last executing test programs: 13m45.325766883s ago: executing program 3 (id=623): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket(0x22, 0x2, 0x3) getpeername$inet6(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000100)=0x2, 0x4) 13m33.551966861s ago: executing program 3 (id=632): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_rdma(0x10, 0x3, 0x14) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1a) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x0) r2 = io_uring_setup(0x5111, &(0x7f0000000100)={0x0, 0x9c54, 0x10, 0x2, 0x1f6}) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000006c0), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 13m33.30469367s ago: executing program 3 (id=638): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$binfmt_register(0xffffffffffffffff, 0x0, 0x5d) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x6, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13m32.234863286s ago: executing program 3 (id=641): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/wireless\x00') preadv(r0, &(0x7f0000001580)=[{&(0x7f0000001500)=""/27, 0x1b}], 0x1, 0xb537, 0x9c) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$sndmidi(0x0, 0x8001, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xfdef) ioctl$PTP_PIN_GETFUNC2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000380)={'\x00', 0x3, 0x3, 0xb}) getrlimit(0x8, &(0x7f0000000300)) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) 13m28.520548072s ago: executing program 3 (id=647): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x40, 0x7, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000400)={r3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 13m28.127825374s ago: executing program 3 (id=651): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x6}}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dd", 0x46}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000080)}, {&(0x7f0000001500)="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", 0xf00}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b", 0x2e}, {&(0x7f0000000400)}], 0x6, 0x0, 0x0, 0x8800}], 0x1, 0x2000c015) 13m12.105113653s ago: executing program 32 (id=651): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x6}}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000100000000000000080003000b000000", 0x24) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000180)="8982afa718e799f0c47419086bd06ebb83943667020d3df6845464707ccd7104dc6a994cd42dbeedd2f8cfa86ebba9b00b8aeb8021638931ac11b11721147fe993f32534b3dd", 0x46}, {&(0x7f0000000200)="ca8a42ca0c7565f05d5a7908d131dca97c57014d6e19176bea715b6ec66271c45cd540238c3c127a3666c0939aff745a4cc444292ced2d4ca775981e558cd320b6511ac7a42a1671e545225263ffc3c5c0dc0ec073e713fa2c", 0x59}, {&(0x7f0000000080)}, {&(0x7f0000001500)="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", 0xf00}, {&(0x7f0000000280)="6b48097632ab2cafe08f68909786d76d1be8d7363ac13a68e892c85470c382d6c2be0da17364752643883792b50b", 0x2e}, {&(0x7f0000000400)}], 0x6, 0x0, 0x0, 0x8800}], 0x1, 0x2000c015) 11m58.614383805s ago: executing program 0 (id=808): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0xa, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) msgget$private(0x0, 0xfffffffffffffffd) r1 = timerfd_create(0x0, 0x800) timerfd_settime(r1, 0x3, &(0x7f0000001380)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r1, 0x0) 11m51.047402782s ago: executing program 0 (id=818): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 11m50.870716164s ago: executing program 0 (id=820): openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) request_key(0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'bridge0\x00', @random="142b243c16b6"}) getpgid(0x0) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000440)) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0212090902"], 0x10}}, 0x40010) 11m44.134727304s ago: executing program 4 (id=831): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0x1e1c, &(0x7f0000000380)={0x0, 0x86f8, 0x4000, 0x3, 0xfffffffc}, &(0x7f0000002000), &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaa000800bc41d14286078bff0001907800000000ffffffffe0009078fffd000062c272fabd74b471b372"], 0x0) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(0x0, 0x3, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = dup2(r4, r4) socket(0x29, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000002c0)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) r9 = socket(0x2b, 0x1, 0x1) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xb}, 0x1c) sendmmsg$unix(r7, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000100)=[{&(0x7f00000004c0)="dd8a6636283331574614724432cefc49c70279d3ddd7f3e9a58e517edfc42416225875535dfd62512df09af0c2d91cc1195eff2c5c8b2d6d3ecb7dabbeda36c8b497846e01d0df2c9e0d57e50cf5fa77232bcfd345bf5a98829dd5c7da6c887b55ecd6ee0ecfb9fb2f36d0973fbca8ab4b1398cbf8aff82175a38426e892c246042f57f560af502cae8ec71d59223a0550ad6ce6be11199a7c38f2e5ab21732f8b644de14a46d05c4b2f3d90b648", 0xae}], 0x1, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [r6, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r7, 0xffffffffffffffff, r8, r2, r6, 0xffffffffffffffff, r5]}}], 0x70, 0xc805}}, {{&(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000840)="f338e7531fdf48d5b526cc20bdd084c02e7f06cfa8d9555cf2e44168288ee357", 0x20}, {&(0x7f0000000880)="39821a7d70c4d4efb58cb8baf3c19e8fd3010644ee45fd4634082a1ff76df494314da9a686159b7cc9880eae633eb3431b5c567da827d64e08881064c6d33e6cb1db6642c84bfd1be1eda7dd4906c07692e80723842a2ee22cbe290d493ccca20a2393c45c25bc5f7936411e320529540aac0c38c355d7f8b315c7fbb6666bb692f3e28b4d", 0x85}, {&(0x7f0000000940)="5e2fba04e3623dde000c8330a6f63b553248f3557d929a81af0a3b7c74e455eff042ef3eb6d4c49caf9d5df5119567314ab272e513f8b4d639158bcdf6c3efcce3ca0faceb184de989d4380c94b4df318cee987bee8dfa1c7121309a504a31233fd2f6aed13f8b48782635793da0156d142774275ea6ea4120e91290547208fed2a21b75d1d28cba4f3c665fa43aee2d181e684f5a981ae4cca79fe31b25fcd276f715e2eb012660dbbb2af4ba8b9228be6dd38eab2d", 0xb6}, {&(0x7f0000000a00)="ce6d10eee2b03a1936e645dd2807d77f0dcc0c3c8d2cfc7b43826b05eb22a2ea1cef584551053f860dee5a94494eda28a93af0862253250bdf1efd7f6cb5000d73d8b6467fd8baf9d01ec4c9275e3edcfd62806f92392fa0e408f515491f5d2bd1d63cd4a4f9877c311ff35b0116c305b47bca637bb0f2eb244280e81e6d0967c4dc6167ed0534a659c46b71185933a159b0c06065b60de426a1f27083b755ee9b2c69d6d6a5353927d54f6d322b6b56ccb2f9f290", 0xb5}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [r6, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, r1, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98, 0x4040000}}], 0x3, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r10, 0xffffffffffffffff, 0x0) 11m44.091953416s ago: executing program 0 (id=832): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000000c0)={0x40, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f00000004c0)={0x20, 0x16, 0x4, "fe211774"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x0, 0xf, 0x4, "3857ee75"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000300)={0x40, 0x17, 0x4, "4992fc52"}, 0x0, 0x0}) 11m43.684587501s ago: executing program 4 (id=833): mkdirat(0xffffffffffffff9c, 0x0, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 11m42.343980408s ago: executing program 4 (id=834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r4}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x8000, 0x0, 0x0) 11m41.166393887s ago: executing program 4 (id=837): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0486dd6000000000140600fe8000000000000000000000000000bbfe8000000000000f00000000000000aa00004e228173fd0cf6a6860dcc"], 0x0) 11m40.019608945s ago: executing program 4 (id=839): openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) 11m40.015205267s ago: executing program 0 (id=840): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 11m39.070122342s ago: executing program 0 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = eventfd(0x5) write$eventfd(r1, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) read$eventfd(r1, &(0x7f0000000200), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x1d5, &(0x7f0000000140)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000000000e"], 0x28}, 0x1, 0x0, 0x0, 0x2000054}, 0x40840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1}, @restrict={0xffffffff, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x32}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m38.756498573s ago: executing program 4 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000003000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030001000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044044) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockname$l2tp6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x20) r6 = inotify_init1(0x800) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 11m23.501496923s ago: executing program 33 (id=842): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = eventfd(0x5) write$eventfd(r1, &(0x7f0000000240)=0xfffffffffffffffa, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) read$eventfd(r1, &(0x7f0000000200), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x1d5, &(0x7f0000000140)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a140000001100010000000000000000000000000e"], 0x28}, 0x1, 0x0, 0x0, 0x2000054}, 0x40840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x20000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x0, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x20008844) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2df, 0x9, 0x1, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1}, @restrict={0xffffffff, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x32}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0], 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x15, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11m23.442161281s ago: executing program 34 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000003000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x5) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030001000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044044) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockname$l2tp6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, &(0x7f0000000240)=0x20) r6 = inotify_init1(0x800) recvmsg(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) inotify_add_watch(r6, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 7m57.140046359s ago: executing program 1 (id=1154): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) getegid() keyctl$reject(0x13, 0x0, 0x8, 0x8fe, 0x0) 7m56.909318897s ago: executing program 1 (id=1155): r0 = socket(0x1f, 0x3, 0x11) sendmsg$nl_route_sched(r0, 0x0, 0x44080) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 7m56.607813145s ago: executing program 1 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000811000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000b26000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r2 = openat$audio1(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000280)=0x7) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x10, 0x27, 0x1, 0x0, 0x0, "", [@generic]}, 0x10}], 0x1}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) r3 = socket(0x2, 0x5, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000180)={0x30, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 7m56.346292915s ago: executing program 1 (id=1157): ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) creat(&(0x7f00000001c0)='./file0\x00', 0x102) 7m56.202918249s ago: executing program 1 (id=1158): r0 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x400000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000240)=0x7d75, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket(0x10, 0x80002, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000040, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000840)) write$dsp(0xffffffffffffffff, &(0x7f0000000380)="065a", 0x2) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) close_range(r3, 0xffffffffffffffff, 0x0) 7m55.472095645s ago: executing program 1 (id=1159): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000040)=0x1ff, 0x4) 7m54.963428207s ago: executing program 35 (id=1159): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x2, &(0x7f0000000040)=0x1ff, 0x4) 5.959413957s ago: executing program 5 (id=2459): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000240), 0x0) 5.727955568s ago: executing program 5 (id=2462): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"e5a11af80100007ea25edd00"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)={r1, 0x79e, 0x10, 0xaf7, 0xfffffffffffffffc}, &(0x7f00000010c0)=0x18) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) 5.714010638s ago: executing program 2 (id=2463): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.462521392s ago: executing program 5 (id=2467): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 3.563939095s ago: executing program 8 (id=2471): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x9) 3.393660116s ago: executing program 5 (id=2473): socket$packet(0x11, 0x2, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05", 0x29}], 0x1}, 0x40880) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 3.344487988s ago: executing program 8 (id=2475): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x800000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x4, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0xf6f7, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r1, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents(r2, 0x0, 0x0) 3.145549091s ago: executing program 8 (id=2477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c2c1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f1f1a8aeefa517ed1525ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de7bdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f862c1e7233c26f73ca24e5e441dd406e136df3a3996865e0693d955c691c675c3f6191b225d82ea4c6a7b2c1ed690c17768cd2b21ab0ac2ca7673eb9c00d635e146555db84b8a9061c3ca8bbefd2ae2b80f4a09561a098815c1357c4a7bca20712834842f171f5872668e88c7fcfe0bf526adcc84c5b1d7ca1b6486f25a2de3a52546468652e4e1ea8bee54b2f45d25173c2e3539f2a3642d825bdff3684ca6d0236cdd1cf93086b4574c588bb30275bcc87cc28ca453dcd07e3b2de929e898f0db8bb69e3725b2097abfb64d5bd", 0x28e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="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", 0x1e6}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = dup(0xffffffffffffffff) sendmsg$netlink(r4, 0x0, 0x0) epoll_wait(r4, &(0x7f0000000040)=[{}, {}], 0x2, 0xffff4fdd) 3.145012155s ago: executing program 5 (id=2478): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000006, 0x10, r3, 0xcf032000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) accept4$rose(r0, &(0x7f0000000140)=@short={0xb, @dev, @rose}, &(0x7f0000000240)=0x1c, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000001f00)=""/4093, 0xffd) 3.136044526s ago: executing program 2 (id=2479): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8010}, 0x4008898) recvmsg(r3, &(0x7f000000b680)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x24000044, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) 3.010614093s ago: executing program 8 (id=2481): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000140)=0x20, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe662, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0xf519, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0xfffffffd, 0x7fff, 0xffff, 0xa620, 0x1, 0xffff, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff001, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0x9]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.803566918s ago: executing program 2 (id=2482): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d5) 2.803019093s ago: executing program 8 (id=2483): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = msgget$private(0x0, 0x80) msgctl$IPC_STAT(r2, 0x2, 0x0) fstat(r0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r5 = getpid() mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x7000005) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x3, 0x0, 0x0, r3, r4, 0x10, 0x2000}, 0x0, 0x0, 0x1ff, 0x362, 0x0, 0x3, 0xffffffffffffffff, 0xffff, 0x0, 0x1, r5, r6}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r9 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r9, r8, 0x0, 0xffffffff) ioctl$BLKOPENZONE(r8, 0x40101286, &(0x7f0000000280)={0xfffffffffffffff9, 0x8}) r10 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$ax25(0x3, 0x5, 0xcb) sendmsg$key(r10, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) r11 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x800) ioctl$USBDEVFS_FREE_STREAMS(r11, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x9000000) 2.592766094s ago: executing program 7 (id=2484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb600000000000000008d0000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.170927041s ago: executing program 7 (id=2486): mknodat(0xffffffffffffff9c, &(0x7f0000001cc0)='./file0\x00', 0x2, 0x80e2e8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x4da0, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, 0x0) write$FUSE_WRITE(r2, 0x0, 0x0) 1.816149419s ago: executing program 6 (id=2488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040)=0x5, 0x4) 1.815717891s ago: executing program 6 (id=2489): socket$packet(0x11, 0x2, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff05", 0x29}], 0x1}, 0x40880) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2ff8}], 0x0, 0x0, 0x0}) 1.621086704s ago: executing program 7 (id=2490): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1.609585808s ago: executing program 6 (id=2491): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef53773c5cbdf4a583f81fdc8719dbe967b0690a3ed3f314c3e2ceebb3e29d00c2c1053d1e8b32d8a8be1bb9786746e0ee564306c80d7045747165005fa3528b5ac1e35e03b69cb54111dfcebc6d585aacdd57c351ef1aa8050274b122a21b47432f17a0cacfd9524d9cb09029e4daefaea47f8cd5a4f1dee71093ebc076363e14f78dd3b129b4b3ae5a7a085297416f1f1a8aeefa517ed1525ec76469b8b469851cc56c6016d9067dac3de3818856014c98ce8f36dac4d8cdb1f25e3c5de7bdab78066d2418c12e0acde73c05fc80a0658c7fbc52812a8423323a80e8a968e0ace13290fe8f862c1e7233c26f73ca24e5e441dd406e136df3a3996865e0693d955c691c675c3f6191b225d82ea4c6a7b2c1ed690c17768cd2b21ab0ac2ca7673eb9c00d635e146555db84b8a9061c3ca8bbefd2ae2b80f4a09561a098815c1357c4a7bca20712834842f171f5872668e88c7fcfe0bf526adcc84c5b1d7ca1b6486f25a2de3a52546468652e4e1ea8bee54b2f45d25173c2e3539f2a3642d825bdff3684ca6d0236cdd1cf93086b4574c588bb30275bcc87cc28ca453dcd07e3b2de929e898f0db8bb69e3725b2097abfb64d5bd", 0x28e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="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", 0x1e6}], 0x1}}], 0x2, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r4 = dup(0xffffffffffffffff) sendmsg$netlink(r4, 0x0, 0x0) epoll_wait(r4, &(0x7f0000000040)=[{}, {}], 0x2, 0xffff4fdd) 1.119663666s ago: executing program 6 (id=2492): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001040)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e349359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0491121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee4000bfb3d32b0181ff3d726a7dc6432a336a42b50b2c6877cb63b410d746b35fc721e5992ba47c3a2bc2d3679abe0794d226b7b0c333c3000fee7adaafb6efd57382eb2a86d71acaae52a154477a5b66757a886f4ad5446607520c17fb81ede0473cd897a34c7c9f41b660260699fb02c4f643a320812a36a2fdb8552682757bbe1bc4c5acf96541539dff8ff3a68049d4e5aa0327697c3654aa155b156ed826e0589d5de6bf83cb2406ba077125aa8bfc32c7cd22baa6d933bb1978905acc4099a192af1203d8c8ee2f07d6183b9480b3fe420ae5a59004b57cae5e6038f834123eb984e4ad0b3a6b0a30421ba1452de617b6a5c6663c13f9f2304815e61b27ba225ac5ab7287cad0b0424d0219ccec3b13e83bf3c1d9c5954c5b58d48b76b9", 0x2fc}], 0x1}}], 0x2, 0x480e0) 1.004275042s ago: executing program 7 (id=2493): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0xe}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYBLOB="0000000000000000fb0000cb66157a8747000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=r1, @ANYRES16=r4, @ANYRES8, @ANYRES16=r2, @ANYRESHEX], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8014}, 0x404c000) r5 = socket$inet(0x2, 0x3, 0x6) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, &(0x7f0000000180)=0xfffffe9f) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4040000) 831.796145ms ago: executing program 6 (id=2494): io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x54cd, 0x800, 0x0, 0x1d}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x0, @null, @bpq0, 0x3, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 745.948826ms ago: executing program 7 (id=2495): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0xfc}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 688.170732ms ago: executing program 2 (id=2496): io_uring_setup(0x30df, &(0x7f0000000000)={0x0, 0x54cd, 0x800, 0x0, 0x1d}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$unix(r0, &(0x7f0000000140)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x0, @null, @bpq0, 0x3, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @bcast, @bpq0, 0xfffff605, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x5, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 630.013958ms ago: executing program 6 (id=2497): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x304000000) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x48, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) 453.37688ms ago: executing program 5 (id=2498): socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x64) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa2bb1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) bind$inet6(r3, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, 0x0, 0x0) accept(r3, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r5, 0x90004) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) 438.05977ms ago: executing program 2 (id=2499): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="640f", 0x2}], 0x1}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f0000000040)=@gcm_128={{0x303}, "7ac2aed4591e5560", "e0d790876cc260931c3f0a83b7f54c37", "004000f7", "d9f54dec72cc8a39"}, 0x28) 405.30094ms ago: executing program 7 (id=2500): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x1, 0x0, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000003c0)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x30, 0x2d, 0x4e, 0x3a, 0x33, 0x2f]}}}, 0x4e}]}) keyctl$dh_compute(0x17, &(0x7f0000000d80), 0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={'cryptd(blake2b-160)\x00'}}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e618a08580403701a7a010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x60, 0x5, 0x2, '_1'}, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x81}, 0x0, 0x0}) unshare(0x2a020480) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000000c0)={"000600", 0x4, 0x6, 0x2, 0x0, 0x4, "0000000000f4ff00", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000040)={0x9, 0x8, 0x3, 0x81, 0xfffffffa, 0xd, "98a0b4a4d5bfb2b8b5ec67a9883d45f4", 0x8, 0x9, 0x5, 0xfd, 0x1, 0x0, 0x1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r7, r4}, 0xc) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x4040801) 382.897466ms ago: executing program 8 (id=2501): syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x800001, 0x0) 0s ago: executing program 2 (id=2502): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x10412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=']) kernel console output (not intermixed with test programs): 0: Adding interface: batadv_slave_0 [ 655.738281][ T9682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.738295][ T9682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.941124][ T9682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.941140][ T9682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.941166][ T9682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.674730][ T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 659.015311][ T31] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.015496][ T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 659.020887][ T31] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 659.021060][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.407018][ T31] usb 3-1: config 0 descriptor?? [ 659.518074][ T9682] hsr_slave_0: entered promiscuous mode [ 659.522818][ T9682] hsr_slave_1: entered promiscuous mode [ 659.540263][ T9682] debugfs: 'hsr0' already exists in 'hsr' [ 659.540293][ T9682] Cannot create hsr debugfs directory [ 660.177836][ T31] Bluetooth: Can't get version to change to load ram patch err [ 660.177882][ T31] Bluetooth: Loading sysconfig file failed [ 660.178199][ T31] ath3k 3-1:0.0: probe with driver ath3k failed with error -71 [ 660.276959][ T31] usb 3-1: USB disconnect, device number 26 [ 660.876588][ T9872] tmpfs: Unknown parameter 'nr_ino' [ 661.795162][ T1228] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 662.077388][ T1228] usb 3-1: Using ep0 maxpacket: 32 [ 662.079559][ T1228] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 662.079583][ T1228] usb 3-1: config 0 has no interface number 0 [ 662.079628][ T1228] usb 3-1: config 0 interface 184 has no altsetting 0 [ 662.082163][ T1228] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 662.082189][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.082207][ T1228] usb 3-1: Product: syz [ 662.082220][ T1228] usb 3-1: Manufacturer: syz [ 662.082233][ T1228] usb 3-1: SerialNumber: syz [ 662.245148][ T9881] fuse: Bad value for 'group_id' [ 662.245189][ T9881] fuse: Bad value for 'group_id' [ 662.295116][ T1228] usb 3-1: config 0 descriptor?? [ 662.996966][ T1228] smsc75xx v1.0.0 [ 663.741074][ T9888] overlayfs: failed to resolve './file1': -2 [ 664.406207][ T1228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 664.406237][ T1228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 664.608498][ T1228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 664.608528][ T1228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 664.608556][ T1228] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 664.608850][ T1228] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 666.144668][ T6519] bridge_slave_1: left allmulticast mode [ 666.144689][ T6519] bridge_slave_1: left promiscuous mode [ 666.144969][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.215434][ T6519] bridge_slave_0: left allmulticast mode [ 666.215456][ T6519] bridge_slave_0: left promiscuous mode [ 666.215624][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.297189][ T6519] bridge_slave_1: left allmulticast mode [ 666.297209][ T6519] bridge_slave_1: left promiscuous mode [ 666.297384][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.365617][ T6519] bridge_slave_0: left allmulticast mode [ 666.365642][ T6519] bridge_slave_0: left promiscuous mode [ 666.365837][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.446075][ T6519] bridge_slave_1: left allmulticast mode [ 666.446097][ T6519] bridge_slave_1: left promiscuous mode [ 666.446249][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.450384][ T5964] usb 3-1: USB disconnect, device number 27 [ 666.538190][ T6519] bridge_slave_0: left allmulticast mode [ 666.538210][ T6519] bridge_slave_0: left promiscuous mode [ 666.538367][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.416143][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.485052][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.526543][ T6519] bond0 (unregistering): Released all slaves [ 668.045430][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.106000][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.147340][ T6519] bond0 (unregistering): Released all slaves [ 668.445063][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.505207][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.572108][ T6519] bond0 (unregistering): Released all slaves [ 668.595086][ T9914] bridge0: entered promiscuous mode [ 671.144552][ T6519] hsr_slave_0: left promiscuous mode [ 671.184636][ T6519] hsr_slave_1: left promiscuous mode [ 671.185480][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.358462][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.284533][ T6519] hsr_slave_0: left promiscuous mode [ 672.304682][ T6519] hsr_slave_1: left promiscuous mode [ 672.305638][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.345208][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.464577][ T6519] hsr_slave_0: left promiscuous mode [ 672.504715][ T6519] hsr_slave_1: left promiscuous mode [ 672.505436][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.535416][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.445123][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 673.585164][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 674.955238][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 675.105107][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 677.960817][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 677.984773][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 678.031474][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 678.040257][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 678.041034][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 678.385975][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 678.397889][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 678.399201][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 678.400285][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 678.401417][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 678.455420][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 679.565838][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 680.074559][ T9649] Bluetooth: hci2: command tx timeout [ 680.275826][ T9939] bridge0: entered promiscuous mode [ 680.474526][ T9649] Bluetooth: hci3: command tx timeout [ 682.109558][ T9995] fuse: Bad value for 'group_id' [ 682.109599][ T9995] fuse: Bad value for 'group_id' [ 682.366124][ T9649] Bluetooth: hci2: command tx timeout [ 682.568761][ T9649] Bluetooth: hci3: command tx timeout [ 684.281750][ T9970] chnl_net:caif_netlink_parms(): no params data found [ 684.394814][ T9649] Bluetooth: hci2: command tx timeout [ 684.649779][ T9649] Bluetooth: hci3: command tx timeout [ 686.004074][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.004145][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.133285][ T9963] chnl_net:caif_netlink_parms(): no params data found [ 686.421771][ T9682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 686.475409][ T9682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 686.484913][ T9649] Bluetooth: hci2: command tx timeout [ 686.616434][ T9682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 686.715759][ T9649] Bluetooth: hci3: command tx timeout [ 686.766770][ T9682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 687.065622][ T9970] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.066089][ T9970] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.066916][ T9970] bridge_slave_0: entered allmulticast mode [ 687.078603][ T9970] bridge_slave_0: entered promiscuous mode [ 688.116728][ T9970] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.117288][ T9970] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.118405][ T9970] bridge_slave_1: entered allmulticast mode [ 688.203607][ T9970] bridge_slave_1: entered promiscuous mode [ 688.276687][ T9963] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.276970][ T9963] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.279899][ T9963] bridge_slave_0: entered allmulticast mode [ 688.343556][ T9963] bridge_slave_0: entered promiscuous mode [ 689.886593][ T9963] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.886742][ T9963] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.886982][ T9963] bridge_slave_1: entered allmulticast mode [ 689.904669][ T9963] bridge_slave_1: entered promiscuous mode [ 690.854552][ T31] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 691.020098][ T31] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 691.020127][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.026349][ T31] usb 3-1: config 0 descriptor?? [ 691.081492][ T9970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.209903][ T9970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.228135][ T9963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.273849][ T31] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 691.303634][ T31] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 691.303650][ T31] [drm] Initialized udl on minor 2 [ 691.385673][ T9963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.692636][ T31] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 691.696728][ T9970] team0: Port device team_slave_0 added [ 691.701170][ T31] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 691.745069][ T31] usb 3-1: USB disconnect, device number 28 [ 691.749038][ T5996] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 691.751355][ T5996] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 691.839113][ T9970] team0: Port device team_slave_1 added [ 691.846830][ T9963] team0: Port device team_slave_0 added [ 692.023559][ T9963] team0: Port device team_slave_1 added [ 692.291390][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.291407][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.291435][ T9970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 693.425914][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 693.449929][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 693.451219][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 693.452427][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 693.454038][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 695.789388][ T5804] Bluetooth: hci1: command tx timeout [ 695.877802][ T9970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.877817][ T9970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.877838][ T9970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.834882][ T5804] Bluetooth: hci1: command tx timeout [ 699.145743][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.145760][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.145786][ T9963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.184895][ T9963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.184912][ T9963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.184938][ T9963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.204465][ T5804] Bluetooth: hci1: command tx timeout [ 701.650372][ T9970] hsr_slave_0: entered promiscuous mode [ 701.651924][ T9970] hsr_slave_1: entered promiscuous mode [ 702.418033][ T5804] Bluetooth: hci1: command tx timeout [ 702.522962][ T9963] hsr_slave_0: entered promiscuous mode [ 702.527118][ T9963] hsr_slave_1: entered promiscuous mode [ 702.531086][ T9963] debugfs: 'hsr0' already exists in 'hsr' [ 702.531113][ T9963] Cannot create hsr debugfs directory [ 705.713688][ T9649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 705.737300][ T9649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 705.738568][ T9649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 705.740796][ T9649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 705.741522][ T9649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 705.970450][T10064] chnl_net:caif_netlink_parms(): no params data found [ 706.804298][ T6519] bridge_slave_1: left allmulticast mode [ 706.804319][ T6519] bridge_slave_1: left promiscuous