last executing test programs: 12m53.179371505s ago: executing program 32 (id=6): syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x25, 0x0, 0x0) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000280)=0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) read$qrtrtun(r1, 0x0, 0xffe4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x100}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0x4, 0x0, 0x0) 12m52.684606815s ago: executing program 33 (id=7): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 12m49.35824779s ago: executing program 34 (id=10): creat(&(0x7f0000000400)='./bus\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) lsetxattr$security_ima(0x0, 0x0, 0x0, 0x0, 0x0) 11m54.245921595s ago: executing program 35 (id=58): r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) fsopen(&(0x7f0000000180)='hfs\x00', 0x1) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x107) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)="58ec51e8797342d1a100f492eb61156ec020e53a0323daf9c968de2af5a9f224da111d456f836acbb91ca09fbef1ec5bcb8ecdc90f0767943530219940d2d86f2866d897e4b7be73c2ec768ae7faa5fdfb34cea3eb2876cc2696b3104be7f561f68221403f2145b362a9220ab3fb9502433f352109b4b9", 0x77}, 0x1, 0x0, 0x0, 0x2004c014}, 0x4008044) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) 9m29.578476481s ago: executing program 37 (id=335): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x6, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x9}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) symlink(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./file1/file3\x00', 0x10, 0x8) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2200c851, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x41) write(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x802) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x639) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x80, 0x1, 0x7, 0x3, 0x0, 0x0, {0xa}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x261}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7b9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x66}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, 0x80}}, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}], 0x1) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="2e00000011008188040f46ec0800b9cca7480ef4210000fee3bd6efb440013030e001b000d000008ba800082da", 0x2d}], 0x1}, 0x48d4) 8m18.578243862s ago: executing program 38 (id=469): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r1 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f00000009c0)=ANY=[@ANYBLOB="002000000200", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00']) ioctl$UDMABUF_CREATE(r0, 0x40187542, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000140)={0x106, 0x8001, 0xe, 0x3, 0x7, "63ff08000000000010000100000100000000fc", 0x64, 0x1}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x7ffe) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r6, 0x0, 0x0) 7m56.68461055s ago: executing program 39 (id=512): socket(0x10, 0x80002, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x3}, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) 7m7.458416686s ago: executing program 40 (id=594): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x8600, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000540)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "dcff7f00", 0x1002, 0x2}) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) syz_emit_ethernet(0x58, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@mpls_mc={0x8848, {[], @generic="3ccf9426179aa6d97fe42a82ea5cd485cb2804e74fbcd1f079a3c5eedea7bc75d96b4f1772d092eaaaa0174ed46eef57d871a32e702d3ca9ee6ad53fea070cd4c56bb6ec75bb746b59ae"}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000340)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008000}, 0x240048c5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x18c) sendfile(r4, r4, 0x0, 0xb) migrate_pages(0x0, 0x5, 0x0, &(0x7f0000000040)=0x272) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0xc0403d08, 0xffffffffffffffff) 7m4.95771333s ago: executing program 41 (id=598): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r4, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 6m17.455432268s ago: executing program 42 (id=667): syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_setup(0x49c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) r3 = epoll_create1(0x80000) epoll_pwait2(r3, &(0x7f00000002c0)=[{}], 0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000001c0), 0x4) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m47.736743323s ago: executing program 43 (id=706): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000001a0a010100000000000000000200000609000200a5317a320000000008000440000000006bcc578e0900010073797a30000000000800034000000008140000001100010000000000000000000000000a"], 0x64}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x70, 0x30, 0x871a15abc695f30d, 0x9, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xd, 0x20000000, 0x7f, 0x4}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x800}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r4, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r4, 0x1) r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x1, 0xa2242) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000080)=0xfffffffb) close_range(r0, 0xffffffffffffffff, 0x0) 4m46.23237573s ago: executing program 44 (id=787): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) socket(0x28, 0x2, 0x0) 4m39.166771245s ago: executing program 45 (id=805): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 4m37.3950204s ago: executing program 46 (id=806): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) sendto$inet6(r1, &(0x7f0000000080), 0x0, 0x8000, 0x0, 0x0) close(r1) r2 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, 0x0, 0x0) 3m32.006958412s ago: executing program 47 (id=870): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000004040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004080)={0x68, r6, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffffe, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0xc0000}, 0x40080) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000010000104000000000000000044130000", @ANYRES32=0x0, @ANYBLOB="9402040000000000280012800b00010067656e657665000018000280140007002001"], 0x5c}, 0x1, 0x0, 0x0, 0x4090}, 0x22000010) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008000) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0xfff}, 0x1b) r9 = dup2(r3, r3) socket(0x15, 0x5, 0x40) sendmmsg$unix(r9, &(0x7f0000008380), 0x400000000000174, 0x4008890) unshare(0x60400) socket$l2tp6(0xa, 0x2, 0x73) fchdir(r0) mount$9p_unix(0x0, 0x0, 0x0, 0x291004, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_tree(r0, &(0x7f00000001c0)='./mnt\x00', 0x901) syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) 3m31.096523613s ago: executing program 48 (id=872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$l2tp(0x2, 0x2, 0x73) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') pread64(r0, &(0x7f0000000100)=""/78, 0x4e, 0x0) socket$netlink(0x10, 0x3, 0x9) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r4, 0xb, &(0x7f0000001240)=[@ioring_restriction_sqe_flags_required={0x3, 0x2}, @ioring_restriction_sqe_flags_allowed={0x2, 0x9}], 0x2) r5 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000600)='/sys/power/pm_trace', 0x169a82, 0x0) sendfile(r6, r6, 0x0, 0x30) mmap$IORING_OFF_SQES(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000c, 0x100010, r2, 0x10000000) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r5, 0x405c5503, 0x0) 2m44.607877406s ago: executing program 4 (id=916): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f0000000a00)=[{{&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)="99ef73233afb34f6482efde99c9a52fcacf219feccbd3a5f5c81", 0x1a}], 0x2}}], 0x1, 0x240080cb) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r6 = socket(0x12, 0x800, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0x68, "971827277d922e2afb1a79d21aa7c68f8eb6e30ddf4de3595bd823f1994766e60fbfa3cf5c4607077bffa6642f3d48f3fadee7cbe42a52619bd807a0d57dea34acbcb7d955061044248d6c728ccfdffc08aaec090a09c06f62ef1b668cd2d7ba87b2d897ef45c903"}, &(0x7f0000000100)=0x70) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019f14c318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f0000000380)="fdffffffffe6f2458c079d63a866b31ff3ceda1e28f23f455e96a06001fc3f828b27b6", 0x23}], 0x2}}], 0x2, 0x0) socket$isdn(0x22, 0x3, 0x2) 2m43.078572988s ago: executing program 4 (id=918): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r0 = syz_io_uring_setup(0x63ab, &(0x7f00000006c0)={0x0, 0x1d11, 0x10000}, &(0x7f0000010080), &(0x7f0000000400)) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="540000001800010000000000000200001d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32, @ANYBLOB="150003000200008001000000ba697b3eaa14d41502000000150004"], 0x54}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3e, 0x107, 0x72bd2d, 0x25dfdbfd, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) close(r1) syz_usb_connect$cdc_ecm(0x0, 0x82, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x70, 0x1, 0x1, 0x0, 0x0, 0xb, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "8d0000000000"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x3, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x2, 0xd, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x81, 0x2, 0x46, 0x9, 0x4, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x3, 0xc}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x4}}], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x0, 0x9}}}}}]}}]}}, 0x0) 2m39.679370937s ago: executing program 4 (id=923): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280)="04", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r3, &(0x7f0000000780)}, 0x20) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000016290cfc2f45ceb11d0ed9000000000c0000000c000000"], 0x0, 0x26}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r4, 0x5608) add_key$keyring(&(0x7f0000000280), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200fffc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e22, @empty}}}, 0x108) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) 2m35.252683945s ago: executing program 4 (id=929): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}}, 0xfffffe10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="05000000010001", 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "68d44e", "c3a5b75921e508838c41258ad9a427428e7865bb5903967a4189f95d05ae9b87dba47d3e9f056a1282008f1d43524e8cbea8f2b4163dc836ceb086fc05ad28bcff4babd9c5d8df26f5e40e0024e497f790f66d3d37273b72ac58234ac243bb820afb4ba73e9319b139ef7afc6442723e80db6d9c2b784667e2d9f16ebd47594cd0b98059b73673762e7a98dd6ac6586c58ec51b5a9bff3338d8062046597774cda46522a4ca871557c2bfa60eafe1c0938819a1b449af80039c13d0d19119d2c8182c6e25452a2cb19da767f8453e60ed858f8cb81953dff191496f782da07603514fdf16931b74017afa948fdde6aecb702b9a1e05bb2b9bad99c22e13ece15"}}, 0x110) setsockopt$inet_opts(r5, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r7, 0x5420, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 2m34.369284862s ago: executing program 4 (id=933): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x24, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x2}, {0x0, 0xe}, {0x6, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) 2m33.584019538s ago: executing program 4 (id=935): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m28.834706634s ago: executing program 5 (id=942): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, 0x0) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f0000000a00)=[{{&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)="99ef73233afb34f6482efde99c9a52fcacf219feccbd3a5f5c81", 0x1a}], 0x2}}], 0x1, 0x240080cb) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r6 = socket(0x12, 0x800, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0x68, "971827277d922e2afb1a79d21aa7c68f8eb6e30ddf4de3595bd823f1994766e60fbfa3cf5c4607077bffa6642f3d48f3fadee7cbe42a52619bd807a0d57dea34acbcb7d955061044248d6c728ccfdffc08aaec090a09c06f62ef1b668cd2d7ba87b2d897ef45c903"}, &(0x7f0000000100)=0x70) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000380)="fdffffffffe6f2458c079d63a866b31ff3ceda1e28f23f455e96a06001fc3f828b27b6", 0x23}], 0x2}}], 0x2, 0x0) socket$isdn(0x22, 0x3, 0x2) 2m28.459565231s ago: executing program 1 (id=943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}}, 0xfffffe10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="05000000010001", 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "68d44e", "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"}}, 0x110) setsockopt$inet_opts(r5, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r7, 0x5420, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 2m25.885662793s ago: executing program 1 (id=945): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0xc0145b0d, &(0x7f0000000040)) 2m25.75458259s ago: executing program 5 (id=947): syz_emit_vhci(&(0x7f0000003200)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_SET_RAND_ADDR={{}, 0x8}}}, 0x7) dup(0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x822b01) 2m24.757669015s ago: executing program 1 (id=949): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b40)={'#! ', '', [{}]}, 0x5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fspick(0xffffffffffffffff, 0x0, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000000440)=[{&(0x7f0000001500)=""/152, 0x98}], 0x1, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x80000001, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffff85b}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000002900000001ee00001d00033400000000"], 0x18}}], 0x2, 0x20000080) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000307011c00000000000000000000002009"], 0x20}}, 0x4040000) 2m24.498757023s ago: executing program 5 (id=951): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000400)={0x1d, r3, 0x2}, 0x18) 2m23.944074732s ago: executing program 5 (id=952): dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x48ed, 0x0, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x40000042, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) 2m23.138798762s ago: executing program 1 (id=953): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x800000000001) sendto$inet6(r0, 0x0, 0x0, 0x200008c5, &(0x7f0000000000)={0xa, 0x2, 0x2, @loopback, 0x4}, 0x1c) shutdown(r0, 0x1) 2m23.00041124s ago: executing program 5 (id=954): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000100)='./file0\x00') rmdir(&(0x7f0000000000)='./bus\x00') 2m22.571076695s ago: executing program 1 (id=955): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}}, 0xfffffe10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000c00000000000000000000000095000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="05000000010001", 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6}) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "68d44e", "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"}}, 0x110) setsockopt$inet_opts(r5, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r7, 0x5420, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 2m22.501163045s ago: executing program 5 (id=956): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x8) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, &(0x7f0000000080)) 2m21.778064606s ago: executing program 1 (id=958): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49"}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0x5, 0x4) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0) open(0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x11, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 2m19.04182015s ago: executing program 49 (id=931): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c1) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x48080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000500)={0x28, 0x4, r0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x80000001}) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x5e3143e748a15ab6) 2m17.803824869s ago: executing program 50 (id=935): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2m7.556135717s ago: executing program 3 (id=969): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, 0x0) sendmmsg(r3, &(0x7f0000000a00)=[{{&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)="99ef73233afb34f6482efde99c9a52fcacf219feccbd3a5f5c81", 0x1a}], 0x2}}], 0x1, 0x240080cb) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r6 = socket(0x12, 0x800, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0x68, "971827277d922e2afb1a79d21aa7c68f8eb6e30ddf4de3595bd823f1994766e60fbfa3cf5c4607077bffa6642f3d48f3fadee7cbe42a52619bd807a0d57dea34acbcb7d955061044248d6c728ccfdffc08aaec090a09c06f62ef1b668cd2d7ba87b2d897ef45c903"}, &(0x7f0000000100)=0x70) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000380)="fdffffffffe6f2458c079d63a866b31ff3ceda1e28f23f455e96a06001fc3f828b27b6", 0x23}], 0x2}}], 0x2, 0x0) socket$isdn(0x22, 0x3, 0x2) 2m5.505413712s ago: executing program 51 (id=956): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, 0x0, 0xfe33) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) ptrace(0x10, 0x0) ptrace$peekuser(0x3, 0x0, 0x8) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, 0x0, &(0x7f0000000080)) 2m5.144533575s ago: executing program 52 (id=958): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_procfs(0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x1, "4ef7289910e0843a8f13f2fe244b73fb24e0fe49951c925bca907f6a609d8f49"}, 0x3c) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000000)=0x5, 0x4) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, 0x0, 0x0) open(0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x11, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) 2m5.090560892s ago: executing program 3 (id=972): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000b40)={'#! ', '', [{}]}, 0x5) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fspick(0xffffffffffffffff, 0x0, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1, &(0x7f0000000440)=[{&(0x7f0000001500)=""/152, 0x98}], 0x1, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x8010) r3 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r3, &(0x7f0000005800)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{&(0x7f0000000540)={0xa, 0x4e20, 