of 3-1:250.228 failed with error -5 [ 103.009478][ T6000] vlan2: entered allmulticast mode [ 103.091010][ T175] usb 3-1: USB disconnect, device number 2 [ 103.273492][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.312086][ T6006] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 103.481470][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 103.504625][ T27] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 103.530656][ T27] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 103.546625][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 103.557880][ T27] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 103.568339][ T27] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 103.581770][ T27] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 103.591378][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.279985][ T6020] syz.0.66 uses obsolete (PF_INET,SOCK_PACKET) [ 104.294685][ T6020] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 104.344463][ T6015] syz.2.64 (6015) used greatest stack depth: 17896 bytes left [ 104.419662][ T6024] usbtmc 2-1:16.0: simple control status returned 25 [ 104.452915][ T6026] netlink: 'syz.3.68': attribute type 1 has an invalid length. [ 104.488665][ T6026] vlan2: entered allmulticast mode [ 104.622656][ T5822] usb 2-1: USB disconnect, device number 2 [ 106.556117][ T6059] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 106.612309][ T6059] vlan2: entered allmulticast mode [ 107.067085][ T6067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.954181][ T6089] netlink: 'syz.3.93': attribute type 1 has an invalid length. [ 108.001467][ T6089] vlan2: entered allmulticast mode [ 109.591130][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 110.000980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 110.210747][ C1] sched: RT throttling activated [ 111.277920][ T6129] tipc: Started in network mode [ 111.303730][ T6129] tipc: Node identity 2a7e57b58f5, cluster identity 4711 [ 111.327122][ T6129] tipc: Enabled bearer , priority 0 [ 111.362798][ T6132] syzkaller0: entered promiscuous mode [ 111.368528][ T6132] syzkaller0: entered allmulticast mode [ 111.378900][ T6129] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 111.420839][ T5822] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 111.429426][ T6129] tipc: Resetting bearer [ 111.471824][ T6128] tipc: Resetting bearer [ 111.515017][ T6128] tipc: Disabling bearer [ 111.545461][ T6137] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 111.577085][ T6137] vlan2: entered allmulticast mode [ 111.655196][ T5822] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 111.688660][ T5822] usb 3-1: config 0 interface 0 has no altsetting 0 [ 111.723738][ T5822] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.746021][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.765394][ T5822] usb 3-1: Product: syz [ 111.779980][ T5822] usb 3-1: Manufacturer: syz [ 111.790224][ T5822] usb 3-1: SerialNumber: syz [ 111.809284][ T5822] usb 3-1: config 0 descriptor?? [ 111.821636][ T6127] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 111.932850][ T5822] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 112.029173][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.085877][ T23] usb 3-1: USB disconnect, device number 3 [ 112.716771][ T6164] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 112.833474][ T6164] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.946840][ T6168] vlan2: entered allmulticast mode [ 112.976307][ T6168] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 113.460877][ T5822] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.681347][ T5822] usb 2-1: Using ep0 maxpacket: 32 [ 113.696841][ T5822] usb 2-1: config index 0 descriptor too short (expected 15270, got 18) [ 113.713879][ T5822] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 113.723412][ T5822] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.731612][ T5822] usb 2-1: Product: syz [ 113.735930][ T5822] usb 2-1: Manufacturer: syz [ 113.740642][ T5822] usb 2-1: SerialNumber: syz [ 113.757686][ T5822] usb 2-1: config 0 descriptor?? [ 113.778527][ T5822] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 113.796805][ T5822] dvb-usb: bulk message failed: -22 (4/0) [ 113.817428][ T5822] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 113.845566][ T5822] dvb-usb: bulk message failed: -22 (5/0) [ 113.857115][ T5822] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 113.908699][ T5822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.920608][ T5822] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 113.929852][ T5822] usb 2-1: media controller created [ 113.970743][ T5822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.066195][ T5822] usb 2-1: selecting invalid altsetting 3 [ 114.092233][ T5822] ttusb2: set interface to alts=3 failed [ 114.185749][ T6207] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 114.201870][ T5822] DVB: Unable to find symbol tda10086_attach() [ 114.220779][ T5822] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 114.242811][ T5822] dvb-usb: bulk message failed: -22 (4/0) [ 114.248813][ T5822] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 114.279782][ T5822] dvb-usb: bulk message failed: -22 (5/0) [ 114.316002][ T5822] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 114.332633][ T6207] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.367188][ T5822] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 114.425992][ T5822] usb 2-1: USB disconnect, device number 3 [ 114.676811][ T5822] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 115.531831][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 115.603495][ T6239] vlan2: entered allmulticast mode [ 116.005045][ T6252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.681313][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 117.231555][ T5822] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 117.442023][ T5822] usb 4-1: Using ep0 maxpacket: 16 [ 117.463742][ T5822] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 117.492566][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.509957][ T6292] syzkaller0: entered promiscuous mode [ 117.517922][ T6292] syzkaller0: entered allmulticast mode [ 117.530608][ T5822] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 117.542889][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.578542][ T5822] usb 4-1: Product: syz [ 117.596424][ T5822] usb 4-1: Manufacturer: syz [ 117.612814][ T5822] usb 4-1: SerialNumber: syz [ 117.638596][ T5822] usb 4-1: config 0 descriptor?? [ 117.866207][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 117.905987][ T5822] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 117.948334][ T5822] imon:send_packet: packet tx failed (-71) [ 117.971665][ T5822] imon 4-1:0.0: panel buttons/knobs setup failed [ 118.150877][ T5822] rc_core: IR keymap rc-imon-pad not found [ 118.156792][ T5822] Registered IR keymap rc-empty [ 118.201021][ T5822] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 118.214921][ T5783] Bluetooth: hci2: Malformed Event: 0x02 [ 118.231522][ T5822] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 118.252002][ T5822] imon:send_packet: packet tx failed (-71) [ 118.275743][ T5822] imon 4-1:0.0: remote input dev register failed [ 118.290978][ T5822] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 118.301667][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 118.344480][ T5822] imon 4-1:0.0: unable to initialize intf0, err 0 [ 118.372136][ T5822] imon:imon_probe: failed to initialize context! [ 118.378567][ T5822] imon 4-1:0.0: unable to register, err -19 [ 118.424380][ T5822] usb 4-1: USB disconnect, device number 2 [ 118.691056][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.820832][ T5822] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 118.905777][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 118.919379][ T10] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 118.936038][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 118.964769][ T10] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 119.005853][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.016117][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.029245][ T10] usb 2-1: Product: syz [ 119.035614][ T5822] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 119.050787][ T10] usb 2-1: Manufacturer: syz [ 119.064667][ T6309] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 119.072348][ T5822] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 119.102244][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 119.107507][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 119.115037][ T5822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 119.122274][ T10] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 119.132302][ T5822] usb 4-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 119.146399][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.165003][ T5822] usb 4-1: Product: syz [ 119.169243][ T5822] usb 4-1: Manufacturer: syz [ 119.184128][ T5822] usb 4-1: SerialNumber: syz [ 119.198570][ T5822] usb 4-1: config 0 descriptor?? [ 119.222665][ T6283] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.306514][ T10] usb 2-1: USB disconnect, device number 4 [ 119.466687][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 119.482869][ T5822] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 119.821159][ T5822] rc_core: IR keymap rc-imon-pad not found [ 119.828659][ T5822] Registered IR keymap rc-empty [ 119.852185][ T5822] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 119.867136][ T5822] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 119.892652][ T5822] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 119.924882][ T5822] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 119.951556][ T5822] imon 4-1:0.0: iMON device (15c2:0045, intf0) on usb<4:3> initialized [ 120.109449][ T6283] imon:lcd_write: invalid payload size: 0 (expected 8) [ 120.161472][ T5822] usb 4-1: USB disconnect, device number 3 [ 120.898960][ T6360] vlan2: entered allmulticast mode [ 120.905558][ T6360] bridge0: entered allmulticast mode [ 122.754183][ T6409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.948641][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 123.308655][ T6425] vlan2: entered allmulticast mode [ 124.039186][ T6448] netlink: 'syz.1.234': attribute type 1 has an invalid length. [ 124.069276][ T6448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.087769][ T6448] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 124.100291][ T6448] bond1: (slave wlan1): Enslaving as an active interface with a down link [ 124.241131][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.441073][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 124.458036][ T27] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.469803][ T27] usb 3-1: config 0 has no interface number 0 [ 124.489274][ T27] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 124.513194][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.536318][ T27] usb 3-1: Product: syz [ 124.540563][ T27] usb 3-1: Manufacturer: syz [ 124.560365][ T27] usb 3-1: SerialNumber: syz [ 124.597484][ T27] usb 3-1: config 0 descriptor?? [ 124.610280][ T27] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 124.634960][ T27] usb 3-1: selecting invalid altsetting 1 [ 124.641369][ T27] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 124.663388][ T27] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.681437][ T27] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 124.690014][ T27] usb 3-1: media controller created [ 124.703387][ T6456] vlan2: entered allmulticast mode [ 124.729045][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.825929][ T27] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 124.841265][ T27] zl10353_read_register: readreg error (reg=127, ret==-71) [ 124.852492][ T27] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 124.952194][ T27] usb 3-1: USB disconnect, device number 4 [ 125.267302][ T6463] binder: 6462:6463 ioctl c0306201 0 returned -14 [ 125.762386][ T6478] vlan2: entered allmulticast mode [ 125.951311][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 126.069114][ T6487] syzkaller0: entered promiscuous mode [ 126.084526][ T6487] syzkaller0: entered allmulticast mode [ 126.182869][ T27] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 126.194252][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 126.203565][ T27] usb 3-1: Product: syz [ 126.208018][ T27] usb 3-1: Manufacturer: syz [ 126.216507][ T27] usb 3-1: SerialNumber: syz [ 126.234081][ T27] usb 3-1: config 0 descriptor?? [ 126.269244][ T27] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 126.306007][ T27] dvb-usb: bulk message failed: -22 (2/0) [ 126.350523][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 126.377055][ T27] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 126.395459][ T27] usb 3-1: media controller created [ 126.474515][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.556319][ T27] cxusb: set interface failed [ 126.571477][ T27] dvb-usb: bulk message failed: -22 (1/0) [ 126.738592][ T27] DVB: Unable to find symbol mt352_attach() [ 126.750331][ T27] dvb-usb: bulk message failed: -22 (5/0) [ 126.765639][ T27] zl10353_read_register: readreg error (reg=127, ret==-121) [ 126.781957][ T27] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 127.000825][ T27] rc_core: IR keymap rc-dvico-mce not found [ 127.015769][ T27] Registered IR keymap rc-empty [ 127.032866][ T27] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 127.075125][ T27] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 127.135717][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 127.160197][ T27] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 127.211629][ T27] usb 3-1: USB disconnect, device number 5 [ 127.369217][ T27] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 127.575989][ T6520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.260'. [ 128.178573][ T6533] syzkaller0: entered promiscuous mode [ 128.191963][ T6533] syzkaller0: entered allmulticast mode [ 128.220335][ T6533] tipc: Started in network mode [ 128.230661][ T6533] tipc: Node identity ae1da9fb8b37, cluster identity 4711 [ 128.254750][ T6533] tipc: Enabled bearer , priority 0 [ 128.261705][ T175] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.279617][ T6531] tipc: Resetting bearer [ 128.319376][ T6531] tipc: Disabling bearer [ 128.474490][ T175] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 128.491920][ T175] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.500049][ T175] usb 4-1: Product: syz [ 128.522018][ T175] usb 4-1: Manufacturer: syz [ 128.526715][ T175] usb 4-1: SerialNumber: syz [ 128.531599][ T6541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'. [ 128.563955][ T175] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 128.608256][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.740610][ T6545] syzkaller0: entered promiscuous mode [ 128.754451][ T6545] syzkaller0: entered allmulticast mode [ 129.564857][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 129.585665][ T6564] vlan2: entered allmulticast mode [ 129.680930][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 129.690189][ T10] ath9k_htc: Failed to initialize the device [ 129.757335][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 129.906753][ T6570] hsr0: VLAN not yet supported [ 130.710850][ T5822] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 130.941068][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 130.954202][ T5822] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 130.967655][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.988502][ T5822] pvrusb2: Hardware description: Terratec Grabster AV400 [ 131.006627][ T5822] pvrusb2: ********** [ 131.016679][ T5822] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 131.027528][ T5822] pvrusb2: Important functionality might not be entirely working. [ 131.035874][ T5822] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 131.048538][ T5822] pvrusb2: ********** [ 131.076960][ T10] usb 4-1: USB disconnect, device number 4 [ 131.204711][ T2322] pvrusb2: Invalid write control endpoint [ 131.363818][ T2322] pvrusb2: Invalid write control endpoint [ 131.369854][ T2322] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 131.417081][ T2322] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 131.427105][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 131.440540][ T27] usb 2-1: USB disconnect, device number 5 [ 131.446601][ T2322] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 131.480830][ T2322] pvrusb2: Device being rendered inoperable [ 131.487295][ T2322] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 131.520304][ T2322] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 131.547557][ T2322] pvrusb2: Attached sub-driver cx25840 [ 131.555800][ T2322] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 131.568992][ T2322] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 132.193371][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.3.300'. [ 133.196240][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.207205][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.313717][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.1.309'. [ 133.379815][ T6642] vlan2: entered allmulticast mode [ 133.610490][ T6646] 9pnet_virtio: no channels available for device syz [ 134.182157][ T27] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 134.387357][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 134.409498][ T27] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 134.424391][ T27] usb 4-1: can't read configurations, error -71 [ 135.720447][ T6666] syz.1.318[6666]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 135.734278][ T6666] process 'syz.1.318' launched '/dev/fd/3' with NULL argv: empty string added [ 135.908321][ T6670] netlink: 64 bytes leftover after parsing attributes in process `syz.2.319'. [ 135.965001][ T6674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'. [ 136.004142][ T6674] vlan2: entered allmulticast mode [ 137.105040][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 137.128415][ T6702] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.138503][ T6702] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.147485][ T6702] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.156300][ T6702] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.167792][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 137.177479][ T6702] Zero length message leads to an empty skb [ 137.265037][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 137.282811][ T6705] vlan2: entered allmulticast mode [ 137.484065][ T6711] random: crng reseeded on system resumption [ 138.715329][ T6727] 9pnet_virtio: no channels available for device syz [ 139.047271][ T6734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 139.067395][ T6734] vlan2: entered allmulticast mode [ 139.559179][ T5783] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 139.706706][ T6687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.091129][ T175] IPVS: starting estimator thread 0... [ 140.190967][ T6761] IPVS: using max 22 ests per chain, 52800 per kthread [ 140.308753][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'. [ 140.944161][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.362'. [ 140.970968][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 140.991257][ T6780] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.000129][ T6780] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.009167][ T6780] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.018028][ T6780] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.163919][ T6782] random: crng reseeded on system resumption [ 141.343085][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.364'. [ 141.372405][ T6790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'. [ 141.845638][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.369'. [ 142.198070][ T6812] xt_hashlimit: size too large, truncated to 1048576 [ 142.431402][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.374'. [ 142.477618][ T6817] vlan2: entered allmulticast mode [ 144.121265][ T3384] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 144.220798][ T5822] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.351906][ T3384] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 144.359429][ T3384] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 144.380867][ T3384] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.400763][ T3384] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 144.440821][ T3384] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 144.440855][ T5822] usb 2-1: Using ep0 maxpacket: 8 [ 144.472042][ T5822] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.485138][ T3384] usb 3-1: config 168 interface 0 has no altsetting 0 [ 144.490885][ T5822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.511256][ T3384] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 144.516095][ T5822] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.518742][ T3384] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 144.575365][ T3384] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.581089][ T5822] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.614088][ T3384] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 144.632551][ T3384] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 144.652511][ T5822] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.676859][ T3384] usb 3-1: config 168 interface 0 has no altsetting 0 [ 144.690769][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.707115][ T3384] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 144.740866][ T3384] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 144.781165][ T3384] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.994929][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.009314][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.019542][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.030700][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.038951][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.046842][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.065732][ T3384] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 145.077108][ T3384] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 145.098155][ T5822] usb 2-1: GET_CAPABILITIES returned 0 [ 145.111775][ T5822] usbtmc 2-1:16.0: can't read capabilities [ 145.130831][ T3384] usb 3-1: config 168 interface 0 has no altsetting 0 [ 145.152200][ T3384] usb 3-1: string descriptor 0 read error: -22 [ 145.168944][ T3384] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 145.181225][ T3384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.203236][ T3384] adutux 3-1:168.0: interrupt endpoints not found [ 145.334342][ T5822] usb 2-1: USB disconnect, device number 6 [ 145.361017][ T1124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.419231][ T3384] usb 3-1: USB disconnect, device number 6 [ 145.474602][ T1124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.536707][ T6840] chnl_net:caif_netlink_parms(): no params data found [ 145.564491][ T1124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.692123][ T1124] team0: Port device netdevsim0 removed [ 145.708194][ T1124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.794775][ T6840] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.802630][ T6840] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.810019][ T6840] bridge_slave_0: entered allmulticast mode [ 145.820374][ T6840] bridge_slave_0: entered promiscuous mode [ 145.833876][ T5776] Bluetooth: hci3: ISO packet too small [ 145.863191][ T6840] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.875552][ T6840] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.903157][ T6840] bridge_slave_1: entered allmulticast mode [ 145.928500][ T6840] bridge_slave_1: entered promiscuous mode [ 146.098756][ T6840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.142279][ T6840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.355074][ T6840] team0: Port device team_slave_0 added [ 146.378965][ T175] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.402862][ T6840] team0: Port device team_slave_1 added [ 146.508722][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.591428][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.642127][ T175] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.656621][ T175] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 146.688170][ T6840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.700573][ T175] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.722594][ T175] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 146.743201][ T1124] tipc: Left network mode [ 146.749428][ T6840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.776349][ T6840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.820934][ T175] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.873076][ T175] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.889199][ T175] usb 2-1: Product: syz [ 146.895218][ T175] usb 2-1: Manufacturer: syz [ 146.900078][ T6840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.912666][ T6854] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 146.939458][ T175] cdc_wdm 2-1:1.0: skipping garbage [ 146.956261][ T175] cdc_wdm 2-1:1.0: skipping garbage [ 146.963543][ T175] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 147.110817][ T5776] Bluetooth: hci2: command tx timeout [ 147.199737][ T6840] hsr_slave_0: entered promiscuous mode [ 147.218558][ T6840] hsr_slave_1: entered promiscuous mode [ 147.225535][ T6840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.233599][ T6840] Cannot create hsr debugfs directory [ 147.569962][ T6863] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.578412][ T5820] IPVS: starting estimator thread 0... [ 147.681386][ T6879] IPVS: using max 16 ests per chain, 38400 per kthread [ 149.094991][ T5820] usb 2-1: USB disconnect, device number 7 [ 149.191007][ T5776] Bluetooth: hci2: command tx timeout [ 149.571014][ T1124] hsr_slave_0: left promiscuous mode [ 149.611105][ T1124] hsr_slave_1: left promiscuous mode [ 149.653814][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.679631][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.707394][ T1124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.731051][ T1124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.759831][ T1124] bridge_slave_1: left allmulticast mode [ 149.782045][ T1124] bridge_slave_1: left promiscuous mode [ 149.789526][ T1124] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.850076][ T1124] bridge_slave_0: left allmulticast mode [ 149.869772][ T1124] bridge_slave_0: left promiscuous mode [ 149.878677][ T1124] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.960648][ T1124] veth1_macvtap: left promiscuous mode [ 149.975817][ T1124] veth0_macvtap: left promiscuous mode [ 150.001167][ T1124] veth1_vlan: left promiscuous mode [ 150.017139][ T1124] veth0_vlan: left promiscuous mode [ 150.111352][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.332995][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.342259][ T10] usb 3-1: config 0 has no interface number 0 [ 150.348686][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.364608][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.390491][ T10] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 150.417778][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.454510][ T10] usb 3-1: config 0 descriptor?? [ 150.966382][ T10] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0001/input/input10 [ 151.123448][ T10] holtek_kbd 0003:04D9:A055.