last executing test programs: 13m37.049521143s ago: executing program 1 (id=194): openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x181881, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x10, 0x803, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x40090) socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r8 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r8, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 13m36.007278169s ago: executing program 1 (id=198): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={'L-', 0x5}, 0x16, 0x1) 13m34.957620987s ago: executing program 1 (id=200): ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc038563c, &(0x7f0000000340)={0x0, 0x1, "119f04499489f733dcaa932034d61433a5ba43d2103eb3221503dc2984dea6e2", 0x0, 0xfffffffffffffffc, 0x0, 0xff, 0x0, 0x0, 0x3, 0x0, [0x0, 0x800000]}) 13m34.643595504s ago: executing program 1 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0xf0f003, 0x7}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x3, 0x2, {{0x12, 0x4, 0x1, 0x8, 0x48, 0x67, 0x0, 0x81, 0x2b, 0x0, @private=0xa010102, @local, {[@generic={0x88, 0xf, "2a1fbf7bd83a585c880fef3c40"}, @timestamp={0x44, 0x14, 0x48, 0x0, 0x6, [0x3ff, 0xff, 0x2651, 0x1a984e27]}, @ssrr={0x89, 0xf, 0x62, [@local, @remote, @private=0xa010100]}, @noop]}}}}}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, r6, r7, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000005c0)={{{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xc}, 0x4e24, 0x0, 0x4e20, 0x0, 0x2, 0x20, 0x80, 0x1d, r4, r6}, {0x5, 0x3, 0x1, 0xe58f, 0xfffffffffffffe11, 0x3, 0x1ff, 0x100000000}, {0x4, 0x3, 0x5, 0x7}, 0x9, 0x6e6bb5, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x4d5, 0x3c}, 0x2, @in=@loopback, 0x34ff, 0x0, 0x1, 0xd, 0x5, 0x71, 0x1}}, 0xe8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) pivot_root(&(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') syz_open_dev$vcsa(&(0x7f0000000480), 0x1, 0x121000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x141380, 0x0) r9 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ff, 0x2) tee(r9, r8, 0x7fffffffffffffff, 0x3) 13m34.247813453s ago: executing program 1 (id=204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xc080) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r4, 0x400, 0x1) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r5, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2f, 0x800000000004, @tid=r6}, 0x0) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f0000000700), 0x0) syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x220, 0x260, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x486, &(0x7f0000004f00), &(0x7f0000004f40)=0xc) r10 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r10, &(0x7f0000000200)="d02decff", 0x4, 0x0, &(0x7f0000000340)={0x2, 0x8000, @rand_addr=0x2}, 0x10) ioctl$XFS_IOC_FSCOUNTS(r8, 0x80205871, &(0x7f0000000100)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6}, 0x0, {0x440, 0x0, @empty}, 'pimreg0\x00'}) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000000a010101000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c6174650000000000000000000000ebc5d68a35e69300"/247], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 13m33.768672859s ago: executing program 1 (id=208): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x3ac, 0xffc99a3b}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 13m32.824051903s ago: executing program 32 (id=208): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utime(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x3ac, 0xffc99a3b}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 12m46.662504716s ago: executing program 2 (id=450): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@deltfilter={0x2c, 0x2d, 0x204, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x10}, {0xffff, 0x9}, {0xf, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf6}}]}, 0x2c}}, 0x4000000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r1, @ANYBLOB="100001"], 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @random="23dd27c4720a", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x3a3, {0x5, 0x4, 0x1, 0x3d, 0x9, 0x67, 0x1c, 0x8, 0x33, 0xb, @empty, @private=0xa010100}}}}}}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f00000005c0)=0x18) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000340)={{0x1, @broadcast, 0x4e20, 0x0, 'ovf\x00', 0x14, 0x8, 0x23}, {@broadcast, 0x4e21, 0x0, 0x6, 0xfffffff7, 0x80}}, 0x44) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001400050000000000000000002d000000010000000500010008000000"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d000000000000000101000005000100080000000800040001000000"], 0x2c}}, 0x0) r4 = socket(0x23, 0x2, 0x0) ioctl(r4, 0x89e2, &(0x7f0000000300)="0100000008000000") statx(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x1, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ptrace$poke(0x5, r7, &(0x7f0000000240), 0xe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x14}, 0x94) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000900)={0xa0, 0x19, 0x1, {0x404, {0x2, 0x4, 0x2}, 0x0, r5, r6, 0x2, 0x1, 0x8e, 0x0, 0x6, 0x1c000000, 0x1ff, 0x4, 0xf, 0x3e4, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x5}}, 0xa0) sendmsg(r4, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000100000008011800"}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000700)='\x00', 0x1}], 0x1}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12m45.143150652s ago: executing program 2 (id=454): ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f00000003c0)={0x0, "c25cacd8771e5486e44edb756b1c5d6bdae54790c1178269f1040e91f77011a9ddefde923acb1657adabaa378aa6cf1a217c708f44092ac0be1e878cfb2e61a1ad2eb33bd8670da0e565e3211a93c594901ab7bac217e99d3f4ed101e3b5463d3d8709b94e3875bbef5382ec6d831ecca59be07d1601b8ee7487f8bf675227f4f861e4c582ee09f0ba55662194e19516f736d3c437cfebce34e1a2379cd364c8a8c3cee03dffdc6c6a3a404e567dda7dd283a1e83b8cbfef18cda8cb3d7d8f72e1a018c697bbd1bc0939a94f3b1da8c311fd381ace06a3ccde21c3f20a5a85bc6dc4ea59405ffc3d89fe0ffde0049cf3c78781e500"}) 12m44.889277902s ago: executing program 2 (id=456): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b400000010000104000040000300040000000000", @ANYRES32=0x0, @ANYBLOB="fab0817da4b5f31a80001280110001006272696467655f736c617665000000006800058005001900030000000500050000000000080025000000000006001f00d500000005001c00000000000500200000000000050008000000000004001800050006000000000005001e000100000005001e000000000006001f00060000000500010003000000140003006272696467655f736c61"], 0xb4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 12m44.758153995s ago: executing program 2 (id=458): r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\x10\x9a\xf2Rm\xb6\xe0\xf9\xac\xa2\x06n\xcb\xd5\xa7\t\x00\x00\x00\x00\x00\x00\x00\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00bF\xec\x10\x89M\xd7Nd\xfeP\x00\x00\x00\x00', &(0x7f0000003100)='.\n#)|:\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKz\xe1vBU\xf1\\@\x10\xf0\x7f\xdfU\xe3\x9b\xd1Aq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x06M\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n=//\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x00\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcd\x86jBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xf8`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6\x98#\xf4C\x94\b\xe9\xdc_\xe6g\x00\xc1]\xe1g\x9b\xa6\xf5\x14\xbb{\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997A0J=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c\x00%-{\xe2\xb2f\xa6\xcf\x92A\x82#}\xc9:\xbeW\x90\x06\x8e0\xf84\x94\x80\xa2[Y(\xbe\v\xd0\x00\x89\xceP\x9fs\xbb\xc8rX\x03\xa2\xad\xb8\xb63\xfc\xcb\xf3\x95\xa9\x89L\xcf\x10\xef\xfcZ\xff\xceX-\xbeu.\xd4z\xccW\x95\xc1\xf1\xf5_\x93\xb6\x16\xe1\x86\f8\x9b\x89\x84)^\x99j\xbc\xbe\xc9o\xe4\x99\xfaP\xba@u\xc2\xe0\r\x0e\x06-\xab\xe3\xe4\xe3^#\xc5P^\xae\x8a\x1aW8\xf9\xbd\xc5\xce\"\xa2\x90\xd7+rvpY\x8c\xc6\x14#\xb8>}?7\xe9\xaa\x9a\v\xbf\x89\xa9\xde\x00\xa3\n\xc1\xff\xdf\xc4/L\xd8{\x1a\x04\xee\'+\x8e\xa3\x12\vGp:\x9d\xf0\x98\xfdo\xf3\x9cW\xedB\x9a\x80\xb2\x85\xf3QduT\x8bfJcv\x19<\x84\xcb\x19\x86\x9e\xeb\xd2\xb0\x14\xbe\n{\xd80\x12x\x1a\xc1\x8d]\xa3\x19\xc8\xfdR\x0f\xd1\x19W\xdeNR\xf9\xb9\x97\xf5\x00\x1c\xaa\x8c\xafU*\x061\'wD\xf8\x9f\xbd\xd75\x02f\x04\r\'\xae\tI#\xa8\xe2\xd4\xe2\xc6\x0e\xfa\x81\xaa\xf3%\x90\x9c\xcd\xb7\xe2\xcbX\xa9\x11}!\"\xed%\xec)s\xd0p\x16Z\x82@wQ3i\xb1Q=}\xfc\xb6\x00\xcb\x8dvB\xd2i\xd3up\xa3\x84X\x11\x8d_5\xcdHm\xd6\xc9\xe1\x9e@\xd91\xdb~\xbd\x11\x0e|f\xff\xa4)l\x86\xdb`s\xc7&B\xbb\xeaZ\xdd\xa4m\xab\x80\xfb\rh.\xeca\x04}\f\xdfSu\x11\x80\xa1\xccutgk[\x1f/\xe0\xaf\x03\fC\xa5\xca\xfeQ\x9b\xf3\xa1{q\xbc\xa6F\xad\x7f\x1bn\xf0\xc9x\xff', 0x0) close(r0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='gfs2\x00', 0x100801f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='bRequestType=-', 0xe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000580)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x0, @remote, 0xfffffff9}}}, 0x30) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) writev(r3, &(0x7f0000000440)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}, {&(0x7f0000000500)="bd2049f97d62273c0b6f301135b8987f45067b0d039f9d118376a1ff92ca6b35a067c14fd0083861d79635a64f07ed3883363c0106255b82797621afe929", 0x3e}, {&(0x7f00000001c0)="815d062c5a0d0b9136bcabf04fe74c4c7b5fe0d806bcb4af114bffd6d22b6cf69c16b4c67e8ec898cfd8c78bf8b2f65a6b305d1b12266f1b3fcad3991504867deff47283dfe3b32e49a7ebb0452ace65ea517663cdde255d9965905abdd1ef9f39a6707b6bc73222bec28e642e05b59143be0fed0c37b3f348bfa1fea243d126cbaa07ece7af844bc0fab9dfc2301e779b113aa023b33bd1f33ea0", 0x9b}, {&(0x7f0000000280)="41423b39528c2ca6b85bc342aa1af303fd336e7b196144c98cd2d551546e7e820df211da34bd408dd8ddd271eb", 0x2d}, {&(0x7f0000000340)="7dd9ba37c47da440aea4ad5f18ab0955fddf89990bf5d90bfec13d010cd5cc5ccd9f1414412f9b01365f09f080b249222099aedbc17ed97a8d4fe25fb7b2fed9e044e07ed90ab9c6895304f016ab9321d7f9742a78935dfe272ded2d260b366ce7bb5ed8c318a4c469b1fa153b6aeeb33a951ef648a7f3915f0827edecb707a1af4446049d6616bef9e64ae2a988f6b7e234e7c869e6e148cb87e12bd8c3247dab6ad5e3e47905ed43094eba9b00736521ff235d6f4bae5ae94625d7675dfa775d3a169c7fe53648ae684602e968dd2acba4b83e295b109c2f74f49c432945b69d99e8df2f4211776335", 0xea}], 0x6) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xb5, 0x7, 0x4}, 0x9c) 12m43.536108441s ago: executing program 2 (id=461): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) close(r1) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280), &(0x7f00000002c0)={'L-', 0x5}, 0x16, 0x1) 12m42.543700609s ago: executing program 2 (id=465): landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x8, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x9, 0xe, 0x4, 0x10, 0x108, 0x6a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}}}}, 0x1d) 12m42.217233117s ago: executing program 33 (id=465): landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1a}, @hci_ev_le_ext_adv_report={{}, {0x1, [{0x8, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x9, 0xe, 0x4, 0x10, 0x108, 0x6a, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}]}}}}, 0x1d) 2m3.774894034s ago: executing program 0 (id=2708): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x87) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000600000009"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) unshare(0x20000400) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r7, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xf}, 0x6}, 0xa) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(r8, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) 2m2.456041002s ago: executing program 0 (id=2710): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcbfffff811632000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x2008400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000380)=ANY=[], 0x200002e6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x9, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x47, 0x3c5b, 0x80000001, 0x26, 0xd, 0x3fdf, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xd, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x5], [0x10000007, 0x9, 0x80000130, 0x8, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x42f, 0x0, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x3, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x400, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x0, 0x5, 0xfbfffffc, 0x100, 0x9, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x200000, 0x2, 0x6d03, 0x6, 0xd, 0x800003, 0x200, 0x400080, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x6d, 0x7, 0x0, 0x2, 0x21c, 0x120000, 0x6, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r6, &(0x7f00000007c0)=""/136, 0x88) fcntl$setpipe(r3, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m54.784963516s ago: executing program 0 (id=2728): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xfffffffffffffffd, 0x86e00) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x26603, 0xc1) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x82) fchdir(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/1, 0x1}, {&(0x7f0000000280)=""/83, 0x53}, {&(0x7f0000000700)=""/140, 0x8c}, {&(0x7f00000004c0)=""/220, 0xdc}], 0x4, 0x1, 0xd) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000340)="1a00000002000000", 0x8) 1m53.968420048s ago: executing program 0 (id=2731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000091"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r1, 0x20, 0x0}, 0x10) 1m53.188633823s ago: executing program 0 (id=2733): socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r1, &(0x7f0000000480)="6ac51dad7b9e9dd147b89ddbd4490227c3ee", 0x12) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x926c, 0x44004, 0x2, 0x232}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x289, 0x220, 0x2, 0x117}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x990a, 0x800, 0x1, 0x3cd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b3c, 0x40, 0x3, 0x1ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x634b, 0x0, 0x3, 0x14f}}], 0x4, &(0x7f00000018c0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x86d, 0x0, &(0x7f00000008c0)=@buf_1k="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"}}, &(0x7f0000001940)) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040), 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046302}], 0x0, 0x0, 0x0}) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e25, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e20, 0x400003, @mcast1, 0x2}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000040)={@private2, r7}, 0x14) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r10, 0x100000000) write$binfmt_aout(r9, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)) writev(r8, &(0x7f0000001880), 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 1m50.621222452s ago: executing program 0 (id=2739): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000002400)) acct(&(0x7f0000000140)='./sec/tomoyo/query\x00') 1m41.775537172s ago: executing program 6 (id=2757): openat$kvm(0xffffffffffffff9c, 0x0, 0x40b00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x3cc7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, 0x558f, 0x8}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1m41.216875504s ago: executing program 6 (id=2759): r0 = msgget$private(0x0, 0x190) msgsnd(r0, &(0x7f0000000000)={0x1, "6202567ce32466e5c8d23238d4b4b9f7e55cdf576afd4aa95b790d811b2b8515e53fa3b9e8186c5c991e2d91d3ce3a572281805c1ff305b6f745d2982dc0a47d5594165a58a078c6d802ad8666d7c07666b594076acad8ae171cde29047d0fdedf794ac946c81567be8724cdfa05c2f12ddf2f65e3190fd9008f0baa7f4904e549d8707108e2dad73d8f1cfcabda096bc7ec07b3befdb7ae59614f265d46c253982953c1b783844c83e3c5ac8ffeba61333ae28567433c996a9852fe69c139b08a5284a4eb67dcc4c48be0cbdab04879814ea0c707bc62eb4c4dc64e"}, 0xe4, 0x0) r1 = msgget(0x0, 0x100) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, &(0x7f0000000100), 0x10) (async) keyctl$read(0xb, 0x0, &(0x7f0000000140)=""/118, 0x76) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000001c0)={0x0, 0x4, {0x0}, {0xee00}, 0x9, 0x563074e2}) ptrace(0x4207, r3) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/custom1\x00', 0x800, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x802, 0x0) (async) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) connect$pppoe(r5, &(0x7f00000002c0)={0x18, 0x0, {0x0, @broadcast, 'wlan1\x00'}}, 0x1e) (async) r6 = semget$private(0x0, 0x3, 0x80) semctl$SEM_INFO(r6, 0x1, 0x13, &(0x7f0000000300)=""/180) r7 = add_key(&(0x7f00000003c0)='syzkaller\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)="0fd809662109f7844b3b81185271c2ab2dbe1b8d36f5deb968597b052d8f3040c490af2ca1364efb5b658526a63d4e9120706005a607db117aae", 0x3a, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000480)={r7, 0x99, 0x21}, &(0x7f00000004c0)={'enc=', 'oaep', ' hash=', {'hmac(sha1-ce)\x00'}}, &(0x7f0000000540)="152ab2b4ff025e7724ed019de68f0f47453df8e4ff28bb289d5641503680c294172820fa99d76871346c58640cac9e7b66ae862c6fef26e48ae6dfdcc405b92f3485f14de08b5ae8d4de1dec705f20bb69e83757d529bb9dd770daf559f9756e3b7ecfe12cfd0e1b7677730d68330ebc4ea4c255aacb750bfc0144ed730067256e5314d0a1b4b5591554f4239d27b34e3a1e1ab37b12f5c3ad", &(0x7f0000000600)="011709190bf3e9e71ccb114ad90e08af118663696ab5af9e6bd75d5499db48cd7e") msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000640)=""/53) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)=@bridge_dellink={0x194, 0x11, 0x200, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0xc000, 0x18000}, [@IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_to_batadv\x00'}, {0x14, 0x35, 'veth0_vlan\x00'}, {0x14, 0x35, 'ipvlan1\x00'}, {0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'pimreg\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xf8}, @IFLA_VF_PORTS={0xe8, 0x18, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d0900f998ac9d05a98e46bce21b3fdf6"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "31feeaa6a1c7ec87fabb8e6d32502a63"}]}, {0x60, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_PROFILE={0xe, 0x2, 'syzkaller\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "00dd7ee7b135d81c1f97aa81b47536b4"}, @IFLA_PORT_PROFILE={0xa, 