last executing test programs: 15m27.378139608s ago: executing program 32 (id=4): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x1000) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0x0, 0x0}) 11m28.061115619s ago: executing program 0 (id=392): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) read$FUSE(r0, &(0x7f0000002580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f00000045c0)={0x130, 0x0, r5, {0x8, 0x2, 0x0, '\x00', {0x1, 0x1000, 0x2, 0x9, r3, r4, 0x4000, '\x00', 0xbfe, 0x200, 0x2, 0x8b4, {0xffff, 0x1}, {0x1, 0x8}, {0x5, 0xfffffff8}, {0x2, 0xffffffff}, 0x200, 0x5, 0x0, 0x48f}}}, 0x130) 11m25.880005442s ago: executing program 0 (id=395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r4, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="e0ff8b0a0a00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) r8 = syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 11m21.945171695s ago: executing program 0 (id=402): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare(0x22020600) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000040)={0x277fffffffc, 0x0, 0x2, 0xffffffffffffffff, 0x5}) 11m20.663177384s ago: executing program 0 (id=404): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000008c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) read$FUSE(r0, &(0x7f0000002580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f00000045c0)={0x130, 0x0, r5, {0x8, 0x2, 0x0, '\x00', {0x1, 0x1000, 0x2, 0x9, r3, r4, 0x4000, '\x00', 0xbfe, 0x200, 0x2, 0x8b4, {0xffff, 0x1}, {0x1, 0x8}, {0x5, 0xfffffff8}, {0x2, 0xffffffff}, 0x200, 0x5, 0x0, 0x48f}}}, 0x130) 11m18.670783261s ago: executing program 0 (id=406): syz_emit_ethernet(0x6a, &(0x7f0000000180)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x0, 0x5c, 0x300, 0x0, 0x0, 0x6c, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x9c}]}}, {{}, {}, {}, {0x8, 0x88be, 0x0, {{}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfd}}}}}}}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000000c0)={0x170001, 0x10a000}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80e40, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndmidi(&(0x7f0000000080), 0x8, 0x1000) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000080)=0x20) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0x0, 0x0, 0x2}, 'syz1\x00', 0x1a}) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001780), 0xa00, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000017c0), 0x44003, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 11m13.568359653s ago: executing program 0 (id=412): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@broadcast]}) sendmsg$nl_route(r0, 0x0, 0x4004800c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x0, [0x8, 0x7, 0xfffffe01]}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1, 0x0, 0x0, r4}) 11m13.545815082s ago: executing program 1 (id=413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, &(0x7f0000006800)="10", 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m10.162815947s ago: executing program 1 (id=415): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}}, 0x50) read$FUSE(r0, 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0) read$FUSE(r0, &(0x7f0000002580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r0, &(0x7f00000045c0)={0x130, 0x0, r3, {0x8, 0x2, 0x0, '\x00', {0x1, 0x1000, 0x2, 0x9, 0x0, 0x0, 0x4000, '\x00', 0xbfe, 0x200, 0x2, 0x8b4, {0xffff, 0x1}, {0x1, 0x8}, {0x5, 0xfffffff8}, {0x2, 0xffffffff}, 0x200, 0x5, 0x0, 0x48f}}}, 0x130) 11m9.358083533s ago: executing program 1 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r4, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r7, @ANYBLOB="e0ff8b0a0a00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) r8 = syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 11m0.968016426s ago: executing program 1 (id=421): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtfilter={0xa8, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_SEL={0x64, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0xce, 0x102, [{0x1000, 0xe, 0xfffff000, 0x1e71}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xa8}}, 0x24040084) 10m59.923937715s ago: executing program 1 (id=423): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 10m58.019526805s ago: executing program 33 (id=412): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@broadcast]}) sendmsg$nl_route(r0, 0x0, 0x4004800c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40010) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x8004, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x0, [0x8, 0x7, 0xfffffe01]}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000001f40), 0x0, 0x1, 0x0, 0x0, r4}) 10m57.941732642s ago: executing program 1 (id=428): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') 10m42.421853531s ago: executing program 34 (id=428): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) chdir(&(0x7f0000000100)='./file0\x00') 5m55.518309824s ago: executing program 4 (id=699): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x3, 0x1, 0x9, 0x200, 0x1a, "3eccd2000500"}) 5m55.168579208s ago: executing program 4 (id=700): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xffff7ffc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) 5m52.928118223s ago: executing program 2 (id=702): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5m51.952894099s ago: executing program 2 (id=703): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 5m48.791212476s ago: executing program 4 (id=704): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="56060900000000001c00128009000100626f6e64000000000c00028008000b"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x0) 5m48.747503049s ago: executing program 2 (id=705): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x8, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80800) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) fchdir(r3) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x2) 5m47.343637344s ago: executing program 4 (id=706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x3432564e}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff5, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x3, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x2, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x0, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x50, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5m46.7372671s ago: executing program 2 (id=707): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x3, 0x1, 0x9, 0x200, 0x1a, "3eccd2000500"}) 5m46.172284878s ago: executing program 2 (id=708): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 5m45.901371805s ago: executing program 4 (id=709): syz_open_dev$hidraw(0x0, 0x8, 0x204101) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x10c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) setsockopt$CAN_RAW_LOOPBACK(r6, 0x65, 0x3, 0x0, 0x0) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) 5m45.087397407s ago: executing program 2 (id=710): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) 5m45.011088012s ago: executing program 4 (id=711): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(0xffffffffffffffff, 0xffff7ffc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r3, 0x2004, 0x0) 5m27.281678314s ago: executing program 35 (id=710): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[], &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x9}, 0x8) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) 5m26.983494831s ago: executing program 36 (id=711): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) listen(0xffffffffffffffff, 0xffff7ffc) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r3, 0x2004, 0x0) 3m59.645879322s ago: executing program 7 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, 0x0) syz_fuse_handle_req(r3, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000003, {0x1, 0x1fffffffe, 0x40000a, 0x6, 0x8, 0xa, {0x1, 0x8010001, 0x4d0, 0x40d, 0xffff, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x200003d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x26, 0x7fff, 0x61001838, 0x0, 0xfffc, 0x48, 0x5d2186cc, 0x0, 0x0, 0x80, 0x10001}}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80880) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000040)={{}, 0x800, 0x6984327d, 0x3b}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0xffffffffffffffff, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x3, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x402024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x2d, 0xfffffffffffffff9) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 3m58.498258941s ago: executing program 7 (id=769): request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x77359400, @ANYRES32=0x0, @ANYBLOB="000000000100000000000000030200"/24], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) recvmsg(0xffffffffffffffff, 0x0, 0x40020000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, 0x1}, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mremap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000000b000/0x3000)=nil) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 3m53.284747674s ago: executing program 7 (id=774): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x1, &(0x7f0000000200), &(0x7f0000000240)) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000180)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x10, "5c83276f6c0200000000aae21f084c88"}}) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000005c0)={@private=0xa010102, @empty}, 0x8) unshare(0x2c020400) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="29000300010003", 0x7) socket$packet(0x11, 0x2, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xd0, 0x0, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000040)='(', 0x1}], 0x1) write$tcp_congestion(r4, 0x0, 0x0) unshare(0x54060a00) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8982, &(0x7f0000000140)={0x6, 'ipvlan1\x00', {0x6}, 0x5}) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="99fb5e31c591bbbbbbbbbbbb080045f800380000002009019078ac1e0101ac1414aa03049078120d183f250000000065000000010000e00000017f00000100186371ae9b1c032c0367b59f47de736de5d7eeeb51cdb19c70bd60cf30"], 0x0) 3m50.869670382s ago: executing program 7 (id=778): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 3m49.597878923s ago: executing program 7 (id=782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) cachestat(r1, &(0x7f0000000040)={0x6, 0x5}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x2f00, 0x8, 0xd097, 0xffffffff, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7ffd, 0x4, 0xfffe, 0x8, 0x5, 0x7, 0x830, 0x5, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]}) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3m48.911548625s ago: executing program 7 (id=784): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3m44.947567388s ago: executing program 37 (id=784): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 3m20.198750368s ago: executing program 9 (id=832): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000000406010100000000000000000700000a050001000700000081be2fac7923fac0d8c82cfc9c453df7c72ad87dfa9b8ad1494b54ee25478bfbd78d2c8ac6a450cd9f1700f07815f0d20f61e0f2d70e2001803c159a4431832e94ea3c20709f9adffdf5fc85aa91a2cdfa9dab79f6c6c85c383bfec37c334b17d93ce304ed4b4241a3e0147acb87bd0f251755ff94e02fec645696dc"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x2440, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc4c03d12, &(0x7f0000000040)={0x5, 0x5}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x1100000000000000, 0x9, 0x7ffffffffffffffd, 0xffffffffffffffff, 0x3ffffd, 0x400000000006, 0x0, 0x2, 0x7fffffffffffffff, 0x5, 0x401, 0x6, 0x6, 0x20000001, 0xfffffffffffffffc], 0xd5d5c004, 0x1354}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x80, 0x4, 0x5, 0x0, 0x8, 0x5, 0x40, 0x7, 0x6, 0x4, 0xf9, 0x8, 0x0, 0x0, 0x5, 0x2, 0x84, 0x3, 0x4, '\x00', 0x4, 0x2}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000240)="db2d82e6036cbb7e31105314a0fe5f5989bce02d44c1641ffc1cd7d99f6d010251ce2340064f5cac4f96a73d6983035797d24dd1d5f72084b2979a327b1631b445d3ca60d4a2d216cf6a20bf4c449b790b1cea906d2c8203173bb46f2d23ee787772e35c17223f0f1dfc8faab1a7e7d53b3f1839a3f9ec10e980f3c0e89e808b4641aacc977b69172e7ae9efb164c872a29124d879022a25237abf939c", 