mode [ 706.806073][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.857415][ T6519] bridge_slave_0: left allmulticast mode [ 706.857435][ T6519] bridge_slave_0: left promiscuous mode [ 706.857630][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.929265][ T6519] bridge_slave_1: left allmulticast mode [ 706.929292][ T6519] bridge_slave_1: left promiscuous mode [ 706.929598][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.155491][ T6519] bridge_slave_0: left allmulticast mode [ 707.155511][ T6519] bridge_slave_0: left promiscuous mode [ 707.155667][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.460989][ T6519] bridge_slave_1: left allmulticast mode [ 707.461028][ T6519] bridge_slave_1: left promiscuous mode [ 707.461288][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.525581][ T6519] bridge_slave_0: left allmulticast mode [ 707.525600][ T6519] bridge_slave_0: left promiscuous mode [ 707.525754][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.754635][ T5804] Bluetooth: hci4: command tx timeout [ 708.185784][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 708.665087][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.731064][ T6519] bond0 (unregistering): Released all slaves [ 708.925248][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.005104][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.066304][ T6519] bond0 (unregistering): Released all slaves [ 709.246208][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.325102][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 709.388951][ T6519] bond0 (unregistering): Released all slaves [ 709.405177][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.405252][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.405429][T10064] bridge_slave_0: entered allmulticast mode [ 709.407325][T10064] bridge_slave_0: entered promiscuous mode [ 709.442108][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.442275][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.442516][T10064] bridge_slave_1: entered allmulticast mode [ 709.473243][T10064] bridge_slave_1: entered promiscuous mode [ 709.810460][T10064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.819102][T10064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.834605][ T5804] Bluetooth: hci4: command tx timeout [ 710.043070][T10064] team0: Port device team_slave_0 added [ 710.049238][T10064] team0: Port device team_slave_1 added [ 710.224891][ T6519] hsr_slave_0: left promiscuous mode [ 710.264683][ T6519] hsr_slave_1: left promiscuous mode [ 710.265339][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.295477][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.464688][ T6519] hsr_slave_0: left promiscuous mode [ 710.484573][ T6519] hsr_slave_1: left promiscuous mode [ 710.485534][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.535780][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.715076][ T6519] hsr_slave_0: left promiscuous mode [ 710.894677][ T6519] hsr_slave_1: left promiscuous mode [ 710.895533][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 710.918423][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.918460][ T5804] Bluetooth: hci4: command tx timeout [ 713.605200][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 713.816400][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 713.995071][ T5804] Bluetooth: hci4: command tx timeout [ 714.062272][T10177] ntfs3(nullb0): Primary boot signature is not NTFS. [ 714.062766][T10177] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 714.367073][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 714.367097][T10177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 714.367122][T10177] netlink: 'syz.2.1174': attribute type 11 has an invalid length. [ 714.367134][T10177] netlink: 'syz.2.1174': attribute type 13 has an invalid length. [ 715.215343][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 715.336310][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 716.315391][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 716.456469][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 716.986045][T10176] bridge0: left promiscuous mode [ 717.434001][T10064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.434017][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.434043][T10064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.435662][ T9970] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 717.550518][T10064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.550535][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.550561][T10064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 717.551144][ T9970] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 717.695039][ T9970] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 717.913165][ T9970] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 718.949671][T10128] chnl_net:caif_netlink_parms(): no params data found [ 719.963554][T10064] hsr_slave_0: entered promiscuous mode [ 719.971401][T10064] hsr_slave_1: entered promiscuous mode [ 719.972403][T10064] debugfs: 'hsr0' already exists in 'hsr' [ 719.972428][T10064] Cannot create hsr debugfs directory [ 720.397185][ T5804] Bluetooth: hci0: unexpected event 0x10 length: 11 > 1 [ 720.400602][ T5804] Bluetooth: hci0: hardware error 0xff [ 720.438769][ T9963] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 720.591784][ T9963] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 720.737388][ T9963] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 720.886925][ T9963] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 720.919971][T10128] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.920173][T10128] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.920367][T10128] bridge_slave_0: entered allmulticast mode [ 720.923085][T10128] bridge_slave_0: entered promiscuous mode [ 721.003507][T10128] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.003580][T10128] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.003701][T10128] bridge_slave_1: entered allmulticast mode [ 721.006502][T10128] bridge_slave_1: entered promiscuous mode [ 722.474801][ T5804] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 722.601613][T10128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 722.622052][T10128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.128902][T10226] ntfs3(nullb0): Primary boot signature is not NTFS. [ 723.157901][T10226] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 723.535417][T10128] team0: Port device team_slave_0 added [ 724.198156][T10128] team0: Port device team_slave_1 added [ 724.879726][T10128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.879742][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.879767][T10128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.329405][T10128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.329423][T10128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.329448][T10128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.018391][T10252] ntfs3(nullb0): Primary boot signature is not NTFS. [ 727.018766][T10252] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 727.262306][T10128] hsr_slave_0: entered promiscuous mode [ 727.271092][T10128] hsr_slave_1: entered promiscuous mode [ 727.273490][T10128] debugfs: 'hsr0' already exists in 'hsr' [ 727.273514][T10128] Cannot create hsr debugfs directory [ 728.110130][ T6519] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.359790][ T6519] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.639830][ T6519] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.701163][ T9970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.722435][T10064] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 728.770353][T10064] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 729.268035][ T6519] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.290905][T10064] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 729.342091][T10064] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 729.576385][ T9970] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.616725][ T9963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.674473][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.674702][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.731456][T10128] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 729.792513][T10128] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 729.837921][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.838118][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.841737][T10128] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 729.883265][T10128] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 729.957107][ T9963] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.984686][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.984924][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.013599][ T6519] bridge_slave_1: left allmulticast mode [ 730.013618][ T6519] bridge_slave_1: left promiscuous mode [ 730.013785][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.065355][ T6519] bridge_slave_0: left allmulticast mode [ 730.065382][ T6519] bridge_slave_0: left promiscuous mode [ 730.065567][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.225133][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.287149][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.307154][ T6519] bond0 (unregistering): Released all slaves [ 733.431051][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.431199][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.036702][T10064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.163124][T10064] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.593109][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.593303][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.775401][ T6519] hsr_slave_0: left promiscuous mode [ 734.814854][ T6519] hsr_slave_1: left promiscuous mode [ 734.815484][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.815499][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.865920][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.865940][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.937512][ T6519] veth1_macvtap: left promiscuous mode [ 734.937576][ T6519] veth0_macvtap: left promiscuous mode [ 734.937715][ T6519] veth1_vlan: left promiscuous mode [ 735.744603][ T5996] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 735.926435][ T5996] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 735.926464][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.930164][ T5996] usb 3-1: config 0 descriptor?? [ 736.147966][ T5996] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 736.171971][ T5996] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 736.171987][ T5996] [drm] Initialized udl on minor 2 [ 736.363838][ T5996] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 736.364282][ T5996] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 736.385848][ T5996] usb 3-1: USB disconnect, device number 29 [ 736.386517][ T5977] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 736.387050][ T5977] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 738.047314][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 738.295099][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 738.903952][ T9649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 738.921396][ T9649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 738.922881][ T9649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 738.923989][ T9649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 738.937286][ T9649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 739.329953][ T9649] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 739.371779][ T9649] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 739.374049][ T9649] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 739.380374][ T9649] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 739.381190][ T9649] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 741.046737][ T5804] Bluetooth: hci5: command tx timeout [ 741.509523][ T5804] Bluetooth: hci6: command tx timeout [ 741.924598][ T5996] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 742.116456][ T5996] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 742.116486][ T5996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.119401][ T5996] usb 3-1: config 0 descriptor?? [ 742.268016][T10128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.293286][ T8362] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.293445][ T8362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.330911][ T5996] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 742.361943][ T5996] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 742.361982][ T5996] [drm] Initialized udl on minor 2 [ 742.549092][ T5996] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 742.549434][ T5996] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 742.550456][ T5977] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 742.566329][T10128] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.590080][ T5977] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 742.590262][ T5977] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 742.609405][ T5996] usb 3-1: USB disconnect, device number 30 [ 742.618210][ T5956] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.618446][ T5956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.772712][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.772960][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.135838][ T5804] Bluetooth: hci5: command tx timeout [ 743.515067][ T5804] Bluetooth: hci6: command tx timeout [ 744.140053][T10337] chnl_net:caif_netlink_parms(): no params data found [ 744.696416][T10340] chnl_net:caif_netlink_parms(): no params data found [ 745.194890][ T5804] Bluetooth: hci5: command tx timeout [ 745.594678][ T5804] Bluetooth: hci6: command tx timeout [ 746.136124][T10064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.274611][ T5804] Bluetooth: hci5: command tx timeout [ 747.453827][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.453898][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.674670][ T5804] Bluetooth: hci6: command tx timeout [ 748.988628][T10337] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.988847][T10337] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.989070][T10337] bridge_slave_0: entered allmulticast mode [ 748.991784][T10337] bridge_slave_0: entered promiscuous mode [ 749.786072][T10337] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.786207][T10337] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.786457][T10337] bridge_slave_1: entered allmulticast mode [ 749.789148][T10337] bridge_slave_1: entered promiscuous mode [ 750.321068][T10337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.323341][T10340] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.323470][T10340] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.323597][T10340] bridge_slave_0: entered allmulticast mode [ 750.327387][T10340] bridge_slave_0: entered promiscuous mode [ 750.541976][T10337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.542575][T10340] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.542687][T10340] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.542854][T10340] bridge_slave_1: entered allmulticast mode [ 750.546864][T10340] bridge_slave_1: entered promiscuous mode [ 750.919719][T10337] team0: Port device team_slave_0 added [ 750.969226][T10340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.973709][T10337] team0: Port device team_slave_1 added [ 750.981332][T10340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.058259][T10128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.370510][T10337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.370522][T10337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.370537][T10337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.421442][T10340] team0: Port device team_slave_0 added [ 751.443219][T10337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.443230][T10337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.443245][T10337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.468073][T10340] team0: Port device team_slave_1 added [ 751.692091][T10340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.692103][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.692118][T10340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 751.874279][T10340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.874296][T10340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 751.874321][T10340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.042354][T10337] hsr_slave_0: entered promiscuous mode [ 753.043456][T10337] hsr_slave_1: entered promiscuous mode [ 753.044091][T10337] debugfs: 'hsr0' already exists in 'hsr' [ 753.044114][T10337] Cannot create hsr debugfs directory [ 753.786308][ T9649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 753.798028][ T9649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 753.799254][ T9649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 753.810459][ T9649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 753.811630][ T9649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 753.867076][T10340] hsr_slave_0: entered promiscuous mode [ 753.868430][T10340] hsr_slave_1: entered promiscuous mode [ 753.869122][T10340] debugfs: 'hsr0' already exists in 'hsr' [ 753.869138][T10340] Cannot create hsr debugfs directory [ 754.995482][T10128] veth0_vlan: entered promiscuous mode [ 755.300360][T10128] veth1_vlan: entered promiscuous mode [ 755.429395][ T6519] bridge_slave_1: left allmulticast mode [ 755.429432][ T6519] bridge_slave_1: left promiscuous mode [ 755.429699][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.496143][ T6519] bridge_slave_0: left allmulticast mode [ 755.496172][ T6519] bridge_slave_0: left promiscuous mode [ 755.496406][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.557351][ T6519] bridge_slave_1: left allmulticast mode [ 755.557372][ T6519] bridge_slave_1: left promiscuous mode [ 755.557511][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.616102][ T6519] bridge_slave_0: left allmulticast mode [ 755.616122][ T6519] bridge_slave_0: left promiscuous mode [ 755.616267][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.834618][ T5804] Bluetooth: hci1: command tx timeout [ 756.920144][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'. [ 757.395152][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.465253][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.487302][ T6519] bond0 (unregistering): Released all slaves [ 757.914545][ T5804] Bluetooth: hci1: command tx timeout [ 759.075160][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.136180][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.157043][ T6519] bond0 (unregistering): Released all slaves [ 759.996853][ T5804] Bluetooth: hci1: command tx timeout [ 760.472079][T10422] chnl_net:caif_netlink_parms(): no params data found [ 760.744515][ T6519] hsr_slave_0: left promiscuous mode [ 760.764595][ T6519] hsr_slave_1: left promiscuous mode [ 760.765266][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.805246][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.944644][ T6519] hsr_slave_0: left promiscuous mode [ 760.964731][ T6519] hsr_slave_1: left promiscuous mode [ 760.965490][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.015307][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.864755][ T5977] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 762.015646][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 762.017043][ T5977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 762.017081][ T5977] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 762.017104][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.093683][ T5977] usb 3-1: config 0 descriptor?? [ 762.093946][ T5804] Bluetooth: hci1: command tx timeout [ 762.295174][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 763.151885][ T5977] video4linux radio48: keene_cmd_set failed (-71) [ 763.151912][ T5977] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 763.153843][ T5977] usb 3-1: USB disconnect, device number 31 [ 763.950404][T10452] fuse: root generation should be zero [ 764.197927][ T5991] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 764.350748][ T5991] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 764.350786][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 764.350809][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 764.350823][ T5991] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 764.350846][ T5991] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 764.350857][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.353625][ T5991] usb 3-1: config 0 descriptor?? [ 764.356293][T10454] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 764.763586][ T5991] usbhid 3-1:0.0: can't add hid device: -71 [ 764.763675][ T5991] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 764.779320][ T5991] usb 3-1: USB disconnect, device number 32 [ 765.543081][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 765.823488][ T9649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 765.847880][ T9649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 765.849939][ T9649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 765.854253][ T9649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 765.877222][ T9649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 765.905784][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 767.875883][T10128] veth0_macvtap: entered promiscuous mode [ 767.920483][ T9649] Bluetooth: hci2: command tx timeout [ 768.745597][T10422] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.745830][T10422] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.746071][T10422] bridge_slave_0: entered allmulticast mode [ 768.747654][T10422] bridge_slave_0: entered promiscuous mode [ 768.756747][T10422] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.756975][T10422] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.757171][T10422] bridge_slave_1: entered allmulticast mode [ 768.802245][T10422] bridge_slave_1: entered promiscuous mode [ 769.169777][T10422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 769.186906][T10422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 769.407696][T10422] team0: Port device team_slave_0 added [ 769.468578][T10422] team0: Port device team_slave_1 added [ 769.759006][T10422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.759022][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.759047][T10422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.770574][T10422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.770590][T10422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.770615][T10422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.011084][ T5804] Bluetooth: hci2: command tx timeout [ 770.201053][T10422] hsr_slave_0: entered promiscuous mode [ 770.201896][T10422] hsr_slave_1: entered promiscuous mode [ 770.497977][T10463] chnl_net:caif_netlink_parms(): no params data found [ 770.564953][T10337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 770.649393][T10337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 771.305818][T10337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 771.417387][T10337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 772.076200][ T5804] Bluetooth: hci2: command tx timeout [ 772.548421][T10463] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.550487][T10463] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.551124][T10463] bridge_slave_0: entered allmulticast mode [ 772.552722][T10463] bridge_slave_0: entered promiscuous mode [ 772.807731][T10463] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.807877][T10463] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.808105][T10463] bridge_slave_1: entered allmulticast mode [ 772.810306][T10463] bridge_slave_1: entered promiscuous mode [ 772.916410][T10340] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 773.016605][T10340] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 774.055752][T10463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.059523][T10340] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 774.130129][T10463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.154730][ T5804] Bluetooth: hci2: command tx timeout [ 774.345134][T10340] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 776.300459][T10463] team0: Port device team_slave_0 added [ 776.326228][T10463] team0: Port device team_slave_1 added [ 776.732021][T10463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 776.732038][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.732066][T10463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 776.748334][T10463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.748353][T10463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.748380][T10463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.043828][T10463] hsr_slave_0: entered promiscuous mode [ 778.045540][T10463] hsr_slave_1: entered promiscuous mode [ 778.046505][T10463] debugfs: 'hsr0' already exists in 'hsr' [ 778.046529][T10463] Cannot create hsr debugfs directory [ 779.068936][ T6519] bridge_slave_1: left allmulticast mode [ 779.069092][ T6519] bridge_slave_1: left promiscuous mode [ 779.076794][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.465446][ T6519] bridge_slave_0: left allmulticast mode [ 779.465467][ T6519] bridge_slave_0: left promiscuous mode [ 779.465625][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.557800][ T6519] bridge_slave_1: left allmulticast mode [ 779.557821][ T6519] bridge_slave_1: left promiscuous mode [ 779.557975][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.649284][ T6519] bridge_slave_0: left allmulticast mode [ 779.649311][ T6519] bridge_slave_0: left promiscuous mode [ 779.649547][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.888967][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'. [ 786.718119][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.815223][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.836850][ T6519] bond0 (unregistering): Released all slaves [ 788.335169][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.395987][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.417184][ T6519] bond0 (unregistering): Released all slaves [ 788.460833][T10616] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 788.460974][T10616] macvlan2: entered allmulticast mode [ 788.461275][T10616] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 788.758482][T10422] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 789.037818][T10422] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 789.250329][T10422] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 790.143240][T10422] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 791.244694][ T6519] hsr_slave_0: left promiscuous mode [ 791.424680][ T6519] hsr_slave_1: left promiscuous mode [ 791.425385][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.237422][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.494642][ T6519] hsr_slave_0: left promiscuous mode [ 792.534548][ T6519] hsr_slave_1: left promiscuous mode [ 792.536670][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.557618][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.660500][ T6519] veth0_macvtap: left promiscuous mode [ 792.660743][ T6519] veth1_vlan: left promiscuous mode [ 792.660848][ T6519] veth0_vlan: left promiscuous mode [ 793.423584][T10642] binder_alloc: 10639: binder_alloc_buf size 1024 failed, no address space [ 793.423678][T10642] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8) [ 793.482531][T10643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1292'. [ 794.505084][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 794.755895][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 798.385008][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 798.635671][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 800.229755][ T9649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 800.232430][ T9649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 800.233995][ T9649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 800.238455][ T9649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 800.239132][ T9649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 800.796314][ T9649] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 800.811218][ T9649] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 800.812513][ T9649] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 800.817124][ T9649] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 800.843548][ T9649] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 801.268284][T10642] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 801.268306][T10642] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1292'. [ 801.268348][T10642] nbd: illegal input index 1048576 [ 801.315867][T10641] bond0: entered promiscuous mode [ 802.317263][ T9649] Bluetooth: hci3: command tx timeout [ 802.925986][ T9649] Bluetooth: hci4: command tx timeout [ 804.715426][ T9649] Bluetooth: hci3: command tx timeout [ 804.963872][ T9649] Bluetooth: hci4: command tx timeout [ 805.846085][T10645] chnl_net:caif_netlink_parms(): no params data found [ 805.859710][T10648] chnl_net:caif_netlink_parms(): no params data found [ 806.438023][T10684] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 806.438182][T10684] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 806.438248][T10684] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 806.896406][ T9649] Bluetooth: hci3: command tx timeout [ 807.034620][ T9649] Bluetooth: hci4: command tx timeout [ 807.163206][T10463] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 807.222037][T10463] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 807.485787][T10463] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 807.647502][T10463] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 807.668408][T10645] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.668597][T10645] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.683768][T10645] bridge_slave_0: entered allmulticast mode [ 807.687525][T10645] bridge_slave_0: entered promiscuous mode [ 807.693612][T10648] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.693736][T10648] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.693941][T10648] bridge_slave_0: entered allmulticast mode [ 807.698060][T10648] bridge_slave_0: entered promiscuous mode [ 807.703129][T10645] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.703268][T10645] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.703615][T10645] bridge_slave_1: entered allmulticast mode [ 807.707593][T10645] bridge_slave_1: entered promiscuous mode [ 807.786703][T10648] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.786819][T10648] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.787039][T10648] bridge_slave_1: entered allmulticast mode [ 807.789292][T10648] bridge_slave_1: entered promiscuous mode [ 807.991474][T10422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.290559][T10645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.329197][T10648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.332674][T10645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.098511][ T9649] Bluetooth: hci3: command tx timeout [ 809.105532][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.105601][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.114585][ T9649] Bluetooth: hci4: command tx timeout [ 809.141797][T10648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.479176][T10645] team0: Port device team_slave_0 added [ 809.482223][T10648] team0: Port device team_slave_0 added [ 809.490710][T10645] team0: Port device team_slave_1 added [ 809.495572][T10648] team0: Port device team_slave_1 added [ 809.897565][T10422] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.977862][T10645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.977877][T10645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.977899][T10645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.982124][T10648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.982138][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.982157][T10648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.074915][T10645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.074932][T10645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.074958][T10645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.080855][T10648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.080866][T10648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.080880][T10648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.522682][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.522799][ T6909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.799958][ T86] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.800105][ T86] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.984762][T10645] hsr_slave_0: entered promiscuous mode [ 810.986071][T10645] hsr_slave_1: entered promiscuous mode [ 810.986698][T10645] debugfs: 'hsr0' already exists in 'hsr' [ 810.986724][T10645] Cannot create hsr debugfs directory [ 810.992210][T10648] hsr_slave_0: entered promiscuous mode [ 810.993049][T10648] hsr_slave_1: entered promiscuous mode [ 810.993582][T10648] debugfs: 'hsr0' already exists in 'hsr' [ 810.993599][T10648] Cannot create hsr debugfs directory [ 814.343293][T10463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.370826][T10463] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.399179][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.399821][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.648802][ T1498] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.648993][ T1498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.347725][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 815.368770][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 815.373668][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 815.381217][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 815.381981][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 815.804189][ T6519] bridge_slave_1: left allmulticast mode [ 815.804225][ T6519] bridge_slave_1: left promiscuous mode [ 815.809835][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.938343][ T6519] bridge_slave_0: left allmulticast mode [ 815.938373][ T6519] bridge_slave_0: left promiscuous mode [ 815.938666][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.018729][ T6519] bridge_slave_1: left allmulticast mode [ 816.018758][ T6519] bridge_slave_1: left promiscuous mode [ 816.018984][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.076267][ T6519] bridge_slave_0: left allmulticast mode [ 816.076295][ T6519] bridge_slave_0: left promiscuous mode [ 816.076537][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.907477][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.056152][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.150352][ T6519] bond0 (unregistering): Released all slaves [ 817.434617][ T5804] Bluetooth: hci1: command tx timeout [ 819.524506][ T5804] Bluetooth: hci1: command tx timeout [ 820.725066][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.835201][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.896434][ T6519] bond0 (unregistering): Released all slaves [ 821.604502][ T5804] Bluetooth: hci1: command tx