0x2, '\'./)%\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "10706f568611c282c6e87928d4556130"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xd}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '&\x90\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "037d9b600586648880ef67962c89e205"}, @IFLA_PORT_PROFILE={0xa, 0x2, ' hash='}, @IFLA_PORT_VF={0x8, 0x1, 0xe13f}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_VF={0x8, 0x1, 0x5456}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xa668}]}, 0x194}, 0x1, 0x0, 0x0, 0x40050}, 0x4080) r8 = signalfd4(r5, &(0x7f0000000900)={[0x8]}, 0x8, 0x80800) (async, rerun: 32) socketpair$tipc(0x1e, 0xa, 0x0, &(0x7f0000000940)) (async, rerun: 32) semget(0x0, 0x3, 0x577) (async, rerun: 32) request_key(&(0x7f0000000980)='pkcs7_test\x00', &(0x7f00000009c0)={'syz', 0x0}, &(0x7f0000000a00)='\'./)%\x00', 0xfffffffffffffffa) (rerun: 32) setsockopt$inet6_group_source_req(r5, 0x29, 0x2f, &(0x7f0000000a40)={0x51b30dc5, {{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}, 0x6}}, {{0xa, 0x4e24, 0xe, @mcast2, 0x5}}}, 0x108) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r9, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xbc, 0x464, 0x600, 0x26d5, 0x25dfdbfe, "c5573093c20c14fff508ff332b6378d3430824378277b3221f1536d079628d1524053930b6bd3f346c3054affbaac44011179c5420732d945987857f0ec3f156a39d9e8c0f80077871f1768d02ea836127b7d9fd521233bc793da186ff23709fd89fd59db180eee955777a9aba525644685b18967e29612b77c04fa812a291670a7af9fc046e7a95b04534f384f03c591584ec4c5d4733f17d2256615d4ab59afaffc1b2ac6fcfcbe104d4", ["", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x40}, 0x4008001) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000d00)={0x73622a85, 0x10a, 0x2}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000d80)={0x3, &(0x7f0000000d40)=[{0x7, 0x7f, 0xc5, 0xfffffff8}, {0x1, 0x10, 0x0, 0xde}, {0x200, 0x83, 0xaf, 0x10001}]}) (async) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000000dc0)=""/113) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001000)={'gre0\x00', &(0x7f0000000f80)={'gre0\x00', 0x0, 0x10, 0x7, 0x3, 0x9, {{0x14, 0x4, 0x0, 0x27, 0x50, 0x67, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3d}, @local, {[@generic={0x0, 0xe, "8503b29a00c2a068ed7b72d7"}, @ssrr={0x89, 0xf, 0x3d, [@multicast2, @empty, @multicast1]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0xe5, [@remote, @multicast2, @empty, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0xc}, @local]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0xf, &(0x7f0000000e40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x86}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xc}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @generic={0x7, 0x2, 0x3, 0x8000, 0x10}, @call={0x85, 0x0, 0x0, 0x5a}]}, &(0x7f0000000ec0)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000f00)=""/89, 0x41000, 0x20, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001080)={0x2, 0x4, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r8], &(0x7f0000001100), 0x10, 0x2}, 0x94) 1m40.869697198s ago: executing program 3 (id=2763): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x6, &(0x7f0000000240)=[{0x1, 0x64, 0x3, 0xf78}, {0x5, 0x6, 0xd, 0x1}, {0x5, 0x7f, 0x2, 0x6}, {0xe20, 0x7, 0x9, 0x3}, {0x2, 0x2, 0x6, 0x3}, {0x8004, 0x57, 0x2, 0x4}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x47) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x7a, 0x5}}, {0x0, 0x0, 0x0, 0x0, @time={0x2}, {}, {}, @quote={{0x2}}}], 0x38) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x180) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r6], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1m40.704927266s ago: executing program 6 (id=2764): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) r2 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000000109010100000000000000000200000144db601cd21922675950b5ae1e3fcbfbca072059e8f557310ae52b91f0023b159f9cc8601e7fe6be3b57344d937b7619c778c3f04160ee0045bea682fbc750042f0f4e7c2585a76f9b47aa7cb1764f930249c8070f5bb52e1653571fbc84488082"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) syz_open_dev$radio(0x0, 0x1, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x40020, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)=@mmap={0x7, 0xa, 0x4, 0x400, 0x5, {0x0, 0xea60}, {0x5, 0x9, 0x7, 0x60, 0x9, 0x7, "de056a52"}, 0x4, 0x1, {}, 0x3ff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d1}, 0xc000) write(r1, &(0x7f0000000180)='1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r8, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) write(r0, &(0x7f0000000700)='ffffffff ffffffff ffffffff ffffffff 0 ', 0x26) 1m39.326904603s ago: executing program 6 (id=2766): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) socket$kcm(0x10, 0x2, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) read$alg(r3, &(0x7f00000001c0)=""/26, 0x1a) socket$xdp(0x2c, 0x3, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = io_uring_setup(0x5069, &(0x7f0000000100)={0x0, 0x1443, 0x8, 0xffffffee, 0xc}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d80080002007f00000114000500ff02000000000000000000000000000108000200ac1e01011400050000000000000000000000ffffffffffff08000200e0000001140004002001000005000000000000000000000214000380060002004e200000060001004e200000080001"], 0xf4}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104000020000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680"], 0x68}}, 0x0) 1m39.311380278s ago: executing program 3 (id=2767): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xd883, 0x8}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000280)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}, {@xino_auto}]}) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x40}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xacad, 0x1, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa634, 0x0, 0x40, 0x4}}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc110, 0x1, 0xfffffffe}}], 0x1, &(0x7f0000000a00)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfffe, 0x715, 0x0, 0x0}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fsetxattr$security_ima(r8, &(0x7f0000000000), &(0x7f0000000040)=ANY=[@ANYBLOB="0000010400000000000000"], 0xb, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xb, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r9, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r9, 0x50009418, &(0x7f0000001340)={{r9}, r10, 0x4, @inherit={0x80, &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000700000000000000e70e000000000000018000000000000016000000000080000010000000000000040000000000000002000000000000008130000000000000ff7fbf461af80057f5b400000000000000000000000000008c440000000000000a00000000000000"]}, @name="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"}) ioctl$BTRFS_IOC_WAIT_SYNC(r8, 0x40089416, &(0x7f0000000100)=r10) r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fanotify_mark(r8, 0x80, 0x8000000, r11, &(0x7f00000000c0)='./file0\x00') 1m38.898956997s ago: executing program 3 (id=2770): r0 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dummy\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000003400)='2\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000002600)='./config/nullb/nullb2/power\x00', 0x2, 0x0) write(r4, &(0x7f0000002700)='1', 0x1) mount(0x0, &(0x7f0000000800)='./dev\x00', 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./dev/nullb1\x00', 0x2, 0x0) write(r5, &(0x7f0000001000)="53464f5a214e2187", 0x1000) close(r5) r6 = openat(r2, &(0x7f0000002a00)='./dev/nullb2\x00', 0x688800, 0x8) write(r6, &(0x7f0000003000), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) close(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt1\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000001200)='zonefs\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20040}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010101}, @IFLA_VTI_LOCAL={0x8, 0x4, @broadcast}]}}}]}, 0x40}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) 1m38.622794405s ago: executing program 3 (id=2771): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000480)={0x0, 0x2}, 0x8) fallocate(r0, 0xc, 0xe, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='md0\x00', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/md0\x00', 0x2, 0x0) ioctl(r4, 0x40480923, &(0x7f0000000500)="0000000000000000000000000000000001000000000000000000000001000000000000000100"/72) ioctl(r4, 0x40140921, &(0x7f0000000600)="0000000007000000000000000000000003000000") ioctl(r4, 0x400c0930, &(0x7f0000000700)='\x00'/12) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/serialize_policy\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='1\x00', 0x2) 1m38.250695579s ago: executing program 6 (id=2773): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x6, &(0x7f0000000240)=[{0x1, 0x64, 0x3, 0xf78}, {0x5, 0x6, 0xd, 0x1}, {0x5, 0x7f, 0x2, 0x6}, {0xe20, 0x7, 0x9, 0x3}, {0x2, 0x2, 0x6, 0x3}, {0x8004, 0x57, 0x2, 0x4}]}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x47) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x7a, 0x5}}, {0x0, 0x0, 0x0, 0x0, @time={0x2}, {}, {}, @quote={{0x2}}}], 0x38) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x180) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r6], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 1m37.702168247s ago: executing program 3 (id=2774): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES32], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0xa, 0x28, "1e644a543678b055e219ed89e8bc4ac1a80eee9424375f9e37fc1a35e41188da0d0648d53fca7e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m37.092777245s ago: executing program 6 (id=2776): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) r2 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000000109010100000000000000000200000144db601cd21922675950b5ae1e3fcbfbca072059e8f557310ae52b91f0023b159f9cc8601e7fe6be3b57344d937b7619c778c3f04160ee0045bea682fbc750042f0f4e7c2585a76f9b47aa7cb1764f930249c8070f5bb52e1653571fbc84488082"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) syz_open_dev$radio(0x0, 0x1, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x40020, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)=@mmap={0x7, 0xa, 0x4, 0x400, 0x5, {0x0, 0xea60}, {0x5, 0x9, 0x7, 0x60, 0x9, 0x7, "de056a52"}, 0x4, 0x1, {}, 0x3ff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d1}, 0xc000) write(r1, &(0x7f0000000180)='1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r8, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) write(r0, &(0x7f0000000700)='ffffffff ffffffff ffffffff ffffffff 0 ', 0x26) 1m34.52580361s ago: executing program 3 (id=2781): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) r2 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000000109010100000000000000000200000144db601cd21922675950b5ae1e3fcbfbca072059e8f557310ae52b91f0023b159f9cc8601e7fe6be3b57344d937b7619c778c3f04160ee0045bea682fbc750042f0f4e7c2585a76f9b47aa7cb1764f930249c8070f5bb52e1653571fbc84488082"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x40020, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)=@mmap={0x7, 0xa, 0x4, 0x400, 0x5, {0x0, 0xea60}, {0x5, 0x9, 0x7, 0x60, 0x9, 0x7, "de056a52"}, 0x4, 0x1, {}, 0x3ff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d1}, 0xc000) write(r1, &(0x7f0000000180)='1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r8, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) write(r0, &(0x7f0000000700)='ffffffff ffffffff ffffffff ffffffff 0 ', 0x26) 1m28.593095474s ago: executing program 4 (id=2800): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x109) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffef9, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x24000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x50180, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$video4linux(0x0, 0x15, 0x57f01) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x99) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='./mnt\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000140)='cifs\x00', 0x0, &(0x7f0000000500)='guest,vers=2.1\x00') syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f0000000100)={0xb7ea1df7be7b3c6a, 0x0, 0x2}) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) 1m27.91793396s ago: executing program 4 (id=2803): openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x14, 0x0, 0x0) r2 = syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001980)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {0x400}, 0x0, 0x80000, 0xa, 0x3, 0x0, 0xcd}}, 0xf0}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r2, 0x2) r5 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, r8, 0x80000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, 0x0) lseek(r6, 0x851, 0x0) syz_ublk_setup_queues(r4, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r4, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, 0x0, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, 0x0) 1m26.712888081s ago: executing program 4 (id=2805): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) socket$kcm(0x10, 0x2, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) read$alg(r3, &(0x7f00000001c0)=""/26, 0x1a) socket$xdp(0x2c, 0x3, 0x0) setns(0xc9, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = io_uring_setup(0x5069, &(0x7f0000000100)={0x0, 0x1443, 0x8, 0xffffffee, 0xc}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104000020000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680"], 0x68}}, 0x0) 1m25.347234643s ago: executing program 4 (id=2809): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000005c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000600)={r2, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, r3, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4c884) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_mr_cache\x00') write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xb34, 0x100000, 0x2000, 0x1}, 0x10) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000040)={0x0, 0x1, 0xe7, 0x8}) fcntl$lock(r9, 0x24, &(0x7f0000000140)={0x2, 0x1, 0x100000002, 0x8}) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r8, 0x1, &(0x7f00000001c0)={&(0x7f0000000280)="c94522e546f93f6dedf11f1509683b4ff6ed90bb6d8ca47dc829c0daa3feec0f1f88d7547f05841e3705582bc58e46799f2f99244be64d25e9fed38fc2d23411a1d3630f9c4563f7415abe92ba0f2f575c1fe2f987f4224ff7dc937253dc5598275597e7207bea32c4c7cf884c2fcd814228e4d1c211d167b8713f83fbff0f000000000000d85468f02e8b5ad561098840402f168e1012bdfd6977a7fe9cd5b8a3ed012d8e74a3479f", 0x34}) read$FUSE(r7, &(0x7f0000004200)={0x2020}, 0x2020) unshare(0x8040480) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r10, 0x0, 0x43, &(0x7f00000007c0)={'IDLETIMER\x00'}, &(0x7f0000000800)=0x1e) 1m25.207360717s ago: executing program 4 (id=2810): openat$kvm(0xffffffffffffff9c, 0x0, 0x40b00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e22, 0x3cc7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, 0x558f, 0x8}, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001bf"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 1m25.151139371s ago: executing program 4 (id=2811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) 1m21.830395145s ago: executing program 34 (id=2776): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) r2 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000000109010100000000000000000200000144db601cd21922675950b5ae1e3fcbfbca072059e8f557310ae52b91f0023b159f9cc8601e7fe6be3b57344d937b7619c778c3f04160ee0045bea682fbc750042f0f4e7c2585a76f9b47aa7cb1764f930249c8070f5bb52e1653571fbc84488082"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) syz_open_dev$radio(0x0, 0x1, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x40020, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)=@mmap={0x7, 0xa, 0x4, 0x400, 0x5, {0x0, 0xea60}, {0x5, 0x9, 0x7, 0x60, 0x9, 0x7, "de056a52"}, 0x4, 0x1, {}, 0x3ff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d1}, 0xc000) write(r1, &(0x7f0000000180)='1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r8, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) write(r0, &(0x7f0000000700)='ffffffff ffffffff ffffffff ffffffff 0 ', 0x26) 1m19.500266493s ago: executing program 35 (id=2781): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) r2 = openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="140000000109010100000000000000000200000144db601cd21922675950b5ae1e3fcbfbca072059e8f557310ae52b91f0023b159f9cc8601e7fe6be3b57344d937b7619c778c3f04160ee0045bea682fbc750042f0f4e7c2585a76f9b47aa7cb1764f930249c8070f5bb52e1653571fbc84488082"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x40020, 0x0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000100)=@mmap={0x7, 0xa, 0x4, 0x400, 0x5, {0x0, 0xea60}, {0x5, 0x9, 0x7, 0x60, 0x9, 0x7, "de056a52"}, 0x4, 0x1, {}, 0x3ff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400d1}, 0xc000) write(r1, &(0x7f0000000180)='1\x00', 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, r8, 0x5, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x44}}, 0x0) write(r0, &(0x7f0000000700)='ffffffff ffffffff ffffffff ffffffff 0 ', 0x26) 1m10.029736737s ago: executing program 36 (id=2811): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='debugfs\x00', &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/netdevsim/netdevsim0/max_vfs\x00', 0x1, 0x0) openat$vicodec0(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) write(r0, &(0x7f0000000180)='1\x00', 0x1) 2.696843418s ago: executing program 5 (id=3010): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) socket$kcm(0x10, 0x2, 0x10) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) read$alg(r3, &(0x7f00000001c0)=""/26, 0x1a) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) r5 = io_uring_setup(0x5069, &(0x7f0000000100)={0x0, 0x1443, 0x8, 0xffffffee, 0xc}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) socket(0x400000000010, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x8000000000000001, 0x7d, 0x0, 0x800, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xfffffffffffffeff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="f40000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000090000d80080002007f00000114000500ff02000000000000000000000000000108000200ac1e01011400050000000000000000000000ffffffffffff08000200e0000001140004002001000005000000000000000000000214000380060002004e200000060001004e200000080001"], 0xf4}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104000020000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007400000000004000680"], 