0x9d}, {&(0x7f0000000400)="6c43a715ebbd318addcd79db30fc82c7897cc1af4d30ef0c0793f737a63a8a1c1f8d58547b8d9afc8d3c1dadefe19e63eadcea6c6377757750bd3d1b", 0x3c}], 0x2}}], 0x1, 0x24040015) 3m15.406611355s ago: executing program 9 (id=840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$watch_queue(&(0x7f0000000040), 0x80) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)={0x5, 0x0, [{0x833, 0x0, 0x5}, {0x3b6, 0x0, 0x8b}, {0xa6e, 0x0, 0x8}, {0x40000003, 0x0, 0xc41}, {0x48b}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3m11.256299282s ago: executing program 9 (id=843): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000000c1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff5, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x3, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x2, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x0, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x50, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 3m9.146309931s ago: executing program 9 (id=847): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="e5"], 0x20}}, 0x20040850) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x100, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0xcb5e, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m8.199009983s ago: executing program 9 (id=849): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000280)=0x14, 0x80800) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x48}}, 0x0) fchdir(r2) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x2) 3m6.519235819s ago: executing program 9 (id=851): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000040)="01bb", 0x2}, {&(0x7f00000003c0)="bd", 0x1}], 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) userfaultfd(0x80001) r8 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r8, &(0x7f0000000000), 0xd4ba103) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) close_range(r7, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}}) 2m50.926666395s ago: executing program 38 (id=851): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYRESHEX], &(0x7f0000000340)='GPL\x00', 0x6, 0xb9, &(0x7f0000000140)=""/185, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000040)="01bb", 0x2}, {&(0x7f00000003c0)="bd", 0x1}], 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, 0x0) close(0xffffffffffffffff) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) userfaultfd(0x80001) r8 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r8, &(0x7f0000000000), 0xd4ba103) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) close_range(r7, r0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x4, 0x1, 0x60, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x20, 0x0, 0x8}}) 21.985308664s ago: executing program 8 (id=1033): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 21.580254708s ago: executing program 5 (id=1034): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21.497660174s ago: executing program 8 (id=1035): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) setreuid(0x0, 0x0) r4 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x43796b4611be47e7, 0x4) ptrace(0x10, r4) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) ptrace(0x11, r4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 21.202775655s ago: executing program 5 (id=1036): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1e9a000) kcmp(r1, r1, 0x6, r0, r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r3 = semget$private(0x0, 0x6, 0x0) semctl$SETVAL(r3, 0x2, 0x10, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_io_uring_setup(0xd02, &(0x7f0000002900)={0x0, 0x10f24e, 0x0, 0x1, 0x290}, &(0x7f0000000440)=0x0, &(0x7f0000001080)=0x0, &(0x7f0000001040)) syz_io_uring_modify_offsets$generic(r5, r6, 0x2c, 0x10021) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$dsp(0xffffffffffffff9c, 0x0, 0x8041, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 18.486499118s ago: executing program 8 (id=1038): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 15.746987483s ago: executing program 5 (id=1041): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4040) openat$mice(0xffffff9c, &(0x7f0000000200), 0x100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 15.358755538s ago: executing program 8 (id=1042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x60}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.875555162s ago: executing program 3 (id=1044): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x83, 0xffffffff, 0x0, 0x717e387b, 0x43, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) socket$inet_sctp(0x2, 0x5, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x0, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) syz_open_dev$sg(0x0, 0x0, 0x40000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) syz_open_dev$usbfs(&(0x7f0000000440), 0x76, 0x160243) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r4, 0x400442c8, &(0x7f0000000200)=ANY=[]) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 14.16559404s ago: executing program 5 (id=1045): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="e0ff8b0a0a00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r5) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 12.553267883s ago: executing program 8 (id=1046): r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) setreuid(0x0, 0x0) r4 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x43796b4611be47e7, 0x4) ptrace(0x10, r4) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) ptrace(0x11, r4) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 12.360642228s ago: executing program 3 (id=1047): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_acct\x00') openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) socket(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, 0x0, 0x20000001) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2083) bind$xdp(0xffffffffffffffff, 0x0, 0x0) pread64(r2, &(0x7f0000000000)=""/165, 0xa5, 0x7f) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x1, 0x1, 0xd59f80, 