0x80000001, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfffff85b}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000002900000001ee00001d00033400000000"], 0x18}}], 0x2, 0x20000080) recvmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/5, 0x63}], 0x1, 0xfffffffffffffffe, 0x19}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000307011c0000000000000000000000200900"], 0x20}}, 0x4040000) 2m2.657650184s ago: executing program 3 (id=973): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000001240)=[@ioring_restriction_sqe_op={0x1, 0x11}], 0x1) 2m1.382762184s ago: executing program 3 (id=974): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1m59.839849116s ago: executing program 3 (id=975): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x44}}, 0x0) 1m58.514715551s ago: executing program 3 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x11, 0x3f, {0x3f, 0x9, "d159463d639d4a5c9fc753be5cbdf24a0b33f7b4eb93a707be47d5949b14555220fee785c43a9eaf7bc571a1b9e42d8ef4364ecba4da08eef27f3f2655"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0x8, 0x4e, "59f9493c425ea97226858047cb6d18bc5ab25f788f458254e7cf9d2c96a78508257e09e2afc54e59db4cc92c6689a28ca1472b99e96b277f1356a1ce34f8baf53b45fa8027e63b535c796b6610e2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x0, 0x93, {0x91, "92442b1282d9e200638050621a8e990e92cdf3f6da03039464c210b553945b1908771550da3907419375f74b131c4e6cc23980d69fa2673ac43eb353b98ef435254f547187374791ab6ae22dbebd1cbe2c0c4ac4ac3b057b3046e2cce2fe542a696d0d0255edd913cdabc82d69ab300cd68bd78a8d250a2e6623a49c103d800f60d0ecc089f690148bfeee35d30ddcef91"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xd2}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x4}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="79a3c074d3f75a9af76501"], 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r5 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) pwritev2(r5, 0x0, 0x0, 0x52, 0x8, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f000004a000/0x3000)=nil, 0x3000, 0xa) map_shadow_stack(&(0x7f0000b21000/0x4000)=nil, 0x4000, 0x0) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1m42.858027419s ago: executing program 53 (id=976): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x11, 0x3f, {0x3f, 0x9, "d159463d639d4a5c9fc753be5cbdf24a0b33f7b4eb93a707be47d5949b14555220fee785c43a9eaf7bc571a1b9e42d8ef4364ecba4da08eef27f3f2655"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c01}}}, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0x8, 0x4e, "59f9493c425ea97226858047cb6d18bc5ab25f788f458254e7cf9d2c96a78508257e09e2afc54e59db4cc92c6689a28ca1472b99e96b277f1356a1ce34f8baf53b45fa8027e63b535c796b6610e2"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000003c0)={0x20, 0x0, 0x93, {0x91, "92442b1282d9e200638050621a8e990e92cdf3f6da03039464c210b553945b1908771550da3907419375f74b131c4e6cc23980d69fa2673ac43eb353b98ef435254f547187374791ab6ae22dbebd1cbe2c0c4ac4ac3b057b3046e2cce2fe542a696d0d0255edd913cdabc82d69ab300cd68bd78a8d250a2e6623a49c103d800f60d0ecc089f690148bfeee35d30ddcef91"}}, &(0x7f0000000500)={0x20, 0x1, 0x1, 0xd2}, &(0x7f0000000540)={0x20, 0x0, 0x1, 0x4}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="79a3c074d3f75a9af76501"], 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, 0x0) r5 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) pwritev2(r5, 0x0, 0x0, 0x52, 0x8, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f000004a000/0x3000)=nil, 0x3000, 0xa) map_shadow_stack(&(0x7f0000b21000/0x4000)=nil, 0x4000, 0x0) setxattr$incfs_id(0x0, 0x0, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) 1m19.482128733s ago: executing program 7 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x52}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x3}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}]}, 0x44}}, 0x0) 1m18.389644426s ago: executing program 7 (id=983): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3}) 1m17.524768708s ago: executing program 7 (id=984): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r5, 0x2}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m15.579810087s ago: executing program 7 (id=985): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0xc804) 1m14.866819626s ago: executing program 7 (id=986): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000400)={0x1d, r4, 0x2}, 0x18) 1m12.847224678s ago: executing program 7 (id=988): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x9066, 0x0, 0x4000002, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 57.353099648s ago: executing program 54 (id=988): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x9066, 0x0, 0x4000002, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 8.071509067s ago: executing program 0 (id=1087): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) close(0xffffffffffffffff) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6.833272097s ago: executing program 0 (id=1091): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.958091087s ago: executing program 9 (id=977): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}}, 0xfffffe10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000c00000000000000000000000095000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="05000000010001", 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r6 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000240)={r6}) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "68d44e", "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"}}, 0x110) setsockopt$inet_opts(r5, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r7, 0x5420, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 5.272235068s ago: executing program 2 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001300)=""/193, 0xc1}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000100)=""/91, 0x5b}, {&(0x7f0000006080)=""/4097, 0x1001}, {&(0x7f0000000000)=""/218, 0xda}], 0x5}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002f00)=""/4107, 0x100b}, {&(0x7f0000001ac0)=""/4112, 0x1010}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000001180)=""/35, 0x23}, {&(0x7f00000011c0)=""/158, 0x9e}], 0x6}, 0xf}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0) 5.179380343s ago: executing program 9 (id=1096): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 4.769085302s ago: executing program 8 (id=1097): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x1, 0x2, 0xfffff000, 0xbd9, 0x5, 0xf1a, 0x8001, 0x421697a3, 0x9}) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) 4.551506777s ago: executing program 2 (id=1098): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}}, 0xfffffe10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="05000000010001", 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r7 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000240)={r7}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "68d44e", "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"}}, 0x110) setsockopt$inet_opts(r5, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x5420, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 4.420866544s ago: executing program 9 (id=1099): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x6, 0x40, 0xfffffc01, 0x0, 0x1, 0x25}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x0, 0x3}) close(r4) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usbip_server_init(0x3) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) 4.099617181s ago: executing program 8 (id=1100): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) close(0xffffffffffffffff) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4.099351686s ago: executing program 6 (id=1101): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26200, 0x1f) 3.884620143s ago: executing program 2 (id=1102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000780)=[{0x0}, {&(0x7f00000006c0)="99ef73233afb34f6482efde99c9a52fcacf219feccbd3a5f5c81", 0x1a}], 0x2}}], 0x1, 0x240080cb) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r6 = socket(0x12, 0x800, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0x68, "971827277d922e2afb1a79d21aa7c68f8eb6e30ddf4de3595bd823f1994766e60fbfa3cf5c4607077bffa6642f3d48f3fadee7cbe42a52619bd807a0d57dea34acbcb7d955061044248d6c728ccfdffc08aaec090a09c06f62ef1b668cd2d7ba87b2d897ef45c903"}, &(0x7f0000000100)=0x70) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000380)="fdffffffffe6f2458c079d63a866b31ff3ceda1e28f23f455e96a06001fc3f828b27b6", 0x23}], 0x2}}], 0x2, 0x0) socket$isdn(0x22, 0x3, 0x2) 3.31393141s ago: executing program 8 (id=1103): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000540)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f00000006c0)={0x20}, 0x0, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6e}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.239516164s ago: executing program 0 (id=1104): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001940)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x8, 0x7, 0x10, 0x1}, 0x50) openat$audio1(0xffffff9c, &(0x7f0000000000), 0x420000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = openat$uhid(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @any, 0x5}, 0xa) r5 = socket(0x2, 0x80805, 0xf) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, 0x0) shutdown(r3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000020000000d00"/28], 0x50) close(0x3) 3.233405352s ago: executing program 6 (id=1105): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) 2.53249033s ago: executing program 6 (id=1106): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000c00000000000000000000000095000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="05000000010001", 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r7 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000240)={r7}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "68d44e", "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"}}, 0x110) setsockopt$inet_opts(r6, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x5420, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 2.50907091s ago: executing program 9 (id=1107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xe}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c", 0x29}], 0x2}, 0x0) 2.413535991s ago: executing program 2 (id=1108): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r5, 0x2}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.147711513s ago: executing program 8 (id=1109): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 1.905965471s ago: executing program 0 (id=1110): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x1, 0x2, 0xfffff000, 0xbd9, 0x5, 0xf1a, 0x8001, 0x421697a3, 0x9}) r3 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4}) 1.656931059s ago: executing program 6 (id=1111): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000400)={0x1d, r4, 0x2}, 0x18) 1.564900105s ago: executing program 2 (id=1112): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty, 0x7}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffe}}}, 0xfffffe10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="05000000010001", 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r7 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000240)={r7}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "68d44e", "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"}}, 0x110) setsockopt$inet_opts(r5, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x5420, 0x0) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) 1.439858683s ago: executing program 8 (id=1113): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/17, 0x11, 0x2, 0x4, 0x9, 0x4, 0xc08}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) close(0xffffffffffffffff) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.239312078s ago: executing program 0 (id=1114): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020}, 0x2020) 988.566436ms ago: executing program 6 (id=1115): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r1, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x26200, 0x1f) 960.998027ms ago: executing program 9 (id=1116): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r2, r0) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) 782.316897ms ago: executing program 2 (id=1117): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='wchan\x00') r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}], 0x1) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x4d, 0x800000, 0x8, 0x5, 0x80, 0x81}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x4}, 'port0\x00', 0x0, 0x100c40, 0x5, 0x0, 0x6, 0x40, 0xfffffc01, 0x0, 0x1, 0x25}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x28, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x4, 0x0, 0x0, 0x3}) close(r4) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usbip_server_init(0x3) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) 298.355678ms ago: executing program 8 (id=1118): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x6, 0x1, 0x0, &(0x7f00000000c0)=0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r4, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r3, &(0x7f0000000a00)=[{{&(0x7f0000000580)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}}], 0x1, 0x240080cb) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x801, 0x43, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) r6 = socket(0x12, 0x800, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000880)={0x0, 0x68, "971827277d922e2afb1a79d21aa7c68f8eb6e30ddf4de3595bd823f1994766e60fbfa3cf5c4607077bffa6642f3d48f3fadee7cbe42a52619bd807a0d57dea34acbcb7d955061044248d6c728ccfdffc08aaec090a09c06f62ef1b668cd2d7ba87b2d897ef45c903"}, &(0x7f0000000100)=0x70) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r7, @in={{0x2, 0x0, @broadcast}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000100)) sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x390}, {&(0x7f0000000380)="fdffffffffe6f2458c079d63a866b31ff3ceda1e28f23f455e96a06001fc3f828b27b6", 0x23}], 0x2}}], 0x2, 0x0) socket$isdn(0x22, 0x3, 0x2) 289.596373ms ago: executing program 6 (id=1119): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b0001000000000904", @ANYRES64], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 236.485824ms ago: executing program 9 (id=1120): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001940)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0x8, 0x7, 0x10, 0x1}, 0x50) openat$audio1(0xffffff9c, &(0x7f0000000000), 0x420000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = openat$uhid(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_INPUT(r2, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000080)={0x1f, @any, 0x5}, 0xa) r5 = socket(0x2, 0x80805, 0xf) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, 0x0, 0x0) shutdown(r3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="010000000400"}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000020000000d00"/28], 0x50) close(0x3) 0s ago: executing program 0 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000c00000000000000000000000095000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2, 0x0, 0x4}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="05000000010001", 0x7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc4}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) r7 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000240)={r7}) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x5, "68d44e", "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"}}, 0x110) setsockopt$inet_opts(r6, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r8, 0x5420, 0x0) getsockopt$inet_opts(r6, 0x0, 0x9, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'veth1_to_hsr\x00', &(0x7f0000000400)=@ethtool_sset_info={0x37, 0x4, 0xa}}) kernel console output (not intermixed with test programs): performance. Setting the MTU to 1560 would solve the problem. [ 772.271585][ T9896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 772.300159][ T9891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 772.353391][ T9984] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 772.360181][ T9984] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 772.369042][ T9984] vhci_hcd vhci_hcd.0: Device attached [ 772.376646][ T9986] vhci_hcd: connection closed [ 772.414823][ T35] vhci_hcd: stop threads [ 772.424611][ T35] vhci_hcd: release socket [ 772.429179][ T35] vhci_hcd: disconnect device [ 772.487583][ T9891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 772.736658][ T9891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 773.061767][ T9891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 773.147463][ T9839] veth0_vlan: entered promiscuous mode [ 773.412105][ T9839] veth1_vlan: entered promiscuous mode [ 775.066621][ T9896] hsr_slave_0: entered promiscuous mode [ 775.076189][ T9896] hsr_slave_1: entered promiscuous mode [ 775.084743][ T9896] debugfs: 'hsr0' already exists in 'hsr' [ 775.092511][ T9896] Cannot create hsr debugfs directory [ 775.178514][ T9839] veth0_macvtap: entered promiscuous mode [ 775.290669][ T9839] veth1_macvtap: entered promiscuous mode [ 776.014763][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.252634][ T9839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.509083][ T3562] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.598354][ T3562] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.635644][ T9891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.711616][ T3562] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.789777][ T3562] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.201118][ T9891] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.437567][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.445091][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.600010][ T30] audit: type=1800 audit(1754200340.805:19): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.844" name="file0" dev="tmpfs" ino=255 res=0 errno=0 [ 777.688338][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.695839][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.740793][T10024] netlink: 12 bytes leftover after parsing attributes in process `syz.9.845'. [ 779.820932][ T9896] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 779.989255][ T9896] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 780.215060][ T9896] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 780.447078][ T9896] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 