0x68}}, 0x0) 2.609420894s ago: executing program 5 (id=3011): socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$midi(0x3, 0xad, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x8ae, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x1, 0x1, 0x81, 0x30, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x20, 0x1, [@midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x7, 0x2, [{0x1, 0x71}, {0x96, 0x1}], 0x8}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x8, 0x6, [{0x6, 0x3}, {0x47, 0x2}, {0x43, 0x7}, {0xa, 0x6}, {0x3, 0x3f}, {0x3c, 0x90}], 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x3, 0xff}, @midi_out_jack={0x13, 0x24, 0x3, 0x2, 0x6e, 0x6, [{0xf8, 0x7f}, {0x7, 0x4f}, {0xe4, 0x81}, {0x5, 0x4}, {0x6, 0xae}, {0x1, 0x1}]}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0x8, 0x1, 0x40, 0x3, 0x5, 0xfc, {0x5, 0x25, 0x1, 0x1, '~'}}}, {{0x9, 0x5, 0x80, 0x1, 0x50, 0x53, 0xf8, 0x9, {0x11, 0x25, 0x1, 0xd, "34e91c9eb2b8ff33821fa01cf9"}}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0x6, 0xa4, 0x5, {0x4}}}, {{0x9, 0x5, 0xc, 0x2, 0x10, 0x0, 0x6, 0x7, {0xd, 0x25, 0x1, 0x9, "c0a380111a268fd9e0"}}}]}}}}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0xc, 0x8, 0x4, 0xff, 0x9}, 0x4f, &(0x7f0000001980)={0x5, 0xf, 0x4f, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xb, 0x1, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "9cb7874b24819b8a079ab32db243857a"}, @ext_cap={0x7, 0x10, 0x2, 0x32, 0xe, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x88, "07e687c87410a72bed42e60a6777eac9"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "7c8ef126a4486a896ceefe4e373a62c0"}]}, 0x4, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x44c}}, {0x21, &(0x7f0000001a40)=@string={0x21, 0x3, "628094778630fc8788da2bf7398f88300f1124346dc2350eb226d0c1b99042"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x455}}]}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f0000000100)={0x0, 0x80000010, 0x1}) mq_notify(r2, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES8=r0, @ANYRES32], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) setns(0xc9, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000031400042bbd7000fddbdf250900020073797a310000000008004100727865001400330070696d72656730000000000000000000090002007379fa31000000000800410073697700140033000600"/96], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x20040050) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40001}, 0x64008800) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f0000000280)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0xec3, 0xfdffffffffffb5b3, 0x0, 0x1, 0x8000000000000000], 0x0, 0x1e01}, &(0x7f0000000200)=0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES16=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005cc0)={r7, 0x5, 0x2f, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd03, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0xa, 0x28, "1e644a543678b055e219ed89e8bc4ac1a80eee9424375f9e37fc1a35e41188da0d0648d53fca7e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000001b80)=ANY=[@ANYRESOCT=r3], &(0x7f00000000c0)=ANY=[@ANYBLOB="0000faa706fe1460"], &(0x7f0000000200), &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x81, 0x1, {0x22, 0x236}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x40, 0x14, 0x85, "46c24235551dfa1294d014d2858d98c0309616f553d76a7eb2d59bf029b07df3742d2513c9766224f0d45106c6c62d943b2d7e9f04f501a1108bebd89984185257dd1aeae4ddce8d19ce4dd02762b3d6f3118b4fea14689b8619d1ec892f25fc63dbaf5d2b2ab9989ae0a4544e448ab28c02715e9d99e49fa53b01addd215136fa1f722c82"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0}) r8 = socket$netlink(0x10, 0x3, 0xf) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f00000001c0)=ANY=[]) 2.03856895s ago: executing program 5 (id=3012): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000005c0)=0x2000020, 0x4) sendto$inet(r0, 0x0, 0x0, 0x20020005, &(0x7f00000002c0)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x27) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000600)="2ae0e71086143618ca04a63b6c4c6b62904fa2540e1cb505b4c1508182bd5f735b73f7a8f21f5023ebcd914b5317df9edddde7339e2014c0", 0x38, 0x0, &(0x7f0000000000)={0xa, 0x40, 0x9, @mcast2}, 0x1c) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) recvmmsg(r1, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001500)=""/4112, 0x1010}, {&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000300)=""/27, 0x1b}], 0x3}, 0x6}], 0x1, 0x20000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0xf3, &(0x7f00000006c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000640), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x8, r0}, 0xffffffffffffff01) r8 = creat(0x0, 0x0) ptrace$peek(0xffffffffffffffff, 0x0, &(0x7f0000000400)) mount$9p_xen(&(0x7f0000000480), &(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x1040418, &(0x7f0000000a00)=ANY=[@ANYBLOB="7472616e733d78656e2c63616368657461673d722c756e616d653d2e2c69676e6f726571762c63616368653d6c6f6f73652c63616368653d6e6f6e652c63616368657461673d626174616476002c64656275673d3078303030303030303030303030303030332c769ae6ba808d79b3ef70323030302c63616368653d667363616368652c636f6e746578743d726f6f742c736d61636b66736861743d2c6e6f6c617a7974696d652c000000000000000000"]) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r8, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="030034bf2f225c18145bbfb7d0e5290000040000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYRESDEC=r7, @ANYRESOCT=r6], 0x50) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000006c0)={0x23, "ed7f96d4e9a472d5a140a573fa2648f8320159cbe9ddb89332be3fb9f5495a5b03bc0f"}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0xf67f, 0x18}, 0xc) 1.074525807s ago: executing program 5 (id=3013): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x2e, 0x0, @thr={0x0, 0x0}}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000a00)=ANY=[@ANYBLOB="200e0c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0xa, 0x28, "1e644a543678b055e219ed89e8bc4ac1a80eee9424375f9e37fc1a35e41188da0d0648d53fca7e2d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 496.757511ms ago: executing program 5 (id=3014): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) syz_usb_connect$uac1(0x2, 0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c00090402000001030000090402010101"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x13, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x4, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sendmsg$TIPC_NL_MON_SET(r1, 0x0, 0x1) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r1, 0x40105870, &(0x7f0000000140)={0x8, 0x8}) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000180)=0x66) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="419591c78b30640ee91c8fc7c6079c0213a13dce386a64f8a51e9b3930", 0xfffffffffffffee6}], 0x1) 0s ago: executing program 5 (id=3015): socket(0xa, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101001, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) write(r1, &(0x7f0000000480)="6ac51dad7b9e9dd147b89ddbd4490227c3ee", 0x12) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0, 0x926c, 0x44004, 0x2, 0x232}, &(0x7f0000000640)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x289, 0x220, 0x2, 0x117}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x990a, 0x800, 0x1, 0x3cd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b3c, 0x40, 0x3, 0x1ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x634b, 0x0, 0x3, 0x14f}}], 0x4, &(0x7f00000018c0)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x86d, 0x0, &(0x7f00000008c0)=@buf_1k="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"}}, &(0x7f0000001940)) setitimer(0x0, &(0x7f0000000040)={{0x6, 0x9}, {0x1ff, 0x32e3}}, 0x0) alarm(0x38) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046302}], 0x0, 0x0, 0x0}) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e25, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) connect$inet6(r5, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000040)={@private2, r7}, 0x14) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000023c0), 0x2, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r10, 0x100000000) write$binfmt_aout(r9, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)) writev(r8, &(0x7f0000001880), 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): fig 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.515537][ T2158] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 781.651511][ T2158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.718102][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 781.736743][ T2158] usb 5-1: Product: syz [ 781.773024][ T2158] usb 5-1: Manufacturer: syz [ 781.812117][ T2158] usb 5-1: SerialNumber: syz [ 781.830814][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 781.846736][T15783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2642'. [ 781.864262][T15783] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 781.877125][T15783] iwpm_mapping_info_cb: Unable to parse nlmsg [ 781.955583][T15787] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2643'. [ 781.986296][T15788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2642'. [ 782.031741][T15787] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2643'. [ 782.090904][ T30] audit: type=1400 audit(1786052299.600:1257): avc: denied { write } for pid=15784 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.336835][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 782.764637][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.773542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.783472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.080902][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 783.614030][ T2158] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 783.623948][ T2158] usb 5-1: MIDIStreaming interface descriptor not found [ 784.787518][ T3304] net_ratelimit: 1 callbacks suppressed [ 784.787536][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 784.814781][ T2158] usb 5-1: USB disconnect, device number 61 [ 784.886080][T15802] ieee802154 phy0 wpan0: encryption failed: -22 [ 784.908525][T13473] udevd[13473]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.086468][T15813] CIFS: VFS: UNC: path must begin with // or \\ [ 785.093314][T15813] Malformed UNC in devname [ 785.093314][T15813] [ 785.102626][T15813] CIFS: VFS: Malformed UNC in devname [ 785.337591][T15574] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 786.044457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.053356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.124338][T15819] CIFS: VFS: UNC: path must begin with // or \\ [ 786.132580][T15819] Malformed UNC in devname [ 786.132580][T15819] [ 786.142946][T15819] CIFS: VFS: Malformed UNC in devname [ 786.168010][T15574] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 786.396048][T15833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 786.410664][T15823] syzkaller0: entered promiscuous mode [ 786.420193][T15833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 786.428401][T15823] syzkaller0: entered allmulticast mode [ 786.845286][T15833] netlink: 'syz.0.2654': attribute type 10 has an invalid length. [ 786.900655][T15833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2654'. [ 786.929874][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 787.048938][ T30] audit: type=1400 audit(1786052304.620:1258): avc: denied { write } for pid=15799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.119585][T15843] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2656'. [ 787.147181][T15843] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2656'. [ 787.581738][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 787.677954][ T30] audit: type=1400 audit(1786052305.250:1259): avc: denied { write } for pid=15846 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.880367][T15849] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2655'. [ 787.977767][ T30] audit: type=1400 audit(1786052305.550:1260): avc: denied { append } for pid=15855 comm="syz.3.2659" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 788.193165][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 788.718255][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 789.254834][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 789.893119][ C1] net_ratelimit: 1 callbacks suppressed [ 789.893141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.908191][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.917056][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.977263][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 790.300410][T15574] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 790.837265][T15574] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 791.354369][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 791.882433][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 792.419224][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 793.089374][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 793.586076][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2664'. [ 793.602183][T15871] md: pers->run() failed ... [ 793.606838][T15857] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 793.607325][T15857] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 793.627578][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 793.643282][T15874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2664'. [ 793.670888][T15874] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 793.678489][T15857] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 793.688393][T15857] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 793.695623][T15874] iwpm_mapping_info_cb: Unable to parse nlmsg [ 793.704845][T15857] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 793.713416][T15857] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 793.728496][T15857] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 793.735845][T15857] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 793.916403][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.029044][T15886] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2664'. [ 794.042600][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 794.686815][T15888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 794.802249][T15888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.262157][T15882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.277767][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 795.285606][T15882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.321899][ T1312] net_ratelimit: 5 callbacks suppressed [ 795.321920][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 795.412404][T15898] 0x000000000007-0x000000020000 : "" [ 795.447021][T15898] ftl_cs: FTL header corrupt! [ 795.513513][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 795.662823][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 795.745548][T15893] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 795.868457][T15900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2667'. [ 795.890560][T15893] iwpm_mapping_info_cb: Unable to parse nlmsg [ 795.931995][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 795.938165][ T5596] Bluetooth: hci4: command 0x0406 tx timeout [ 795.944570][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 796.164999][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 797.286939][ T5733] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 797.484425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.724361][T13313] Bluetooth: hci0: command 0x0406 tx timeout [ 797.893362][ T8169] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 798.054479][T13313] Bluetooth: hci4: command 0x0406 tx timeout [ 798.060837][T15902] Bluetooth: hci1: command 0x0406 tx timeout [ 798.067773][ T5596] Bluetooth: hci2: command 0x0406 tx timeout [ 798.154239][ T5733] usb 7-1: Using ep0 maxpacket: 32 [ 798.165076][ T5733] usb 7-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 798.182759][ T5733] usb 7-1: config 0 interface 0 has no altsetting 0 [ 798.208793][ T5733] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 798.225726][ T5733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.258177][ T5733] usb 7-1: Product: syz [ 798.269837][ T5733] usb 7-1: Manufacturer: syz [ 798.283581][ T5733] usb 7-1: SerialNumber: syz [ 798.406308][ T5733] usb 7-1: config 0 descriptor?? [ 798.453230][ T5733] gs_usb 7-1:0.0: Required endpoints not found [ 798.464885][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 798.545441][T15930] 0x000000000007-0x000000020000 : "" [ 798.568413][T15930] ftl_cs: FTL header corrupt! [ 799.521056][ T8169] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 799.682371][T15942] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 799.822920][T15942] md: array md0 already has disks! [ 799.942455][T15944] md: pers->run() failed ... [ 799.980598][T15942] md: serialize_policy is only effective for raid1 [ 800.097733][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.110861][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.137715][ T8169] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 800.164628][ T5692] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 800.181208][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 800.325288][ T5692] usb 6-1: Using ep0 maxpacket: 32 [ 800.347182][ T5692] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.369750][ T5692] usb 6-1: config 0 interface 0 has no altsetting 0 [ 800.404111][ T5692] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 800.423649][ T5692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.436831][ T5692] usb 6-1: Product: syz [ 800.444094][ T5692] usb 6-1: Manufacturer: syz [ 800.449597][ T5692] usb 6-1: SerialNumber: syz [ 800.476394][ T5692] usb 6-1: config 0 descriptor?? [ 800.488901][ T5692] gs_usb 6-1:0.0: Required endpoints not found [ 800.604536][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.613020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.651569][ T5733] usb 7-1: USB disconnect, device number 48 [ 801.152953][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 802.112556][T15959] nbd: must specify a device to reconfigure [ 802.495526][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 