0x19f5, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x7}}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000001180)=0x2000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010329bd7000fcdbdf25240000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) 12.038728537s ago: executing program 5 (id=1048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x8c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\r\x00\x00'], 0x50) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x40084d0c, &(0x7f00000000c0)={0x1, 0x300, 0x0, 0x0}) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000080)=0x40000) 2.907462967s ago: executing program 5 (id=1049): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r4, 0x1000006) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x5, 0x36, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000580)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0x2000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r1}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.835474816s ago: executing program 8 (id=1050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 2.77868948s ago: executing program 3 (id=1051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xb}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xfffffffb}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 1.274470694s ago: executing program 3 (id=1052): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 726.266243ms ago: executing program 3 (id=1053): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4040) openat$mice(0xffffff9c, &(0x7f0000000200), 0x100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 0s ago: executing program 3 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48002, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x3}}]}, 0x38}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000140)={{0x2000, 0xffff1000, 0xf000, 0x9, 0x7f, 0xe3, 0xa, 0xff, 0x0, 0xb, 0x0, 0xb}, {0xd000, 0xd000, 0x10, 0x3, 0x5, 0x7, 0x46, 0x6, 0x1, 0x4, 0xfa, 0xfc}, {0xf000, 0x200000, 0x9, 0x4, 0x10, 0x81, 0x4, 0x13, 0x5, 0x4, 0x92, 0x80}, {0x10000, 0x60000, 0xc, 0x7, 0x7f, 0x7, 0xfe, 0x0, 0xfa, 0x29, 0xd, 0x9}, {0xeeee8000, 0x0, 0xf, 0x9, 0x5, 0x2, 0xa, 0xf1, 0x2, 0x6e, 0x0, 0x8}, {0x8000000, 0x1000, 0xe, 0x2, 0x7, 0x2, 0x5, 0x2, 0x1, 0xd, 0x6, 0xa}, {0x10000, 0x4, 0xc, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x1, 0xffff1000, 0xd, 0xe, 0x13, 0x3e, 0x3, 0x0, 0x7f, 0x1, 0x0, 0x8}, {0x100000, 0x5}, {0x80a0000, 0x1}, 0x80000003, 0x0, 0x6000, 0x61, 0x1, 0xa800, 0x8000900, 0x1, [0x6, 0x2, 0x1, 0x1]}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, 0x0) kernel console output (not intermixed with test programs): am0: Port device team_slave_1 added [ 822.045909][T10057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.062857][T10063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.083777][T10063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.504597][ T8868] Bluetooth: hci1: command tx timeout [ 822.539790][T10054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 822.547077][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.574626][T10054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 822.641080][T10057] team0: Port device team_slave_0 added [ 822.664080][T10063] team0: Port device team_slave_0 added [ 822.698922][T10054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 822.706397][T10054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 822.734190][T10054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 822.777817][T10057] team0: Port device team_slave_1 added [ 822.796566][T10063] team0: Port device team_slave_1 added [ 822.870918][ T34] IPVS: stop unused estimator thread 0... [ 823.218866][T10057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.227323][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.264402][T10057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.287818][T10063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.298348][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.332831][T10063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.410062][T10057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.420409][T10057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.450772][T10057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.502830][T10063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.510674][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.538643][T10063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 823.602423][T10054] hsr_slave_0: entered promiscuous mode [ 823.611050][T10054] hsr_slave_1: entered promiscuous mode [ 823.621662][T10054] debugfs: 'hsr0' already exists in 'hsr' [ 823.631315][T10054] Cannot create hsr debugfs directory [ 824.010227][T10057] hsr_slave_0: entered promiscuous mode [ 824.028913][T10057] hsr_slave_1: entered promiscuous mode [ 824.040649][T10057] debugfs: 'hsr0' already exists in 'hsr' [ 824.046674][T10057] Cannot create hsr debugfs directory [ 824.067057][T10063] hsr_slave_0: entered promiscuous mode [ 824.077091][T10063] hsr_slave_1: entered promiscuous mode [ 824.085231][T10063] debugfs: 'hsr0' already exists in 'hsr' [ 824.091062][T10063] Cannot create hsr debugfs directory [ 824.584749][ T8868] Bluetooth: hci1: command tx timeout [ 825.232573][ T9979] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 825.251864][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 825.266095][ T9979] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 825.288230][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 825.407660][ T9979] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 825.435658][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 825.512551][ T9979] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 825.534727][ T9979] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 825.628050][ T34] bridge_slave_1: left allmulticast mode [ 825.640136][ T34] bridge_slave_1: left promiscuous mode [ 825.648423][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.666508][ T34] bridge_slave_0: left allmulticast mode [ 825.672655][ T34] bridge_slave_0: left promiscuous mode [ 