782.534059][T10046] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input34 [ 782.688043][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.696263][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.096318][ T9896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.396905][ T9896] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.564757][ T3972] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.572321][ T3972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.761126][ T3972] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.768771][ T3972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.316102][T10067] ptrace attach of "./syz-executor exec"[10072] was attempted by "./syz-executor exec"[10067] [ 786.013675][ T9891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.453284][ T3810] bridge_slave_1: left allmulticast mode [ 786.459101][ T3810] bridge_slave_1: left promiscuous mode [ 786.469591][ T3810] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.586775][ T3810] bridge_slave_0: left allmulticast mode [ 786.592859][ T3810] bridge_slave_0: left promiscuous mode [ 786.599268][ T3810] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.583031][ T3810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.721030][ T3810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.731605][ T5419] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 787.822102][ T3810] bond0 (unregistering): Released all slaves [ 788.135370][ T5419] usb 10-1: Using ep0 maxpacket: 16 [ 788.251840][ T5419] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 788.264034][ T5419] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 788.518946][ T5419] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 788.528731][ T5419] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.537343][ T5419] usb 10-1: Product: syz [ 788.541941][ T5419] usb 10-1: Manufacturer: syz [ 788.546832][ T5419] usb 10-1: SerialNumber: syz [ 788.719058][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.855'. [ 788.746762][ T9896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 789.005783][ T5419] usb 10-1: config 0 descriptor?? [ 789.087111][ T5419] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 789.097030][ T5419] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 789.404807][ T3810] hsr_slave_0: left promiscuous mode [ 789.481938][ T3810] hsr_slave_1: left promiscuous mode [ 789.490875][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.616190][ T3810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.745454][ T5419] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 789.803916][ T5419] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 790.641690][ T5419] em28xx 10-1:0.0: AC97 command still being executed: not handled properly! [ 790.650662][ T5419] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 790.710405][ T3810] team0 (unregistering): Port device team_slave_1 removed [ 790.780820][ T3810] team0 (unregistering): Port device team_slave_0 removed [ 791.323842][ T5419] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 791.382001][ T5419] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 791.421894][ T5419] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 791.463480][ T5419] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 791.581919][ T5419] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 791.673416][ T5419] usb 10-1: USB disconnect, device number 8 [ 791.819821][ T9896] veth0_vlan: entered promiscuous mode [ 792.265304][ T9896] veth1_vlan: entered promiscuous mode [ 793.189840][ T9896] veth0_macvtap: entered promiscuous mode [ 793.508080][ T9896] veth1_macvtap: entered promiscuous mode [ 793.618825][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.932580][ T9896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.082617][ T1125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.221792][ T1125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.353340][ T1125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.472586][ T1125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.874872][ T9891] veth0_vlan: entered promiscuous mode [ 795.105819][ T9891] veth1_vlan: entered promiscuous mode [ 795.984244][ T9891] veth0_macvtap: entered promiscuous mode [ 796.242900][ T9891] veth1_macvtap: entered promiscuous mode [ 796.702477][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.062979][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.175286][ T9891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.307601][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.478565][ T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.551166][ T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.569084][T10140] ptrace attach of "./syz-executor exec"[10147] was attempted by "./syz-executor exec"[10140] [ 797.619836][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.756703][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.046972][ T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.157004][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.294443][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.302855][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.709932][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.719075][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.995416][ T12] bridge_slave_1: left allmulticast mode [ 799.002001][ T12] bridge_slave_1: left promiscuous mode [ 799.008735][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.168375][ T12] bridge_slave_0: left allmulticast mode [ 799.174554][ T12] bridge_slave_0: left promiscuous mode [ 799.180967][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.212174][T10158] netlink: 12 bytes leftover after parsing attributes in process `syz.9.863'. [ 799.854832][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.864'. [ 799.884669][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.910450][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.957135][ T12] bond0 (unregistering): Released all slaves [ 800.170391][T10165] batadv_slave_0: entered promiscuous mode [ 800.983808][ T12] hsr_slave_0: left promiscuous mode [ 801.035965][ T12] hsr_slave_1: left promiscuous mode [ 801.044711][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.052828][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.195536][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.205426][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.307775][ T12] veth1_macvtap: left promiscuous mode [ 801.317182][ T12] veth0_macvtap: left promiscuous mode [ 801.323892][ T12] veth1_vlan: left promiscuous mode [ 801.329591][ T12] veth0_vlan: left promiscuous mode [ 801.561745][ T1607] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 801.813035][ T1607] usb 5-1: Using ep0 maxpacket: 8 [ 801.850831][ T1607] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 801.862705][ T1607] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 801.873282][ T1607] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 801.883583][ T1607] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 801.897075][ T1607] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 801.906487][ T1607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.402693][ T1607] usb 5-1: GET_CAPABILITIES returned 2f [ 802.408796][ T1607] usbtmc 5-1:16.0: can't read capabilities [ 802.732339][ T8118] usb 5-1: USB disconnect, device number 10 [ 802.992854][ T12] team0 (unregistering): Port device team_slave_1 removed [ 803.029299][ T12] team0 (unregistering): Port device team_slave_0 removed [ 805.058670][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.287887][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.488229][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.729467][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.626142][T10219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.870'. [ 806.654656][T10219] geneve2: entered allmulticast mode [ 806.665686][ T12] bridge_slave_1: left allmulticast mode [ 806.671817][ T12] bridge_slave_1: left promiscuous mode [ 806.678561][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.795678][ T12] bridge_slave_0: left allmulticast mode [ 806.802168][ T12] bridge_slave_0: left promiscuous mode [ 806.808989][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.562278][T10230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.873'. [ 808.143011][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.179906][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.203380][ T12] bond0 (unregistering): Released all slaves [ 809.395508][ T12] hsr_slave_0: left promiscuous mode [ 809.469045][ T12] hsr_slave_1: left promiscuous mode [ 809.477646][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.485413][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.536852][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.545165][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.766333][ T12] veth1_macvtap: left promiscuous mode [ 809.772356][ T12] veth0_macvtap: left promiscuous mode [ 809.778439][ T12] veth1_vlan: left promiscuous mode [ 809.784300][ T12] veth0_vlan: left promiscuous mode [ 811.034715][ T12] team0 (unregistering): Port device team_slave_1 removed [ 811.166487][ T12] team0 (unregistering): Port device team_slave_0 removed [ 813.403870][ T5867] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 813.590697][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.599049][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.613403][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 813.718000][ T5867] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.771014][ T5867] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 813.780534][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.789171][ T5867] usb 5-1: Product: syz [ 813.793637][ T5867] usb 5-1: Manufacturer: syz [ 813.798465][ T5867] usb 5-1: SerialNumber: syz [ 813.914634][ T5867] usb 5-1: config 0 descriptor?? [ 814.180437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 814.188677][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 814.234829][ T1607] usb 5-1: USB disconnect, device number 11 [ 815.552925][ T1899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.561001][ T1899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.982731][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.990921][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.878167][T10054] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 817.888441][T10054] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 817.899381][T10054] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 817.917824][T10054] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 817.932742][T10054] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 818.433816][ T1607] hid_parser_main: 7 callbacks suppressed [ 818.433935][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.447905][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.456359][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.464342][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.472448][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.480389][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.489194][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.497282][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.505273][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.513892][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 818.907613][ T1607] hid-generic 0000:007F:FFFFFFFE.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 820.085126][T10054] Bluetooth: hci1: command tx timeout [ 820.204248][T10276] chnl_net:caif_netlink_parms(): no params data found [ 820.537360][T10287] fido_id[10287]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 820.713092][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 820.764413][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 820.781095][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 820.816240][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 820.847700][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 822.164066][ T5814] Bluetooth: hci1: command tx timeout [ 823.031895][T10304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.881'. [ 823.082291][ T5814] Bluetooth: hci2: command tx timeout [ 823.968894][T10054] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 824.005010][T10054] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 824.022976][T10054] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 824.073028][T10054] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 824.108323][T10054] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 824.203393][ T5814] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 824.214251][ T5814] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 824.224686][ T5814] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 824.239429][ T5814] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 824.257301][ T5814] Bluetooth: hci1: command tx timeout [ 824.334928][ T49] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 824.727564][T10297] chnl_net:caif_netlink_parms(): no params data found [ 824.846066][T10276] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.854121][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.862108][T10276] bridge_slave_0: entered allmulticast mode [ 824.876014][T10276] bridge_slave_0: entered promiscuous mode [ 825.022994][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.123248][ T49] Bluetooth: hci2: command tx timeout [ 825.213086][T10276] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.220626][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.228902][T10276] bridge_slave_1: entered allmulticast mode [ 825.237714][T10276] bridge_slave_1: entered promiscuous mode [ 825.698253][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.258435][ T49] Bluetooth: hci6: command tx timeout [ 826.322111][T10054] Bluetooth: hci1: command tx timeout [ 826.562216][T10054] Bluetooth: hci8: command tx timeout [ 826.749369][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.202726][T10054] Bluetooth: hci2: command tx timeout [ 827.246617][T10276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.389197][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.765782][T10276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.326060][T10054] Bluetooth: hci6: command tx timeout [ 828.438429][T10276] team0: Port device team_slave_0 added [ 828.661644][T10054] Bluetooth: hci8: command tx timeout [ 828.915856][T10276] team0: Port device team_slave_1 added [ 829.283745][T10054] Bluetooth: hci2: command tx timeout [ 829.542828][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.550463][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.559201][T10297] bridge_slave_0: entered allmulticast mode [ 829.570082][T10297] bridge_slave_0: entered promiscuous mode [ 830.110747][T10315] chnl_net:caif_netlink_parms(): no params data found [ 830.130620][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.140759][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.148860][T10297] bridge_slave_1: entered allmulticast mode [ 830.159406][T10297] bridge_slave_1: entered promiscuous mode [ 830.176378][ T12] bridge_slave_1: left allmulticast mode [ 830.184779][ T12] bridge_slave_1: left promiscuous mode [ 830.193797][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.290330][ T12] bridge_slave_0: left allmulticast mode [ 830.303101][ T12] bridge_slave_0: left promiscuous mode [ 830.309466][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.407739][T10054] Bluetooth: hci6: command tx timeout [ 830.722597][T10054] Bluetooth: hci8: command tx timeout [ 830.815263][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.844972][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.867367][ T12] bond0 (unregistering): Released all slaves [ 830.939942][T10276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.948893][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.977157][T10276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.224895][T10276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.232150][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.258676][T10276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.320893][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.470199][T10312] chnl_net:caif_netlink_parms(): no params data found [ 831.550593][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.484191][T10054] Bluetooth: hci6: command tx timeout [ 832.519001][T10276] hsr_slave_0: entered promiscuous mode [ 832.530442][T10276] hsr_slave_1: entered promiscuous mode [ 832.595932][ T12] hsr_slave_0: left promiscuous mode [ 832.605556][ T12] hsr_slave_1: left promiscuous mode [ 832.613651][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.621202][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.684782][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.692772][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.720350][ T12] veth1_macvtap: left promiscuous mode [ 832.726920][ T12] veth0_macvtap: left promiscuous mode [ 832.733008][ T12] veth1_vlan: left promiscuous mode [ 832.738621][ T12] veth0_vlan: left promiscuous mode [ 832.778302][T10371] ptrace attach of "./syz-executor exec"[10373] was attempted by "./syz-executor exec"[10371] [ 832.971617][T10054] Bluetooth: hci8: command tx timeout [ 833.232171][T10376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.889'. [ 834.100594][ T12] team0 (unregistering): Port device team_slave_1 removed [ 834.191922][ T12] team0 (unregistering): Port device team_slave_0 removed [ 834.537320][T10297] team0: Port device team_slave_0 added [ 834.794029][T10297] team0: Port device team_slave_1 added [ 835.802947][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.810216][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.838655][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.880710][T10315] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.890235][T10315] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.898434][T10315] bridge_slave_0: entered allmulticast mode [ 835.907555][T10315] bridge_slave_0: entered promiscuous mode [ 836.094116][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.157901][T10315] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.166012][T10315] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.173978][T10315] bridge_slave_1: entered allmulticast mode [ 836.182745][T10315] bridge_slave_1: entered promiscuous mode [ 