802.544825][T15963] md: array md0 already has disks! [ 802.650811][T15965] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2684'. [ 803.024758][ T5815] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 803.099815][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.163179][T15963] md: pers->run() failed ... [ 803.247370][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 803.266797][ T5815] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 803.316334][ T5815] usb 5-1: config 0 interface 0 has no altsetting 0 [ 803.327789][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.334542][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.344827][ T5815] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 803.373186][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.411035][ T5815] usb 5-1: Product: syz [ 803.425574][ T5815] usb 5-1: Manufacturer: syz [ 803.429892][ T5733] usb 6-1: USB disconnect, device number 65 [ 803.437028][ T5815] usb 5-1: SerialNumber: syz [ 803.519383][T15990] 0x000000000007-0x000000020000 : "" [ 803.548574][ T5815] usb 5-1: config 0 descriptor?? [ 803.619054][ T5815] gs_usb 5-1:0.0: Required endpoints not found [ 803.690506][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 803.714267][ T2158] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 803.972919][T15990] ftl_cs: FTL header corrupt! [ 804.321968][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 804.547582][T15996] CIFS: VFS: UNC: path must begin with // or \\ [ 804.555568][T15996] Malformed UNC in devname [ 804.555568][T15996] [ 804.568332][T15996] CIFS: VFS: Malformed UNC in devname [ 805.082747][ T2158] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 805.164456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.172852][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.181397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.391781][ T2158] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 805.510608][ T2158] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 805.656470][ T2158] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.742765][ T2158] usb 4-1: Product: syz [ 805.782051][ T2158] usb 4-1: Manufacturer: syz [ 805.794836][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 805.831132][ T2158] usb 4-1: SerialNumber: syz [ 805.882263][ T2158] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input69 [ 806.169999][T15987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.297937][T16010] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.320706][T15987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.375803][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 806.633012][T16019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.774199][T16020] CIFS: VFS: UNC: path must begin with // or \\ [ 806.782462][T16020] Malformed UNC in devname [ 806.782462][T16020] [ 806.793411][T16020] CIFS: VFS: Malformed UNC in devname [ 806.978047][T16019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.184088][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 807.485494][ T9] usb 5-1: USB disconnect, device number 62 [ 807.535819][T16019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.690859][T16019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.804521][ T4947] bcm5974 4-1:1.0: could not read from device [ 807.830089][ T2158] bcm5974 4-1:1.0: could not read from device [ 808.168578][ T2158] input: failed to attach handler mousedev to device input69, error: -5 [ 808.221321][ T4947] bcm5974 4-1:1.0: could not read from device [ 808.229115][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 808.259748][ T2158] usb 4-1: USB disconnect, device number 70 [ 808.283121][ T4947] bcm5974 4-1:1.0: could not read from device [ 808.340450][T16023] CIFS: VFS: UNC: path must begin with // or \\ [ 808.347276][T16023] Malformed UNC in devname [ 808.347276][T16023] [ 808.353971][T16023] CIFS: VFS: Malformed UNC in devname [ 808.386057][T16028] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 808.390618][T16030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.416332][T15998] bcm5974 4-1:1.0: could not read from device [ 808.434449][T16031] md: array md0 already has disks! [ 808.444478][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.453031][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.458996][T15998] udevd[15998]: Error opening device "/dev/input/event4": No such file or directory [ 808.461495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.476152][T16030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.538190][T15998] udevd[15998]: Unable to EVIOCGABS device "/dev/input/event4" [ 808.593952][T15998] udevd[15998]: Unable to EVIOCGABS device "/dev/input/event4" [ 808.627980][T16033] syzkaller0: entered promiscuous mode [ 808.640627][T16030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.654003][T15998] udevd[15998]: Unable to EVIOCGABS device "/dev/input/event4" [ 808.674546][T16028] md: pers->run() failed ... [ 808.681393][T16033] syzkaller0: entered allmulticast mode [ 808.689952][T15998] udevd[15998]: Unable to EVIOCGABS device "/dev/input/event4" [ 808.699865][T16030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.709544][T16031] md: serialize_policy is only effective for raid1 [ 808.726213][T16033] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 808.792112][T16043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.806324][T16043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.834943][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 809.066905][ T5784] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 809.085841][T16030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.212948][T16030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.288587][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 809.303189][ T5784] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 809.326359][ T5784] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 809.357199][ T5784] usb 4-1: config 0 interface 0 has no altsetting 0 [ 809.373832][ T5784] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 809.383354][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 809.402068][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.411233][ T5784] usb 4-1: Product: syz [ 809.416328][ T5784] usb 4-1: Manufacturer: syz [ 809.421048][ T5784] usb 4-1: SerialNumber: syz [ 809.436704][ T5784] usb 4-1: config 0 descriptor?? [ 809.574929][ T5706] usb 7-1: new full-speed USB device number 49 using dummy_hcd [ 809.689369][T16055] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 809.724398][T16055] md: array md0 already has disks! [ 809.726657][ T5706] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 809.738435][ T5706] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.764206][ T5706] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 809.784187][ T5706] usb 7-1: config 1 has no interface number 1 [ 809.792757][ T5706] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 809.810987][T16055] md: pers->run() failed ... [ 809.824711][ T5706] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 809.856610][ T5706] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 809.859063][T16041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.874220][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.874250][ T5706] usb 7-1: Product: syz [ 809.874311][ T5706] usb 7-1: Manufacturer: syz [ 809.874351][ T5706] usb 7-1: SerialNumber: syz [ 809.905633][T16041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.914301][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 809.955067][T16055] md: serialize_policy is only effective for raid1 [ 809.980394][ T5784] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 810.285033][ T5815] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 810.510693][ T30] audit: type=1400 audit(1786052328.070:1261): avc: denied { listen } for pid=16063 comm="syz.0.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 810.549945][ T5815] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 810.662817][ T5815] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 810.746595][ T5815] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 810.770209][ T5815] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.796964][ T9] usb 4-1: USB disconnect, device number 71 [ 810.807290][T16062] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 810.871552][ T5815] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 810.965578][ T8170] net_ratelimit: 1 callbacks suppressed [ 810.965599][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 811.545150][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 811.750337][T16090] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2712'. [ 811.807883][T16090] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2712'. [ 811.898212][ T30] audit: type=1400 audit(1786052329.470:1262): avc: denied { listen } for pid=16089 comm="syz.3.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 811.981466][ T30] audit: type=1400 audit(1786052329.470:1263): avc: denied { accept } for pid=16089 comm="syz.3.2713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 812.107775][ T30] audit: type=1400 audit(1786052329.680:1264): avc: denied { write } for pid=16077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.219943][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 812.322818][ T30] audit: type=1400 audit(1786052329.890:1265): avc: denied { write } for pid=16100 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.422750][ T5706] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 812.484975][ T5706] usb 7-1: MIDIStreaming interface descriptor not found [ 812.605492][T15902] Bluetooth: hci2: command 0x0406 tx timeout [ 812.744961][ T5784] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 812.785650][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 812.942119][ T5706] usb 7-1: USB disconnect, device number 49 [ 812.955416][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 813.017263][ T5784] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 813.083956][ T5784] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 813.130402][T15891] udevd[15891]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 813.179931][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.299085][ T5784] usb 5-1: config 0 descriptor?? [ 813.385702][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 813.459699][ T2158] usb 6-1: USB disconnect, device number 66 [ 813.640920][T16131] 8021q: VLANs not supported on wg0 [ 813.975735][ T5784] usbhid 5-1:0.0: can't add hid device: -71 [ 814.044767][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 814.135005][ T5784] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 814.272803][T16144] 0x000000000007-0x000000020000 : "" [ 814.306225][T16144] ftl_cs: FTL header corrupt! [ 814.644817][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 814.692753][ T5784] usb 5-1: USB disconnect, device number 63 [ 815.579566][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 815.740655][ T30] audit: type=1400 audit(1786052333.110:1266): avc: denied { write } for pid=16108 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.044511][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.053122][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.055031][ T9] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 816.062238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.295610][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 816.324394][ T30] audit: type=1400 audit(1786052333.900:1267): avc: denied { write } for pid=16154 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 816.334329][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 816.406947][T16160] 0x000000000007-0x000000020000 : "" [ 816.571515][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 816.678645][ T9] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 816.715722][T16160] ftl_cs: FTL header corrupt! [ 816.915124][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 817.078415][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 817.282332][ T9] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 817.457799][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.692182][ T9] usb 6-1: Product: syz [ 817.761653][ T9] usb 6-1: Manufacturer: syz [ 817.861374][ T9] usb 6-1: SerialNumber: syz [ 818.164196][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 818.165822][ T9] usb 6-1: config 0 descriptor?? [ 818.764078][ T9] usb 6-1: can't set config #0, error -71 [ 818.840184][ T9] usb 6-1: USB disconnect, device number 67 [ 819.394734][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 819.983696][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 820.526402][ T30] audit: type=1400 audit(1786052338.100:1268): avc: denied { write } for pid=16187 comm="syz.4.2732" name="functions" dev="configfs" ino=16586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 820.582049][ T30] audit: type=1400 audit(1786052338.120:1269): avc: denied { lock } for pid=16187 comm="syz.4.2732" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 820.608939][ T5692] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 820.660697][ T30] audit: type=1800 audit(1786052338.200:1270): pid=16189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2732" name="c_srate" dev="configfs" ino=58405 res=0 errno=0 [ 820.844253][ T5692] usb 6-1: device descriptor read/64, error -71 [ 820.874043][T16196] 0x000000000007-0x000000020000 : "" [ 820.896394][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 821.039790][T16196] ftl_cs: FTL header corrupt! [ 821.254549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.263004][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.271622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.280225][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.473100][ T5692] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 821.582497][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 822.302917][T16203] 0x000000000007-0x000000020000 : "" [ 822.415159][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 822.574326][ T5692] usb 6-1: device descriptor read/64, error -71 [ 822.581210][T16203] ftl_cs: FTL header corrupt! [ 822.721530][ T5692] usb usb6-port1: attempt power cycle [ 823.075933][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 823.737451][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 823.846938][T16220] 0x000000000007-0x000000020000 : "" [ 824.017265][T16220] ftl_cs: FTL header corrupt! [ 824.286148][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 824.717162][T16224] misc userio: Begin command sent, but we're already running [ 825.054884][ T1312] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 825.325996][T15902] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 825.397603][T16240] CIFS: VFS: UNC: path must begin with // or \\ [ 825.406618][T16240] Malformed UNC in devname [ 825.406618][T16240] [ 825.414167][T16240] CIFS: VFS: Malformed UNC in devname [ 825.500033][T15902] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 825.552118][T15902] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 825.609090][T15902] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 825.665121][T15902] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 826.025300][T16249] 0x000000000007-0x000000020000 : "" [ 826.066541][T16249] ftl_cs: FTL header corrupt! [ 826.752127][ T8172] net_ratelimit: 2 callbacks suppressed [ 826.752146][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 826.924418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.932866][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.941720][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.951462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.548101][T16260] ieee802154 phy0 wpan0: encryption failed: -22 [ 827.804312][T13313] Bluetooth: hci5: command tx timeout [ 827.828696][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 828.186585][ T5815] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 828.525143][ T5815] usb 7-1: Using ep0 maxpacket: 16 [ 828.625501][ T5815] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 828.784709][T16263] fuse: Bad value for 'user_id' [ 828.796517][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 828.819491][T16263] fuse: Bad value for 'user_id' [ 828.824208][ T5815] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 828.844172][ T5815] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.885798][T16265] jffs2: notice: (16265) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 828.942748][ T5815] usb 7-1: config 0 descriptor?? [ 829.088526][ T5733] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 829.164340][ T2158] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 829.798603][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 829.868058][T16235] lo speed is unknown, defaulting to 1000 [ 829.884642][T13313] Bluetooth: hci5: command tx timeout [ 829.964264][ T5815] usbhid 7-1:0.0: can't add hid device: -71 [ 829.986112][ T2158] usb 5-1: Using ep0 maxpacket: 32 [ 830.006396][ T5733] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 830.021068][ T2158] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 830.036596][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 830.057307][ T2158] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 830.065866][ T5815] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 830.090086][ T5733] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 830.107437][ T2158] usb 5-1: config 0 interface 0 has no altsetting 0 [ 830.117572][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.134472][ T5733] usb 4-1: Product: syz [ 830.139195][ T5733] usb 4-1: Manufacturer: syz [ 830.145226][ T5733] usb 4-1: SerialNumber: syz [ 830.154655][ T2158] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 830.215289][ T5815] usb 7-1: USB disconnect, device number 50 [ 830.229563][ T2158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.242598][ T5733] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input71 [ 830.279118][ T2158] usb 5-1: Product: syz [ 830.334592][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 830.435212][T16278] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2753'. [ 830.436263][ T2158] usb 5-1: Manufacturer: syz [ 830.518337][T16270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.530871][ T2158] usb 5-1: SerialNumber: syz [ 830.553187][T16270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.559117][ T2158] usb 5-1: config 0 descriptor?? [ 830.875989][T16270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.899741][T16270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.024943][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 831.052504][ T2158] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 831.106173][T16285] jffs2: notice: (16285) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 831.155703][T16270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.194869][T16270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.240394][ T30] audit: type=1400 audit(1786052348.800:1271): avc: denied { mounton } for pid=16284 comm="syz.5.2754" path="/513/file0" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 831.335744][ T4947] bcm5974 4-1:1.0: could not read from device [ 831.350372][ T5733] bcm5974 4-1:1.0: could not read from device [ 831.373883][ T4947] bcm5974 4-1:1.0: could not read from device [ 831.442370][ T5733] input: failed to attach handler mousedev to device input71, error: -5 [ 831.541602][ T4947] bcm5974 4-1:1.0: could not read from device [ 831.553459][ T5733] usb 4-1: USB disconnect, device number 72 [ 831.700178][T15869] udevd[15869]: Error opening device "/dev/input/event4": No such file or directory [ 831.755966][T15869] udevd[15869]: Unable to EVIOCGABS device "/dev/input/event4" [ 831.768872][T16235] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.769798][ T2158] usb 5-1: USB disconnect, device number 64 [ 831.785173][T15869] udevd[15869]: Unable to EVIOCGABS device "/dev/input/event4" [ 831.796749][T15869] udevd[15869]: Unable to EVIOCGABS device "/dev/input/event4" [ 831.808822][T15869] udevd[15869]: Unable to EVIOCGABS device "/dev/input/event4" [ 831.827859][T16235] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.862482][T16235] bridge_slave_0: entered allmulticast mode [ 831.893511][T16235] bridge_slave_0: entered promiscuous mode [ 831.921796][T16235] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.930724][T16235] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.940015][T16235] bridge_slave_1: entered allmulticast mode [ 831.960089][T16235] bridge_slave_1: entered promiscuous mode [ 831.969242][T13313] Bluetooth: hci5: command tx timeout [ 832.110653][T16235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.117795][ T8170] net_ratelimit: 1 callbacks suppressed [ 832.117816][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 832.142229][T16235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.226949][T16235] team0: Port device team_slave_0 added [ 832.536484][T16305] CIFS: VFS: UNC: path must begin with // or \\ [ 832.543553][T16305] Malformed UNC in devname [ 832.543553][T16305] [ 832.553551][T16305] CIFS: VFS: Malformed UNC in devname [ 832.600291][T16235] team0: Port device team_slave_1 added [ 832.684442][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.693232][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.702576][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.711933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.744794][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 832.897729][T16235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.935484][T16316] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 832.979795][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.077122][T16316] md: array md0 already has disks! [ 833.193143][T16235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.380942][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 833.541649][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2762'. [ 833.666234][T16235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.685807][T16316] md: pers->run() failed ... [ 833.700700][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2762'. [ 833.701500][T16235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 834.135040][T13313] Bluetooth: hci5: command tx timeout [ 834.199166][T16235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 834.227881][T16330] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2762'. [ 834.239063][T16327] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 834.252892][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 834.285753][T16322] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2763'. [ 834.330257][T16327] iwpm_mapping_info_cb: Unable to parse nlmsg [ 834.500345][T16235] hsr_slave_0: entered promiscuous mode [ 834.532034][ T30] audit: type=1400 audit(1786052352.100:1272): avc: denied { write } for pid=16298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.565894][T16235] hsr_slave_1: entered promiscuous mode [ 834.604834][T16235] debugfs: 'hsr0' already exists in 'hsr' [ 834.633227][T16235] Cannot create hsr debugfs directory [ 834.731494][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2766'. [ 834.776919][T16346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2766'. [ 834.797887][ T30] audit: type=1400 audit(1786052352.360:1273): avc: denied { write } for pid=16347 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.842467][T16346] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 834.877382][T16346] iwpm_mapping_info_cb: Unable to parse nlmsg [ 834.884931][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 834.904346][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 834.968260][ T30] audit: type=1400 audit(1786052352.540:1274): avc: denied { write } for pid=16356 comm="syz.3.2770" name="/" dev="configfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 835.000514][T16352] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2766'. [ 835.051749][ T9] usb 5-1: config index 0 descriptor too short (expected 69, got 51) [ 835.056121][ T30] audit: type=1800 audit(1786052352.560:1275): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2770" name="zoned" dev="configfs" ino=58216 res=0 errno=0 [ 835.122814][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 835.189101][ T30] audit: type=1800 audit(1786052352.560:1276): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2770" name="zone_nr_conv" dev="configfs" ino=58217 res=0 errno=0 [ 835.192019][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 835.265530][T16360] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 835.294488][ T30] audit: type=1800 audit(1786052352.590:1277): pid=16357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2770" name="power" dev="configfs" ino=58219 res=0 errno=0 [ 835.306972][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00 [ 835.371094][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.377502][T16360] md: array md0 already has disks! [ 835.402482][ T9] usb 5-1: Product: syz [ 835.422192][ T9] usb 5-1: Manufacturer: syz [ 835.435467][ T9] usb 5-1: SerialNumber: syz [ 835.464487][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 835.467315][ T9] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 835.603140][T16360] md: pers->run() failed ... [ 835.632684][T16369] md: serialize_policy is only effective for raid1 [ 835.669366][ T9] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -90 [ 836.042112][T16377] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2773'. [ 836.127155][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -90 [ 836.248837][T15997] udevd[15997]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 836.267264][T16235] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.293184][ T30] audit: type=1400 audit(1786052353.860:1278): avc: denied { write } for pid=16358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 836.455943][ T5733] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 836.492761][ T30] audit: type=1400 audit(1786052354.060:1279): avc: denied { write } for pid=16385 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 836.624270][ T5733] usb 4-1: Using ep0 maxpacket: 32 [ 836.631785][ T5733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 836.657173][ T5733] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 836.718843][ T5733] usb 4-1: config 0 interface 0 has no altsetting 0 [ 836.770571][ T5733] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 836.781397][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.803050][ T5733] usb 4-1: Product: syz [ 836.810547][T16235] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.825773][ T5733] usb 4-1: Manufacturer: syz [ 836.947915][ T5733] usb 4-1: SerialNumber: syz [ 836.961926][ T5733] usb 4-1: config 0 descriptor?? [ 837.486023][ T628] net_ratelimit: 2 callbacks suppressed [ 837.486043][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 837.567985][T16235] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.679954][ T5733] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 837.689340][ T5692] usb 5-1: USB disconnect, device number 65 [ 837.804439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.812893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.821678][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.830155][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 838.045174][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 838.102658][T16235] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.177621][ T5733] usb 4-1: USB disconnect, device number 73 [ 838.472839][T16408] 0x000000000007-0x000000020000 : "" [ 838.578050][T16408] ftl_cs: FTL header corrupt! [ 838.602655][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 839.695499][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 840.303108][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 840.828081][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2783'. [ 840.898772][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 841.609155][T16433] ieee802154 phy0 wpan0: encryption failed: -22 [ 842.975314][ T3304] net_ratelimit: 9 callbacks suppressed [ 842.975333][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 843.184926][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 843.354775][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 843.368391][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.394218][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 843.414297][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 843.430626][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 843.454359][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.473615][ T9] usb 5-1: Product: syz [ 843.483810][ T9] usb 5-1: Manufacturer: syz [ 843.493089][ T9] usb 5-1: SerialNumber: syz [ 843.504956][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 843.508892][ T9] usb 5-1: config 0 descriptor?? [ 843.959437][ T9] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 844.044860][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 844.387730][ T9] usb 5-1: USB disconnect, device number 66 [ 844.565791][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 844.650052][T16459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2797'. [ 844.837799][ T30] audit: type=1400 audit(1786052362.400:1280): avc: denied { write } for pid=16460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.983472][ T30] audit: type=1400 audit(1786052362.550:1281): avc: denied { write } for pid=16476 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.116672][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 845.375359][T16490] CIFS: VFS: UNC: path must begin with // or \\ [ 845.384020][T16490] Malformed UNC in devname [ 845.384020][T16490] [ 845.395156][T16490] CIFS: VFS: Malformed UNC in devname [ 845.674579][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 845.723041][T16492] overlayfs: failed to clone upperpath [ 845.929235][ T30] audit: type=1400 audit(1786052363.490:1282): avc: denied { write } for pid=16482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.295525][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 847.034867][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 847.083042][ T30] audit: type=1400 audit(1786052364.650:1283): avc: denied { write } for pid=16509 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.146279][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 847.155512][T16513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2805'. [ 847.168260][T16513] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 847.180461][T16513] iwpm_mapping_info_cb: Unable to parse nlmsg [ 847.579233][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 848.295337][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 848.684603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.695161][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.704817][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.713473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.854950][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 849.772704][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 850.486553][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 851.004688][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 851.524230][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 852.207722][T15902] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 852.224615][T15902] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 852.242687][T15902] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 852.251888][T15902] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 852.266101][T15902] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 852.713859][T16546] lo speed is unknown, defaulting to 1000 [ 853.109615][T16546] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.117007][T16546] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.125543][T16546] bridge_slave_0: entered allmulticast mode [ 853.137959][T16546] bridge_slave_0: entered promiscuous mode [ 853.147148][T16546] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.155211][T16546] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.162754][T16546] bridge_slave_1: entered allmulticast mode [ 853.171321][T16546] bridge_slave_1: entered promiscuous mode [ 853.215522][T16546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.228201][T16546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.268131][T16546] team0: Port device team_slave_0 added [ 853.277822][T16546] team0: Port device team_slave_1 added [ 853.307128][T16546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.315261][T16546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.346443][T16546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.366286][T16546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.373372][T16546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.403898][T16546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.455920][T16546] hsr_slave_0: entered promiscuous mode [ 853.462668][T16546] hsr_slave_1: entered promiscuous mode [ 853.473399][T16546] debugfs: 'hsr0' already exists in 'hsr' [ 853.479841][T16546] Cannot create hsr debugfs directory [ 853.594628][ T3304] net_ratelimit: 3 callbacks suppressed [ 853.594649][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 854.127530][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 854.376397][T15902] Bluetooth: hci0: command tx timeout [ 854.444797][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.453415][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.463426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.473539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.505157][T13313] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 854.527895][T13313] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 854.538074][T13313] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 854.589827][T13313] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 854.597929][T13313] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 854.657412][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 854.962042][T16571] lo speed is unknown, defaulting to 1000 [ 855.220374][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 855.225781][T16571] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.243067][T16571] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.251250][T16571] bridge_slave_0: entered allmulticast mode [ 855.260124][T16571] bridge_slave_0: entered promiscuous mode [ 855.271213][T16571] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.278691][T16571] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.287455][T16571] bridge_slave_1: entered allmulticast mode [ 855.296354][T16571] bridge_slave_1: entered promiscuous mode [ 855.366398][T16571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.388202][T16571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.573012][T16571] team0: Port device team_slave_0 added [ 855.613393][T16571] team0: Port device team_slave_1 added [ 855.760481][T16571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.767925][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 855.796566][T16571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.835151][T16571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.848145][T16571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.861118][T16571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.900388][T16571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.917687][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2824'. [ 855.934325][T16593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2824'. [ 855.954270][T16593] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 855.970271][T16571] hsr_slave_0: entered promiscuous mode [ 855.977174][T16571] hsr_slave_1: entered promiscuous mode [ 855.983345][T16571] debugfs: 'hsr0' already exists in 'hsr' [ 855.989739][T16593] iwpm_mapping_info_cb: Unable to parse nlmsg [ 855.997755][T16571] Cannot create hsr debugfs directory [ 856.009285][T16593] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2824'. [ 856.334392][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 856.444977][T13313] Bluetooth: hci0: command tx timeout [ 856.684489][T13313] Bluetooth: hci6: command tx timeout [ 858.524584][T13313] Bluetooth: hci0: command tx timeout [ 858.764329][T13313] Bluetooth: hci6: command tx timeout [ 858.906101][ T8172] net_ratelimit: 4 callbacks suppressed [ 858.906126][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 859.434637][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 