825.678881][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.940538][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.955570][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.970118][ T34] bond0 (unregistering): Released all slaves [ 826.020202][T10154] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.032465][T10154] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.041366][T10154] bridge_slave_0: entered allmulticast mode [ 826.051724][T10154] bridge_slave_0: entered promiscuous mode [ 826.093478][T10154] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.101215][T10154] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.111803][T10154] bridge_slave_1: entered allmulticast mode [ 826.121474][T10154] bridge_slave_1: entered promiscuous mode [ 826.197293][ T34] hsr_slave_0: left promiscuous mode [ 826.208150][ T34] hsr_slave_1: left promiscuous mode [ 826.216895][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.232909][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.460858][ T34] team0 (unregistering): Port device team_slave_1 removed [ 826.516072][ T34] team0 (unregistering): Port device team_slave_0 removed [ 826.662555][ T8868] Bluetooth: hci1: command tx timeout [ 826.848932][T10154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.882900][T10154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 826.996264][T10154] team0: Port device team_slave_0 added [ 827.028679][T10154] team0: Port device team_slave_1 added [ 827.108975][T10154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.116298][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.143850][T10154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.160001][T10154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.167289][T10154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.193918][T10154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.394406][T10057] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 827.414485][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 827.459010][T10057] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 827.478571][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 827.491711][T10057] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 827.521577][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 827.531398][T10057] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 827.552859][T10057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 827.594864][T10154] hsr_slave_0: entered promiscuous mode [ 827.606510][T10154] hsr_slave_1: entered promiscuous mode [ 827.615898][T10154] debugfs: 'hsr0' already exists in 'hsr' [ 827.624306][T10154] Cannot create hsr debugfs directory [ 827.804281][T10063] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 827.839408][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 827.897772][T10063] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 827.926776][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 827.937851][T10063] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 827.970471][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.047430][T10063] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 828.078529][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 828.532762][T10054] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 828.561628][T10054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 828.636994][T10054] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 828.663969][T10054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 828.714738][T10054] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 828.746410][T10054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 828.838523][T10054] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 828.864074][T10054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 829.005218][ T9979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.368627][ T9979] 8021q: adding VLAN 0 to HW filter on device team0 [ 829.541851][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.549404][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 829.790783][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.798346][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.007983][T10154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 830.052418][T10154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 830.095377][T10154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 830.120097][T10154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.190036][T10057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.235113][T10154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 830.275095][T10154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.305238][T10154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 830.327542][T10154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.493188][T10063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.639544][T10057] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.837222][ T7656] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.844851][ T7656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.926318][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.933903][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.951277][T10063] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.121240][ T3246] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.128933][ T3246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.380440][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.387987][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.649399][T10054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.046922][T10054] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.227626][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.235205][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.500031][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.507557][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 