836.197278][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.205255][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.233944][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.487290][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.916324][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.183767][T10315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.231023][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.424183][T10315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.557814][T10297] hsr_slave_0: entered promiscuous mode [ 837.570546][T10297] hsr_slave_1: entered promiscuous mode [ 837.579566][T10297] debugfs: 'hsr0' already exists in 'hsr' [ 837.585546][T10297] Cannot create hsr debugfs directory [ 838.021166][T10312] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.030823][T10312] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.039107][T10312] bridge_slave_0: entered allmulticast mode [ 838.050346][T10312] bridge_slave_0: entered promiscuous mode [ 838.137856][T10315] team0: Port device team_slave_0 added [ 838.443237][T10315] team0: Port device team_slave_1 added [ 838.458501][T10312] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.467030][T10312] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.475288][T10312] bridge_slave_1: entered allmulticast mode [ 838.487865][T10312] bridge_slave_1: entered promiscuous mode [ 838.527179][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.899639][ T1607] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 839.114757][ T1607] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 839.124351][ T1607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.132800][ T1607] usb 5-1: Product: syz [ 839.137172][ T1607] usb 5-1: Manufacturer: syz [ 839.142566][ T1607] usb 5-1: SerialNumber: syz [ 839.184015][ T1607] usb 5-1: config 0 descriptor?? [ 839.259903][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.279103][ T1607] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 839.401919][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.505238][T10315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.515668][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.543343][T10315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.575090][T10312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.791812][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.843643][ T1607] gspca_sunplus: reg_r err -110 [ 839.849059][ T1607] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 839.880583][T10312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.916263][T10315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.926811][T10315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 839.953906][T10315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.553964][ T12] bridge_slave_1: left allmulticast mode [ 840.559776][ T12] bridge_slave_1: left promiscuous mode [ 840.566966][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.595852][ T12] bridge_slave_0: left allmulticast mode [ 840.601890][ T12] bridge_slave_0: left promiscuous mode [ 840.608381][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.633018][ T12] bridge_slave_1: left allmulticast mode [ 840.641662][ T12] bridge_slave_1: left promiscuous mode [ 840.648060][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.673558][ T12] bridge_slave_0: left allmulticast mode [ 840.679467][ T12] bridge_slave_0: left promiscuous mode [ 840.688202][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.333001][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.413771][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.436577][ T12] bond0 (unregistering): Released all slaves [ 841.734360][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.783973][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 841.827857][ T12] bond0 (unregistering): Released all slaves [ 841.893816][T10276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 841.931987][T10315] hsr_slave_0: entered promiscuous mode [ 841.941163][T10315] hsr_slave_1: entered promiscuous mode [ 841.949652][T10315] debugfs: 'hsr0' already exists in 'hsr' [ 841.955650][T10315] Cannot create hsr debugfs directory [ 842.011857][T10312] team0: Port device team_slave_0 added [ 842.033933][T10276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 842.060124][T10276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 842.158028][ T5867] usb 5-1: USB disconnect, device number 12 [ 842.415809][T10312] team0: Port device team_slave_1 added [ 842.423817][T10276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 843.047788][T10312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.055066][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.081632][T10312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.254595][T10312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.262188][T10312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 843.288571][T10312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.107100][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.113866][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 844.201087][T10436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.896'. [ 844.442422][T10312] hsr_slave_0: entered promiscuous mode [ 844.453874][T10312] hsr_slave_1: entered promiscuous mode [ 844.463793][T10312] debugfs: 'hsr0' already exists in 'hsr' [ 844.469941][T10312] Cannot create hsr debugfs directory [ 844.733309][ T12] hsr_slave_0: left promiscuous mode [ 844.780677][ T12] hsr_slave_1: left promiscuous mode [ 844.792942][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.801499][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.833704][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.841555][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.915283][ T12] hsr_slave_0: left promiscuous mode [ 844.939905][ T12] hsr_slave_1: left promiscuous mode [ 844.949260][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.957027][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.991435][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.999279][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.193518][ T12] veth1_macvtap: left promiscuous mode [ 845.199522][ T12] veth0_macvtap: left promiscuous mode [ 845.205694][ T12] veth1_vlan: left promiscuous mode [ 845.211661][ T12] veth0_vlan: left promiscuous mode [ 845.239615][ T12] veth1_macvtap: left promiscuous mode [ 845.245989][ T12] veth0_macvtap: left promiscuous mode [ 845.252144][ T12] veth1_vlan: left promiscuous mode [ 845.257859][ T12] veth0_vlan: left promiscuous mode [ 846.575112][ T12] team0 (unregistering): Port device team_slave_1 removed [ 846.607191][ T12] team0 (unregistering): Port device team_slave_0 removed [ 847.339627][ T12] team0 (unregistering): Port device team_slave_1 removed [ 847.368341][ T12] team0 (unregistering): Port device team_slave_0 removed [ 848.699008][T10276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.956406][T10276] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.214113][T10297] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 849.264823][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.272754][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.368745][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.376515][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.409617][T10297] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 849.503554][T10470] batadv_slave_0: left promiscuous mode [ 849.514442][T10297] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 849.578008][T10315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 849.616099][T10315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 849.715011][T10297] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 849.771678][T10315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 849.963520][T10315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 850.812935][ T4028] bridge_slave_1: left allmulticast mode [ 850.818841][ T4028] bridge_slave_1: left promiscuous mode [ 850.826948][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.886105][ T4028] bridge_slave_0: left allmulticast mode [ 850.892715][ T4028] bridge_slave_0: left promiscuous mode [ 850.899449][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.203856][ T4028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.293072][ T4028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.335915][ T4028] bond0 (unregistering): Released all slaves [ 851.408751][T10487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.903'. [ 851.805698][T10312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 851.976835][T10312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 852.140985][T10312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 852.249976][ T4028] hsr_slave_0: left promiscuous mode [ 852.276977][ T4028] hsr_slave_1: left promiscuous mode [ 852.287320][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 852.330844][ T4028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.988173][ T4028] team0 (unregistering): Port device team_slave_1 removed [ 853.095031][ T4028] team0 (unregistering): Port device team_slave_0 removed [ 853.360339][T10312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 853.833935][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.908653][T10276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.274524][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.337756][T10315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.428166][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.435905][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 854.590648][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.598386][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.730842][T10315] 8021q: adding VLAN 0 to HW filter on device team0 [ 854.856026][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.863804][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.018623][T10276] veth0_vlan: entered promiscuous mode [ 855.063313][T10297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 855.074424][T10297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 855.130306][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.138156][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.234551][T10276] veth1_vlan: entered promiscuous mode [ 855.811944][T10276] veth0_macvtap: entered promiscuous mode [ 855.838692][T10312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.923117][T10276] veth1_macvtap: entered promiscuous mode [ 856.148382][T10312] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.209609][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.217363][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 856.290953][T10276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.357231][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.364916][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.470961][T10276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.602122][ T3562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.661758][ T3562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.712623][ T1136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.771918][ T1136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.950307][T10312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 857.806580][T10297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.556246][T10315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.213941][T10315] veth0_vlan: entered promiscuous mode [ 859.334990][T10312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.388244][T10315] veth1_vlan: entered promiscuous mode [ 859.861016][T10315] veth0_macvtap: entered promiscuous mode [ 859.974972][T10315] veth1_macvtap: entered promiscuous mode [ 860.192045][T10312] veth0_vlan: entered promiscuous mode [ 860.255279][T10315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.364201][T10315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.402844][T10312] veth1_vlan: entered promiscuous mode [ 860.520437][ T1136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.568234][ T1136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.632410][ T1136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.675698][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.958501][T10312] veth0_macvtap: entered promiscuous mode [ 861.029720][T10312] veth1_macvtap: entered promiscuous mode [ 861.329703][T10312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.476735][T10312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 861.704304][ T1899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.792458][T10297] veth0_vlan: entered promiscuous mode [ 861.799735][ T1899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.908797][ T1899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.964690][T10297] veth1_vlan: entered promiscuous mode [ 861.983002][ T1899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.407772][T10297] veth0_macvtap: entered promiscuous mode [ 862.483467][T10297] veth1_macvtap: entered promiscuous mode [ 862.808933][T10297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.993406][T10297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.160404][ T1136] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.224301][ T1136] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.255489][ T1136] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.313323][ T1136] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.583216][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.910'. [ 866.825413][ T4028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.834160][ T4028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.060831][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.069535][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.988020][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.996362][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.283952][T10674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.917'. [ 870.451102][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.461906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.923703][ T3562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.932409][ T3562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.221891][ T3810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.230319][ T3810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.718700][T10691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.882'. [ 871.882151][ T5419] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 872.143717][ T5419] usb 5-1: Using ep0 maxpacket: 16 [ 872.208307][ T5419] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 872.220409][ T5419] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.232283][ T5419] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 872.243752][ T5419] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 872.255710][ T5419] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 872.456996][ T5419] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 872.466766][ T5419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 872.475767][ T5419] usb 5-1: SerialNumber: syz [ 872.497869][T10680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 872.512824][T10680] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 872.535478][ T5419] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 872.781993][ T5419] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 872.839263][ T5419] usb 5-1: USB disconnect, device number 13 [ 873.543975][ T1899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.552737][ T1899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.896556][ T1899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.904940][ T1899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 874.065745][ T2061] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 874.292917][ T2061] usb 2-1: Using ep0 maxpacket: 16 [ 874.354979][ T2061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.366699][ T2061] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.377495][ T2061] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 874.387210][ T2061] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.532115][ T2061] usb 2-1: config 0 descriptor?? [ 875.087102][ T2061] hid-multitouch 0003:1FD2:6007.0010: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 875.235828][ T5419] usb 2-1: USB disconnect, device number 6 [ 876.609988][T10726] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.620404][T10726] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.893826][T10726] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.920620][T10726] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.245166][T10731] ptrace attach of "./syz-executor exec"[10739] was attempted by "./syz-executor exec"[10731] [ 877.528687][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.926'. [ 878.507636][ T1899] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.572575][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.929'. [ 878.592068][ T1899] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.624570][ T3562] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.693695][ T3562] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.735842][T10422] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 880.992012][T10422] usb 2-1: Using ep0 maxpacket: 32 [ 881.103695][T10422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 881.115256][T10422] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.125941][T10422] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 881.139214][T10422] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 881.148969][T10422] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.538185][T10422] usb 2-1: config 0 descriptor?? [ 881.685245][T10780] ptrace attach of "./syz-executor exec"[10782] was attempted by "./syz-executor exec"[10780] [ 881.995246][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.938'. [ 882.674057][T10422] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0011/input/input35 [ 882.946299][T10422] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0011/input/input36 [ 883.682071][T10054] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 883.690846][T10054] Bluetooth: hci1: Injecting HCI hardware error event [ 883.698554][T10054] Bluetooth: hci1: hardware error 0x00 [ 883.723334][T10422] kye 0003:0458:5011.0011: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 884.002154][ T5419] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 884.241958][ T5419] usb 2-1: device descriptor read/64, error -32 [ 884.601901][ T5419] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 884.792458][T10799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.941'. [ 884.894737][ T5419] usb 2-1: device descriptor read/64, error -32 [ 885.752425][T10812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.943'. [ 885.792628][T10804] bridge0: port 2(bridge_slave_1) entered disabled state [ 885.802083][T10804] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.848864][T10054] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 885.936344][T10422] usb 2-1: USB disconnect, device number 7 [ 886.356698][T10804] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.390621][T10804] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 887.282287][ T4028] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.355683][ T4028] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.409275][ T4028] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.463783][ T4028] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.271850][ T5896] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 889.656172][T10842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.949'. [ 889.679382][ T5896] usb 4-1: config 1 interface 0 altsetting 25 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 889.694353][ T5896] usb 4-1: config 1 interface 0 has no altsetting 0 [ 889.951987][ T5896] usb 4-1: string descriptor 0 read error: -22 [ 889.958908][ T5896] usb 4-1: New USB device found, idVendor=046d, idProduct=4011, bcdDevice= 0.40 [ 889.968376][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.087033][T10834] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 890.377703][ T5896] usbhid 4-1:1.0: can't add hid device: -71 [ 890.384641][ T5896] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 890.523884][ T5896] usb 4-1: USB disconnect, device number 7 [ 891.247518][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.955'. [ 892.171542][T10054] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 892.180244][T10054] Bluetooth: hci2: Injecting HCI hardware error event [ 892.188015][T10054] Bluetooth: hci2: hardware error 0x00 [ 894.241690][T10054] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 895.620643][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 895.655017][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 895.692579][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 895.738372][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 895.757475][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 896.499126][T10893] ptrace attach of "./syz-executor exec"[10896] was attempted by "./syz-executor exec"[10893] [ 897.236128][T10887] chnl_net:caif_netlink_parms(): no params data found [ 897.718530][T10054] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 897.745205][T10054] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 897.763918][T10054] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 897.792748][T10054] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 897.805971][T10054] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 897.841764][ T49] Bluetooth: hci0: command tx timeout [ 899.348028][T10887] bridge0: port 1(bridge_slave_0) entered blocking state [ 899.357301][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.365152][T10887] bridge_slave_0: entered allmulticast mode [ 899.374185][T10887] bridge_slave_0: entered promiscuous mode [ 899.519146][T10887] bridge0: port 2(bridge_slave_1) entered blocking state [ 899.526898][T10887] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.534928][T10887] bridge_slave_1: entered allmulticast mode [ 899.544783][T10887] bridge_slave_1: entered promiscuous mode [ 899.921969][ T49] Bluetooth: hci0: command tx timeout [ 899.929577][ T49] Bluetooth: hci4: command tx timeout [ 900.574888][T10887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.889116][T10887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.047573][T10902] chnl_net:caif_netlink_parms(): no params data found [ 902.003256][ T49] Bluetooth: hci4: command tx timeout [ 902.004260][T10054] Bluetooth: hci0: command tx timeout [ 902.326973][T10887] team0: Port device team_slave_0 added [ 902.390926][T10887] team0: Port device team_slave_1 added [ 902.784515][T10887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.791964][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.818561][T10887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 903.012158][T10887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 903.019252][T10887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 903.045955][T10887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 903.509577][T10902] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.517394][T10902] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.525196][T10902] bridge_slave_0: entered allmulticast mode [ 903.534083][T10902] bridge_slave_0: entered promiscuous mode [ 903.664703][T10902] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.672321][T10902] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.679930][T10902] bridge_slave_1: entered allmulticast mode [ 903.688865][T10902] bridge_slave_1: entered promiscuous mode [ 903.716885][T10887] hsr_slave_0: entered promiscuous mode [ 903.726169][T10887] hsr_slave_1: entered promiscuous mode [ 903.734243][T10887] debugfs: 'hsr0' already exists in 'hsr' [ 903.740071][T10887] Cannot create hsr debugfs directory [ 904.083004][T10054] Bluetooth: hci4: command tx timeout [ 904.091155][ T49] Bluetooth: hci0: command tx timeout [ 904.309787][T10902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.551066][T10902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.002380][T10941] Bluetooth: MGMT ver 1.23 [ 905.019982][T10902] team0: Port device team_slave_0 added [ 905.075280][T10941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 905.103543][T10902] team0: Port device team_slave_1 added [ 905.566295][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 905.573729][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 905.647410][T10902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 905.655541][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 905.682068][T10902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.984904][T10902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.992314][T10902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 906.019006][T10902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.171504][T10054] Bluetooth: hci4: command tx timeout [ 906.549622][T10902] hsr_slave_0: entered promiscuous mode [ 906.560344][T10902] hsr_slave_1: entered promiscuous mode [ 906.568811][T10902] debugfs: 'hsr0' already exists in 'hsr' [ 906.574797][T10902] Cannot create hsr debugfs directory [ 906.647640][T10887] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 906.755753][T10887] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 906.952724][T10887] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 907.065292][T10887] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 909.638658][T10902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 910.094866][T10902] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 910.255986][ T49] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 910.266541][ T49] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 910.276471][ T49] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 910.314196][ T49] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 910.335659][ T49] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 910.755215][T10902] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 910.949794][T10887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 911.075921][T10902] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 911.332869][T10887] 8021q: adding VLAN 0 to HW filter on device team0 [ 911.412019][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.419530][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 911.679066][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.686626][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 911.766153][T10054] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 911.822040][T10054] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 911.844727][T10054] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 911.883814][T10054] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 911.959939][T10054] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 912.252615][T10966] chnl_net:caif_netlink_parms(): no params data found [ 912.440570][T10887] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 912.453351][T10887] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 912.547778][T10054] Bluetooth: hci5: command tx timeout [ 913.487291][T10902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.786277][T10902] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.998946][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.006730][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.086387][T10054] Bluetooth: hci7: command tx timeout [ 914.377136][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.384853][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.562843][T10054] Bluetooth: hci5: command tx timeout [ 915.557012][T10966] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.564747][T10966] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.572684][T10966] bridge_slave_0: entered allmulticast mode [ 915.581883][T10966] bridge_slave_0: entered promiscuous mode [ 915.745822][T10966] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.753786][T10966] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.763514][T10966] bridge_slave_1: entered allmulticast mode [ 915.772791][T10966] bridge_slave_1: entered promiscuous mode [ 915.789365][T10902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 915.842814][T10996] capability: warning: `syz.3.976' uses 32-bit capabilities (legacy support in use) [ 916.176242][T10054] Bluetooth: hci7: command tx timeout [ 916.244093][T10516] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 916.423045][T10516] usb 4-1: Using ep0 maxpacket: 8 [ 916.445335][T10516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 916.458109][T10516] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 916.467534][T10516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.556073][T10966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.646258][T10054] Bluetooth: hci5: command tx timeout [ 916.670323][T10516] usb 4-1: config 0 descriptor?? [ 916.934423][T10966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.033709][T10516] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 917.718825][T10887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.823967][T10966] team0: Port device team_slave_0 added [ 917.865204][ T35] bridge_slave_1: left allmulticast mode [ 917.871384][ T35] bridge_slave_1: left promiscuous mode [ 917.878112][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.104784][ T35] bridge_slave_0: left allmulticast mode [ 918.110692][ T35] bridge_slave_0: left promiscuous mode [ 918.117371][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.241504][T10054] Bluetooth: hci7: command tx timeout [ 918.606291][T11008] overlayfs: missing 'lowerdir' [ 918.720876][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.733867][T10054] Bluetooth: hci5: command tx timeout [ 918.858824][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.068420][ T35] bond0 (unregistering): Released all slaves [ 919.358647][T10966] team0: Port device team_slave_1 added [ 919.379303][T10975] chnl_net:caif_netlink_parms(): no params data found [ 919.997682][T10902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.047128][T10966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.054545][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.081115][T10966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.188894][T10966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.197341][T10966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 920.224020][T10966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.324636][T10054] Bluetooth: hci7: command tx timeout [ 921.396196][T10966] hsr_slave_0: entered promiscuous mode [ 921.406269][T10966] hsr_slave_1: entered promiscuous mode [ 921.414797][T10966] debugfs: 'hsr0' already exists in 'hsr' [ 921.420738][T10966] Cannot create hsr debugfs directory [ 921.528261][ T35] hsr_slave_0: left promiscuous mode [ 921.558711][ T35] hsr_slave_1: left promiscuous mode [ 921.566504][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 921.603408][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 921.987016][ T35] team0 (unregistering): Port device team_slave_1 removed [ 922.085331][ T35] team0 (unregistering): Port device team_slave_0 removed [ 924.249782][T10887] veth0_vlan: entered promiscuous mode [ 924.393141][T10975] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.400764][T10975] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.409148][T10975] bridge_slave_0: entered allmulticast mode [ 924.418785][T10975] bridge_slave_0: entered promiscuous mode [ 924.437107][T10887] veth1_vlan: entered promiscuous mode [ 924.715119][T10975] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.722962][T10975] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.730856][T10975] bridge_slave_1: entered allmulticast mode [ 924.741118][T10975] bridge_slave_1: entered promiscuous mode [ 925.456422][T10887] veth0_macvtap: entered promiscuous mode [ 925.788653][T10887] veth1_macvtap: entered promiscuous mode [ 925.884227][T10975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 926.063963][T10975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 926.444900][T10887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.480580][T10902] veth0_vlan: entered promiscuous mode [ 926.773003][T10887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.787854][T10975] team0: Port device team_slave_0 added [ 926.912174][T10975] team0: Port device team_slave_1 added [ 926.990270][T10902] veth1_vlan: entered promiscuous mode [ 927.026035][ T3846] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.261985][ T3846] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.405511][ T1125] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.424431][T10975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 927.431905][T10975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.458799][T10975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 927.529592][ T1125] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.669126][T10966] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 927.836085][T10966] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 927.916936][T10975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 927.928089][T10975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 927.956169][T10975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.040974][T10966] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 928.198925][T10966] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 928.888607][T10975] hsr_slave_0: entered promiscuous mode [ 928.897922][T10975] hsr_slave_1: entered promiscuous mode [ 928.907269][T10975] debugfs: 'hsr0' already exists in 'hsr' [ 928.913253][T10975] Cannot create hsr debugfs directory [ 929.437584][T10902] veth0_macvtap: entered promiscuous mode [ 929.587570][T10902] veth1_macvtap: entered promiscuous mode [ 929.954478][T10902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.075010][T10902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.302585][ T1899] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.387718][ T1899] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.505884][ T1899] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.542363][T10966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 930.612500][ T1899] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.026059][T10966] 8021q: adding VLAN 0 to HW filter on device team0 [ 931.563684][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.571092][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 931.888218][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.895960][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.366767][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.384775][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.401622][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.420878][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.434186][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 934.456711][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.609176][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 934.856771][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.317332][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.437928][T10975] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 935.576343][T10975] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 935.611931][T10054] Bluetooth: hci2: command tx timeout [ 935.833481][T10975] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 936.092760][T10975] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 936.532110][ T35] bridge_slave_1: left allmulticast mode [ 936.538214][ T35] bridge_slave_1: left promiscuous mode [ 936.550554][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.702641][ T35] bridge_slave_0: left allmulticast mode [ 936.708467][ T35] bridge_slave_0: left promiscuous mode [ 936.715176][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.684277][T10054] Bluetooth: hci2: command tx timeout [ 937.778591][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.912819][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.010108][ T35] bond0 (unregistering): Released all slaves [ 938.534713][T11064] chnl_net:caif_netlink_parms(): no params data found [ 938.623898][T10966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.480519][ T35] hsr_slave_0: left promiscuous mode [ 939.527119][ T35] hsr_slave_1: left promiscuous mode [ 939.534953][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.542574][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.608703][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.617801][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.694859][ T35] veth1_macvtap: left promiscuous mode [ 939.700546][ T35] veth0_macvtap: left promiscuous mode [ 939.706636][ T35] veth1_vlan: left promiscuous mode [ 939.712331][ T35] veth0_vlan: left promiscuous mode [ 939.772124][T10054] Bluetooth: hci2: command tx timeout [ 940.895828][ T35] team0 (unregistering): Port device team_slave_1 removed [ 941.027819][ T35] team0 (unregistering): Port device team_slave_0 removed [ 941.859430][T10054] Bluetooth: hci2: command tx timeout [ 942.136117][T10966] veth0_vlan: entered promiscuous mode [ 942.193382][T10975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.333039][T10966] veth1_vlan: entered promiscuous mode [ 942.688371][T10975] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.867285][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.875508][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.112077][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.119761][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.917709][T10966] veth0_macvtap: entered promiscuous mode [ 943.998364][T11064] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.006221][T11064] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.014614][T11064] bridge_slave_0: entered allmulticast mode [ 944.025040][T11064] bridge_slave_0: entered promiscuous mode [ 944.059893][T10966] veth1_macvtap: entered promiscuous mode [ 944.374723][T11064] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.382921][T11064] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.390931][T11064] bridge_slave_1: entered allmulticast mode [ 944.402143][T11064] bridge_slave_1: entered promiscuous mode [ 944.494207][T10966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 944.782680][T10966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 944.975825][ T35] bridge_slave_1: left allmulticast mode [ 944.982028][ T35] bridge_slave_1: left promiscuous mode [ 944.988329][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.063123][ T35] bridge_slave_0: left allmulticast mode [ 945.069236][ T35] bridge_slave_0: left promiscuous mode [ 945.076264][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.424055][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 945.494813][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.527393][ T35] bond0 (unregistering): Released all slaves [ 945.716970][T11064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.812051][ T4028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.843971][ T3846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.042172][ T3846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.109738][T11064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.603551][ T3846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.065029][ T35] hsr_slave_0: left promiscuous mode [ 947.145287][ T35] hsr_slave_1: left promiscuous mode [ 947.153928][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.259683][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.987411][ T35] team0 (unregistering): Port device team_slave_1 removed [ 948.044866][ T35] team0 (unregistering): Port device team_slave_0 removed [ 948.562862][ T49] Bluetooth: hci6: command 0x0406 tx timeout [ 948.585153][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.593498][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.622899][T11064] team0: Port device team_slave_0 added [ 949.157670][T11064] team0: Port device team_slave_1 added [ 949.197278][T10150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.205720][T10150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.225057][T11104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.233237][T11104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.655499][T11064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.664359][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 949.695141][T11064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.803718][ T3972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.814081][ T3972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.008838][T11064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 950.016183][T11064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 950.043151][T11064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.186410][T10975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.289485][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.525480][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.949279][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.408413][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 951.478352][T11064] hsr_slave_0: entered promiscuous mode [ 951.489639][T11064] hsr_slave_1: entered promiscuous mode [ 951.499520][T11064] debugfs: 'hsr0' already exists in 'hsr' [ 951.505604][T11064] Cannot create hsr debugfs directory [ 951.982830][T11159] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.992534][T11159] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.511145][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.536760][T11159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.464916][ T3972] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.702374][ T3972] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.856225][ T3972] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.866791][ T3972] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.125306][ T35] bridge_slave_1: left allmulticast mode [ 954.131623][ T35] bridge_slave_1: left promiscuous mode [ 954.138939][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.190548][ T35] bridge_slave_0: left allmulticast mode [ 954.198589][ T35] bridge_slave_0: left promiscuous mode [ 954.207822][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.484650][T10054] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 954.494792][T10054] Bluetooth: hci0: Injecting HCI hardware error event [ 954.505361][T10054] Bluetooth: hci0: hardware error 0x00 [ 954.760244][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.820817][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.840320][ T35] bond0 (unregistering): Released all slaves [ 955.850846][ T35] hsr_slave_0: left promiscuous mode [ 955.884360][ T35] hsr_slave_1: left promiscuous mode [ 955.894758][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 955.902640][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.989093][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 955.996993][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.123925][ T35] veth1_macvtap: left promiscuous mode [ 956.129702][ T35] veth0_macvtap: left promiscuous mode [ 956.136488][ T35] veth1_vlan: left promiscuous mode [ 956.144892][ T35] veth0_vlan: left promiscuous mode [ 956.437063][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.7.984'. [ 956.831469][T10054] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 956.855763][ T35] team0 (unregistering): Port device team_slave_1 removed [ 956.883206][ T35] team0 (unregistering): Port device team_slave_0 removed [ 958.310972][T10975] veth0_vlan: entered promiscuous mode [ 958.526137][T10975] veth1_vlan: entered promiscuous mode [ 958.541084][T11064] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 958.667428][T11064] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 958.794752][T11064] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 958.925068][T11064] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 959.184490][T10516] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 959.310219][T10975] veth0_macvtap: entered promiscuous mode [ 959.388716][T10975] veth1_macvtap: entered promiscuous mode [ 959.444233][T10516] usb 7-1: Using ep0 maxpacket: 16 [ 959.485901][T10516] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 959.498624][T10516] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 959.679201][T10516] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 959.689364][T10516] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.697831][T10516] usb 7-1: Product: syz [ 959.702217][T10516] usb 7-1: Manufacturer: syz [ 959.706985][T10516] usb 7-1: SerialNumber: syz [ 959.805250][T10975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 959.887712][T10516] usb 7-1: config 0 descriptor?? [ 959.944078][T10516] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 959.953646][T10516] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 959.986645][T10975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.149822][ T3810] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.232698][ T3810] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.347204][ T3810] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.411599][ T3810] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.608105][T10516] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 960.635439][T10516] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 961.280742][T10516] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 961.317159][T10516] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 961.456853][T10516] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 961.467792][T10516] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 961.481120][T10516] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 961.493490][T10516] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 961.542624][T10516] usb 7-1: USB disconnect, device number 6 [ 961.619010][T11064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.689975][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.698883][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.109321][T11064] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.217923][T10150] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.225630][T10150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.358875][T10150] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.366426][T10150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.537583][ T3846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.545933][ T3846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.172146][T11256] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 965.179286][T11256] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 965.187799][T11256] vhci_hcd vhci_hcd.0: Device attached [ 965.463569][T10516] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 965.615937][T11258] vhci_hcd: connection reset by peer [ 965.656997][ T3810] vhci_hcd: stop threads [ 965.662019][ T3810] vhci_hcd: release socket [ 965.668184][ T3810] vhci_hcd: disconnect device [ 966.371139][ T5867] hid_parser_main: 33 callbacks suppressed [ 966.378017][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.388414][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.397026][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.404927][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.412780][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.420513][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.428432][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.436469][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.444273][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.452218][ T5867] hid-generic 0002:0004:0009.0012: unknown main item tag 0x0 [ 966.468131][ T5867] hid-generic 0002:0004:0009.0012: hidraw0: HID v0.04 Device [syz0] on syz0 [ 966.674838][ T5896] usb 4-1: USB disconnect, device number 8 [ 967.014543][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 967.021567][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 967.225611][T11064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.932258][ T3972] bridge_slave_1: left allmulticast mode [ 967.938393][ T3972] bridge_slave_1: left promiscuous mode [ 967.945317][ T3972] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.082826][ T3972] bridge_slave_0: left allmulticast mode [ 968.088839][ T3972] bridge_slave_0: left promiscuous mode [ 968.096090][ T3972] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.743589][ T3972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.833768][ T3972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.928728][ T3972] bond0 (unregistering): Released all slaves [ 969.132618][T10422] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 969.332283][T10422] usb 3-1: Using ep0 maxpacket: 8 [ 969.395558][T10422] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 969.407066][T10422] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 969.417457][T10422] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 969.427801][T10422] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 969.441832][T10422] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 969.451328][T10422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.742490][T10422] usb 3-1: usb_control_msg returned -71 [ 969.748430][T10422] usbtmc 3-1:16.0: can't read capabilities [ 969.838982][T10422] usb 3-1: USB disconnect, device number 16 [ 970.021511][ T3972] hsr_slave_0: left promiscuous mode [ 970.056847][ T3972] hsr_slave_1: left promiscuous mode [ 970.066147][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.134500][ T3972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.571910][T10516] vhci_hcd: vhci_device speed not set [ 970.592713][ T49] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 970.619485][ T49] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 970.660737][ T49] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 970.687596][ T49] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 970.699649][ T49] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 971.124525][ T3972] team0 (unregistering): Port device team_slave_1 removed [ 971.264997][ T3972] team0 (unregistering): Port device team_slave_0 removed [ 972.803072][ T49] Bluetooth: hci1: command tx timeout [ 972.905028][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 973.557031][T11104] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.782553][T11104] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.863921][T11289] chnl_net:caif_netlink_parms(): no params data found [ 974.050795][T11104] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.350672][T11104] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.659701][T11064] veth0_vlan: entered promiscuous mode [ 974.825045][T11064] veth1_vlan: entered promiscuous mode [ 974.883903][T10054] Bluetooth: hci1: command tx timeout [ 974.988453][ T49] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 975.072718][T11104] bridge_slave_1: left allmulticast mode [ 975.078627][T11104] bridge_slave_1: left promiscuous mode [ 975.089358][T11104] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.118697][T11104] bridge_slave_0: left allmulticast mode [ 975.124998][T11104] bridge_slave_0: left promiscuous mode [ 975.131459][T11104] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.851598][ T5867] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 975.906091][T11104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.968441][T11104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 976.009826][T11104] bond0 (unregistering): Released all slaves [ 976.021523][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 976.043194][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 976.055452][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 976.130189][ T5867] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 976.139869][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.148273][ T5867] usb 3-1: Product: syz [ 976.152836][ T5867] usb 3-1: Manufacturer: syz [ 976.157649][ T5867] usb 3-1: SerialNumber: syz [ 976.244607][ T5867] usb 3-1: config 0 descriptor?? [ 976.271661][ T5867] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 976.281425][ T5867] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 976.354964][ T2061] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 976.619928][ T2061] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 976.629142][ T2061] usb 7-1: can't read configurations, error -61 [ 976.653989][T11104] hsr_slave_0: left promiscuous mode [ 976.694707][T11104] hsr_slave_1: left promiscuous mode [ 976.703633][T11104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 976.711535][T11104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 976.784877][T11104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 976.793013][T11104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 976.851811][ T2061] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 976.913154][T11104] veth1_macvtap: left promiscuous mode [ 976.919276][T11104] veth0_macvtap: left promiscuous mode [ 976.925626][T11104] veth1_vlan: left promiscuous mode [ 976.933793][T11104] veth0_vlan: left promiscuous mode [ 976.963136][ T49] Bluetooth: hci1: command tx timeout [ 977.008739][ T5867] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 977.019201][ T5867] em28xx 3-1:0.0: Config register raw data: 0xa6 [ 977.025921][ T5867] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 977.035459][ T5867] em28xx 3-1:0.0: No AC97 audio processor [ 977.108391][ T2061] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 977.116786][ T2061] usb 7-1: can't read configurations, error -61 [ 977.141031][ T2061] usb usb7-port1: attempt power cycle [ 977.531984][ T2061] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 977.706288][ T2061] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 977.714844][ T2061] usb 7-1: can't read configurations, error -61 [ 977.886231][ T5867] usb 3-1: USB disconnect, device number 17 [ 978.031801][ T2061] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 978.095129][T11104] team0 (unregistering): Port device team_slave_1 removed [ 978.125464][ T2061] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 978.133626][ T2061] usb 7-1: can't read configurations, error -61 [ 978.166462][T10054] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 978.182946][T10054] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 978.193082][T10054] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 978.223247][T10054] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 978.223399][T11104] team0 (unregistering): Port device team_slave_0 removed [ 978.235234][T10054] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 978.272177][ T2061] usb usb7-port1: unable to enumerate USB device [ 978.498007][T11064] veth0_macvtap: entered promiscuous mode [ 978.846887][T11064] veth1_macvtap: entered promiscuous mode [ 979.042163][T10054] Bluetooth: hci1: command tx timeout [ 979.306166][T11064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.530511][T11064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.736695][ T1136] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.907746][ T14] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.945665][T11289] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.953647][T11289] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.961640][T11289] bridge_slave_0: entered allmulticast mode [ 979.972189][T11289] bridge_slave_0: entered promiscuous mode [ 980.019061][ T3562] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.065440][T11289] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.074820][T11289] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.084134][T11289] bridge_slave_1: entered allmulticast mode [ 980.093075][T11289] bridge_slave_1: entered promiscuous mode [ 980.119244][ T3562] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.186887][T11318] chnl_net:caif_netlink_parms(): no params data found [ 980.306596][ T2061] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 980.370649][T10054] Bluetooth: hci3: command tx timeout [ 980.481853][ T2061] usb 7-1: Using ep0 maxpacket: 16 [ 980.554007][T11289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 980.661912][ T2061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.673332][ T2061] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.683370][ T2061] usb 7-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 980.692756][ T2061] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.815515][ T2061] usb 7-1: config 0 descriptor?? [ 980.829922][T11289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 981.254546][ T2061] usbhid 7-1:0.0: can't add hid device: -71 [ 981.261067][ T2061] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 981.293195][ T2061] usb 7-1: USB disconnect, device number 11 [ 981.313835][T11331] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.323141][T11331] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.596952][T11331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.623098][T11331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.300209][ T1136] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.339737][ T1136] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.401904][T10054] Bluetooth: hci3: command tx timeout [ 982.434697][T11336] overlayfs: failed to resolve './file1/file0': -2 [ 982.471717][ T1136] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.492029][T11289] team0: Port device team_slave_0 added [ 982.521750][ T1136] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 982.563274][T11289] team0: Port device team_slave_1 added [ 982.761298][T11338] fuse: Bad value for 'fd' [ 983.087216][T11289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.094836][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.123383][T11289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.363018][T11289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.370306][T11289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.398301][T11289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.618586][T11349] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 983.625390][T11349] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 983.634014][T11349] vhci_hcd vhci_hcd.0: Device attached [ 983.932776][ T5896] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 984.080055][T11289] hsr_slave_0: entered promiscuous mode [ 984.091535][T11289] hsr_slave_1: entered promiscuous mode [ 984.152842][T11350] vhci_hcd: connection reset by peer [ 984.191061][ T3562] vhci_hcd: stop threads [ 984.195722][ T3562] vhci_hcd: release socket [ 984.201664][ T3562] vhci_hcd: disconnect device [ 984.408100][T11318] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.416542][T11318] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.424248][T11318] bridge_slave_0: entered allmulticast mode [ 984.433149][T11318] bridge_slave_0: entered promiscuous mode [ 984.484301][T10054] Bluetooth: hci3: command tx timeout [ 984.647515][T11318] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.655444][T11318] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.663365][T11318] bridge_slave_1: entered allmulticast mode [ 984.672347][T11318] bridge_slave_1: entered promiscuous mode [ 985.186632][T11318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.335059][T11318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.695201][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.705532][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.070066][T11361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.104184][T11361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.571760][T10054] Bluetooth: hci3: command tx timeout [ 987.252279][T11104] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.275246][T11318] team0: Port device team_slave_0 added [ 987.733141][T11104] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.755401][T11318] team0: Port device team_slave_1 added [ 987.791815][T11104] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.801491][T11104] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.023724][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1016'. [ 988.304784][T11318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.312211][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.339213][T11318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.559586][ T9] hid_parser_main: 7 callbacks suppressed [ 988.559699][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.574468][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.582470][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.590291][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.598411][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.606441][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.614682][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.622768][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.630665][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.638607][ T9] hid-generic 0002:0004:0009.0013: unknown main item tag 0x0 [ 988.670537][T11318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.678088][T11318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 988.706085][T11318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.052467][ T5896] vhci_hcd: vhci_device speed not set [ 989.262336][ T9] hid-generic 0002:0004:0009.0013: hidraw0: HID v0.04 Device [syz0] on syz0 [ 989.530195][T11318] hsr_slave_0: entered promiscuous mode [ 989.539477][T11318] hsr_slave_1: entered promiscuous mode [ 989.547635][T11318] debugfs: 'hsr0' already exists in 'hsr' [ 989.553596][T11318] Cannot create hsr debugfs directory [ 989.977381][T11289] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 990.095419][T10054] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 990.144470][T11289] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 990.201121][T11289] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 990.250092][T11289] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 990.505331][T11405] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 990.512330][T11405] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 990.521092][T11405] vhci_hcd vhci_hcd.0: Device attached [ 990.891649][ T5867] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 990.961553][T11408] vhci_hcd: connection reset by peer [ 990.967968][ T4028] vhci_hcd: stop threads [ 990.972496][ T4028] vhci_hcd: release socket [ 990.977220][ T4028] vhci_hcd: disconnect device [ 992.333566][T11289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.389553][T11318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 992.528102][T11318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 992.634448][T11318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 992.704272][T11289] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.793529][T11318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 992.907752][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.915521][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.080911][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.088683][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.402961][ T49] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 993.413956][ T49] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 993.433818][ T49] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 993.495618][ T49] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 993.536220][ T49] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 994.985962][T11318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.314916][T11318] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.444648][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.452211][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.614690][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.622368][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 995.699172][ T49] Bluetooth: hci6: command tx timeout [ 995.854574][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1027'. [ 995.945895][ T9] hid_parser_main: 7 callbacks suppressed [ 995.946012][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 995.960587][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 995.968520][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 995.978270][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 995.986276][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 995.994477][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 996.002301][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 996.009878][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 996.017670][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 996.025486][ T9] hid-generic 0002:0004:0009.0014: unknown main item tag 0x0 [ 996.149272][ T5867] vhci_hcd: vhci_device speed not set [ 996.346018][T11429] chnl_net:caif_netlink_parms(): no params data found [ 996.446529][ T9] hid-generic 0002:0004:0009.0014: hidraw0: HID v0.04 Device [syz0] on syz0 [ 997.365344][T11289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 997.732111][T11467] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 997.739105][T11467] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 997.748351][T11467] vhci_hcd vhci_hcd.0: Device attached [ 997.761535][T10054] Bluetooth: hci6: command tx timeout [ 997.819123][T11104] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.925220][ T49] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 998.071629][ T5867] usb 45-1: new high-speed USB device number 3 using vhci_hcd [ 998.182810][T11469] vhci_hcd: connection reset by peer [ 998.189973][ T3562] vhci_hcd: stop threads [ 998.195529][ T3562] vhci_hcd: release socket [ 998.200821][ T3562] vhci_hcd: disconnect device [ 998.216083][T11104] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.576879][T11104] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.907411][T11104] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.498998][T11429] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.506813][T11429] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.514692][T11429] bridge_slave_0: entered allmulticast mode [ 999.524051][T11429] bridge_slave_0: entered promiscuous mode [ 999.726480][T11429] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.734091][T11429] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.741989][T11429] bridge_slave_1: entered allmulticast mode [ 999.750708][T11429] bridge_slave_1: entered promiscuous mode [ 999.834663][T11318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.860122][ T49] Bluetooth: hci6: command tx timeout [ 999.884867][T11104] bridge_slave_1: left allmulticast mode [ 999.890994][T11104] bridge_slave_1: left promiscuous mode [ 999.898184][T11104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.206638][T11104] bridge_slave_0: left allmulticast mode [ 1000.212715][T11104] bridge_slave_0: left promiscuous mode [ 1000.219617][T11104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.334205][T11493] fuse: Unknown parameter 'grou00000000000000000000' [ 1001.373063][T11104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.421411][T11104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.439074][T11104] bond0 (unregistering): Released all slaves [ 1001.728730][T11104] hsr_slave_0: left promiscuous mode [ 1001.753226][T11104] hsr_slave_1: left promiscuous mode [ 1001.762146][T11104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.769744][T11104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.871930][T11104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.879871][T11104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1001.927394][ T49] Bluetooth: hci6: command tx timeout [ 1001.994825][T11104] veth1_macvtap: left promiscuous mode [ 1002.000604][T11104] veth0_macvtap: left promiscuous mode [ 1002.006848][T11104] veth1_vlan: left promiscuous mode [ 1002.012611][T11104] veth0_vlan: left promiscuous mode [ 1002.405981][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1036'. [ 1002.483582][ T5896] hid_parser_main: 7 callbacks suppressed [ 1002.483697][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.498292][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.506333][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.514414][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.522374][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.530528][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.538387][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.546325][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.554239][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.562205][ T5896] hid-generic 0002:0004:0009.0015: unknown main item tag 0x0 [ 1002.602667][ T5896] hid-generic 0002:0004:0009.0015: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1003.007027][T11104] team0 (unregistering): Port device team_slave_1 removed [ 1003.109916][T11104] team0 (unregistering): Port device team_slave_0 removed [ 1003.504023][ T5867] vhci_hcd: vhci_device speed not set [ 1003.505851][T11429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.722544][T11524] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1003.729628][T11524] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1003.737804][T11524] vhci_hcd vhci_hcd.0: Device attached [ 1003.773002][T11429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.024693][ T9] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 1004.162850][T11525] vhci_hcd: connection reset by peer [ 1004.195127][T10150] vhci_hcd: stop threads [ 1004.199607][T10150] vhci_hcd: release socket [ 1004.204695][T10150] vhci_hcd: disconnect device [ 1004.330919][T11429] team0: Port device team_slave_0 added [ 1004.439176][T11429] team0: Port device team_slave_1 added [ 1004.699273][T11429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.707698][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.735336][T11429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1004.832990][T11289] veth0_vlan: entered promiscuous mode [ 1004.900651][T11429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1004.908795][T11429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1004.935294][T11429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.027599][T11318] veth0_vlan: entered promiscuous mode [ 1005.056150][T11289] veth1_vlan: entered promiscuous mode [ 1005.285827][T11318] veth1_vlan: entered promiscuous mode [ 1005.589209][T11429] hsr_slave_0: entered promiscuous mode [ 1005.600557][T11429] hsr_slave_1: entered promiscuous mode [ 1005.610376][T11429] debugfs: 'hsr0' already exists in 'hsr' [ 1005.618196][T11429] Cannot create hsr debugfs directory [ 1005.718169][T11104] bridge_slave_1: left allmulticast mode [ 1005.725856][T11104] bridge_slave_1: left promiscuous mode [ 1005.732809][T11104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.772242][T11104] bridge_slave_0: left allmulticast mode [ 1005.778147][T11104] bridge_slave_0: left promiscuous mode [ 1005.785294][T11104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.046042][T11547] fuse: Unknown parameter 'grou00000000000000000000' [ 1006.090109][T11104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.145902][T11104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.167823][T11104] bond0 (unregistering): Released all slaves [ 1006.273415][T11289] veth0_macvtap: entered promiscuous mode [ 1006.539867][T11289] veth1_macvtap: entered promiscuous mode [ 1006.980468][T11104] hsr_slave_0: left promiscuous mode [ 1007.004830][T11104] hsr_slave_1: left promiscuous mode [ 1007.013562][T11104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.035507][T11104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.404105][T11104] team0 (unregistering): Port device team_slave_1 removed [ 1007.448579][T11104] team0 (unregistering): Port device team_slave_0 removed [ 1008.064122][T11318] veth0_macvtap: entered promiscuous mode [ 1008.136273][T11289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.213392][T11318] veth1_macvtap: entered promiscuous mode [ 1008.296200][T11289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.523187][ T3562] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.539610][T11318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1008.688387][T11318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1008.699315][ T3562] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.765738][T11562] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1045'. [ 1008.802602][ T3562] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.850190][ T3562] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.909499][ T3562] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.976086][ T3846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.005165][ T3846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.112228][ T3846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.132524][ T9] vhci_hcd: vhci_device speed not set [ 1009.796895][T11429] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1009.854184][T11429] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1009.997244][T11582] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1009.997743][T11429] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1010.004095][T11582] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1010.004924][T11582] vhci_hcd vhci_hcd.0: Device attached [ 1010.189913][T11429] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1010.291623][T10516] usb 45-1: new high-speed USB device number 4 using vhci_hcd [ 1010.408946][T11583] vhci_hcd: connection reset by peer [ 1010.426940][ T14] vhci_hcd: stop threads [ 1010.432014][ T14] vhci_hcd: release socket [ 1010.436689][ T14] vhci_hcd: disconnect device [ 1011.561023][T11602] fuse: Unknown parameter 'grou00000000000000000000' [ 1011.850463][T11429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.938504][T11429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.084784][ T4028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.092535][ T4028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.111645][ T4028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.119233][ T4028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.443287][ T9] hid_parser_main: 7 callbacks suppressed [ 1013.443399][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.457240][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.466684][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.474828][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.482883][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.490643][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.498887][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.506921][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.514789][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.522881][ T9] hid-generic 0002:0004:0009.0016: unknown main item tag 0x0 [ 1013.725174][ T9] hid-generic 0002:0004:0009.0016: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1014.422298][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1055'. [ 1014.742156][T11429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.208946][T11656] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1015.215929][T11656] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1015.226216][T11656] vhci_hcd vhci_hcd.0: Device attached [ 1015.860090][T11657] vhci_hcd: connection reset by peer [ 1015.873337][T11104] vhci_hcd: stop threads [ 1015.877790][T11104] vhci_hcd: release socket [ 1015.885110][T11104] vhci_hcd: disconnect device [ 1015.976975][T10516] vhci_hcd: vhci_device speed not set [ 1016.774330][T11681] fuse: Unknown parameter 'group_i00000000000000000000' [ 1017.292590][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.300702][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.487244][ T3810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.495665][ T3810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.779285][T11429] veth0_vlan: entered promiscuous mode [ 1017.889098][T11104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.897648][T11104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.007761][T11429] veth1_vlan: entered promiscuous mode [ 1018.225744][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.234472][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.455256][T11429] veth0_macvtap: entered promiscuous mode [ 1018.548869][T11429] veth1_macvtap: entered promiscuous mode [ 1018.783405][T10422] hid_parser_main: 7 callbacks suppressed [ 1018.783521][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.794363][T11429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.799523][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.827590][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.836730][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.844714][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.852630][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.860804][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.868845][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.876890][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.885081][T10422] hid-generic 0002:0004:0009.0017: unknown main item tag 0x0 [ 1018.944062][T11429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.002725][T11705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1064'. [ 1019.106143][ T3562] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.181940][ T3562] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.214063][ T3562] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.262975][ T3562] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.314719][T10422] hid-generic 0002:0004:0009.0017: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1020.241960][T10054] Bluetooth: hci4: command 0x0406 tx timeout [ 1020.328573][T11724] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(10) [ 1020.335463][T11724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1020.346206][T11724] vhci_hcd vhci_hcd.0: Device attached [ 1020.516843][T11729] fuse: Unknown parameter 'group_i00000000000000000000' [ 1020.633557][T10482] usb 45-1: new high-speed USB device number 5 using vhci_hcd [ 1020.894029][T11725] vhci_hcd: connection reset by peer [ 1020.922127][T11104] vhci_hcd: stop threads [ 1020.926663][T11104] vhci_hcd: release socket [ 1020.931626][T11104] vhci_hcd: disconnect device [ 1021.232536][T10422] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1021.438039][T11746] overlayfs: failed to resolve './file1/file0': -2 [ 1021.458274][T10422] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1021.466638][T10422] usb 9-1: can't read configurations, error -61 [ 1021.637589][T10422] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1021.862731][T10422] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1021.870817][T10422] usb 9-1: can't read configurations, error -61 [ 1021.921709][T10422] usb usb9-port1: attempt power cycle [ 1022.183638][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1075'. [ 1022.307449][T10422] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1022.419539][T10422] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1022.428810][T10422] usb 9-1: can't read configurations, error -61 [ 1022.592596][ T5896] hid-generic 0002:0004:0009.0018: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1022.612874][T10422] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1022.733759][T10422] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1022.742300][T10422] usb 9-1: can't read configurations, error -61 [ 1022.789849][T10422] usb usb9-port1: unable to enumerate USB device [ 1024.128366][T11784] fuse: Unknown parameter 'group_i00000000000000000000' [ 1024.943970][T11796] overlayfs: overlapping lowerdir path [ 1025.094135][T11803] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1025.101072][T11803] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1025.109433][T11803] vhci_hcd vhci_hcd.0: Device attached [ 1025.401511][ T9] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 1025.647125][T11804] vhci_hcd: connection reset by peer [ 1025.688306][ T14] vhci_hcd: stop threads [ 1025.693329][ T14] vhci_hcd: release socket [ 1025.698043][ T14] vhci_hcd: disconnect device [ 1025.737415][T11812] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1086'. [ 1025.772239][T10482] vhci_hcd: vhci_device speed not set [ 1025.802631][T10422] hid_parser_main: 24 callbacks suppressed [ 1025.802748][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1025.817561][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1025.825609][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1025.833517][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1025.846181][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1025.858290][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1025.866326][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1025.874409][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1025.884755][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1025.893495][T10422] hid-generic 0002:0004:0009.0019: unknown main item tag 0x0 [ 1026.167168][T10422] hid-generic 0002:0004:0009.0019: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1026.912540][T10150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.920669][T10150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.134085][T10150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.142455][T10150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.172843][T10516] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1027.377214][T10516] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1027.385591][T10516] usb 1-1: can't read configurations, error -61 [ 1027.582349][T10516] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1027.771767][T11845] fuse: Unknown parameter 'group_id00000000000000000000' [ 1027.805229][T10516] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1027.813422][T10516] usb 1-1: can't read configurations, error -61 [ 1027.862879][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.9.977'. [ 1027.911572][T10516] usb usb1-port1: attempt power cycle [ 1028.311631][T10516] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1028.416871][T10516] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1028.425022][T10516] usb 1-1: can't read configurations, error -61 [ 1028.438491][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.446288][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.614445][T11854] overlayfs: overlapping lowerdir path [ 1028.635669][T10516] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1028.726312][T10516] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1028.735318][T10516] usb 1-1: can't read configurations, error -61 [ 1028.782463][T10516] usb usb1-port1: unable to enumerate USB device [ 1029.184022][T11863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1098'. [ 1029.503351][T11870] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 1029.510247][T11870] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1029.519474][T11870] vhci_hcd vhci_hcd.0: Device attached [ 1029.656419][T10422] hid-generic 0002:0004:0009.001A: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1029.811682][T10482] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 1030.094479][T11871] vhci_hcd: connection reset by peer [ 1030.118111][ T3562] vhci_hcd: stop threads [ 1030.123981][ T3562] vhci_hcd: release socket [ 1030.129821][ T3562] vhci_hcd: disconnect device [ 1030.468368][T11891] fuse: Unknown parameter 'group_id00000000000000000000' [ 1030.558041][ T9] vhci_hcd: vhci_device speed not set [ 1031.355573][T11900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1106'. [ 1031.399681][T11903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1108'. [ 1031.624527][T11907] overlayfs: overlapping lowerdir path [ 1032.195754][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 1032.523573][ T9] hid_parser_main: 24 callbacks suppressed [ 1032.523690][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.541085][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.551935][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.559682][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.567526][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.575496][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.583541][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.591535][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.599254][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.607271][ T9] hid-generic 0002:0004:0009.001B: unknown main item tag 0x0 [ 1032.693583][ T9] hid-generic 0002:0004:0009.001B: hidraw0: HID v0.04 Device [syz0] on syz0 [ 1032.834906][T11925] fuse: Unknown parameter 'group_id00000000000000000000' [ 1033.286404][T11931] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1033.293388][T11931] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1033.301728][T11931] vhci_hcd vhci_hcd.0: Device attached [ 1033.591555][T10422] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 1033.607076][T11942] ===================================================== [ 1033.614561][T11942] BUG: KMSAN: uninit-value in pptp_xmit+0xc9a/0x2780 [ 1033.621665][T11942] pptp_xmit+0xc9a/0x2780 [ 1033.626431][T11942] ppp_input+0x1d9/0xe60 [ 1033.630896][T11942] pppoe_rcv_core+0x166/0x6d0 [ 1033.636002][T11942] sk_backlog_rcv+0x13f/0x420 [ 1033.640965][T11942] __release_sock+0x1d3/0x330 [ 1033.646161][T11942] release_sock+0x6b/0x270 [ 1033.650790][T11942] pppoe_sendmsg+0x15d/0xcb0 [ 1033.655899][T11942] __sock_sendmsg+0x330/0x3d0 [ 1033.660836][T11942] ____sys_sendmsg+0x893/0xd80 [ 1033.665999][T11942] ___sys_sendmsg+0x271/0x3b0 [ 1033.670926][T11942] __sys_sendmmsg+0x3bf/0x7c0 [ 1033.676103][T11942] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1033.682182][T11942] ia32_sys_call+0x39e0/0x4310 [ 1033.687224][T11942] __do_fast_syscall_32+0xb0/0x150 [ 1033.692750][T11942] do_fast_syscall_32+0x38/0x80 [ 1033.697796][T11942] do_SYSENTER_32+0x1f/0x30 [ 1033.702669][T11942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1033.709319][T11942] [ 1033.711932][T11942] Uninit was created at: [ 1033.716466][T11942] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1033.723470][T11942] kmalloc_reserve+0x22f/0x4b0 [ 1033.725160][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1033.728524][T11942] pskb_expand_head+0x1fc/0x1610 [ 1033.728711][T11942] skb_realloc_headroom+0x152/0x2d0 [ 1033.747524][T11942] pptp_xmit+0xa0d/0x2780 [ 1033.752322][T11942] ppp_input+0x1d9/0xe60 [ 1033.756783][T11942] pppoe_rcv_core+0x166/0x6d0 [ 1033.761933][T11942] sk_backlog_rcv+0x13f/0x420 [ 1033.766812][T11942] __release_sock+0x1d3/0x330 [ 1033.772012][T11942] release_sock+0x6b/0x270 [ 1033.776701][T11942] pppoe_sendmsg+0x15d/0xcb0 [ 1033.781723][T11942] __sock_sendmsg+0x330/0x3d0 [ 1033.786599][T11942] ____sys_sendmsg+0x893/0xd80 [ 1033.791856][T11942] ___sys_sendmsg+0x271/0x3b0 [ 1033.796781][T11942] __sys_sendmmsg+0x3bf/0x7c0 [ 1033.801872][T11942] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1033.807817][T11942] ia32_sys_call+0x39e0/0x4310 [ 1033.812995][T11942] __do_fast_syscall_32+0xb0/0x150 [ 1033.818310][T11942] do_fast_syscall_32+0x38/0x80 [ 1033.823588][T11942] do_SYSENTER_32+0x1f/0x30 [ 1033.828430][T11942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1033.831989][T11933] vhci_hcd: connection reset by peer [ 1033.835257][T11942] [ 1033.835314][T11942] CPU: 1 UID: 0 PID: 11942 Comm: syz.8.1118 Not tainted 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(none) [ 1033.845680][ T3562] vhci_hcd: stop threads [ 1033.855517][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1033.855603][T11942] ===================================================== [ 1033.855647][T11942] Disabling lock debugging due to kernel taint [ 1033.855698][T11942] Kernel panic - not syncing: kmsan.panic set ... [ 1033.855798][T11942] CPU: 1 UID: 0 PID: 11942 Comm: syz.8.1118 Tainted: G B 6.16.0-syzkaller-11129-geacf91b0c78a #0 PREEMPT(none) [ 1033.855983][T11942] Tainted: [B]=BAD_PAGE [ 1033.856029][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1033.856105][T11942] Call Trace: [ 1033.856152][T11942] [ 1033.856201][T11942] __dump_stack+0x26/0x30 [ 1033.856362][T11942] dump_stack_lvl+0x53/0x270 [ 1033.856523][T11942] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1033.856691][T11942] dump_stack+0x1e/0x25 [ 1033.856852][T11942] vpanic+0x361/0xbc0 [ 1033.857020][T11942] panic+0x15d/0x160 [ 1033.857222][T11942] kmsan_report+0x31c/0x320 [ 1033.857366][T11942] ? __msan_warning+0x1b/0x30 [ 1033.857488][T11942] ? pptp_xmit+0xc9a/0x2780 [ 1033.857650][T11942] ? ppp_input+0x1d9/0xe60 [ 1033.857798][T11942] ? pppoe_rcv_core+0x166/0x6d0 [ 1033.857954][T11942] ? sk_backlog_rcv+0x13f/0x420 [ 1033.858091][T11942] ? __release_sock+0x1d3/0x330 [ 1033.858266][T11942] ? release_sock+0x6b/0x270 [ 1033.858396][T11942] ? pppoe_sendmsg+0x15d/0xcb0 [ 1033.858553][T11942] ? __sock_sendmsg+0x330/0x3d0 [ 1033.858677][T11942] ? ____sys_sendmsg+0x893/0xd80 [ 1033.858849][T11942] ? ___sys_sendmsg+0x271/0x3b0 [ 1033.859013][T11942] ? __sys_sendmmsg+0x3bf/0x7c0 [ 1033.859175][T11942] ? __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1033.859351][T11942] ? ia32_sys_call+0x39e0/0x4310 [ 1033.859469][T11942] ? __do_fast_syscall_32+0xb0/0x150 [ 1033.859591][T11942] ? do_fast_syscall_32+0x38/0x80 [ 1033.859705][T11942] ? do_SYSENTER_32+0x1f/0x30 [ 1033.859826][T11942] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1033.859987][T11942] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1033.860200][T11942] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1033.860410][T11942] ? kmem_cache_free+0x3ef/0xec0 [ 1033.860575][T11942] ? __kfree_skb+0x20b/0x260 [ 1034.069644][T11942] ? kmsan_get_metadata+0xfb/0x160 [ 1034.075220][T11942] __msan_warning+0x1b/0x30 [ 1034.079943][T11942] pptp_xmit+0xc9a/0x2780 [ 1034.084618][T11942] ? __pfx_pptp_xmit+0x10/0x10 [ 1034.089636][T11942] ppp_input+0x1d9/0xe60 [ 1034.094127][T11942] ? kmsan_get_metadata+0xfb/0x160 [ 1034.099495][T11942] pppoe_rcv_core+0x166/0x6d0 [ 1034.104428][T11942] ? __pfx_pppoe_rcv_core+0x10/0x10 [ 1034.109881][T11942] sk_backlog_rcv+0x13f/0x420 [ 1034.115091][T11942] __release_sock+0x1d3/0x330 [ 1034.120056][T11942] release_sock+0x6b/0x270 [ 1034.124693][T11942] pppoe_sendmsg+0x15d/0xcb0 [ 1034.129607][T11942] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 1034.134975][T11942] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 1034.140519][T11942] __sock_sendmsg+0x330/0x3d0 [ 1034.145509][T11942] ____sys_sendmsg+0x893/0xd80 [ 1034.150560][T11942] ___sys_sendmsg+0x271/0x3b0 [ 1034.155495][T11942] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1034.161585][T11942] ? kmsan_get_metadata+0xfb/0x160 [ 1034.167000][T11942] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1034.173070][T11942] __sys_sendmmsg+0x3bf/0x7c0 [ 1034.178100][T11942] ? do_futex+0x416/0x480 [ 1034.182663][T11942] ? kmsan_get_metadata+0xfb/0x160 [ 1034.188067][T11942] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1034.194004][T11942] ia32_sys_call+0x39e0/0x4310 [ 1034.198997][T11942] __do_fast_syscall_32+0xb0/0x150 [ 1034.204308][T11942] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1034.210303][T11942] do_fast_syscall_32+0x38/0x80 [ 1034.215353][T11942] do_SYSENTER_32+0x1f/0x30 [ 1034.220032][T11942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1034.226686][T11942] RIP: 0023:0xf70ae539 [ 1034.230996][T11942] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1034.250899][T11942] RSP: 002b:00000000f509e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1034.259623][T11942] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000a00 [ 1034.267860][T11942] RDX: 0000000000000001 RSI: 00000000240080cb RDI: 0000000000000000 [ 1034.276095][T11942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1034.284224][T11942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1034.292351][T11942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1034.300514][T11942] [ 1034.303945][T11942] Kernel Offset: disabled [ 1034.308348][T11942] Rebooting in 86400 seconds..