859.564451][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.572998][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.581481][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.589932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 859.954295][ T8170] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 860.474282][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 860.614440][T13313] Bluetooth: hci0: command tx timeout [ 860.844241][T13313] Bluetooth: hci6: command tx timeout [ 860.994567][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 861.514252][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 861.995352][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2837'. [ 862.620207][T16635] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2839'. [ 862.629743][T16635] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2839'. [ 862.925540][T13313] Bluetooth: hci6: command tx timeout [ 863.968420][T15902] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 863.986560][T15902] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 864.003952][T15902] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 864.015089][T15902] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 864.025514][T15902] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 864.075149][ T8172] net_ratelimit: 4 callbacks suppressed [ 864.075168][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 864.665059][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 864.684410][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.693176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.701653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.710338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 864.749575][ T30] audit: type=1400 audit(1786052382.320:1284): avc: denied { write } for pid=16646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.776672][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 864.784252][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 864.866236][T16643] lo speed is unknown, defaulting to 1000 [ 864.939816][ T30] audit: type=1400 audit(1786052382.510:1285): avc: denied { write } for pid=16672 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.214680][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 865.638829][T16643] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.699990][T16643] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.715544][T16643] bridge_slave_0: entered allmulticast mode [ 865.732360][ T30] audit: type=1400 audit(1786052383.300:1286): avc: denied { write } for pid=16676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.762269][T16643] bridge_slave_0: entered promiscuous mode [ 865.779475][T16643] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.803185][T16643] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.823441][T16643] bridge_slave_1: entered allmulticast mode [ 865.851887][T16643] bridge_slave_1: entered promiscuous mode [ 865.901394][ T30] audit: type=1400 audit(1786052383.470:1287): avc: denied { write } for pid=16694 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.960545][T16643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.989458][T16643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.085050][T16643] team0: Port device team_slave_0 added [ 866.105794][T16643] team0: Port device team_slave_1 added [ 866.124596][T13313] Bluetooth: hci7: command tx timeout [ 866.349621][T16643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.367027][T16643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.432757][T16643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.470490][T16643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.499267][T16643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.587741][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 866.613514][T16643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.733501][T16643] hsr_slave_0: entered promiscuous mode [ 866.744991][T16643] hsr_slave_1: entered promiscuous mode [ 866.756525][ T30] audit: type=1400 audit(1786052384.320:1288): avc: denied { write } for pid=16696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.788425][T16643] debugfs: 'hsr0' already exists in 'hsr' [ 866.795733][T16643] Cannot create hsr debugfs directory [ 866.896832][ T30] audit: type=1400 audit(1786052384.470:1289): avc: denied { write } for pid=16709 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 867.144678][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 867.687908][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 868.204320][T13313] Bluetooth: hci7: command tx timeout [ 868.488183][T16720] CIFS: VFS: UNC: path must begin with // or \\ [ 868.495354][T16720] Malformed UNC in devname [ 868.495354][T16720] [ 868.501989][T16720] CIFS: VFS: Malformed UNC in devname [ 869.234440][ T34] net_ratelimit: 2 callbacks suppressed [ 869.234462][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 869.795713][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 870.284362][T13313] Bluetooth: hci7: command tx timeout [ 870.344245][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 870.364437][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.372959][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.382221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.390759][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.865067][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 871.444471][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 871.984235][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 872.365067][T13313] Bluetooth: hci7: command tx timeout [ 874.694420][ T9689] net_ratelimit: 4 callbacks suppressed [ 874.694511][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 875.224304][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 875.484402][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.492807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.501609][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.510183][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.744234][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 876.003894][ T30] audit: type=1400 audit(1786052393.570:1290): avc: denied { ioctl } for pid=16784 comm="syz.5.2879" path="socket:[60436]" dev="sockfs" ino=60436 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 876.264329][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 876.784237][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 877.304266][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 879.955968][ T9689] net_ratelimit: 4 callbacks suppressed [ 879.955987][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 880.494874][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 880.684550][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.695198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.703867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 880.712343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 881.127580][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 881.654441][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 881.966233][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2895'. [ 881.976057][T16823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2895'. [ 881.988968][T16823] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 882.002212][T16823] iwpm_mapping_info_cb: Unable to parse nlmsg [ 882.018116][T16823] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2895'. [ 882.174452][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 882.704219][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 884.367823][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 884.378114][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 884.387796][T16846] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 884.401474][T16846] iwpm_mapping_info_cb: Unable to parse nlmsg [ 884.422084][T16846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2903'. [ 884.678182][T16852] ip6tnl0: Caught tx_queue_len zero misconfig [ 884.730644][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2906'. [ 884.742757][T16854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2906'. [ 884.756823][T16854] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 884.766980][T16854] iwpm_mapping_info_cb: Unable to parse nlmsg [ 885.093777][T15902] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 885.225768][T15902] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 885.243011][T15902] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 885.255329][T15902] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 885.265151][T15902] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 885.783677][ T12] net_ratelimit: 4 callbacks suppressed [ 885.783696][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 886.009724][T16859] lo speed is unknown, defaulting to 1000 [ 886.314747][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 886.444398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.453933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.464005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.473934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.643103][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'. [ 886.652424][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2912'. [ 886.662531][T16889] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 886.672605][T16889] iwpm_mapping_info_cb: Unable to parse nlmsg [ 887.236749][T16889] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2912'. [ 887.263698][T16859] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.271314][T16859] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.304099][T16859] bridge_slave_0: entered allmulticast mode [ 887.321441][T16859] bridge_slave_0: entered promiscuous mode [ 887.332122][T15902] Bluetooth: hci8: command tx timeout [ 887.360237][T16859] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.376745][T16859] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.391916][T16859] bridge_slave_1: entered allmulticast mode [ 887.399761][T16893] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2913'. [ 887.410954][T16859] bridge_slave_1: entered promiscuous mode [ 887.417356][T16893] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2913'. [ 887.452338][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 887.501368][T16859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.519818][T16859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.559255][T16859] team0: Port device team_slave_0 added [ 887.567284][T16859] team0: Port device team_slave_1 added [ 887.649278][T16859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.656545][T16859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.687466][T16859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.700318][T16859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.709688][T16859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.740922][T16859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.820846][T16859] hsr_slave_0: entered promiscuous mode [ 887.835258][T16859] hsr_slave_1: entered promiscuous mode [ 887.843933][T16859] debugfs: 'hsr0' already exists in 'hsr' [ 887.852308][T16859] Cannot create hsr debugfs directory [ 888.023991][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 888.565360][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 889.085156][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 889.404560][T15902] Bluetooth: hci8: command tx timeout [ 891.148971][ T34] net_ratelimit: 3 callbacks suppressed [ 891.148989][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 891.260875][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2927'. [ 891.269957][T16923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2927'. [ 891.283690][T16923] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 891.293524][T16923] iwpm_mapping_info_cb: Unable to parse nlmsg [ 891.395581][T16923] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2927'. [ 891.484426][T15902] Bluetooth: hci8: command tx timeout [ 891.625965][T16928] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2929'. [ 891.636865][T16928] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2929'. [ 891.695891][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 892.204548][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.212925][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.221196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.229517][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 892.240146][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 892.775348][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 893.294335][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 893.564798][T13313] Bluetooth: hci8: command tx timeout [ 893.844491][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 894.007512][T16934] CIFS: VFS: UNC: path must begin with // or \\ [ 894.013977][T16934] Malformed UNC in devname [ 894.013977][T16934] [ 894.020709][T16934] CIFS: VFS: Malformed UNC in devname [ 896.434238][ T9689] net_ratelimit: 4 callbacks suppressed [ 896.434277][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 896.964354][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 897.494279][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 897.964456][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.973137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.981618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 897.989948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 898.014393][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 898.544238][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 899.064291][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 901.423942][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2948'. [ 901.658362][ T34] net_ratelimit: 4 callbacks suppressed [ 901.658386][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.194269][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.714262][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 903.234211][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 903.734462][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.743290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.752174][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.761460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.771826][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 904.294301][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 905.901130][T17000] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2958'. [ 906.071812][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2960'. [ 906.083198][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2960'. [ 906.092570][T17005] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 906.110000][T17005] iwpm_mapping_info_cb: Unable to parse nlmsg [ 906.854312][ T9689] net_ratelimit: 4 callbacks suppressed [ 906.854331][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 907.157461][T17009] CIFS: VFS: UNC: path must begin with // or \\ [ 907.163751][T17009] Malformed UNC in devname [ 907.163751][T17009] [ 907.170891][T17009] CIFS: VFS: Malformed UNC in devname [ 907.385093][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 907.401331][T17018] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2965'. [ 907.924244][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 908.449195][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 908.844423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.853069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.861443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.870545][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.974375][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 909.494304][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 909.533121][T17032] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2972'. [ 912.064258][ T134] net_ratelimit: 4 callbacks suppressed [ 912.064280][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 912.594256][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 913.050865][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2976'. [ 913.079026][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2976'. [ 913.093885][T17043] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 913.094959][T15902] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 913.105389][T17043] iwpm_mapping_info_cb: Unable to parse nlmsg [ 913.120314][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 913.120947][T15902] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 913.151563][T15902] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 913.167826][T15902] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 913.177827][T15902] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 913.212184][T17043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2976'. [ 913.659294][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 913.907923][T17044] lo speed is unknown, defaulting to 1000 [ 913.964369][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.973535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.982360][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 913.990793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.188356][T17044] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.196065][T17044] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.203725][T17044] bridge_slave_0: entered allmulticast mode [ 914.215142][T17044] bridge_slave_0: entered promiscuous mode [ 914.225647][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 914.323263][T17044] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.342831][T17044] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.354524][T17044] bridge_slave_1: entered allmulticast mode [ 914.367552][T17044] bridge_slave_1: entered promiscuous mode [ 914.428922][T17044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.456090][T17044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.507239][T17044] team0: Port device team_slave_0 added [ 914.517168][T17044] team0: Port device team_slave_1 added [ 914.562950][T17044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 914.583567][T17044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.585843][T13313] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 