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 151.175201][ T10] usb 3-1: USB disconnect, device number 7 [ 151.276720][ T5776] Bluetooth: hci2: command tx timeout [ 151.302946][ T6927] fido_id[6927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 151.377620][ T1124] team0 (unregistering): Port device team_slave_1 removed [ 151.433092][ T1124] team0 (unregistering): Port device team_slave_0 removed [ 151.482572][ T1124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.529744][ T1124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.989478][ T1124] bond0 (unregistering): Released all slaves [ 152.070024][ T6840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.122326][ T6926] IPVS: Error connecting to the multicast addr [ 152.137154][ T6840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.164799][ T6840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.220111][ T6840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.569743][ T6840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.636770][ T6840] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.692979][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.700376][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.836049][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.843344][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.350940][ T5776] Bluetooth: hci2: command tx timeout [ 153.817096][ T6840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.640494][ T6840] veth0_vlan: entered promiscuous mode [ 155.713997][ T6840] veth1_vlan: entered promiscuous mode [ 155.825287][ T6840] veth0_macvtap: entered promiscuous mode [ 155.867904][ T6840] veth1_macvtap: entered promiscuous mode [ 155.949468][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.970240][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.991363][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.030784][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.052733][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.079378][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.124926][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.150823][ T6840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.180842][ T6840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.216442][ T6840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.249070][ T6840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.283764][ T6840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.310932][ T6840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.334507][ T6840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.563914][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.586914][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.823452][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.851499][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.823196][ T7056] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 157.876429][ T7056] vlan2: entered allmulticast mode [ 157.904991][ T7056] bridge0: entered allmulticast mode [ 159.821046][ T7101] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 159.933304][ T7101] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.586765][ T7145] netlink: 'syz.2.467': attribute type 1 has an invalid length. [ 161.698956][ T7145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.646278][ T7192] netlink: 'syz.1.482': attribute type 1 has an invalid length. [ 163.803114][ T7192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.890969][ T7199] vlan2: entered allmulticast mode [ 165.443737][ T28] audit: type=1326 audit(1782825675.507:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7217 comm="syz.3.491" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb3df9ce59 code=0x0 [ 165.925100][ T7249] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 166.006929][ T7249] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.344415][ T7249] vlan2: entered allmulticast mode [ 168.655811][ T7304] netlink: 'syz.3.514': attribute type 1 has an invalid length. [ 168.945312][ T7304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.211030][ T5820] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 171.403916][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 171.416618][ T5820] usb 3-1: config index 0 descriptor too short (expected 15270, got 18) [ 171.419796][ T7360] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 171.438677][ T5820] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 171.454675][ T7358] syzkaller0: entered promiscuous mode [ 171.460787][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.462818][ T7358] syzkaller0: entered allmulticast mode [ 171.468849][ T5820] usb 3-1: Product: syz [ 171.468870][ T5820] usb 3-1: Manufacturer: syz [ 171.500775][ T5763] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.510003][ T5820] usb 3-1: SerialNumber: syz [ 171.526527][ T5820] usb 3-1: config 0 descriptor?? [ 171.539898][ T5820] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 171.569953][ T5820] dvb-usb: bulk message failed: -22 (4/0) [ 171.583116][ T5820] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 171.615803][ T5820] dvb-usb: bulk message failed: -22 (5/0) [ 171.625948][ T5820] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 171.655836][ T5820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.677431][ T5820] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 171.694483][ T5820] usb 3-1: media controller created [ 171.701078][ T5763] usb 2-1: Using ep0 maxpacket: 8 [ 171.715335][ T5763] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 171.740715][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 171.768505][ T5763] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 171.792964][ T5763] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 171.802458][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.846435][ T5763] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 171.859240][ T5820] usb 3-1: selecting invalid altsetting 3 [ 171.866795][ T5763] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.873840][ T5820] ttusb2: set interface to alts=3 failed [ 172.164405][ T5763] usb 2-1: GET_CAPABILITIES returned 0 [ 172.210154][ T5763] usbtmc 2-1:16.0: can't read capabilities [ 172.805501][ T5763] usb 2-1: USB disconnect, device number 8 [ 172.933793][ T5820] DVB: Unable to find symbol tda10086_attach() [ 172.940048][ T5820] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 172.952682][ T5820] dvb-usb: bulk message failed: -22 (4/0) [ 172.958524][ T5820] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 172.975505][ T5820] dvb-usb: bulk message failed: -22 (5/0) [ 172.990755][ T5820] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 173.002349][ T5820] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 173.039179][ T5820] usb 3-1: USB disconnect, device number 8 [ 173.213676][ T5820] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 173.557484][ T7386] syzkaller0: entered promiscuous mode [ 173.582719][ T7386] syzkaller0: entered allmulticast mode [ 173.878535][ T7395] netlink: 'syz.4.538': attribute type 1 has an invalid length. [ 174.490893][ T5763] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 174.693331][ T5763] usb 5-1: Using ep0 maxpacket: 32 [ 174.814024][ T5763] usb 5-1: config index 0 descriptor too short (expected 15270, got 18) [ 175.102339][ T5763] usb 5-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 175.141574][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.170820][ T5763] usb 5-1: Product: syz [ 175.175158][ T5763] usb 5-1: Manufacturer: syz [ 175.179799][ T5763] usb 5-1: SerialNumber: syz [ 175.241863][ T5763] usb 5-1: config 0 descriptor?? [ 175.331113][ T5763] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 175.370971][ T5763] dvb-usb: bulk message failed: -22 (4/0) [ 175.376800][ T5763] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 175.414331][ T5763] dvb-usb: bulk message failed: -22 (5/0) [ 175.420154][ T5763] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 175.457197][ T5763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 175.509831][ T5763] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 175.544816][ T5763] usb 5-1: media controller created [ 175.700581][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.739490][ T5763] usb 5-1: selecting invalid altsetting 3 [ 175.785330][ T5763] ttusb2: set interface to alts=3 failed [ 176.447197][ T5763] DVB: Unable to find symbol tda10086_attach() [ 176.477493][ T5763] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 176.567323][ T5763] dvb-usb: bulk message failed: -22 (4/0) [ 176.589423][ T5763] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 176.621455][ T5763] dvb-usb: bulk message failed: -22 (5/0) [ 176.627282][ T5763] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 176.649072][ T5763] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 176.695107][ T5763] usb 5-1: USB disconnect, device number 2 [ 176.797617][ T5763] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 176.970302][ T7443] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 177.005244][ T7443] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.762184][ T3384] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 177.950937][ T3384] usb 5-1: Using ep0 maxpacket: 8 [ 177.972281][ T3384] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 177.985282][ T3384] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 177.997762][ T3384] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.009367][ T3384] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.027410][ T3384] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.038045][ T3384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.267668][ T3384] usb 5-1: GET_CAPABILITIES returned 0 [ 178.275040][ T3384] usbtmc 5-1:16.0: can't read capabilities [ 178.488308][ T5763] usb 5-1: USB disconnect, device number 3 [ 178.635818][ T7487] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 178.663333][ T7487] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.715273][ T7515] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 179.766567][ T7515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 179.918282][ T7522] syzkaller0: entered promiscuous mode [ 179.925969][ T7522] syzkaller0: entered allmulticast mode [ 180.373574][ T7537] tipc: Started in network mode [ 180.380156][ T7537] tipc: Node identity c243b477a62a, cluster identity 4711 [ 180.398629][ T7537] tipc: Enabled bearer , priority 0 [ 180.422157][ T7537] syzkaller0: entered promiscuous mode [ 180.427727][ T7537] syzkaller0: entered allmulticast mode [ 180.441154][ T7537] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 180.464711][ T7537] tipc: Resetting bearer [ 180.482136][ T7536] tipc: Resetting bearer [ 180.500890][ T5820] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.542278][ T7536] tipc: Disabling bearer [ 180.567216][ T7541] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 180.606099][ T7541] 8021q: adding VLAN 0 to HW filter on device bond5 [ 180.690894][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 180.702431][ T5820] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 180.714372][ T5820] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 180.723915][ T5820] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 180.734432][ T5820] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 180.743931][ T5820] usb 5-1: config 250 has no interface number 0 [ 180.756288][ T5820] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 180.768892][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 180.787936][ T5820] usb 5-1: Product: syz [ 180.794782][ T5820] usb 5-1: SerialNumber: syz [ 180.822701][ T5820] hub 5-1:250.228: bad descriptor, ignoring hub [ 180.829055][ T5820] hub: probe of 5-1:250.228 failed with error -5 [ 180.898341][ T7550] syzkaller0: entered promiscuous mode [ 180.904192][ T7550] syzkaller0: entered allmulticast mode [ 181.491697][ T5763] usb 5-1: USB disconnect, device number 4 [ 181.978067][ T7581] netlink: 'syz.1.591': attribute type 1 has an invalid length. [ 182.049371][ T7581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.117150][ T7587] tipc: Enabled bearer , priority 0 [ 182.153481][ T7583] syzkaller0: entered promiscuous mode [ 182.159291][ T7583] syzkaller0: entered allmulticast mode [ 182.172517][ T7583] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 182.325780][ T7587] tipc: Resetting bearer [ 182.373125][ T7582] tipc: Resetting bearer [ 