timeout [ 821.646485][ T6519] hsr_slave_0: left promiscuous mode [ 821.684530][ T6519] hsr_slave_1: left promiscuous mode [ 821.685210][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.735575][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.894508][ T6519] hsr_slave_0: left promiscuous mode [ 821.934610][ T6519] hsr_slave_1: left promiscuous mode [ 821.935271][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 821.965169][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.675091][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 822.815198][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 823.674540][ T5804] Bluetooth: hci1: command tx timeout [ 823.934945][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 824.075644][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 824.747221][T10463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.915301][T10741] chnl_net:caif_netlink_parms(): no params data found [ 826.006602][T10741] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.006858][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.007092][T10741] bridge_slave_0: entered allmulticast mode [ 826.009872][T10741] bridge_slave_0: entered promiscuous mode [ 826.048428][ T9649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 826.083851][ T9649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 826.105490][ T9649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 826.175984][ T9649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 826.178742][ T9649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 826.219862][T10741] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.220059][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.220282][T10741] bridge_slave_1: entered allmulticast mode [ 826.223329][T10741] bridge_slave_1: entered promiscuous mode [ 826.850105][T10741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.884298][T10741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.211332][T10741] team0: Port device team_slave_0 added [ 827.213647][T10645] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 827.249796][T10741] team0: Port device team_slave_1 added [ 827.261550][T10645] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 827.453570][T10645] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 827.596918][T10645] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 828.127757][T10741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.130727][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 828.130764][T10741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 828.314501][ T5804] Bluetooth: hci5: command tx timeout [ 828.550601][T10824] fuse: Bad value for 'group_id' [ 828.550685][T10824] fuse: Bad value for 'group_id' [ 829.268957][T10741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.268975][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.269001][T10741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.577327][T10741] hsr_slave_0: entered promiscuous mode [ 829.578330][T10741] hsr_slave_1: entered promiscuous mode [ 829.578907][T10741] debugfs: 'hsr0' already exists in 'hsr' [ 829.578925][T10741] Cannot create hsr debugfs directory [ 829.581481][T10648] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 829.633331][T10648] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 829.660212][T10648] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 829.874779][T10648] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 830.404570][ T5804] Bluetooth: hci5: command tx timeout [ 830.764851][T10804] chnl_net:caif_netlink_parms(): no params data found [ 832.049827][T10804] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.050024][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.050267][T10804] bridge_slave_0: entered allmulticast mode [ 832.052480][T10804] bridge_slave_0: entered promiscuous mode [ 832.068560][T10804] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.068679][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.068853][T10804] bridge_slave_1: entered allmulticast mode [ 832.072099][T10804] bridge_slave_1: entered promiscuous mode [ 832.431252][T10804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.463447][T10804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.482279][ T5804] Bluetooth: hci5: command tx timeout [ 832.643288][T10804] team0: Port device team_slave_0 added [ 832.665521][T10804] team0: Port device team_slave_1 added [ 833.008967][T10804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.008978][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.008993][T10804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.014018][T10645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.052674][ T6519] bridge_slave_1: left allmulticast mode [ 833.052701][ T6519] bridge_slave_1: left promiscuous mode [ 833.056932][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.125617][ T6519] bridge_slave_0: left allmulticast mode [ 833.125638][ T6519] bridge_slave_0: left promiscuous mode [ 833.125790][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.188018][ T6519] bridge_slave_1: left allmulticast mode [ 833.188038][ T6519] bridge_slave_1: left promiscuous mode [ 833.188190][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.245881][ T6519] bridge_slave_0: left allmulticast mode [ 833.245910][ T6519] bridge_slave_0: left promiscuous mode [ 833.246150][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.564568][ T5804] Bluetooth: hci5: command tx timeout [ 835.065397][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.125668][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.167013][ T6519] bond0 (unregistering): Released all slaves [ 836.705406][ T6519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.776348][ T6519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 836.796696][ T6519] bond0 (unregistering): Released all slaves [ 836.840162][T10804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.840173][T10804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.840188][T10804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 837.454142][T10804] hsr_slave_0: entered promiscuous mode [ 837.456346][T10804] hsr_slave_1: entered promiscuous mode [ 837.457230][T10804] debugfs: 'hsr0' already exists in 'hsr' [ 837.457253][T10804] Cannot create hsr debugfs directory [ 837.474463][T10741] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 837.794082][T10645] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.797179][T10741] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 837.899496][T10648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.024666][ T6519] hsr_slave_0: left promiscuous mode [ 838.044779][ T6519] hsr_slave_1: left promiscuous mode [ 838.045635][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.147923][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.334480][ T6519] hsr_slave_0: left promiscuous mode [ 838.384837][ T6519] hsr_slave_1: left promiscuous mode [ 838.385852][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.419794][ T6519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.905296][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 840.195225][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 843.375773][ T6519] team0 (unregistering): Port device team_slave_1 removed [ 843.595059][ T6519] team0 (unregistering): Port device team_slave_0 removed [ 845.725495][T10741] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 845.815870][T10741] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 845.938633][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.938757][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.046324][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.046448][ T6921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.491440][T10648] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.600195][T10880] tmpfs: Bad value for 'mpol' [ 846.677787][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.678318][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.810425][ T8362] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.810569][ T8362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.566693][T10741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.801269][T10741] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.839317][ T2037] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.839563][ T2037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.878349][ T2037] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.878487][ T2037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.156354][T10648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.258245][T10645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.036333][T10741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.179268][T10804] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 849.227138][T10804] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 849.280235][T10804] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 849.334499][T10804] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 850.132758][T10648] veth0_vlan: entered promiscuous mode [ 850.148071][T10645] veth0_vlan: entered promiscuous mode [ 850.239791][T10648] veth1_vlan: entered promiscuous mode [ 850.281594][T10645] veth1_vlan: entered promiscuous mode [ 850.335981][T10741] veth0_vlan: entered promiscuous mode [ 850.379768][T10741] veth1_vlan: entered promiscuous mode [ 850.472834][T10648] veth0_macvtap: entered promiscuous mode [ 850.487842][T10645] veth0_macvtap: entered promiscuous mode [ 850.499751][T10648] veth1_macvtap: entered promiscuous mode [ 850.522464][T10645] veth1_macvtap: entered promiscuous mode [ 850.582167][T10741] veth0_macvtap: entered promiscuous mode [ 850.609357][T10804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.611457][T10741] veth1_macvtap: entered promiscuous mode [ 850.621321][T10648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.628153][T10645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.650434][T10648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.652024][T10645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.316041][ T8362] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.317007][ T8362] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.317245][ T8362] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.317692][ T8362] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.317730][ T8362] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.317764][ T8362] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.317798][ T8362] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.317833][ T8362] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.392723][T10741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.421177][T10804] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.452094][T10741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.465022][ T8362] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.465192][ T8362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.563894][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.672572][ T6519] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.672713][ T6519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.673367][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.698215][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.739935][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.005868][ T8362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.005887][ T8362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.150262][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.150281][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.204479][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.204500][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.284179][ T6519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.284200][ T6519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.384492][ T8362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.384511][ T8362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.613024][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.613047][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.041516][T10804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.750741][T10981] bond0: entered promiscuous mode [ 853.750764][T10981] bond_slave_0: entered promiscuous mode [ 853.751000][T10981] bond_slave_1: entered promiscuous mode [ 855.191110][T10804] veth0_vlan: entered promiscuous mode [ 855.444328][T10804] veth1_vlan: entered promiscuous mode [ 856.138077][T10804] veth0_macvtap: entered promiscuous mode [ 856.180797][T10804] veth1_macvtap: entered promiscuous mode [ 856.366851][T10804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.383744][T10804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.663540][ T58] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.639026][ T58] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.662627][ T6519] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.685935][ T6519] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.360383][T10736] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 858.682667][T11020] bond0: entered promiscuous mode [ 858.682737][T11020] bond_slave_0: entered promiscuous mode [ 858.683680][T11020] bond_slave_1: entered promiscuous mode [ 858.784658][T10736] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.784718][T10736] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 858.784834][T10736] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 858.784858][T10736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.951981][T10736] usb 3-1: config 0 descriptor?? [ 860.452475][ T6519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.452490][ T6519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.747241][T10736] usb 3-1: USB disconnect, device number 33 [ 862.097189][ T2037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.097210][ T2037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.822699][T11062] bond0: entered promiscuous mode [ 862.822723][T11062] bond_slave_0: entered promiscuous mode [ 862.822952][T11062] bond_slave_1: entered promiscuous mode [ 864.719379][ T5873] kernel write not supported for file /input/event2 (pid: 5873 comm: kworker/0:4) [ 870.939190][T11152] fuse: Bad value for 'group_id' [ 870.939212][T11152] fuse: Bad value for 'group_id' [ 871.105382][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.105452][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.144559][ T5873] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 871.224451][T10736] usb 9-1: new low-speed USB device number 2 using dummy_hcd [ 871.512933][ T5873] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 871.512952][ T5873] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 871.512965][ T5873] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 871.515391][ T5873] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 871.515416][ T5873] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.515426][ T5873] usb 8-1: Product: syz [ 871.515433][ T5873] usb 8-1: Manufacturer: syz [ 871.515440][ T5873] usb 8-1: SerialNumber: syz [ 871.736443][T10736] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.739962][T10736] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 871.740161][T10736] usb 9-1: New USB device found, idVendor=54ef, idProduct=6047, bcdDevice= 0.20 [ 871.740184][T10736] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.033062][ T5873] usb 8-1: config 0 descriptor?? [ 872.103785][T10736] usb 9-1: config 0 descriptor?? [ 872.132344][T11143] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 872.132552][T11143] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 872.150165][ T5873] usb 8-1: ucan: probing device on interface #0 [ 872.408075][ T31] usb 9-1: USB disconnect, device number 2 [ 872.815240][ T5873] usb 8-1: ucan: device reported invalid tx-fifo size [ 872.815262][ T5873] usb 8-1: ucan: probe failed; try to update the device firmware [ 874.199266][ T8634] usb 8-1: USB disconnect, device number 2 [ 874.654397][T10736] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 875.023540][T10736] usb 7-1: Using ep0 maxpacket: 32 [ 875.155931][T10736] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 875.155982][T10736] usb 7-1: config 0 has no interface number 0 [ 875.156457][T10736] usb 7-1: config 0 interface 184 has no altsetting 0 [ 875.297772][T10736] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 875.297803][T10736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.297822][T10736] usb 7-1: Product: syz [ 875.297843][T10736] usb 7-1: Manufacturer: syz [ 875.297857][T10736] usb 7-1: SerialNumber: syz [ 875.303068][T10736] usb 7-1: config 0 descriptor?? [ 875.356026][T10736] smsc75xx v1.0.0 [ 875.982905][T10736] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 875.982935][T10736] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 876.925184][T10736] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 876.925203][T10736] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 876.925214][T10736] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 876.925386][T10736] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61 [ 877.129189][ T31] usb 7-1: USB disconnect, device number 2 [ 879.734960][T10736] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 879.886836][T10736] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 879.886868][T10736] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 879.886893][T10736] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 879.890010][T10736] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 879.890038][T10736] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.890057][T10736] usb 9-1: Product: syz [ 879.890070][T10736] usb 9-1: Manufacturer: syz [ 879.890085][T10736] usb 9-1: SerialNumber: syz [ 879.972180][T10736] usb 9-1: config 0 descriptor?? [ 879.973361][T11224] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 879.973560][T11224] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 879.976107][T10736] usb 9-1: ucan: probing device on interface #0 [ 881.075922][T10736] ucan 9-1:0.0: probe with driver ucan failed with error -22 [ 883.363242][ T5977] usb 9-1: USB disconnect, device number 3 [ 887.439334][T11301] 9pnet_fd: Insufficient options for proto=fd [ 887.579215][ T8634] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 888.212850][ T8634] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 888.212930][ T8634] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 888.213002][ T8634] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 888.324721][ T8634] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 888.324856][ T8634] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.324902][ T8634] usb 9-1: Product: syz [ 888.324940][ T8634] usb 9-1: Manufacturer: syz [ 888.324978][ T8634] usb 9-1: SerialNumber: syz [ 888.821694][ T8634] usb 9-1: config 0 descriptor?? [ 888.822865][T11297] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 888.823064][T11297] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 888.849343][ T8634] usb 9-1: ucan: probing device on interface #0 [ 889.481654][ T8634] ucan 9-1:0.0: probe with driver ucan failed with error -22 [ 891.017958][ T5977] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 891.423700][T10946] usb 9-1: USB disconnect, device number 4 [ 891.546479][ T5977] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 891.546524][ T5977] usb 6-1: New USB device found, idVendor=54ef, idProduct=6047, bcdDevice= 0.20 [ 891.546547][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.590243][ T5977] usb 6-1: config 0 descriptor?? [ 891.821120][T10946] usb 6-1: USB disconnect, device number 2 [ 891.958512][T11370] usb usb5: usbfs: process 11370 (syz.8.1493) did not claim interface 0 before use [ 891.973103][T11370] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1493'. [ 893.282739][T10946] kernel write not supported for file /input/event2 (pid: 10946 comm: kworker/0:2) [ 899.717205][T11456] Bluetooth: MGMT ver 1.23 [ 910.535435][T11527] fuse: Bad value for 'fd' [ 914.112877][T11578] fuse: Bad value for 'fd' [ 916.052006][T11585] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 916.087070][ T37] audit: type=1326 audit(1759890074.783:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 916.087125][ T37] audit: type=1326 audit(1759890074.793:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 916.087166][ T37] audit: type=1326 audit(1759890074.793:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 916.087206][ T37] audit: type=1326 audit(1759890074.793:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 916.089745][ T37] audit: type=1326 audit(1759890074.793:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 916.089801][ T37] audit: type=1326 audit(1759890074.793:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 916.089842][ T37] audit: type=1326 audit(1759890074.793:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 916.089882][ T37] audit: type=1326 audit(1759890074.793:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 916.089930][ T37] audit: type=1326 audit(1759890074.793:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 916.089971][ T37] audit: type=1326 audit(1759890074.793:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11568 comm="syz.8.1567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc398cbeec9 code=0x7ffc0000 [ 917.540564][T11622] fuse: Bad value for 'fd' [ 919.700905][T11637] 9pnet_fd: Insufficient options for proto=fd [ 920.015414][T11643] syz.5.1587 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 921.414428][T10946] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 921.566255][T10946] usb 8-1: Using ep0 maxpacket: 8 [ 921.575889][T10946] usb 8-1: unable to get BOS descriptor or descriptor too short [ 921.588065][T10946] usb 8-1: config 4 interface 0 has no altsetting 0 [ 921.604222][T10946] usb 8-1: string descriptor 0 read error: -22 [ 921.605015][T10946] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 921.605051][T10946] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 921.611988][T11673] 9pnet_fd: Insufficient options for proto=fd [ 921.636074][T10946] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 921.640466][T10946] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 921.641469][T10946] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 921.641522][T10946] usb 8-1: media controller created [ 921.682263][T10946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 921.730644][T11677] netlink: 'syz.5.1603': attribute type 10 has an invalid length. [ 921.775489][T11677] syz_tun: entered promiscuous mode [ 921.794172][T11677] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 921.840854][T10946] zl10353_read_register: readreg error (reg=127, ret==0) [ 922.054013][T10946] usb 8-1: USB disconnect, device number 3 [ 923.635339][T11672] Bluetooth: hci4: command 0x0406 tx timeout [ 923.675818][T11672] Bluetooth: hci3: command 0x0406 tx timeout [ 924.059959][T11719] netlink: 'syz.7.1618': attribute type 10 has an invalid length. [ 924.096101][T11719] syz_tun: entered promiscuous mode [ 924.214006][T11719] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 925.914581][T10946] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 926.064391][T10946] usb 9-1: Using ep0 maxpacket: 8 [ 926.069610][T10946] usb 9-1: unable to get BOS descriptor or descriptor too short [ 926.071653][T10946] usb 9-1: config 4 interface 0 has no altsetting 0 [ 926.113047][T10946] usb 9-1: string descriptor 0 read error: -22 [ 926.113154][T10946] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 926.113177][T10946] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 926.668966][T10946] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 926.673463][T10946] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 926.673939][T10946] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 926.673987][T10946] usb 9-1: media controller created [ 926.696007][T10946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 926.871126][T10946] zl10353_read_register: readreg error (reg=127, ret==0) [ 926.998686][T10946] usb 9-1: USB disconnect, device number 5 [ 931.498582][T11813] bond0: entered promiscuous mode [ 931.498606][T11813] bond_slave_0: entered promiscuous mode [ 931.498834][T11813] bond_slave_1: entered promiscuous mode [ 932.454112][T11820] fuse: Invalid rootmode [ 933.361233][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.361305][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.020102][T11868] binder: BINDER_SET_CONTEXT_MGR already set [ 938.020117][T11868] binder: 11866:11868 ioctl 4018620d 200000000040 returned -16 [ 938.956123][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 940.117841][T11911] binder: BINDER_SET_CONTEXT_MGR already set [ 940.117855][T11911] binder: 11910:11911 ioctl 4018620d 200000000040 returned -16 [ 940.602110][T11931] binder_alloc: 11930: binder_alloc_buf, no vma [ 940.838934][T11909] syz.5.1691 (11909) used greatest stack depth: 17496 bytes left [ 941.244812][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.037828][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.267526][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.693968][T12008] netlink: 'syz.8.1731': attribute type 10 has an invalid length. [ 944.750181][T12008] syz_tun: entered promiscuous mode [ 944.800835][T12008] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 945.055829][ T1228] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 945.961499][ T1228] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 945.961530][ T1228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.085785][ T1228] usb 3-1: config 0 descriptor?? [ 946.876144][T12043] fuse: Bad value for 'rootmode' [ 947.394209][T12052] netlink: 'syz.7.1747': attribute type 10 has an invalid length. [ 947.771388][T12071] capability: warning: `syz.6.1754' uses deprecated v2 capabilities in a way that may be insecure [ 947.809431][ T8634] usb 3-1: USB disconnect, device number 34 [ 949.459191][T12088] fuse: Bad value for 'rootmode' [ 949.538607][ T9649] Bluetooth: hci5: command 0x0406 tx timeout [ 953.472998][T12134] syz.8.1775 (12134) used greatest stack depth: 16296 bytes left [ 953.824723][T10946] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 953.988325][T10946] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 953.988359][T10946] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 953.988383][T10946] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 954.029174][T10946] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 954.029190][T10946] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.029200][T10946] usb 7-1: Product: syz [ 954.029208][T10946] usb 7-1: Manufacturer: syz [ 954.029214][T10946] usb 7-1: SerialNumber: syz [ 954.066506][T10946] usb 7-1: config 0 descriptor?? [ 954.067438][T12147] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 954.067678][T12147] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 954.069646][T10946] usb 7-1: ucan: probing device on interface #0 [ 956.004588][T10946] ucan 7-1:0.0 can0: registered device [ 956.005435][T10946] ucan 7-1:0.0 can0: firmware string: ¢â»b [ 956.217325][T10736] usb 7-1: USB disconnect, device number 3 [ 963.534236][T12249] netlink: 'syz.2.1812': attribute type 10 has an invalid length. [ 964.098049][T12249] syz_tun: entered promiscuous mode [ 964.110652][T12249] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 970.805899][ T6603] tipc: Subscription rejected, illegal request [ 970.857975][ T9649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 970.873733][ T9649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 970.891716][ T9649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 971.026311][ T9649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 971.034212][ T9649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 971.103702][ T5797] bond0: (slave syz_tun): Releasing backup interface [ 971.617814][T12306] ntfs3(nullb0): Primary boot signature is not NTFS. [ 971.646462][T12306] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 973.155212][ T9649] Bluetooth: hci0: command tx timeout [ 973.228257][T12302] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.228674][T12302] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.229242][T12302] bridge0: entered allmulticast mode [ 973.398690][T12328] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1840'. [ 973.429345][ T8362] tipc: Subscription rejected, illegal request [ 974.606019][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1840'. [ 974.839489][ T5967] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.206296][ T9649] Bluetooth: hci0: command tx timeout [ 976.483867][T12364] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 977.282330][ T9649] Bluetooth: hci0: command tx timeout [ 977.300524][ T5967] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.166335][ T5967] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.440672][ T6909] tipc: Subscription rejected, illegal request [ 978.699876][ T5967] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 978.832059][T12406] netlink: 'syz.6.1864': attribute type 10 has an invalid length. [ 978.947794][ T5967] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.099791][T12406] syz_tun: entered promiscuous mode [ 979.158067][T12406] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 979.251841][T12295] chnl_net:caif_netlink_parms(): no params data found [ 979.354562][ T9649] Bluetooth: hci0: command tx timeout [ 979.654742][ T5991] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 979.806876][ T5991] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 979.806912][ T5991] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 979.806936][ T5991] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 979.810000][ T5991] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 979.810035][ T5991] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.810054][ T5991] usb 7-1: Product: syz [ 979.810068][ T5991] usb 7-1: Manufacturer: syz [ 979.810082][ T5991] usb 7-1: SerialNumber: syz [ 979.880433][ T5991] usb 7-1: config 0 descriptor?? [ 979.881350][T12414] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 979.881464][T12414] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 979.882694][ T5991] usb 7-1: ucan: probing device on interface #0 [ 979.971066][T12295] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.971175][T12295] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.971386][T12295] bridge_slave_0: entered allmulticast mode [ 979.981150][T12295] bridge_slave_0: entered promiscuous mode [ 980.034893][T12295] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.035064][T12295] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.035296][T12295] bridge_slave_1: entered allmulticast mode [ 980.040676][T12295] bridge_slave_1: entered promiscuous mode [ 980.059411][T12431] fuse: Bad value for 'user_id' [ 980.059430][T12431] fuse: Bad value for 'user_id' [ 981.395473][ T5991] ucan 7-1:0.0 can0: registered device [ 981.396324][ T5991] ucan 7-1:0.0 can0: firmware string: ¢â»b [ 981.600676][ T5977] usb 7-1: USB disconnect, device number 4 [ 984.059964][T12465] fuse: Bad value for 'user_id' [ 984.059977][T12465] fuse: Bad value for 'user_id' [ 984.788683][ T5967] bond0 (unregistering): Released all slaves [ 984.839693][T12295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.004470][T12295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.140429][T12489] fuse: Bad value for 'fd' [ 991.608113][T12295] team0: Port device team_slave_0 added [ 991.630013][T12295] team0: Port device team_slave_1 added [ 992.875457][T12295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.875476][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.875502][T12295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.884963][T12295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.884980][T12295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.885005][T12295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.932933][T12521] fuse: Bad value for 'fd' [ 993.377983][ T5967] hsr_slave_0: left promiscuous mode [ 993.978224][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.757952][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.924683][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.969613][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.980716][ T5967] hsr_slave_1: left promiscuous mode [ 995.461274][ T5967] veth1_macvtap: left promiscuous mode [ 995.461341][ T5967] veth0_macvtap: left promiscuous mode [ 995.461526][ T5967] veth1_vlan: left promiscuous mode [ 995.461625][ T5967] veth0_vlan: left promiscuous mode [ 997.337353][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.586186][ C1] vkms_vblank_simulate: vblank timer overrun [ 997.803734][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.327943][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.327943][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.328008][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.636856][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.872766][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.417706][ C1] vkms_vblank_simulate: vblank timer overrun [ 999.735924][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.795709][T12554] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1000.795752][T12554] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1000.795769][T12554] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1001.013121][T12560] fuse: Bad value for 'fd' [ 1001.178196][T12295] hsr_slave_0: entered promiscuous mode [ 1001.179673][T12295] hsr_slave_1: entered promiscuous mode [ 1001.201664][T12572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1002.311417][T12589] fuse: Bad value for 'fd' [ 1002.754423][T10736] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1002.914356][T10736] usb 9-1: Using ep0 maxpacket: 32 [ 1002.919858][T10736] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1002.919884][T10736] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.919911][T10736] usb 9-1: Product: syz [ 1002.919925][T10736] usb 9-1: Manufacturer: syz [ 1002.919938][T10736] usb 9-1: SerialNumber: syz [ 1003.111378][T10736] usb 9-1: config 0 descriptor?? [ 1003.146732][T10736] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1003.997347][T10736] gspca_ov534_9: reg_w failed -110 [ 1004.744847][T10736] gspca_ov534_9: Unknown sensor 0000 [ 1004.744936][T10736] ov534_9 9-1:0.0: probe with driver ov534_9 failed with error -22 [ 1005.691028][T12620] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1005.692295][T12620] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1006.139887][T12622] fuse: Bad value for 'fd' [ 1006.273208][T10736] usb 9-1: USB disconnect, device number 6 [ 1009.007147][T12650] fuse: Bad value for 'fd' [ 1009.100324][T12295] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1009.154035][T12295] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1009.196666][T12295] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1009.256564][T12295] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1011.916459][T12684] fuse: Invalid rootmode [ 1012.997175][T12295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.503860][T12295] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.529232][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.529486][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1013.569020][ T5967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.569355][ T5967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.376117][T12295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.542990][T12719] fuse: Invalid rootmode [ 1016.184102][T12295] veth0_vlan: entered promiscuous mode [ 1016.223063][T12295] veth1_vlan: entered promiscuous mode [ 1016.261123][T12295] veth0_macvtap: entered promiscuous mode [ 1016.278054][T12295] veth1_macvtap: entered promiscuous mode [ 1016.465680][T12295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.482776][T12295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.498910][ T5956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.502330][ T5956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.502602][ T5956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.502847][ T5956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.634456][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.634478][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.203527][ T1498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.203543][ T1498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.329829][T12760] fuse: Invalid rootmode [ 1045.675903][ T9649] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1059.160982][T13079] syz.5.2093 (13079) used greatest stack depth: 15248 bytes left [ 1059.773287][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.773359][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.051035][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2098'. [ 1064.210796][T13117] fuse: Bad value for 'group_id' [ 1064.210847][T13117] fuse: Bad value for 'group_id' [ 1067.139932][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2110'. [ 1070.273281][T13157] fuse: Bad value for 'group_id' [ 1070.273333][T13157] fuse: Bad value for 'group_id' [ 1070.929931][ T5802] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1071.105350][ T5802] usb 6-1: Using ep0 maxpacket: 16 [ 1071.112523][ T5802] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.112613][ T5802] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1071.144354][ T5802] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1071.144381][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1071.145514][ T5802] usb 6-1: SerialNumber: syz [ 1071.643774][ T5802] cdc_acm 6-1:1.0: Zero length descriptor references [ 1071.643817][ T5802] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22 [ 1071.711402][ T5802] usb 6-1: USB disconnect, device number 3 [ 1072.176075][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.158611][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.410064][ C0] vkms_vblank_simulate: vblank timer overrun [ 1073.566278][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.314823][ C0] vkms_vblank_simulate: vblank timer overrun [ 1074.598396][ C0] vkms_vblank_simulate: vblank timer overrun [ 1075.510384][ C0] vkms_vblank_simulate: vblank timer overrun [ 1076.363119][ C0] vkms_vblank_simulate: vblank timer overrun [ 1077.668861][ T5991] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1077.814292][ T5991] usb 3-1: Using ep0 maxpacket: 8 [ 1077.817052][ T5991] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1077.818294][ T5991] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.818309][ T5991] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1077.820068][ T5991] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1077.820084][ T5991] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1077.820094][ T5991] usb 3-1: Manufacturer: syz [ 1077.820102][ T5991] usb 3-1: SerialNumber: syz [ 1078.072284][ T5991] usb 3-1: USB disconnect, device number 35 [ 1085.664355][ T5991] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1085.814478][ T5991] usb 9-1: Using ep0 maxpacket: 8 [ 1085.816238][ T5991] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1085.817198][ T5991] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1085.820379][ T5991] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1085.820407][ T5991] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1085.820426][ T5991] usb 9-1: Manufacturer: syz [ 1085.820440][ T5991] usb 9-1: SerialNumber: syz [ 1086.095403][ T5991] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1086.119214][ T5991] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1086.122752][ T5991] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1086.122815][ T5991] usb 9-1: media controller created [ 1086.403279][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1087.447014][ T5991] zl10353_read_register: readreg error (reg=127, ret==0) [ 1090.171555][T13323] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1090.179537][T13323] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1090.222369][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2171'. [ 1090.222412][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2171'. [ 1090.222587][T13319] netlink: 'syz.7.2171': attribute type 11 has an invalid length. [ 1090.222702][T13319] netlink: 'syz.7.2171': attribute type 13 has an invalid length. [ 1090.570358][ T5991] usb 9-1: USB disconnect, device number 7 [ 1090.623218][T13321] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.623675][T13321] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.624425][T13321] bridge0: entered allmulticast mode [ 1092.394063][ T5873] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1092.681241][T13343] overlayfs: missing 'lowerdir' [ 1093.034732][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 1093.041417][ T5873] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1093.042950][ T5873] usb 6-1: config 4 interface 0 has no altsetting 0 [ 1093.069488][ T5873] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1093.069516][ T5873] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1093.069543][ T5873] usb 6-1: Manufacturer: syz [ 1093.069556][ T5873] usb 6-1: SerialNumber: syz [ 1093.421327][ T5873] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1093.477568][ T5873] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1093.477937][ T5873] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1093.477983][ T5873] usb 6-1: media controller created [ 1093.984112][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1093.999035][T13358] binder: 13355:13358 ioctl c0306201 0 returned -14 [ 1094.043181][ T5873] zl10353_read_register: readreg error (reg=127, ret==0) [ 1094.096875][ T5873] usb 6-1: USB disconnect, device number 4 [ 1094.413543][T13368] bridge0: left allmulticast mode [ 1094.425990][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2186'. [ 1094.673035][T13373] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1094.673195][T13373] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1094.701215][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2187'. [ 1094.701230][T13370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2187'. [ 1094.701246][T13370] netlink: 'syz.5.2187': attribute type 11 has an invalid length. [ 1094.701253][T13370] netlink: 'syz.5.2187': attribute type 13 has an invalid length. [ 1094.758933][T13373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.759381][T13373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.759975][T13373] bridge0: entered allmulticast mode [ 1096.840121][ T5991] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1097.008412][ T5991] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 1097.008433][ T5991] usb 9-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1097.008446][ T5991] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1097.008465][ T5991] usb 9-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1097.008477][ T5991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.011245][ T5991] usb 9-1: config 0 descriptor?? [ 1097.017022][T13393] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1097.482409][ T5991] usbhid 9-1:0.0: can't add hid device: -71 [ 1097.482489][ T5991] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1097.522635][ T5991] usb 9-1: USB disconnect, device number 8 [ 1098.031975][T13413] random: crng reseeded on system resumption [ 1098.795434][T13415] fuse: Bad value for 'group_id' [ 1098.795453][T13415] fuse: Bad value for 'group_id' [ 1101.211403][T13427] fuse: Unknown parameter 'use00000000000000000000' [ 1105.900045][T13457] blktrace: Concurrent blktraces are not allowed on loop4 [ 1107.351433][T13477] fuse: Unknown parameter 'user_i00000000000000000000' [ 1108.224654][ T5802] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1108.384624][ T5802] usb 6-1: Using ep0 maxpacket: 8 [ 1108.391808][ T5802] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1108.401337][ T5802] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1108.401374][ T5802] usb 6-1: can't read configurations, error -61 [ 1108.504464][ T5873] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1108.524819][ T5802] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1108.562655][ T9649] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1108.562699][ T9649] CPU: 1 UID: 0 PID: 9649 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1108.562727][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1108.562742][ T9649] Workqueue: hci3 hci_rx_work [ 1108.562961][ T9649] Call Trace: [ 1108.562973][ T9649] [ 1108.562988][ T9649] dump_stack_lvl+0x189/0x250 [ 1108.563056][ T9649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.563088][ T9649] ? __pfx__printk+0x10/0x10 [ 1108.563126][ T9649] ? kernfs_path_from_node+0x2c/0x280 [ 1108.563172][ T9649] ? kernfs_path_from_node+0x243/0x280 [ 1108.563190][ T9649] ? kernfs_path_from_node+0x2c/0x280 [ 1108.563225][ T9649] sysfs_create_dir_ns+0x259/0x280 [ 1108.563252][ T9649] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1108.563372][ T9649] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1108.563414][ T9649] ? rt_spin_unlock+0x161/0x200 [ 1108.563442][ T9649] kobject_add_internal+0x5a5/0xb50 [ 1108.563538][ T9649] kobject_add+0x155/0x220 [ 1108.563567][ T9649] ? __pfx_kobject_add+0x10/0x10 [ 1108.563597][ T9649] ? get_device_parent+0x370/0x3a0 [ 1108.563713][ T9649] device_add+0x408/0xb50 [ 1108.563744][ T9649] hci_conn_add_sysfs+0xd5/0x1e0 [ 1108.563804][ T9649] le_conn_complete_evt+0xf39/0x1500 [ 1108.563864][ T9649] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1108.563887][ T9649] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1108.563909][ T9649] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.563943][ T9649] ? skb_pull_data+0xfb/0x200 [ 1108.564048][ T9649] hci_le_conn_complete_evt+0x187/0x450 [ 1108.564076][ T9649] hci_event_packet+0x78c/0x1200 [ 1108.564130][ T9649] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1108.564153][ T9649] ? __pfx_hci_event_packet+0x10/0x10 [ 1108.564190][ T9649] ? hci_send_to_monitor+0xe2/0x570 [ 1108.564214][ T9649] hci_rx_work+0x46a/0xe80 [ 1108.564246][ T9649] ? process_scheduled_works+0x9ef/0x17b0 [ 1108.564290][ T9649] process_scheduled_works+0xae1/0x17b0 [ 1108.564340][ T9649] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.564387][ T9649] worker_thread+0x8a0/0xda0 [ 1108.564436][ T9649] kthread+0x711/0x8a0 [ 1108.564466][ T9649] ? __pfx_worker_thread+0x10/0x10 [ 1108.564488][ T9649] ? __pfx_kthread+0x10/0x10 [ 1108.564510][ T9649] ? rt_spin_unlock+0x150/0x200 [ 1108.564539][ T9649] ? rt_spin_unlock+0x161/0x200 [ 1108.564560][ T9649] ? __pfx_kthread+0x10/0x10 [ 1108.564587][ T9649] ret_from_fork+0x4b9/0x870 [ 1108.564626][ T9649] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.564657][ T9649] ? __switch_to_asm+0x39/0x70 [ 1108.564679][ T9649] ? __switch_to_asm+0x33/0x70 [ 1108.564699][ T9649] ? __pfx_kthread+0x10/0x10 [ 1108.564725][ T9649] ret_from_fork_asm+0x1a/0x30 [ 1108.564767][ T9649] [ 1108.566530][ T9649] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1108.566583][ T9649] Bluetooth: hci3: failed to register connection device [ 1108.696904][ T5802] usb 6-1: Using ep0 maxpacket: 8 [ 1108.701881][ T5802] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1108.728582][ T5802] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1108.728617][ T5802] usb 6-1: can't read configurations, error -61 [ 1108.729322][ T5802] usb usb6-port1: attempt power cycle [ 1108.914492][ T5873] usb 8-1: Using ep0 maxpacket: 8 [ 1108.921366][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1108.921395][ T5873] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1108.921407][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.963130][ T5873] usb 8-1: config 0 descriptor?? [ 1109.064669][ T5802] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1109.090427][ T5802] usb 6-1: Using ep0 maxpacket: 8 [ 1109.104024][ T5802] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1109.196592][ T5802] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1109.196642][ T5802] usb 6-1: can't read configurations, error -61 [ 1109.226985][ T5873] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1109.336011][ T5802] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1109.376756][ T5802] usb 6-1: Using ep0 maxpacket: 8 [ 1109.405278][ T5802] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1109.422899][ T5802] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1109.422933][ T5802] usb 6-1: can't read configurations, error -61 [ 1109.435972][ T5802] usb usb6-port1: unable to enumerate USB device [ 1112.065736][T13515] fuse: Unknown parameter 'user_i00000000000000000000' [ 1112.806278][T10946] usb 8-1: USB disconnect, device number 4 [ 1114.874422][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 1114.997609][T13544] fuse: Unknown parameter 'user_i00000000000000000000' [ 1115.270155][T13553] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2250'. [ 1115.757383][ T5873] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1118.004384][ T5873] usb 7-1: Using ep0 maxpacket: 8 [ 1118.419739][ T5873] usb 7-1: device descriptor read/all, error -71 [ 1118.590699][T13575] fuse: Unknown parameter 'user_id00000000000000000000' [ 1121.240984][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.241567][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.867237][T13629] binder: 13628:13629 ioctl c0306201 0 returned -14 [ 1126.980553][T13655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2287'. [ 1127.227568][T13660] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1127.267018][T13660] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1131.025400][ T5991] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1131.650014][ T5991] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.650040][ T5991] usb 9-1: config 0 has no interfaces? [ 1131.683456][ T5991] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1131.683487][ T5991] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1131.683506][ T5991] usb 9-1: Product: syz [ 1131.683520][ T5991] usb 9-1: Manufacturer: syz [ 1131.683540][ T5991] usb 9-1: SerialNumber: syz [ 1131.693787][ T5991] usb 9-1: config 0 descriptor?? [ 1131.862289][T13712] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1131.872846][T13712] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1132.223585][ T5873] usb 9-1: USB disconnect, device number 9 [ 1137.370278][T13766] fuse: Bad value for 'fd' [ 1137.542493][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2325'. [ 1137.542577][T13772] bridge_slave_1: left allmulticast mode [ 1137.542597][T13772] bridge_slave_1: left promiscuous mode [ 1137.542872][T13772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.646302][T13772] bridge_slave_0: left allmulticast mode [ 1137.646329][T13772] bridge_slave_0: left promiscuous mode [ 1137.646585][T13772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.434409][ T9649] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1141.623792][T13824] binder: 13821:13824 ioctl c0306201 0 returned -14 [ 1150.057491][T13868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1150.063735][T13868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1150.285990][ T5873] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1150.434567][ T5873] usb 9-1: Using ep0 maxpacket: 16 [ 1150.436879][ T5873] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1150.436931][ T5873] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1150.438516][ T5873] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1150.438541][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1150.438560][ T5873] usb 9-1: SerialNumber: syz [ 1151.256683][ T68] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.256780][ T68] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.256812][ T68] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.256841][ T68] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.992595][ T5804] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1153.130755][ T5873] cdc_acm 9-1:1.0: Zero length descriptor references [ 1153.130793][ T5873] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22 [ 1153.160834][ T5873] usb 9-1: USB disconnect, device number 10 [ 1157.475792][T13968] blktrace: Concurrent blktraces are not allowed on loop10 [ 1158.524961][T13975] fuse: Bad value for 'rootmode' [ 1158.724335][ T5873] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1158.884276][ T5873] usb 8-1: Using ep0 maxpacket: 8 [ 1158.891978][ T5873] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1158.893053][ T5873] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1158.893087][ T5873] usb 8-1: can't read configurations, error -71 [ 1160.168593][T14001] blktrace: Concurrent blktraces are not allowed on loop10 [ 1161.203704][T14005] fuse: Bad value for 'rootmode' [ 1161.323491][T14008] netlink: 'syz.5.2406': attribute type 1 has an invalid length. [ 1161.323514][T14008] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2406'. [ 1161.323542][T14008] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2406'. [ 1162.199077][T14029] netlink: 'syz.6.2412': attribute type 1 has an invalid length. [ 1162.725315][T14037] blktrace: Concurrent blktraces are not