914.619248][T17044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 914.637448][T17044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 914.644726][T17044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 914.649268][T13313] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 914.673383][T17044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.695155][T13313] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 915.176536][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 915.196518][T13313] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 915.213540][T13313] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 915.315282][T17044] hsr_slave_0: entered promiscuous mode [ 915.321715][T17044] hsr_slave_1: entered promiscuous mode [ 915.327499][T13313] Bluetooth: hci9: command tx timeout [ 915.345341][T17044] debugfs: 'hsr0' already exists in 'hsr' [ 915.351160][T17044] Cannot create hsr debugfs directory [ 915.494068][T17076] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2980'. [ 915.886688][T17069] lo speed is unknown, defaulting to 1000 [ 916.435888][T17069] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.455836][T17069] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.473140][T17069] bridge_slave_0: entered allmulticast mode [ 916.482327][T17069] bridge_slave_0: entered promiscuous mode [ 916.493800][T17093] CIFS: VFS: UNC: path must begin with // or \\ [ 916.500134][T17093] Malformed UNC in devname [ 916.500134][T17093] [ 916.506829][T17093] CIFS: VFS: Malformed UNC in devname [ 916.568159][T17069] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.591633][T17069] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.613813][T17069] bridge_slave_1: entered allmulticast mode [ 916.632029][T17069] bridge_slave_1: entered promiscuous mode [ 916.694324][T17069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.710089][T17069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.772778][T17069] team0: Port device team_slave_0 added [ 916.781688][T17069] team0: Port device team_slave_1 added [ 916.823536][T17069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.844528][T17069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.875501][T17069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.888507][T17069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.897995][T17069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.925368][T17069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.985466][T17069] hsr_slave_0: entered promiscuous mode [ 917.001221][T17069] hsr_slave_1: entered promiscuous mode [ 917.012296][T17069] debugfs: 'hsr0' already exists in 'hsr' [ 917.024162][T17069] Cannot create hsr debugfs directory [ 917.250870][ T628] net_ratelimit: 3 callbacks suppressed [ 917.250889][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.324396][T13313] Bluetooth: hci10: command tx timeout [ 917.404301][T13313] Bluetooth: hci9: command tx timeout [ 917.785044][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 918.305671][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 918.715303][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2988'. [ 918.754141][T17106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2988'. [ 918.769860][T17107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2988'. [ 918.780319][T17106] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 918.790317][T17106] iwpm_mapping_info_cb: Unable to parse nlmsg [ 918.840806][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 919.410978][T13313] Bluetooth: hci10: command tx timeout [ 919.431517][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 919.484383][T13313] Bluetooth: hci9: command tx timeout [ 919.724734][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.733540][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.742144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.750744][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 919.987707][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 921.484307][T13313] Bluetooth: hci10: command tx timeout [ 921.566418][T13313] Bluetooth: hci9: command tx timeout [ 922.554696][ T12] net_ratelimit: 4 callbacks suppressed [ 922.554719][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 923.084794][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 923.568048][T13313] Bluetooth: hci10: command tx timeout [ 923.604917][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 924.090346][T15902] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 924.108322][T15902] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 924.122923][T15902] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 924.130431][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 924.155256][T15902] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 924.166030][T15902] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 924.478227][T17132] lo speed is unknown, defaulting to 1000 [ 924.636648][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 924.844055][T17132] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.852079][T17132] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.868628][T17132] bridge_slave_0: entered allmulticast mode [ 924.877914][T17132] bridge_slave_0: entered promiscuous mode [ 924.888422][T17132] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.895967][T17132] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.904957][T17132] bridge_slave_1: entered allmulticast mode [ 924.913015][T17132] bridge_slave_1: entered promiscuous mode [ 924.947026][T17132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.967036][T17132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.997052][T17132] team0: Port device team_slave_0 added [ 925.010916][T17132] team0: Port device team_slave_1 added [ 925.068622][T17132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 925.096592][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.164995][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 925.187787][T17132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 925.205058][T17132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.220257][T17132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 925.251490][T17132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.335469][T17132] hsr_slave_0: entered promiscuous mode [ 925.347647][T17132] hsr_slave_1: entered promiscuous mode [ 925.368314][T17132] debugfs: 'hsr0' already exists in 'hsr' [ 925.398686][T17132] Cannot create hsr debugfs directory [ 925.706945][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 926.044713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.053343][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.062855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.209995][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.216796][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.284561][T15902] Bluetooth: hci11: command tx timeout [ 926.510391][ T30] audit: type=1400 audit(1786052444.080:1291): avc: denied { watch watch_reads } for pid=17155 comm="syz.5.2999" path="/725" dev="tmpfs" ino=3978 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 926.763983][T17164] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3002'. [ 927.754494][ T628] net_ratelimit: 4 callbacks suppressed [ 927.754515][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 928.294285][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 928.364298][T15902] Bluetooth: hci11: command tx timeout [ 928.814323][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 929.344422][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 929.890236][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 930.424281][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 930.454744][T15902] Bluetooth: hci11: command tx timeout [ 930.954227][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 931.116229][T17187] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3010'. [ 931.404406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.412913][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.421374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 932.524250][T15902] Bluetooth: hci11: command tx timeout [ 933.008355][ T3304] net_ratelimit: 3 callbacks suppressed [ 933.008376][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 933.535036][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 934.065712][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 934.584307][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 935.104302][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 935.625531][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 936.155106][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 936.674260][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 937.004427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.013911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.214220][ T3304] net_ratelimit: 3 callbacks suppressed [ 938.214240][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 938.744510][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 939.265171][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 939.794889][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 940.204449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.212911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.222463][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.231414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.314318][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 940.834427][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 943.394303][ T34] net_ratelimit: 4 callbacks suppressed [ 943.394322][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 943.924194][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 944.450431][ T9689] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 944.974438][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 945.122612][T13313] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 945.135847][T13313] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 945.147756][T13313] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 945.170565][T13313] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 945.178989][T13313] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 945.254414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.262861][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.271189][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.526991][T17202] lo speed is unknown, defaulting to 1000 [ 945.726302][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 945.810354][T17202] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.817594][T17202] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.825425][T17202] bridge_slave_0: entered allmulticast mode [ 945.833082][T17202] bridge_slave_0: entered promiscuous mode [ 945.842405][T17202] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.849768][T17202] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.857543][T17202] bridge_slave_1: entered allmulticast mode [ 945.865330][T17202] bridge_slave_1: entered promiscuous mode [ 945.912267][T17202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.925181][T17202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.958689][T17202] team0: Port device team_slave_0 added [ 945.975177][T17202] team0: Port device team_slave_1 added [ 946.009640][T17202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.017051][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.043328][T17202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.056370][T17202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.063355][T17202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 946.090166][T17202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.144621][T17202] hsr_slave_0: entered promiscuous mode [ 946.151479][T17202] hsr_slave_1: entered promiscuous mode [ 946.158210][T17202] debugfs: 'hsr0' already exists in 'hsr' [ 946.163982][T17202] Cannot create hsr debugfs directory [ 946.266580][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 946.784275][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 947.244308][T15902] Bluetooth: hci12: command tx timeout [ 948.524369][ C0] net_ratelimit: 3 callbacks suppressed [ 948.524392][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.538399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 948.768495][T15902] Bluetooth: hci5: command 0x0406 tx timeout [ 948.834592][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.324365][T13313] Bluetooth: hci12: command tx timeout [ 949.354280][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.874301][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 950.394270][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 950.914236][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 951.404252][T13313] Bluetooth: hci12: command tx timeout [ 951.435968][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 951.954350][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 952.474347][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 953.484260][T13313] Bluetooth: hci12: command tx timeout [ 954.024342][ T3304] net_ratelimit: 6 callbacks suppressed [ 954.024362][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 954.554220][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 955.075756][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 955.594269][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 956.114270][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 956.634249][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 957.154242][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 957.674345][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 958.044408][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.052750][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 959.225134][ T3304] net_ratelimit: 4 callbacks suppressed [ 959.225154][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 959.754211][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.275014][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 960.794249][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 961.314379][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 961.834268][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 962.354299][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 962.875915][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 963.394259][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 963.884420][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.424479][ T12] net_ratelimit: 4 callbacks suppressed [ 964.424505][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 964.954282][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 965.474215][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 965.994305][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 966.514299][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 967.034275][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 967.554251][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 968.075179][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 968.595118][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 969.114320][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 969.634895][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 969.649712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.649933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.650139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.650318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.194266][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 970.715409][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 971.235028][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 971.754306][ T3304] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 972.274512][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 973.196593][T15902] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 973.220564][T15902] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 973.240000][T15902] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 973.255426][T15902] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 973.269930][T15902] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 973.550271][T17228] lo speed is unknown, defaulting to 1000 [ 973.807161][T17228] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.814998][T17228] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.823144][T17228] bridge_slave_0: entered allmulticast mode [ 973.831159][T17228] bridge_slave_0: entered promiscuous mode [ 973.841182][T17228] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.848618][T17228] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.856251][T17228] bridge_slave_1: entered allmulticast mode [ 973.865747][T17228] bridge_slave_1: entered promiscuous mode [ 973.898495][T17228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.912869][T17228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.947410][T17228] team0: Port device team_slave_0 added [ 973.957067][T17228] team0: Port device team_slave_1 added [ 973.985896][T17228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.992928][T17228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.020319][T17228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.033460][T17228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.041117][T17228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 974.069384][T17228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.127938][T17228] hsr_slave_0: entered promiscuous mode [ 974.137000][T17228] hsr_slave_1: entered promiscuous mode [ 974.143319][T17228] debugfs: 'hsr0' already exists in 'hsr' [ 974.150847][T17228] Cannot create hsr debugfs directory [ 974.684398][ C1] net_ratelimit: 4 callbacks suppressed [ 974.684417][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.698853][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.707194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 974.834699][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 975.213569][T15902] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 975.235574][T15902] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 975.247161][T15902] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 