182.431863][ T7582] tipc: Disabling bearer [ 182.479252][ T7596] syzkaller0: entered promiscuous mode [ 182.497782][ T7596] syzkaller0: entered allmulticast mode [ 183.385802][ T7638] netlink: 'syz.4.603': attribute type 1 has an invalid length. [ 183.448637][ T7638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.948016][ T7658] tipc: Enabled bearer , priority 0 [ 183.958519][ T7658] syzkaller0: entered promiscuous mode [ 183.980271][ T7658] syzkaller0: entered allmulticast mode [ 184.000034][ T7658] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 184.051417][ T7658] tipc: Resetting bearer [ 184.081494][ T7657] tipc: Resetting bearer [ 184.123335][ T7657] tipc: Disabling bearer [ 184.328704][ T7670] syzkaller0: entered promiscuous mode [ 184.334592][ T7670] syzkaller0: entered allmulticast mode [ 184.843170][ T7690] netlink: 'syz.2.613': attribute type 1 has an invalid length. [ 184.897406][ T7690] 8021q: adding VLAN 0 to HW filter on device bond6 [ 185.918922][ T7732] tipc: Started in network mode [ 185.924210][ T7732] tipc: Node identity bafa7cb1af4d, cluster identity 4711 [ 185.933129][ T7732] tipc: Enabled bearer , priority 0 [ 185.941321][ T7732] syzkaller0: entered promiscuous mode [ 185.947024][ T7732] syzkaller0: entered allmulticast mode [ 185.956490][ T7732] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 185.995232][ T7732] tipc: Resetting bearer [ 186.006041][ T7731] tipc: Resetting bearer [ 186.028481][ T7731] tipc: Disabling bearer [ 186.159934][ T7734] syzkaller0: entered promiscuous mode [ 186.165638][ T7734] syzkaller0: entered allmulticast mode [ 186.528905][ T7743] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 186.560312][ T7743] 8021q: adding VLAN 0 to HW filter on device bond3 [ 187.208727][ T7750] syzkaller0: entered promiscuous mode [ 187.215245][ T7750] syzkaller0: entered allmulticast mode [ 190.716894][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.726648][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.736436][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.747049][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.754999][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.762982][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.946814][ T7759] chnl_net:caif_netlink_parms(): no params data found [ 191.026534][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.034823][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.042574][ T7759] bridge_slave_0: entered allmulticast mode [ 191.049742][ T7759] bridge_slave_0: entered promiscuous mode [ 191.059537][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.067833][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.076588][ T7759] bridge_slave_1: entered allmulticast mode [ 191.084299][ T7759] bridge_slave_1: entered promiscuous mode [ 191.116730][ T7759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.130240][ T7759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.167358][ T7759] team0: Port device team_slave_0 added [ 191.176049][ T7759] team0: Port device team_slave_1 added [ 191.207002][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.214064][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.240155][ T7759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.253265][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.260273][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.286482][ T7759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.335640][ T7759] hsr_slave_0: entered promiscuous mode [ 191.343850][ T7759] hsr_slave_1: entered promiscuous mode [ 191.518926][ T7759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.530951][ T7759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.541996][ T7759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.553448][ T7759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.589047][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.596376][ T7759] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.604027][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.612137][ T7759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.680402][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.703521][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.713859][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.739100][ T7759] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.759125][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.766389][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.777618][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.784928][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.854713][ T7759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.049334][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.310520][ T7759] veth0_vlan: entered promiscuous mode [ 192.326574][ T7759] veth1_vlan: entered promiscuous mode [ 192.361589][ T7759] veth0_macvtap: entered promiscuous mode [ 192.373396][ T7759] veth1_macvtap: entered promiscuous mode [ 192.397760][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.409688][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.424486][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.435428][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.445453][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.456151][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.470196][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.486494][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.497303][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.507766][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.518729][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.528695][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.540063][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.552606][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.566995][ T7759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.577871][ T7759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.587385][ T7759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.596956][ T7759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.676797][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.696225][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.727714][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.736600][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.792042][ T5783] Bluetooth: hci3: command tx timeout [ 192.846934][ T7778] tipc: Started in network mode [ 192.852102][ T7778] tipc: Node identity 1a3c9e23a5f3, cluster identity 4711 [ 192.859340][ T7778] tipc: Enabled bearer , priority 0 [ 192.867542][ T7778] syzkaller0: entered promiscuous mode [ 192.873813][ T7778] syzkaller0: entered allmulticast mode [ 192.888889][ T7778] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 192.909796][ T7778] tipc: Resetting bearer [ 192.923736][ T7777] tipc: Resetting bearer [ 192.947637][ T7777] tipc: Disabling bearer [ 193.350148][ T7790] netlink: 'syz.5.633': attribute type 1 has an invalid length. [ 194.024554][ T7795] syzkaller0: entered promiscuous mode [ 194.030118][ T7795] syzkaller0: entered allmulticast mode [ 194.634929][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.641363][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.870882][ T5783] Bluetooth: hci3: command tx timeout [ 196.951418][ T5783] Bluetooth: hci3: command tx timeout [ 199.030799][ T5783] Bluetooth: hci3: command tx timeout [ 200.069500][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.079469][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.092982][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.103671][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.118254][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.125964][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.306733][ T7800] chnl_net:caif_netlink_parms(): no params data found [ 200.390290][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.398487][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.406112][ T7800] bridge_slave_0: entered allmulticast mode [ 200.413823][ T7800] bridge_slave_0: entered promiscuous mode [ 200.423852][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.431289][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.438556][ T7800] bridge_slave_1: entered allmulticast mode [ 200.446583][ T7800] bridge_slave_1: entered promiscuous mode [ 200.481061][ T7800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.494925][ T7800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.530899][ T7800] team0: Port device team_slave_0 added [ 200.541274][ T7800] team0: Port device team_slave_1 added [ 200.570641][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.577852][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.603988][ T7800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.616960][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.624050][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.651416][ T7800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.702092][ T7800] hsr_slave_0: entered promiscuous mode [ 200.708826][ T7800] hsr_slave_1: entered promiscuous mode [ 200.717667][ T7800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.725364][ T7800] Cannot create hsr debugfs directory [ 200.901447][ T7800] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.912852][ T7800] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.923750][ T7800] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.935523][ T7800] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.967371][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.974621][ T7800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.982339][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.989599][ T7800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.039640][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.049236][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.089606][ T7800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.114681][ T7800] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.128902][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.136119][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.173174][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.180398][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.803719][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.906000][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 201.915819][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 201.927288][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 201.936982][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 201.945050][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 201.961151][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 202.117359][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.130719][ T1142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.151426][ T5776] Bluetooth: hci0: command tx timeout [ 202.229697][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.247862][ T1142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.351325][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.364170][ T1142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.456680][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 202.469607][ T1142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.530339][ T7800] veth0_vlan: entered promiscuous mode [ 202.578585][ T7800] veth1_vlan: entered promiscuous mode [ 202.623797][ T7800] veth0_macvtap: entered promiscuous mode [ 202.637026][ T7800] veth1_macvtap: entered promiscuous mode [ 202.660356][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.671861][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.682919][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.693723][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.704062][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.716113][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.726381][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.737415][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.749369][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.764561][ T7817] chnl_net:caif_netlink_parms(): no params data found [ 202.822473][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.833476][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.846134][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.857352][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.867982][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.880139][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.890187][ T7800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.900986][ T7800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.912565][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.968573][ T7800] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.994423][ T7800] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.005870][ T7800] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.015423][ T7800] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.146446][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.155881][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.165124][ T7817] bridge_slave_0: entered allmulticast mode [ 203.173198][ T7817] bridge_slave_0: entered promiscuous mode [ 203.182472][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.191559][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.198920][ T7817] bridge_slave_1: entered allmulticast mode [ 203.206774][ T7817] bridge_slave_1: entered promiscuous mode [ 203.239217][ T1142] tipc: Left network mode [ 203.259848][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.319066][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.612256][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.620253][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.665332][ T7817] team0: Port device team_slave_0 added [ 203.748519][ T7817] team0: Port device team_slave_1 added [ 203.792240][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.802389][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.922762][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.929792][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.964031][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.044043][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.069064][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.096833][ T5776] Bluetooth: hci1: command tx timeout [ 204.104638][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.232682][ T5776] Bluetooth: hci0: command tx timeout [ 204.486501][ T7817] hsr_slave_0: entered promiscuous mode [ 204.520147][ T7817] hsr_slave_1: entered promiscuous mode [ 204.602738][ T7817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.610471][ T7817] Cannot create hsr debugfs directory [ 204.961174][ T7855] netlink: 'syz.6.642': attribute type 1 has an invalid length. [ 205.137682][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 205.147868][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 205.158255][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 205.167016][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 205.177624][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 205.185317][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.434997][ T7862] syzkaller0: entered promiscuous mode [ 205.449454][ T7862] syzkaller0: entered allmulticast mode [ 205.784179][ T1142] hsr_slave_0: left promiscuous mode [ 205.792460][ T1142] hsr_slave_1: left promiscuous mode [ 205.799516][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.809966][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.819696][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.828826][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.838646][ T1142] bridge_slave_1: left allmulticast mode [ 205.844433][ T1142] bridge_slave_1: left promiscuous mode [ 205.852272][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.863814][ T1142] bridge_slave_0: left allmulticast mode [ 205.869490][ T1142] bridge_slave_0: left promiscuous mode [ 205.876414][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.910268][ T1142] veth1_macvtap: left promiscuous mode [ 205.916954][ T1142] veth0_macvtap: left promiscuous mode [ 205.923386][ T1142] veth1_vlan: left promiscuous mode [ 205.929069][ T1142] veth0_vlan: left promiscuous mode [ 206.152787][ T5776] Bluetooth: hci1: command tx timeout [ 206.312036][ T5776] Bluetooth: hci0: command tx timeout [ 206.366146][ T1142] bond6 (unregistering): Released all slaves [ 206.497521][ T1142] bond5 (unregistering): Released all slaves [ 206.630459][ T1142] bond4 (unregistering): Released all slaves [ 206.762510][ T1142] bond3 (unregistering): Released all slaves [ 206.897290][ T1142] bond2 (unregistering): Released all slaves [ 207.025561][ T1142] bond1 (unregistering): Released all slaves [ 207.061215][ T1142] team0 (unregistering): Port device vlan2 removed [ 207.278540][ T5776] Bluetooth: hci2: command tx timeout [ 207.583954][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 207.648878][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 207.698937][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.747819][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.132127][ T1142] bond0 (unregistering): Released all slaves [ 208.231112][ T5776] Bluetooth: hci1: command tx timeout [ 208.400744][ T5776] Bluetooth: hci0: command tx timeout [ 208.539802][ T7817] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 208.588533][ T7817] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 208.621744][ T7817] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 208.645320][ T7817] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 208.900095][ T1142] IPVS: stop unused estimator thread 0... [ 208.941707][ T7859] chnl_net:caif_netlink_parms(): no params data found [ 209.146766][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.212444][ T1142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.236612][ T7859] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.249057][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.257013][ T7859] bridge_slave_0: entered allmulticast mode [ 209.275984][ T7859] bridge_slave_0: entered promiscuous mode [ 209.323817][ T1142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.342844][ T7859] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.350241][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.357532][ T5776] Bluetooth: hci2: command tx timeout [ 209.366497][ T7859] bridge_slave_1: entered allmulticast mode [ 209.376137][ T7859] bridge_slave_1: entered promiscuous mode [ 209.432251][ T1142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.535711][ T1142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.556238][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.566332][ T7859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.580916][ T7859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.646663][ T2985] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.654259][ T2985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.665551][ T2985] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.672797][ T2985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.696037][ T7859] team0: Port device team_slave_0 added [ 209.706426][ T7859] team0: Port device team_slave_1 added [ 209.783763][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.794189][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.820532][ T7859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.872996][ T7859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.880012][ T7859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.916870][ T7859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.103626][ T7859] hsr_slave_0: entered promiscuous mode [ 210.132775][ T7859] hsr_slave_1: entered promiscuous mode [ 210.155753][ T7859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.170337][ T7859] Cannot create hsr debugfs directory [ 210.302842][ T1142] tipc: Left network mode [ 210.311881][ T5776] Bluetooth: hci1: command tx timeout [ 211.094583][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.325335][ T7859] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 211.386806][ T7859] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 211.410319][ T7859] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 211.441762][ T5776] Bluetooth: hci2: command tx timeout [ 211.478235][ T7859] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 211.869974][ T1142] hsr_slave_0: left promiscuous mode [ 211.884669][ T1142] hsr_slave_1: left promiscuous mode [ 211.894582][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.909290][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.923166][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.931026][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.939234][ T1142] bridge_slave_1: left allmulticast mode [ 211.953440][ T1142] bridge_slave_1: left promiscuous mode [ 211.959268][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.977063][ T1142] bridge_slave_0: left allmulticast mode [ 211.987774][ T1142] bridge_slave_0: left promiscuous mode [ 212.000129][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.068653][ T1142] veth1_macvtap: left promiscuous mode [ 212.075392][ T1142] veth0_macvtap: left promiscuous mode [ 212.082555][ T1142] veth1_vlan: left promiscuous mode [ 212.087993][ T1142] veth0_vlan: left promiscuous mode [ 212.428983][ T1142] bond3 (unregistering): Released all slaves [ 212.577499][ T1142] bond2 (unregistering): Released all slaves [ 212.854444][ T1142] bond1 (unregistering): Released all slaves [ 213.179888][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.190502][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.203276][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.221361][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.231478][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.238923][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.511806][ T5783] Bluetooth: hci2: command tx timeout [ 213.747246][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 213.796453][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 213.850371][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.905576][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.309448][ T1142] bond0 (unregistering): Released all slaves [ 214.534002][ T7817] veth0_vlan: entered promiscuous mode [ 214.577797][ T7859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.688498][ T7817] veth1_vlan: entered promiscuous mode [ 214.715835][ T7859] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.770216][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.777450][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.828362][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.835757][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.923544][ T7817] veth0_macvtap: entered promiscuous mode [ 215.026627][ T7817] veth1_macvtap: entered promiscuous mode [ 215.107358][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.151587][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.183341][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.209408][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.226457][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.237468][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.257653][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.300514][ T7953] chnl_net:caif_netlink_parms(): no params data found [ 215.351120][ T5783] Bluetooth: hci4: command tx timeout [ 215.377916][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.412989][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.434586][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.461910][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.480583][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.507373][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.534558][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.608410][ T7817] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.618010][ T7817] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.628786][ T7817] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.638104][ T7817] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.696370][ T1142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.815945][ T1142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.886782][ T7953] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.905513][ T7953] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.916975][ T7953] bridge_slave_0: entered allmulticast mode [ 215.924782][ T7953] bridge_slave_0: entered promiscuous mode [ 215.969253][ T1142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.000924][ T7953] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.008210][ T7953] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.025798][ T7953] bridge_slave_1: entered allmulticast mode [ 216.037382][ T7953] bridge_slave_1: entered promiscuous mode [ 216.098693][ T1142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.139376][ T7953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.161504][ T7859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.213476][ T7953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.306694][ T7953] team0: Port device team_slave_0 added [ 216.333108][ T7953] team0: Port device team_slave_1 added [ 216.367418][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.377357][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.409421][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.416783][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.443498][ T7953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.457284][ T7953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.467052][ T7953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.493834][ T7953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.737372][ T7953] hsr_slave_0: entered promiscuous mode [ 216.752591][ T7953] hsr_slave_1: entered promiscuous mode [ 216.759402][ T7953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.776029][ T7953] Cannot create hsr debugfs directory [ 216.807254][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.819677][ T1142] tipc: Left network mode [ 216.841916][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.321875][ T7995] tipc: Started in network mode [ 217.326865][ T7995] tipc: Node identity e2acc7e30a82, cluster identity 4711 [ 217.348370][ T7995] tipc: Enabled bearer , priority 0 [ 217.375714][ T7992] syzkaller0: entered promiscuous mode [ 217.390857][ T7992] syzkaller0: entered allmulticast mode [ 217.440144][ T7859] veth0_vlan: entered promiscuous mode [ 217.446730][ T5783] Bluetooth: hci4: command tx timeout [ 217.472542][ T7995] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 217.580113][ T7992] tipc: Resetting bearer [ 217.611233][ T7991] tipc: Resetting bearer [ 217.663430][ T7991] tipc: Disabling bearer [ 217.730305][ T7859] veth1_vlan: entered promiscuous mode [ 217.979280][ T8006] netlink: 'syz.7.649': attribute type 1 has an invalid length. [ 217.990480][ T7953] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 218.048122][ T7953] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 218.096021][ T7953] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 218.166876][ T7953] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 218.200156][ T7859] veth0_macvtap: entered promiscuous mode [ 218.226309][ T8008] syzkaller0: entered promiscuous mode [ 218.236243][ T8008] syzkaller0: entered allmulticast mode [ 218.337921][ T7859] veth1_macvtap: entered promiscuous mode [ 218.509320][ T1142] hsr_slave_0: left promiscuous mode [ 218.522003][ T1142] hsr_slave_1: left promiscuous mode [ 218.532175][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.539809][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.560088][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.568923][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.577494][ T1142] bridge_slave_1: left allmulticast mode [ 218.585687][ T1142] bridge_slave_1: left promiscuous mode [ 218.592151][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.602999][ T1142] bridge_slave_0: left allmulticast mode [ 218.608892][ T1142] bridge_slave_0: left promiscuous mode [ 218.617253][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.657027][ T1142] veth1_macvtap: left promiscuous mode [ 218.662876][ T1142] veth0_macvtap: left promiscuous mode [ 218.682299][ T1142] veth1_vlan: left promiscuous mode [ 218.687743][ T1142] veth0_vlan: left promiscuous mode [ 219.518047][ T5783] Bluetooth: hci4: command tx timeout [ 219.766923][ T1142] team0 (unregistering): Port device team_slave_1 removed [ 219.818015][ T1142] team0 (unregistering): Port device team_slave_0 removed [ 219.869480][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.928301][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.348644][ T1142] bond0 (unregistering): Released all slaves [ 220.463712][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.474993][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.487015][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.498998][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.509401][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.520577][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.532642][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.603505][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.635325][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.647216][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.660190][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.670502][ T7859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.689034][ T7859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.707521][ T7859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.753620][ T7859] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.775941][ T7859] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.785343][ T7859] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.806405][ T7859] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.107746][ T7953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.183242][ T7953] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.203231][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.216730][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.223993][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.241946][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.310289][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.316739][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.325408][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.336843][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.590905][ T5783] Bluetooth: hci4: command tx timeout [ 221.727408][ T8059] qrtr: Invalid version 0 [ 221.926125][ T8065] netlink: 'syz.8.656': attribute type 1 has an invalid length. [ 221.954961][ T7953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.102683][ T8070] syzkaller0: entered promiscuous mode [ 222.108738][ T8070] syzkaller0: entered allmulticast mode [ 222.673766][ T7953] veth0_vlan: entered promiscuous mode [ 222.705268][ T7953] veth1_vlan: entered promiscuous mode [ 222.769612][ T7953] veth0_macvtap: entered promiscuous mode [ 222.783641][ T7953] veth1_macvtap: entered promiscuous mode [ 222.810749][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.823289][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.838359][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.854406][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.865254][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.877352][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.887748][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.899419][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.915040][ T7953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.955288][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.973943][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.985016][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.995900][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.006173][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.020351][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.032080][ T7953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.047737][ T7953] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.064392][ T7953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.078165][ T7953] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.088283][ T7953] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.099406][ T7953] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.117884][ T7953] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.266028][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.286507][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.364985][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.401543][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.969260][ T8110] qrtr: Invalid version 0 [ 224.009522][ T8112] netlink: 'syz.9.664': attribute type 1 has an invalid length. [ 224.173882][ T8116] syzkaller0: entered promiscuous mode [ 224.180489][ T8116] syzkaller0: entered allmulticast mode [ 224.419370][ T8123] tipc: Started in network mode [ 224.424843][ T8123] tipc: Node identity 12843ac6636a, cluster identity 4711 [ 224.432367][ T8123] tipc: Enabled bearer , priority 0 [ 224.440313][ T8123] syzkaller0: entered promiscuous mode [ 224.446108][ T8123] syzkaller0: entered allmulticast mode [ 224.465019][ T8123] tipc: Resetting bearer [ 224.511227][ T8122] tipc: Resetting bearer [ 224.542016][ T8122] tipc: Disabling bearer [ 226.283982][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.310054][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.320033][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.331475][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.341456][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 226.351597][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.503177][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.687749][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.803462][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.904267][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.150367][ T8165] chnl_net:caif_netlink_parms(): no params data found [ 227.269255][ T49] tipc: Left network mode [ 227.425671][ T8165] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.441571][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.449027][ T8165] bridge_slave_0: entered allmulticast mode [ 227.472386][ T8165] bridge_slave_0: entered promiscuous mode [ 227.531167][ T8165] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.538422][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.555210][ T8165] bridge_slave_1: entered allmulticast mode [ 227.579680][ T8165] bridge_slave_1: entered promiscuous mode [ 227.645530][ T8165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.686396][ T8165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.777287][ T8165] team0: Port device team_slave_0 added [ 227.804151][ T8165] team0: Port device team_slave_1 added [ 227.873143][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.880161][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.909750][ T8165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.926986][ T8165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.936741][ T8165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.963180][ T8165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.145797][ T8165] hsr_slave_0: entered promiscuous mode [ 228.161898][ T8165] hsr_slave_1: entered promiscuous mode [ 228.391555][ T5776] Bluetooth: hci0: command tx timeout [ 228.738916][ T49] hsr_slave_0: left promiscuous mode [ 228.746881][ T49] hsr_slave_1: left promiscuous mode [ 228.753686][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.761447][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.769489][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.777596][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.795064][ T49] bridge_slave_1: left allmulticast mode [ 228.801422][ T49] bridge_slave_1: left promiscuous mode [ 228.807213][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.817633][ T49] bridge_slave_0: left allmulticast mode [ 228.824024][ T49] bridge_slave_0: left promiscuous mode [ 228.829833][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.859455][ T49] veth1_macvtap: left promiscuous mode [ 228.865184][ T49] veth0_macvtap: left promiscuous mode [ 228.872871][ T49] veth1_vlan: left promiscuous mode [ 228.878255][ T49] veth0_vlan: left promiscuous mode [ 229.566458][ T49] team0 (unregistering): Port device team_slave_1 removed [ 229.622095][ T49] team0 (unregistering): Port device team_slave_0 removed [ 229.669493][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.723815][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.093555][ T49] bond0 (unregistering): Released all slaves [ 230.473651][ T5776] Bluetooth: hci0: command tx timeout [ 230.804058][ T8165] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.815707][ T8165] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.834902][ T8165] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.852103][ T8165] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.019274][ T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.094292][ T8165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.158833][ T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.200593][ T8165] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.231937][ T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.288226][ T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.311793][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.318939][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.348359][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.355536][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.822846][ T8165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.934533][ T8165] veth0_vlan: entered promiscuous mode [ 231.953922][ T8165] veth1_vlan: entered promiscuous mode [ 232.016054][ T8165] veth0_macvtap: entered promiscuous mode [ 232.049941][ T8165] veth1_macvtap: entered promiscuous mode [ 232.079520][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.092928][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.103971][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.116273][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.126470][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.137095][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.147005][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.157688][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.170321][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.207938][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.219017][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.230431][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.243091][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.253277][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.264032][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.275566][ T8165] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.286322][ T8165] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.299949][ T8165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.338879][ T8165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.350106][ T8165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.359144][ T8165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.368069][ T8165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.520970][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.528876][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.550879][ T5776] Bluetooth: hci0: command tx timeout [ 232.619221][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.641481][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.682308][ T49] hsr_slave_0: left promiscuous mode [ 232.698618][ T49] hsr_slave_1: left promiscuous mode [ 