allowed on loop14 [ 1163.274711][T14039] fuse: Unknown parameter 'use00000000000000000000' [ 1163.874866][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2417'. [ 1166.644124][T14067] fuse: Unknown parameter 'use00000000000000000000' [ 1171.348694][ T5802] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1171.365777][T14114] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2443'. [ 1171.476051][T14121] binder: 14120:14121 ioctl c0306201 0 returned -14 [ 1171.499684][ T5802] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 1171.499718][ T5802] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1171.499744][ T5802] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1171.499776][ T5802] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1171.499798][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.507915][ T5802] usb 6-1: config 0 descriptor?? [ 1171.524884][T14111] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1171.947599][ T5802] waltop 0003:172F:0501.0011: item fetching failed at offset 0/3 [ 1171.948454][ T5802] waltop 0003:172F:0501.0011: probe with driver waltop failed with error -22 [ 1172.394286][ T8634] usb 6-1: USB disconnect, device number 9 [ 1174.414322][ T5802] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1174.516012][T14158] binder: 14157:14158 ioctl c0306201 0 returned -14 [ 1174.566015][T14160] fuse: Unknown parameter 'user_i00000000000000000000' [ 1174.574369][ T5802] usb 9-1: Using ep0 maxpacket: 16 [ 1174.580485][ T5802] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.580541][ T5802] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1174.581971][ T5802] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1174.581996][ T5802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1174.582014][ T5802] usb 9-1: SerialNumber: syz [ 1174.831071][ T5802] cdc_acm 9-1:1.0: Zero length descriptor references [ 1174.831114][ T5802] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -22 [ 1174.875881][ T5802] usb 9-1: USB disconnect, device number 11 [ 1175.899033][T14170] netlink: 'syz.8.2465': attribute type 1 has an invalid length. [ 1176.824506][ T5977] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1176.987351][T14190] binder: 14189:14190 ioctl c0306201 0 returned -14 [ 1176.994336][ T5977] usb 7-1: Using ep0 maxpacket: 16 [ 1176.997173][ T5977] usb 7-1: config 0 has no interfaces? [ 1177.000581][ T5977] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1177.000616][ T5977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.000635][ T5977] usb 7-1: Product: syz [ 1177.000648][ T5977] usb 7-1: Manufacturer: syz [ 1177.000661][ T5977] usb 7-1: SerialNumber: syz [ 1177.033857][T14194] fuse: Unknown parameter 'user_i00000000000000000000' [ 1177.041213][T14193] fuse: Bad value for 'fd' [ 1177.071647][ T5977] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1177.071671][ T5977] r8152-cfgselector 7-1: config 0 descriptor?? [ 1177.300014][ T31] r8152-cfgselector 7-1: USB disconnect, device number 7 [ 1177.336795][T14205] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2480'. [ 1177.395362][T14205] bridge0: left allmulticast mode [ 1177.451889][T14209] mmap: syz.5.2478 (14209) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1177.997533][T14215] usb usb9: usbfs: process 14215 (syz.8.2483) did not claim interface 0 before use [ 1178.324264][T14220] fuse: Unknown parameter 'user_i00000000000000000000' [ 1178.489193][T14226] binder: 14225:14226 ioctl c0306201 0 returned -14 [ 1180.307811][ T9649] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1180.307844][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1180.307868][[ 1180.307868][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1180.307882][ T9649] Workqueue: hci1 hci_rx_work [ 1180.307918][ T9649] Call Trace: [ 1180.307927][ T9649] [ 1180.307936][ T9649] dump_stack_lvl+0x189/0x250 [ 1180.307969][ T9649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.307993][ T9649] ? __pfx__printk+0x10/0x10 [ 1180.308024][ T9649] ? kernfs_path_from_node+0x2c/0x280 [ 1180.308045][ T9649] ? kernfs_path_from_node+0x243/0x280 [ 1180.308064][ T9649] ? kernfs_path_from_node+0x2c/0x280 [ 1180.308087][ T9649] sysfs_create_dir_ns+0x259/0x280 [ 1180.308106][ T9649] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1180.308136][ T9649] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1180.308171][ T9649] ? rt_spin_unlock+0x161/0x200 [ 1180.308200][ T9649] kobject_add_internal+0x5a5/0xb50 [ 1180.308239][ T9649] kobject_add+0x155/0x220 [ 1180.308267][ T9649] ? __pfx_kobject_add+0x10/0x10 [ 1180.308307][ T9649] ? get_device_parent+0x370/0x3a0 [ 1180.308342][ T9649] device_add+0x408/0xb50 [ 1180.308374][ T9649] hci_conn_add_sysfs+0xd5/0x1e0 [ 1180.308405][ T9649] le_conn_complete_evt+0xf39/0x1500 [ 1180.308427][ T9649] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1180.308459][ T9649] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1180.308502][ T9649] hci_le_conn_complete_evt+0x187/0x450 [ 1180.308529][ T9649] hci_event_packet+0x78c/0x1200 [ 1180.308560][ T9649] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1180.308583][ T9649] ? __pfx_hci_event_packet+0x10/0x10 [ 1180.308620][ T9649] ? hci_send_to_monitor+0xe2/0x570 [ 1180.308646][ T9649] hci_rx_work+0x46a/0xe80 [ 1180.308682][ T9649] ? process_scheduled_works+0x9ef/0x17b0 [ 1180.308710][ T9649] process_scheduled_works+0xae1/0x17b0 [ 1180.308764][ T9649] ? __pfx_process_scheduled_works+0x10/0x10 [ 1180.308806][ T9649] worker_thread+0x8a0/0xda0 [ 1180.308859][ T9649] kthread+0x711/0x8a0 [ 1180.308889][ T9649] ? __pfx_worker_thread+0x10/0x10 [ 1180.308912][ T9649] ? __pfx_kthread+0x10/0x10 [ 1180.308936][ T9649] ? rt_spin_unlock+0x150/0x200 [ 1180.308967][ T9649] ? rt_spin_unlock+0x161/0x200 [ 1180.308991][ T9649] ? __pfx_kthread+0x10/0x10 [ 1180.309019][ T9649] ret_from_fork+0x4b9/0x870 [ 1180.309046][ T9649] ? __pfx_ret_from_fork+0x10/0x10 [ 1180.309077][ T9649] ? __switch_to_asm+0x39/0x70 [ 1180.309101][ T9649] ? __switch_to_asm+0x33/0x70 [ 1180.309124][ T9649] ? __pfx_kthread+0x10/0x10 [ 1180.309152][ T9649] ret_from_fork_asm+0x1a/0x30 [ 1180.309196][ T9649] [ 1180.311476][ T9649] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1180.311521][ T9649] Bluetooth: hci1: failed to register connection device [ 1180.802487][ T9649] ================================================================== [ 1180.802507][ T9649] BUG: KASAN: slab-use-after-free in l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 1180.802615][ T9649] Read of size 8 at addr ffff8880291827a0 by task kworker/u9:2/9649 [ 1180.802633][ T9649] [ 1180.802646][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1180.802669][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1180.802684][ T9649] Workqueue: hci1 hci_rx_work [ 1180.802713][ T9649] Call Trace: [ 1180.802720][ T9649] [ 1180.802729][ T9649] dump_stack_lvl+0x189/0x250 [ 1180.802754][ T9649] ? rcu_is_watching+0x15/0xb0 [ 1180.802806][ T9649] ? __kasan_check_byte+0x12/0x40 [ 1180.802851][ T9649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.802873][ T9649] ? rcu_is_watching+0x15/0xb0 [ 1180.802900][ T9649] ? lock_release+0x4b/0x3e0 [ 1180.802934][ T9649] ? __virt_addr_valid+0x1c8/0x5c0 [ 1180.802971][ T9649] ? __virt_addr_valid+0x4a5/0x5c0 [ 1180.802999][ T9649] print_report+0xca/0x240 [ 1180.803024][ T9649] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 1180.803049][ T9649] kasan_report+0x118/0x150 [ 1180.803090][ T9649] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 1180.803121][ T9649] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 1180.803148][ T9649] l2cap_connect_cfm+0x37a/0x1040 [ 1180.803176][ T9649] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1180.803200][ T9649] ? mutex_lock_nested+0x154/0x1d0 [ 1180.803226][ T9649] ? hci_connect_cfm+0x2c/0x140 [ 1180.803250][ T9649] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1180.803273][ T9649] hci_connect_cfm+0x92/0x140 [ 1180.803294][ T9649] le_conn_complete_evt+0xfb8/0x1500 [ 1180.803315][ T9649] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1180.803339][ T9649] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1180.803372][ T9649] hci_le_conn_complete_evt+0x187/0x450 [ 1180.803395][ T9649] hci_event_packet+0x78c/0x1200 [ 1180.803423][ T9649] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1180.803443][ T9649] ? __pfx_hci_event_packet+0x10/0x10 [ 1180.803480][ T9649] ? hci_send_to_monitor+0xe2/0x570 [ 1180.803503][ T9649] hci_rx_work+0x46a/0xe80 [ 1180.803532][ T9649] ? process_scheduled_works+0x9ef/0x17b0 [ 1180.803557][ T9649] process_scheduled_works+0xae1/0x17b0 [ 1180.803592][ T9649] ? __pfx_process_scheduled_works+0x10/0x10 [ 1180.803623][ T9649] worker_thread+0x8a0/0xda0 [ 1180.803656][ T9649] kthread+0x711/0x8a0 [ 1180.803684][ T9649] ? __pfx_worker_thread+0x10/0x10 [ 1180.803706][ T9649] ? __pfx_kthread+0x10/0x10 [ 1180.803730][ T9649] ? rt_spin_unlock+0x150/0x200 [ 1180.803758][ T9649] ? rt_spin_unlock+0x161/0x200 [ 1180.803783][ T9649] ? __pfx_kthread+0x10/0x10 [ 1180.803809][ T9649] ret_from_fork+0x4b9/0x870 [ 1180.803833][ T9649] ? __pfx_ret_from_fork+0x10/0x10 [ 1180.803858][ T9649] ? __switch_to_asm+0x39/0x70 [ 1180.803882][ T9649] ? __switch_to_asm+0x33/0x70 [ 1180.803905][ T9649] ? __pfx_kthread+0x10/0x10 [ 1180.803932][ T9649] ret_from_fork_asm+0x1a/0x30 [ 1180.803964][ T9649] [ 1180.803971][ T9649] [ 1180.803982][ T9649] Allocated by task 9649: [ 1180.803997][ T9649] kasan_save_track+0x3e/0x80 [ 1180.804019][ T9649] __kasan_kmalloc+0x93/0xb0 [ 1180.804040][ T9649] __kmalloc_noprof+0x233/0x7d0 [ 1180.804062][ T9649] sk_prot_alloc+0xe7/0x220 [ 1180.804083][ T9649] sk_alloc+0x3a/0x370 [ 1180.804099][ T9649] bt_sock_alloc+0x3b/0x310 [ 1180.804115][ T9649] l2cap_sock_new_connection_cb+0xe2/0x2b0 [ 1180.804142][ T9649] l2cap_connect_cfm+0x37a/0x1040 [ 1180.804157][ T9649] hci_connect_cfm+0x92/0x140 [ 1180.804170][ T9649] le_conn_complete_evt+0xfb8/0x1500 [ 1180.804186][ T9649] hci_le_conn_complete_evt+0x187/0x450 [ 1180.804202][ T9649] hci_event_packet+0x78c/0x1200 [ 1180.804224][ T9649] hci_rx_work+0x46a/0xe80 [ 1180.804246][ T9649] process_scheduled_works+0xae1/0x17b0 [ 1180.804266][ T9649] worker_thread+0x8a0/0xda0 [ 1180.804286][ T9649] kthread+0x711/0x8a0 [ 1180.804308][ T9649] ret_from_fork+0x4b9/0x870 [ 1180.804327][ T9649] ret_from_fork_asm+0x1a/0x30 [ 1180.804349][ T9649] [ 1180.804354][ T9649] Freed by task 14250: [ 1180.804362][ T9649] kasan_save_track+0x3e/0x80 [ 1180.804381][ T9649] __kasan_save_free_info+0x46/0x50 [ 1180.804398][ T9649] __kasan_slab_free+0x5c/0x80 [ 1180.804418][ T9649] kfree+0x197/0x950 [ 1180.804436][ T9649] __sk_destruct+0x4e4/0x670 [ 1180.804460][ T9649] l2cap_sock_cleanup_listen+0xda/0x3e0 [ 1180.804482][ T9649] l2cap_sock_release+0x6a/0x230 [ 1180.804501][ T9649] sock_close+0xc0/0x240 [ 1180.804570][ T9649] __fput+0x458/0xa80 [ 1180.804593][ T9649] task_work_run+0x1d4/0x260 [ 1180.804609][ T9649] exit_to_user_mode_loop+0xe9/0x130 [ 1180.804632][ T9649] do_syscall_64+0x2bd/0xfa0 [ 1180.804684][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.804716][ T9649] [ 1180.804722][ T9649] The buggy address belongs to the object at ffff888029182000 [ 1180.804722][ T9649] which belongs to the cache kmalloc-2k of size 2048 [ 1180.804739][ T9649] The buggy address is located 1952 bytes inside of [ 1180.804739][ T9649] freed 2048-byte region [ffff888029182000, ffff888029182800) [ 1180.804761][ T9649] [ 1180.804767][ T9649] The buggy address belongs to the physical page: [ 1180.804785][ T9649] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29180 [ 1180.804805][ T9649] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1180.804822][ T9649] anon flags: 0x80000000000040(head|node=0|zone=1) [ 1180.804845][ T9649] page_type: f5(slab) [ 1180.804862][ T9649] raw: 0080000000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 1180.804879][ T9649] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1180.804898][ T9649] head: 0080000000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 1180.804915][ T9649] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1180.804933][ T9649] head: 0080000000000003 ffffea0000a46001 00000000ffffffff 00000000ffffffff [ 1180.804950][ T9649] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1180.804960][ T9649] page dumped because: kasan: bad access detected [ 1180.804975][ T9649] page_owner tracks the page as allocated [ 1180.804982][ T9649] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5805, tgid 5805 (syz-executor), ts 97571362880, free_ts 97550481390 [ 1180.805017][ T9649] post_alloc_hook+0x240/0x2a0 [ 1180.805049][ T9649] get_page_from_freelist+0x28c0/0x2960 [ 1180.805076][ T9649] __alloc_frozen_pages_noprof+0x181/0x370 [ 1180.805101][ T9649] alloc_pages_mpol+0xd1/0x380 [ 1180.805124][ T9649] allocate_slab+0x96/0x3a0 [ 1180.805141][ T9649] ___slab_alloc+0xb12/0x1470 [ 1180.805156][ T9649] __slab_alloc+0xc6/0x1f0 [ 1180.805180][ T9649] __kmalloc_node_track_caller_noprof+0x2a8/0x7e0 [ 1180.805203][ T9649] kmalloc_reserve+0x136/0x290 [ 1180.805220][ T9649] __alloc_skb+0x142/0x2d0 [ 1180.805235][ T9649] inet6_ifinfo_notify+0x70/0x120 [ 1180.805303][ T9649] addrconf_notify+0xc4e/0x1010 [ 1180.805328][ T9649] notifier_call_chain+0x1b6/0x3e0 [ 1180.805351][ T9649] __dev_notify_flags+0x18d/0x2e0 [ 1180.805404][ T9649] netif_change_flags+0xe8/0x1a0 [ 1180.805423][ T9649] do_setlink+0xc55/0x41c0 [ 1180.805492][ T9649] page last free pid 5851 tgid 5851 stack trace: [ 1180.805502][ T9649] __free_frozen_pages+0xfb6/0x1140 [ 1180.805525][ T9649] __put_partials+0x149/0x170 [ 1180.805540][ T9649] __slab_free+0x29e/0x370 [ 1180.805558][ T9649] qlist_free_all+0x97/0x140 [ 1180.805577][ T9649] kasan_quarantine_reduce+0x148/0x160 [ 1180.805598][ T9649] __kasan_slab_alloc+0x22/0x80 [ 1180.805619][ T9649] kmem_cache_alloc_noprof+0x181/0x6b0 [ 1180.805639][ T9649] getname_flags+0xb8/0x540 [ 1180.805663][ T9649] vfs_fstatat+0x43/0x170 [ 1180.805686][ T9649] __x64_sys_newfstatat+0x116/0x190 [ 1180.805711][ T9649] do_syscall_64+0xfa/0xfa0 [ 1180.805729][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.805747][ T9649] [ 1180.805751][ T9649] Memory state around the buggy address: [ 1180.805762][ T9649] ffff888029182680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1180.805775][ T9649] ffff888029182700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1180.805789][ T9649] >ffff888029182780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1180.805799][ T9649] ^ [ 1180.805809][ T9649] ffff888029182800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1180.805822][ T9649] ffff888029182880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1180.805832][ T9649] ================================================================== [ 1180.805937][ T9649] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1180.805955][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1180.805978][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1180.805991][ T9649] Workqueue: hci1 hci_rx_work [ 1180.806019][ T9649] Call Trace: [ 1180.806026][ T9649] [ 1180.806034][ T9649] dump_stack_lvl+0x99/0x250 [ 1180.806058][ T9649] ? __asan_memcpy+0x40/0x70 [ 1180.806079][ T9649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.806102][ T9649] ? __pfx__printk+0x10/0x10 [ 1180.806130][ T9649] vpanic+0x237/0x6d0 [ 1180.806163][ T9649] ? __pfx_vpanic+0x10/0x10 [ 1180.806186][ T9649] panic+0xb9/0xc0 [ 1180.806203][ T9649] ? __pfx_panic+0x10/0x10 [ 1180.806218][ T9649] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 1180.806236][ T9649] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1180.806260][ T9649] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 1180.806286][ T9649] check_panic_on_warn+0x89/0xb0 [ 1180.806314][ T9649] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 1180.806339][ T9649] end_report+0x78/0x160 [ 1180.806363][ T9649] kasan_report+0x129/0x150 [ 1180.806389][ T9649] ? l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 1180.806418][ T9649] l2cap_sock_new_connection_cb+0x1f9/0x2b0 [ 1180.806443][ T9649] l2cap_connect_cfm+0x37a/0x1040 [ 1180.806488][ T9649] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1180.806511][ T9649] ? mutex_lock_nested+0x154/0x1d0 [ 1180.806537][ T9649] ? hci_connect_cfm+0x2c/0x140 [ 1180.806556][ T9649] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1180.806579][ T9649] hci_connect_cfm+0x92/0x140 [ 1180.806599][ T9649] le_conn_complete_evt+0xfb8/0x1500 [ 1180.806620][ T9649] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1180.806644][ T9649] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1180.806673][ T9649] hci_le_conn_complete_evt+0x187/0x450 [ 1180.806696][ T9649] hci_event_packet+0x78c/0x1200 [ 1180.806723][ T9649] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1180.806743][ T9649] ? __pfx_hci_event_packet+0x10/0x10 [ 1180.806772][ T9649] ? hci_send_to_monitor+0xe2/0x570 [ 1180.806795][ T9649] hci_rx_work+0x46a/0xe80 [ 1180.806825][ T9649] ? process_scheduled_works+0x9ef/0x17b0 [ 1180.806849][ T9649] process_scheduled_works+0xae1/0x17b0 [ 1180.806884][ T9649] ? __pfx_process_scheduled_works+0x10/0x10 [ 1180.806914][ T9649] worker_thread+0x8a0/0xda0 [ 1180.806949][ T9649] kthread+0x711/0x8a0 [ 1180.806976][ T9649] ? __pfx_worker_thread+0x10/0x10 [ 1180.806998][ T9649] ? __pfx_kthread+0x10/0x10 [ 1180.807023][ T9649] ? rt_spin_unlock+0x150/0x200 [ 1180.807051][ T9649] ? rt_spin_unlock+0x161/0x200 [ 1180.807076][ T9649] ? __pfx_kthread+0x10/0x10 [ 1180.807103][ T9649] ret_from_fork+0x4b9/0x870 [ 1180.807125][ T9649] ? __pfx_ret_from_fork+0x10/0x10 [ 1180.807150][ T9649] ? __switch_to_asm+0x39/0x70 [ 1180.807174][ T9649] ? __switch_to_asm+0x33/0x70 [ 1180.807197][ T9649] ? __pfx_kthread+0x10/0x10 [ 1180.807222][ T9649] ret_from_fork_asm+0x1a/0x30 [ 1180.807254][ T9649] [ 1180.807516][ T9649] Kernel Offset: disabled