975.255731][T15902] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 975.264023][T15902] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 975.324971][T15902] Bluetooth: hci13: command tx timeout [ 975.354992][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 975.578944][T17247] lo speed is unknown, defaulting to 1000 [ 975.828913][T17247] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.836359][T17247] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.843831][T17247] bridge_slave_0: entered allmulticast mode [ 975.852238][T17247] bridge_slave_0: entered promiscuous mode [ 975.861175][T17247] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.868518][T17247] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.876121][T17247] bridge_slave_1: entered allmulticast mode [ 975.883670][T17247] bridge_slave_1: entered promiscuous mode [ 975.893007][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 975.916659][T17247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.928863][T17247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.961651][T17247] team0: Port device team_slave_0 added [ 975.970876][T17247] team0: Port device team_slave_1 added [ 975.999091][T17247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.006381][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.033541][T17247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.047005][T17247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.053970][T17247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 976.083108][T17247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.133644][T17247] hsr_slave_0: entered promiscuous mode [ 976.140848][T17247] hsr_slave_1: entered promiscuous mode [ 976.148215][T17247] debugfs: 'hsr0' already exists in 'hsr' [ 976.153990][T17247] Cannot create hsr debugfs directory [ 976.444881][ T34] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 976.965140][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 977.406918][ T5596] Bluetooth: hci14: command tx timeout [ 977.419690][ T5596] Bluetooth: hci13: command tx timeout [ 977.485532][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 977.964414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.491613][T17264] Bluetooth: hci13: command tx timeout [ 979.499739][ T5609] Bluetooth: hci6: command 0x0406 tx timeout [ 979.508892][T17264] Bluetooth: hci0: command 0x0406 tx timeout [ 979.521395][ T5609] Bluetooth: hci14: command tx timeout [ 980.045061][ T12] net_ratelimit: 7 callbacks suppressed [ 980.045080][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 980.575132][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 981.097329][ T8172] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 981.254536][ T31] INFO: task syz.6.2776:16395 blocked for more than 143 seconds. [ 981.265079][ T31] Tainted: G L syzkaller #0 [ 981.272138][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 981.282140][ T31] task:syz.6.2776 state:D stack:26296 pid:16395 tgid:16390 ppid:7603 task_flags:0x400140 flags:0x00080002 [ 981.296398][ T31] Call Trace: [ 981.299921][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 981.302959][ T31] __schedule+0x125c/0x6730 [ 981.309591][ T31] ? __pfx___schedule+0x10/0x10 [ 981.327327][ T31] ? find_held_lock+0x2b/0x80 [ 981.332950][ T31] ? schedule+0x225/0x2c0 [ 981.344241][ T31] schedule+0xdd/0x2c0 [ 981.357136][ T31] schedule_preempt_disabled+0x13/0x30 [ 981.374280][ T31] __mutex_lock+0xccc/0x1bd0 [ 981.383858][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 981.390894][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 981.396418][ T31] ? __kmalloc_noprof+0x343/0x820 [ 981.401505][ T31] ? nsim_bus_dev_max_vfs_write+0x1bb/0x410 [ 981.409350][ T31] ? nsim_bus_dev_max_vfs_write+0x206/0x410 [ 981.448332][ T31] nsim_bus_dev_max_vfs_write+0x206/0x410 [ 981.464937][ T31] ? __pfx_nsim_bus_dev_max_vfs_write+0x10/0x10 [ 981.491659][ T31] ? __debugfs_file_get+0x1fc/0x860 [ 981.500365][ T31] ? lock_acquire+0x5e/0x370 [ 981.506713][ T31] full_proxy_write+0x135/0x1a0 [ 981.515661][ T31] vfs_write+0x2aa/0x1050 [ 981.523009][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 981.532777][ T31] ? irqentry_exit+0x24d/0xa00 [ 981.542501][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 981.551917][ T31] ? __pfx_vfs_write+0x10/0x10 [ 981.561086][ T31] ksys_write+0x12a/0x250 [ 981.566687][T15902] Bluetooth: hci14: command tx timeout [ 981.568659][T13313] Bluetooth: hci13: command tx timeout [ 981.580837][ T31] ? __pfx_ksys_write+0x10/0x10 [ 981.589912][ T31] do_syscall_64+0x115/0x870 [ 981.597714][ T31] ? clear_bhb_loop+0x40/0x90 [ 981.605364][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.614595][ T628] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 981.631443][ T31] RIP: 0033:0x7f492279e0d9 [ 981.644719][ T31] RSP: 002b:00007f492361d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 981.653218][ T31] RAX: ffffffffffffffda RBX: 00007f4922a26180 RCX: 00007f492279e0d9 [ 981.662167][ T31] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000004 [ 981.670855][ T31] RBP: 00007f4922835024 R08: 0000000000000000 R09: 0000000000000000 [ 981.679594][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.687743][ T31] R13: 00007f4922a26218 R14: 00007f4922a26180 R15: 00007ffd4b191928 [ 981.698036][ T31] [ 981.702693][ T31] [ 981.702693][ T31] Showing all locks held in the system: [ 981.714933][ T31] 1 lock held by khungtaskd/31: [ 981.722986][ T31] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 981.738723][ T31] 2 locks held by getty/5348: [ 981.749394][ T31] #0: ffff88803321c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 981.764053][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 981.782145][ T31] 2 locks held by syz.5.1025/9878: [ 981.792497][ T31] 2 locks held by syz.5.1224/10613: [ 981.800778][ T31] 1 lock held by syz.5.1760/12407: [ 981.810761][ T31] 1 lock held by syz.5.1772/12449: [ 981.819017][ T31] 2 locks held by syz.5.1790/12484: [ 981.825866][ T31] 2 locks held by syz.5.2166/13912: [ 981.834280][ T31] 2 locks held by syz.5.2318/14503: [ 981.842446][ T31] 2 locks held by syz.5.2331/14544: [ 981.853725][ T31] 1 lock held by syz.5.2343/14598: [ 981.864009][ T31] 1 lock held by syz.5.2498/15251: [ 981.872807][ T31] 2 locks held by syz.5.2673/15923: [ 981.882000][ T31] 7 locks held by syz-executor/16235: [ 981.908575][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 981.919928][ T31] #1: ffff888079f2a080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 981.933289][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 981.943523][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 981.955623][ T31] #4: ffff888034f82128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 981.966723][ T31] #5: ffff888076885258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 981.979408][ T31] #6: ffff888074b81e20 (&sb->s_type->i_mutex_key#8/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 981.997075][ T31] 3 locks held by syz.6.2776/16395: [ 982.004603][ T31] #0: ffff88807a5a6d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 982.023379][ T31] #1: ffff888020aaa450 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.037721][ T31] #2: ffff888076885258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_bus_dev_max_vfs_write+0x206/0x410 [ 982.060202][ T31] 2 locks held by syz.3.2781/16413: [ 982.069123][ T31] #0: ffff888020aaa450 (sb_writers#9){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 982.087319][ T31] #1: ffff888074b81e20 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280 [ 982.110071][ T31] 1 lock held by syz.5.2784/16428: [ 982.116590][ T31] #0: ffff8880575d0dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.130606][ T31] 2 locks held by syz.4.2811/16529: [ 982.135929][ T31] #0: ffff888020aaa450 (sb_writers#9){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 982.145353][ T31] #1: ffff888074b81e20 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280 [ 982.157090][ T31] 4 locks held by syz-executor/16546: [ 982.162536][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.171751][ T134] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 982.187271][ T31] #1: ffff88805678f080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.197271][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.208133][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.219064][ T31] 4 locks held by syz-executor/16571: [ 982.224803][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.234034][ T31] #1: ffff88808d7c8080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.245496][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.256606][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.267399][ T31] 4 locks held by syz-executor/16643: [ 982.272794][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.281950][ T31] #1: ffff88803343a480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.293262][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.303857][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.315796][ T31] 4 locks held by syz-executor/16859: [ 982.321711][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.331826][ T31] #1: ffff88805794e080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.342436][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.353573][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.365977][ T31] 1 lock held by syz.5.2911/16884: [ 982.371497][ T31] #0: ffff8880791bbbc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.383756][ T31] 1 lock held by syz.5.2918/16904: [ 982.392265][ T31] #0: ffff888074988dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.403214][ T31] 1 lock held by syz.5.2926/16921: [ 982.408991][ T31] #0: ffff888079064180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.420721][ T31] 1 lock held by syz.5.2933/16942: [ 982.427052][ T31] #0: ffff88807fb3ef80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.440318][ T31] 1 lock held by syz.5.2955/16994: [ 982.445681][ T31] #0: ffff888074998dc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.457867][ T31] 1 lock held by syz.5.2959/17003: [ 982.466018][ T31] #0: ffff888057595880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.477783][ T31] 4 locks held by syz-executor/17044: [ 982.483540][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.493302][ T31] #1: ffff88805139e080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.504186][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.514713][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.528448][ T31] 4 locks held by syz-executor/17069: [ 982.536661][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.547423][ T31] #1: ffff888082ae7480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.557547][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.570582][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.582907][ T31] 2 locks held by syz.5.2994/17122: [ 982.588700][ T31] #0: ffff888078324740 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.603068][ T31] #1: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 982.629311][ T31] 4 locks held by syz-executor/17132: [ 982.636210][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.646715][ T31] #1: ffff8880517bfc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.657858][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.669244][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.680129][ T31] 2 locks held by syz.5.3001/17162: [ 982.687026][ T31] #0: ffff8880575524c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.698258][ T31] #1: ffffffff8ebf3ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 982.708594][ T12] batman_adv: batadv0: Local translation table size (72) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 982.723484][ T31] 1 lock held by syz.5.3008/17180: [ 982.729408][ T31] #0: ffff88807936b040 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 982.740432][ T31] 4 locks held by syz-executor/17202: [ 982.747007][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.758150][ T31] #1: ffff888040239080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.772626][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.783159][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.794866][ T31] 4 locks held by syz-executor/17228: [ 982.800326][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.809652][ T31] #1: ffff88804021a080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.819862][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.830240][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.841026][ T31] 4 locks held by syz-executor/17247: [ 982.847063][ T31] #0: ffff888032eb0450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 982.856472][ T31] #1: ffff888041b3c080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 982.866748][ T31] #2: ffff888029eb3698 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 982.878116][ T31] #3: ffffffff900046a0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 982.888842][ T31] [ 982.891235][ T31] ============================================= [ 982.891235][ T31] [ 982.978034][ T31] NMI backtrace for cpu 1 [ 982.978057][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 982.978082][ T31] Tainted: [L]=SOFTLOCKUP [ 982.978088][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 982.978097][ T31] Call Trace: [ 982.978103][ T31] [ 982.978111][ T31] dump_stack_lvl+0x100/0x190 [ 982.978137][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 982.978159][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 982.978183][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 982.978210][ T31] sys_info+0x141/0x190 [ 982.978231][ T31] watchdog+0xcb1/0x1030 [ 982.978255][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 982.978281][ T31] ? __pfx_watchdog+0x10/0x10 [ 982.978301][ T31] ? __kthread_parkme+0x18c/0x230 [ 982.978327][ T31] ? kthread+0x13a/0x450 [ 982.978342][ T31] ? __pfx_watchdog+0x10/0x10 [ 982.978360][ T31] kthread+0x370/0x450 [ 982.978375][ T31] ? __pfx_kthread+0x10/0x10 [ 982.978392][ T31] ret_from_fork+0x72b/0xd50 [ 982.978417][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 982.978442][ T31] ? __switch_to+0x800/0x10f0 [ 982.978459][ T31] ? __pfx_kthread+0x10/0x10 [ 982.978477][ T31] ret_from_fork_asm+0x1a/0x30 [ 982.978510][ T31] [ 982.978517][ T31] Sending NMI from CPU 1 to CPUs 0: [ 983.114022][ C0] NMI backtrace for cpu 0 [ 983.114041][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 983.114064][ C0] Tainted: [L]=SOFTLOCKUP [ 983.114070][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 983.114080][ C0] RIP: 0010:native_apic_msr_write+0x2a/0x40 [ 983.114105][ C0] Code: f3 0f 1e fa 8d 87 30 ff ff ff 83 e0 ef 74 20 89 f8 83 e0 ef 83 f8 20 74 16 c1 ef 04 31 d2 89 f0 8d 8f 00 08 00 00 0f 30 66 90 cc cc cc cc c3 cc cc cc cc 89 f6 31 d2 89 cf e9 c1 78 9c 03 90 [ 983.114119][ C0] RSP: 0018:ffffc90000147ba0 EFLAGS: 00000046 [ 983.114133][ C0] RAX: 000000000000000f RBX: ffff8880b8423d80 RCX: 0000000000000838 [ 983.114143][ C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000038 [ 983.114152][ C0] RBP: ffffffff81b58830 R08: 0000000000000005 R09: 0000000000000000 [ 983.114162][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000028f80 [ 983.114172][ C0] R13: ffff8880b8423dcc R14: 0000000000000001 R15: ffff8880b8423dc0 [ 983.114182][ C0] FS: 0000000000000000(0000) GS:ffff888123ded000(0000) knlGS:0000000000000000 [ 983.114199][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 983.114209][ C0] CR2: 000055bcc7798170 CR3: 000000000e994000 CR4: 00000000003526f0 [ 983.114219][ C0] Call Trace: [ 983.114225][ C0] [ 983.114230][ C0] lapic_next_event+0x10/0x20 [ 983.114250][ C0] clockevents_program_event+0x46b/0x820 [ 983.114277][ C0] ? hrtimer_bases_first+0x1a0/0x210 [ 983.114298][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 983.114322][ C0] tick_program_event+0xa9/0x140 [ 983.114340][ C0] hrtimer_reprogram+0x460/0x6c0 [ 983.114362][ C0] hrtimer_run_softirq+0x1fc/0x2c0 [ 983.114384][ C0] handle_softirqs+0x1ea/0x9b0 [ 983.114405][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 983.114423][ C0] ? run_ksoftirqd+0x5b/0x60 [ 983.114440][ C0] ? rcu_is_watching+0x12/0xc0 [ 983.114462][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 983.114479][ C0] run_ksoftirqd+0x38/0x60 [ 983.114496][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 983.114520][ C0] ? kthread+0x13a/0x450 [ 983.114534][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 983.114553][ C0] kthread+0x370/0x450 [ 983.114566][ C0] ? __pfx_kthread+0x10/0x10 [ 983.114580][ C0] ret_from_fork+0x72b/0xd50 [ 983.114600][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 983.114620][ C0] ? __switch_to+0x800/0x10f0 [ 983.114634][ C0] ? __pfx_kthread+0x10/0x10 [ 983.114649][ C0] ret_from_fork_asm+0x1a/0x30 [ 983.114676][ C0] [ 983.369946][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 983.377097][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 983.388102][ T31] Tainted: [L]=SOFTLOCKUP [ 983.392515][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 983.402657][ T31] Call Trace: [ 983.405951][ T31] [ 983.408897][ T31] dump_stack_lvl+0x100/0x190 [ 983.413590][ T31] vpanic+0x552/0x970 [ 983.417570][ T31] ? __pfx_vpanic+0x10/0x10 [ 983.422084][ T31] ? rcu_is_watching+0x12/0xc0 [ 983.426850][ T31] panic+0xd1/0xe0 [ 983.430575][ T31] ? __pfx_panic+0x10/0x10 [ 983.435062][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 983.441207][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 983.447521][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 983.453663][ T31] ? watchdog.cold+0x1ec/0x234 [ 983.458515][ T31] ? watchdog+0xcc1/0x1030 [ 983.462931][ T31] watchdog.cold+0x1fd/0x234 [ 983.467511][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 983.473309][ T31] ? __pfx_watchdog+0x10/0x10 [ 983.477999][ T31] ? __kthread_parkme+0x18c/0x230 [ 983.483141][ T31] ? kthread+0x13a/0x450 [ 983.488115][ T31] ? __pfx_watchdog+0x10/0x10 [ 983.492822][ T31] kthread+0x370/0x450 [ 983.497606][ T31] ? __pfx_kthread+0x10/0x10 [ 983.502278][ T31] ret_from_fork+0x72b/0xd50 [ 983.507211][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 983.512789][ T31] ? __switch_to+0x800/0x10f0 [ 983.517476][ T31] ? __pfx_kthread+0x10/0x10 [ 983.522093][ T31] ret_from_fork_asm+0x1a/0x30 [ 983.526905][ T31] [ 983.530116][ T31] Kernel Offset: disabled [ 983.534423][ T31] Rebooting in 86400 seconds..