232.706061][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.713799][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.732682][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.740167][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.780339][ T49] bridge_slave_1: left allmulticast mode [ 232.786196][ T49] bridge_slave_1: left promiscuous mode [ 232.800948][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.813700][ T49] bridge_slave_0: left allmulticast mode [ 232.819415][ T49] bridge_slave_0: left promiscuous mode [ 232.836310][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.918524][ T49] veth1_macvtap: left promiscuous mode [ 232.931108][ T49] veth0_macvtap: left promiscuous mode [ 232.959691][ T49] veth1_vlan: left promiscuous mode [ 232.987458][ T49] veth0_vlan: left promiscuous mode [ 233.375149][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 233.386792][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 233.401267][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 233.417023][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 233.425193][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 233.433506][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 234.040513][ T49] team0 (unregistering): Port device team_slave_1 removed [ 234.094402][ T49] team0 (unregistering): Port device team_slave_0 removed [ 234.155354][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.216099][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.591464][ T49] bond0 (unregistering): Released all slaves [ 234.632798][ T5776] Bluetooth: hci0: command tx timeout [ 234.722960][ T8228] netlink: 'syz.8.682': attribute type 1 has an invalid length. [ 234.741938][ T8230] vlan2: entered allmulticast mode [ 234.747172][ T8230] bridge0: entered allmulticast mode [ 235.359666][ T8237] chnl_net:caif_netlink_parms(): no params data found [ 235.507489][ T8237] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.516648][ T5776] Bluetooth: hci3: command tx timeout [ 235.526730][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.534587][ T8237] bridge_slave_0: entered allmulticast mode [ 235.542575][ T8237] bridge_slave_0: entered promiscuous mode [ 235.554417][ T8237] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.561903][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.569380][ T8237] bridge_slave_1: entered allmulticast mode [ 235.577884][ T8237] bridge_slave_1: entered promiscuous mode [ 235.620386][ T8237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.634597][ T8237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.679614][ T8237] team0: Port device team_slave_0 added [ 235.689073][ T8237] team0: Port device team_slave_1 added [ 235.727576][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.735104][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.763679][ T8237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.780285][ T8237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.787730][ T8237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.814294][ T8237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.947700][ T8237] hsr_slave_0: entered promiscuous mode [ 235.962090][ T8237] hsr_slave_1: entered promiscuous mode [ 235.968715][ T8237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.980762][ T8237] Cannot create hsr debugfs directory [ 236.183351][ T8267] tipc: Started in network mode [ 236.208398][ T8267] tipc: Node identity fe529ac1b6a1, cluster identity 4711 [ 236.234819][ T8267] tipc: Enabled bearer , priority 0 [ 236.276615][ T8267] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 236.402468][ T8268] tipc: Resetting bearer [ 236.468615][ T8270] netlink: 'syz.8.686': attribute type 1 has an invalid length. [ 236.528673][ T8266] tipc: Disabling bearer [ 236.944778][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 236.956122][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 236.964806][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 236.973513][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 236.985207][ T8278] syzkaller0: entered promiscuous mode [ 237.002549][ T8278] syzkaller0: entered allmulticast mode [ 237.008403][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 237.016013][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 237.246262][ T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.423265][ T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.644675][ T5776] Bluetooth: hci3: command tx timeout [ 238.115469][ T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.388985][ T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.747462][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 238.790433][ T8237] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 238.838631][ T8237] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 238.929704][ T8307] netlink: 'syz.8.694': attribute type 1 has an invalid length. [ 238.949813][ T8237] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 239.009928][ T8237] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 239.114592][ T5776] Bluetooth: hci1: command tx timeout [ 239.232994][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.240316][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.261995][ T8279] bridge_slave_0: entered allmulticast mode [ 239.269542][ T8279] bridge_slave_0: entered promiscuous mode [ 239.282943][ T34] tipc: Left network mode [ 239.296061][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.312540][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.319869][ T8279] bridge_slave_1: entered allmulticast mode [ 239.342798][ T8279] bridge_slave_1: entered promiscuous mode [ 239.523668][ T8318] syzkaller0: entered promiscuous mode [ 239.529225][ T8318] syzkaller0: entered allmulticast mode [ 239.751357][ T5776] Bluetooth: hci3: command tx timeout [ 239.830508][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.973222][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.183777][ T8279] team0: Port device team_slave_0 added [ 240.259414][ T8279] team0: Port device team_slave_1 added [ 240.452597][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.461886][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.497827][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.545829][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.566415][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.626373][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.819037][ T8237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.909072][ T8279] hsr_slave_0: entered promiscuous mode [ 240.928432][ T8279] hsr_slave_1: entered promiscuous mode [ 240.942461][ T8279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.973529][ T8279] Cannot create hsr debugfs directory [ 241.192222][ T5776] Bluetooth: hci1: command tx timeout [ 241.845358][ T8237] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.852445][ T5776] Bluetooth: hci3: command tx timeout [ 241.989699][ T8362] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 242.019530][ T8364] vlan2: entered allmulticast mode [ 242.038913][ T8364] bridge0: entered allmulticast mode [ 242.065392][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.072694][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.150238][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.157489][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.232159][ T34] hsr_slave_0: left promiscuous mode [ 242.238493][ T34] hsr_slave_1: left promiscuous mode [ 242.254944][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.262995][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.271628][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.279215][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.289296][ T34] bridge_slave_1: left allmulticast mode [ 242.295401][ T34] bridge_slave_1: left promiscuous mode [ 242.302057][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.313852][ T34] bridge_slave_0: left allmulticast mode [ 242.319560][ T34] bridge_slave_0: left promiscuous mode [ 242.326097][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.357134][ T34] veth1_macvtap: left promiscuous mode [ 242.363885][ T34] veth0_macvtap: left promiscuous mode [ 242.369579][ T34] veth1_vlan: left promiscuous mode [ 242.376122][ T34] veth0_vlan: left promiscuous mode [ 243.273905][ T5776] Bluetooth: hci1: command tx timeout [ 243.564895][ T34] team0 (unregistering): Port device team_slave_1 removed [ 243.649349][ T34] team0 (unregistering): Port device team_slave_0 removed [ 243.730605][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.782561][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.373383][ T34] bond0 (unregistering): Released all slaves [ 244.572709][ T8383] syzkaller0: entered promiscuous mode [ 244.578291][ T8383] syzkaller0: entered allmulticast mode [ 245.120886][ T8279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.140885][ T8279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.350835][ T5776] Bluetooth: hci1: command tx timeout [ 245.845268][ T8279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.909790][ T8279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.073737][ T8279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.091469][ T8279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.266871][ T8237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.430452][ T8279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.457672][ T8279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.870310][ T8279] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.915874][ T8279] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.967087][ T8279] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 248.006203][ T8279] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 248.098970][ T8451] overlayfs: missing 'lowerdir' [ 248.389508][ T8237] veth0_vlan: entered promiscuous mode [ 248.645674][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.814851][ T8237] veth1_vlan: entered promiscuous mode [ 249.063603][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.100399][ T8237] veth0_macvtap: entered promiscuous mode [ 249.214696][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.221979][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.267894][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.275271][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.318372][ T8237] veth1_macvtap: entered promiscuous mode [ 249.428065][ T8471] loop0: detected capacity change from 0 to 2048 [ 249.464515][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.488387][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.531446][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.561055][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.571299][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.585468][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.615679][ T8471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.638470][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.690490][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.736319][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.750069][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.769857][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.788991][ T8237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.800009][ T8237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.000440][ T8237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.466111][ T8237] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.531397][ T8237] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.540213][ T8237] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.615034][ T8237] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.014888][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.059066][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.205981][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.214411][ T8499] overlayfs: missing 'lowerdir' [ 251.259110][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.368749][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.513355][ T8279] veth0_vlan: entered promiscuous mode [ 252.575637][ T8279] veth1_vlan: entered promiscuous mode [ 252.703426][ T8279] veth0_macvtap: entered promiscuous mode [ 252.760059][ T8279] veth1_macvtap: entered promiscuous mode [ 252.821494][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.849008][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.892287][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.912776][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.928548][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.939451][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.959139][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.000300][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.048071][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.102807][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.148644][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.185806][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.217805][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.240914][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.253878][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.296589][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.318112][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.390380][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.426991][ T8279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.456362][ T8279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.490870][ T8279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.540597][ T8279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.637869][ T8541] loop9: detected capacity change from 0 to 2048 [ 253.696680][ T8541] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 253.827459][ T8545] overlayfs: missing 'workdir' [ 254.344323][ T8550] netlink: 24 bytes leftover after parsing attributes in process `syz.8.730'. [ 254.582773][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.634249][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.923447][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.977897][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.889834][ T8569] loop3: detected capacity change from 0 to 2048 [ 256.042093][ T8569] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 256.137939][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.232948][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.254248][ T8586] overlayfs: missing 'workdir' [ 257.459295][ T8583] syzkaller0: entered promiscuous mode [ 257.480882][ T8583] syzkaller0: entered allmulticast mode [ 257.629608][ T8596] loop8: detected capacity change from 0 to 2048 [ 257.738861][ T8596] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.067935][ T8603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.741'. [ 259.011094][ T8615] loop0: detected capacity change from 0 to 2048 [ 259.089851][ T8615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.862289][ T8643] overlayfs: missing 'workdir' [ 260.995550][ T8647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.750'. [ 261.189243][ T8649] loop0: detected capacity change from 0 to 2048 [ 261.235332][ T8649] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 263.775038][ T8640] netlink: 'syz.8.748': attribute type 1 has an invalid length. [ 263.792448][ T8640] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 263.804057][ T8644] netlink: 44 bytes leftover after parsing attributes in process `syz.8.748'. [ 263.828490][ T8653] netlink: 96 bytes leftover after parsing attributes in process `syz.0.752'. [ 264.207547][ T8672] loop3: detected capacity change from 0 to 2048 [ 264.274889][ T8672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.710477][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.8.759'. [ 264.919838][ T8686] loop0: detected capacity change from 0 to 2048 [ 264.992677][ T8686] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 266.029475][ T8697] syzkaller0: entered promiscuous mode [ 266.035848][ T8697] syzkaller0: entered allmulticast mode [ 268.635730][ T8702] netlink: 'syz.9.763': attribute type 1 has an invalid length. [ 268.643954][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.9.763'. [ 268.680774][ T8708] netlink: 96 bytes leftover after parsing attributes in process `syz.8.765'. [ 269.268802][ T8759] loop9: detected capacity change from 0 to 512 [ 269.318512][ T8756] loop0: detected capacity change from 0 to 2048 [ 269.394003][ T8756] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 269.435076][ T8759] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.541111][ T8759] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.281170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 272.051066][ T8783] capability: warning: `syz.3.774' uses 32-bit capabilities (legacy support in use) [ 272.382556][ T8786] overlayfs: failed to resolve './file0': -2 [ 273.841266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 275.040813][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.8.777'. [ 276.310948][ T5776] Bluetooth: hci1: SCO packet for unknown connection handle 1414 [ 276.369228][ T8806] input: syz1 as /devices/virtual/input/input11 [ 277.675610][ T8809] (null): rxe_set_mtu: Set mtu to 1024 [ 277.686883][ T8237] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.920736][ T28] audit: type=1326 audit(1782825788.977:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8823 comm="syz.0.781" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6734d9ce59 code=0x0 [ 281.933137][ T8842] CUSE: unknown device info "€" [ 281.969564][ T8842] CUSE: zero length info key specified [ 282.284377][ T8836] syz.9.780: attempt to access beyond end of device [ 282.284377][ T8836] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 282.297623][ T8836] exFAT-fs (nbd9): unable to read boot sector [ 282.303836][ T8836] exFAT-fs (nbd9): failed to read boot sector [ 282.309945][ T8836] exFAT-fs (nbd9): failed to recognize exfat type [ 282.996140][ T8842] loop0: detected capacity change from 0 to 32768 [ 283.164185][ T8842] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 283.300722][ T8842] XFS (loop0): Ending clean mount [ 283.329532][ T8842] XFS (loop0): Quotacheck needed: Please wait. [ 283.415908][ T8842] XFS (loop0): Quotacheck: Done. [ 283.909289][ T8860] XFS (loop0): User initiated shutdown received. [ 284.031012][ T8860] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 284.170898][ T8860] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 284.436690][ T8842] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 285.336004][ T8809] infiniband syz0: set active [ 285.430968][ T8809] infiniband syz0: added bond_slave_0 [ 285.464243][ T8809] syz0: rxe_create_cq: returned err = -12 [ 285.618424][ T8809] infiniband syz0: Couldn't create ib_mad CQ [ 285.640173][ T8809] infiniband syz0: Couldn't open port 1 [ 285.845495][ T8809] RDS/IB: syz0: added [ 285.865657][ T8809] smc: adding ib device syz0 with port count 1 [ 285.886126][ T8809] smc: ib device syz0 port 1 has pnetid [ 286.410935][ T8891] netlink: 48 bytes leftover after parsing attributes in process `syz.9.788'. [ 289.380775][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.9.790'. [ 290.961674][ T8925] netlink: 96 bytes leftover after parsing attributes in process `syz.9.793'. [ 291.052823][ T8927] netlink: 56 bytes leftover after parsing attributes in process `syz.9.793'. [ 294.075528][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.089758][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.099688][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.110121][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.127634][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.136472][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.368858][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.797'. [ 294.691159][ T8950] netlink: 48 bytes leftover after parsing attributes in process `syz.0.798'. [ 295.174116][ T5783] Bluetooth: hci3: SCO packet for unknown connection handle 1414 [ 295.184926][ T8947] input: syz1 as /devices/virtual/input/input12 [ 295.409305][ T8963] 9pnet_virtio: no channels available for device syz [ 296.132494][ T8981] netlink: 212 bytes leftover after parsing attributes in process `syz.8.804'. [ 296.231357][ T5783] Bluetooth: hci4: command tx timeout [ 401.470610][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 401.477729][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8976/3:b..l [ 401.486285][ C0] rcu: (detected by 0, t=10503 jiffies, g=41629, q=424 ncpus=2) [ 401.494066][ C0] task:syz.9.803 state:R running task stack:25704 pid:8976 ppid:8237 flags:0x00004002 [ 401.506427][ C0] Call Trace: [ 401.509846][ C0] [ 401.512909][ C0] __schedule+0x15ae/0x4660 [ 401.517722][ C0] ? lock_chain_count+0x20/0x20 [ 401.522723][ C0] ? asan.module_dtor+0x20/0x20 [ 401.527646][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 401.532950][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 401.538739][ C0] ? preempt_schedule+0xc0/0xd0 [ 401.543650][ C0] preempt_schedule_common+0x82/0xc0 [ 401.549007][ C0] preempt_schedule+0xc0/0xd0 [ 401.553761][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 401.559475][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 401.564562][ C0] preempt_schedule_thunk+0x1a/0x30 [ 401.569870][ C0] _raw_spin_unlock+0x3a/0x40 [ 401.574696][ C0] filemap_map_pages+0x1279/0x19c0 [ 401.579912][ C0] ? filemap_map_pages+0x1d7/0x19c0 [ 401.585178][ C0] ? filemap_read_folio+0x790/0x790 [ 401.590478][ C0] handle_mm_fault+0x384b/0x4a50 [ 401.595484][ C0] ? handle_mm_fault+0xe6/0x4a50 [ 401.600481][ C0] ? numa_migrate_prep+0x350/0x350 [ 401.605635][ C0] ? follow_page_pte+0x6dd/0x1ae0 [ 401.610721][ C0] ? pmd_lock+0x60/0x60 [ 401.614938][ C0] __get_user_pages+0x604/0x1580 [ 401.619958][ C0] ? populate_vma_page_range+0x380/0x380 [ 401.625662][ C0] populate_vma_page_range+0x2c1/0x380 [ 401.631182][ C0] ? fixup_user_fault+0x750/0x750 [ 401.636272][ C0] ? down_read+0x1ac/0x2e0 [ 401.640748][ C0] __mm_populate+0x260/0x390 [ 401.645412][ C0] ? faultin_page_range+0x8a0/0x8a0 [ 401.650668][ C0] ? up_write+0x1be/0x410 [ 401.655051][ C0] vm_mmap_pgoff+0x2da/0x3f0 [ 401.659734][ C0] ? account_locked_vm+0x200/0x200 [ 401.664906][ C0] ? ksys_mmap_pgoff+0xf3/0x720 [ 401.669840][ C0] ? __x64_sys_mmap+0x7a/0x130 [ 401.674692][ C0] do_syscall_64+0x55/0xb0 [ 401.679167][ C0] ? clear_bhb_loop+0x40/0x90 [ 401.683887][ C0] ? clear_bhb_loop+0x40/0x90 [ 401.688619][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.694582][ C0] RIP: 0033:0x7ff92779ce59 [ 401.699113][ C0] RSP: 002b:00007ff9286ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 401.707665][ C0] RAX: ffffffffffffffda RBX: 00007ff927a15fa0 RCX: 00007ff92779ce59 [ 401.715717][ C0] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 401.723737][ C0] RBP: 00007ff927832e6f R08: ffffffffffffffff R09: 0000000000000000 [ 401.731750][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 401.739805][ C0] R13: 00007ff927a16038 R14: 00007ff927a15fa0 R15: 00007ffe8171cf38 [ 401.747872][ C0] [ 401.750938][ C0] rcu: rcu_preempt kthread starved for 10177 jiffies! g41629 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 401.762209][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 401.772224][ C0] rcu: RCU grace-period kthread stack dump: [ 401.778151][ C0] task:rcu_preempt state:R running task stack:27848 pid:17 ppid:2 flags:0x00004000 [ 401.788987][ C0] Call Trace: [ 401.792310][ C0] [ 401.795332][ C0] __schedule+0x15ae/0x4660 [ 401.799936][ C0] ? asan.module_dtor+0x20/0x20 [ 401.804834][ C0] ? rcu_is_watching+0x15/0xb0 [ 401.809669][ C0] schedule+0xbd/0x170 [ 401.813792][ C0] schedule_timeout+0x188/0x2d0 [ 401.818706][ C0] ? console_conditional_schedule+0x40/0x40 [ 401.824652][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 401.830601][ C0] ? update_process_times+0x1b0/0x1b0 [ 401.836021][ C0] ? prepare_to_swait_event+0x344/0x360 [ 401.841658][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 401.846569][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 401.852782][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.858810][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 401.863889][ C0] ? rcu_gp_init+0x1530/0x1530 [ 401.868700][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 401.873608][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 401.878859][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 401.884116][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 401.888758][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 401.893911][ C0] ? __kthread_parkme+0x71/0x1c0 [ 401.898895][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 401.903968][ C0] kthread+0x2fa/0x390 [ 401.908079][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 401.913241][ C0] ? kthread_blkcg+0xd0/0xd0 [ 401.917883][ C0] ret_from_fork+0x48/0x80 [ 401.922353][ C0] ? kthread_blkcg+0xd0/0xd0 [ 401.926984][ C0] ret_from_fork_asm+0x11/0x20 [ 401.931821][ C0] [ 401.934881][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 401.941268][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 401.948338][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.958441][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 401.964136][ C0] Code: dc 23 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 67 44 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2c 89 cb 80 f9 [ 401.983859][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c6 [ 401.989971][ C0] RAX: dd1f39c1f7bb9600 RBX: ffffffff81628b01 RCX: dd1f39c1f7bb9600 [ 401.998003][ C0] RDX: 0000000000000001 RSI: ffffffff8acacb60 RDI: ffffffff8b1c7be0 [ 402.006032][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36bab R09: 1ffff110171c6d75 [ 402.014183][ C0] R10: dffffc0000000000 R11: ffffed10171c6d76 R12: 1ffffffff19c0fbc [ 402.022206][ C0] R13: dffffc0000000000 R14: 1ffffffff19d2688 R15: 0000000000000000 [ 402.030257][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 402.039232][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 402.045880][ C0] CR2: 0000200000000058 CR3: 000000002175f000 CR4: 00000000003506f0 [ 402.054000][ C0] Call Trace: [ 402.057338][ C0] [ 402.060315][ C0] default_idle+0x13/0x20 [ 402.064708][ C0] default_idle_call+0x6c/0xa0 [ 402.069515][ C0] do_idle+0x221/0x5c0 [ 402.073662][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 402.078946][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 402.084661][ C0] cpu_startup_entry+0x43/0x60 [ 402.089490][ C0] rest_init+0x2e2/0x300 [ 402.093789][ C0] ? time_init+0x40/0x40 [ 402.098161][ C0] arch_call_rest_init+0xe/0x10 [ 402.103086][ C0] start_kernel+0x459/0x4e0 [ 402.107653][ C0] x86_64_start_reservations+0x2a/0x30 [ 402.113168][ C0] x86_64_start_kernel+0x60/0x60 [ 402.118152][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 402.124306][ C0]