832.613835][T10154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.064821][T10154] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.291156][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.298711][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.400560][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.408082][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.959663][ T9979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.806096][T10057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.416820][T10063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 836.987186][ T9979] veth0_vlan: entered promiscuous mode [ 837.185933][ T9979] veth1_vlan: entered promiscuous mode [ 837.382806][T10054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 837.837738][ T9979] veth0_macvtap: entered promiscuous mode [ 837.954703][ T9979] veth1_macvtap: entered promiscuous mode [ 838.058177][T10154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.268574][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 838.407558][ T9979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 838.594138][T10057] veth0_vlan: entered promiscuous mode [ 838.621480][ T56] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.646417][ T6298] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.704130][ T6298] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 838.727697][ T6298] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.024587][T10057] veth1_vlan: entered promiscuous mode [ 839.279521][T10063] veth0_vlan: entered promiscuous mode [ 839.739744][T10057] veth0_macvtap: entered promiscuous mode [ 839.810983][T10063] veth1_vlan: entered promiscuous mode [ 840.056415][T10057] veth1_macvtap: entered promiscuous mode [ 840.099202][T10054] veth0_vlan: entered promiscuous mode [ 840.290020][T10057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 840.377164][T10054] veth1_vlan: entered promiscuous mode [ 840.526896][T10057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 840.649948][T10063] veth0_macvtap: entered promiscuous mode [ 840.753252][ T6298] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.768992][ T6298] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.830363][ T6298] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.859486][ T6298] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.926545][T10063] veth1_macvtap: entered promiscuous mode [ 841.006183][T10154] veth0_vlan: entered promiscuous mode [ 841.213937][T10054] veth0_macvtap: entered promiscuous mode [ 841.271584][T10154] veth1_vlan: entered promiscuous mode [ 841.332848][T10063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.357060][T10054] veth1_macvtap: entered promiscuous mode [ 841.550236][T10063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.769664][ T6298] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.808547][ T6298] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.874609][ T6298] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.883931][ T6298] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.963555][ T5232] 8021q: adding VLAN 0 to HW filter on device eth21 [ 842.007866][T10054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.231464][T10054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.445327][ T164] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.495038][ T5896] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.630509][ T5896] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.647997][ T5896] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.907614][T10154] veth0_macvtap: entered promiscuous mode [ 843.054214][T10154] veth1_macvtap: entered promiscuous mode [ 843.455604][T10154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.576122][T10154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.795083][ T34] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.840079][ T34] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.887321][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 843.897506][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 843.908255][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 843.926743][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 843.927147][ T34] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.964063][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 844.013436][ T34] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.678687][ T770] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.949974][ T770] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.103098][ T8868] Bluetooth: hci2: command tx timeout [ 846.198816][ T770] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.451281][ T770] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.395882][ T770] bridge_slave_1: left allmulticast mode [ 847.431064][ T770] bridge_slave_1: left promiscuous mode [ 847.463373][ T770] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.529364][ T770] bridge_slave_0: left allmulticast mode [ 847.558304][ T770] bridge_slave_0: left promiscuous mode [ 847.597458][ T770] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.111745][ T770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.126901][ T770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.141355][ T770] bond0 (unregistering): Released all slaves [ 848.185720][ T8868] Bluetooth: hci2: command tx timeout [ 848.252568][ T5232] 8021q: adding VLAN 0 to HW filter on device eth22 [ 848.681109][ T770] hsr_slave_0: left promiscuous mode [ 848.691385][ T770] hsr_slave_1: left promiscuous mode [ 848.708892][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.717842][ T770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.734905][ T770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.750450][ T770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.772121][ T770] veth1_macvtap: left promiscuous mode [ 848.777782][ T770] veth0_macvtap: left promiscuous mode [ 848.784589][ T770] veth1_vlan: left promiscuous mode [ 848.790037][ T770] veth0_vlan: left promiscuous mode [ 849.290842][ T770] team0 (unregistering): Port device team_slave_1 removed [ 849.347916][ T770] team0 (unregistering): Port device team_slave_0 removed [ 849.681621][ T5791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.726267][ T5791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.272894][ T8868] Bluetooth: hci2: command tx timeout [ 850.300571][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.318753][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.685872][ T5896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.722244][ T5896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.928776][ T3301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.957138][ T3301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.097425][ T3301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.115400][ T3301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.342410][ T8868] Bluetooth: hci2: command tx timeout [ 852.484727][ T3246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.540011][ T3246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.640768][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.703953][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.026862][ T5896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.067602][ T5896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.115646][T10487] binder: 10483:10487 ioctl c0306201 200000000040 returned -11 [ 853.185559][T10487] binder: 10483:10487 ioctl c0306201 2000000001c0 returned -11 [ 853.727827][T10380] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.800776][T10380] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.820181][T10380] bridge_slave_0: entered allmulticast mode [ 853.846230][T10380] bridge_slave_0: entered promiscuous mode [ 854.071372][T10380] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.162625][T10380] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.253656][T10380] bridge_slave_1: entered allmulticast mode [ 854.326923][T10380] bridge_slave_1: entered promiscuous mode [ 855.335341][T10380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.485904][T10380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.783743][ T5232] 8021q: adding VLAN 0 to HW filter on device eth23 [ 856.933697][T10380] team0: Port device team_slave_0 added [ 856.959835][T10380] team0: Port device team_slave_1 added [ 857.019590][ T29] audit: type=1800 audit(1781701085.186:15): pid=10522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.719" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 857.047173][T10522] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 857.059362][T10522] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 857.478992][T10522] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 857.659609][T10380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.694507][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.775297][T10380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.954278][T10534] tipc: Started in network mode [ 858.011722][T10534] tipc: Node identity 52e6aa92d68e, cluster identity 4711 [ 858.106995][T10534] tipc: Enabled bearer , priority 0 [ 858.187776][T10380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.225276][T10380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.345232][T10380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.415819][T10544] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 859.110831][T10546] binder: 10542:10546 ioctl c0306201 200000000040 returned -22 [ 859.247374][T10546] binder: 10542:10546 ioctl c0306201 2000000001c0 returned -11 [ 859.292764][T10532] tipc: Disabling bearer [ 859.436082][ T5681] tipc: Node number set to 2221451922 [ 860.194756][T10380] hsr_slave_0: entered promiscuous mode [ 860.340151][T10380] hsr_slave_1: entered promiscuous mode [ 860.418887][T10551] syzkaller0: entered promiscuous mode [ 860.431386][T10551] syzkaller0: entered allmulticast mode [ 860.528888][T10551] tipc: Started in network mode [ 860.552219][T10551] tipc: Node identity aa38e8f2bc4c, cluster identity 4711 [ 860.599450][T10551] tipc: Enabled bearer , priority 0 [ 860.846503][T10548] tipc: Resetting bearer [ 860.946712][T10548] tipc: Disabling bearer [ 863.497690][T10585] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 863.517701][ T29] audit: type=1800 audit(1781701091.616:16): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.731" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 863.653912][T10603] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 865.041161][T10585] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 866.189671][T10592] syzkaller0: entered promiscuous mode [ 866.248390][T10585] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 866.642729][T10592] syzkaller0: entered allmulticast mode [ 867.448019][T10618] binder: 10617:10618 ioctl c0306201 200000000640 returned -22 [ 873.445743][T10380] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 873.612962][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 873.656365][T10380] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 873.880012][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 873.891655][T10380] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 873.946474][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 874.221024][T10380] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 874.381029][T10380] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.555003][T10643] tipc: Started in network mode [ 874.577963][T10643] tipc: Node identity 16b5eb6f1352, cluster identity 4711 [ 874.649013][T10643] tipc: Enabled bearer , priority 0 [ 874.798665][T10655] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 874.876402][ T5232] 8021q: adding VLAN 0 to HW filter on device eth24 [ 875.411574][T10634] tipc: Disabling bearer [ 876.510574][ T29] audit: type=1326 audit(1781701104.686:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 876.648100][ T29] audit: type=1326 audit(1781701104.686:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 879.035719][ T29] audit: type=1326 audit(1781701104.686:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 879.117510][ T29] audit: type=1326 audit(1781701104.686:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 879.160297][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.746'. [ 879.554701][T10675] binder: 10673:10675 ioctl c0306201 200000000640 returned -22 [ 879.735588][T10675] binder: 10673:10675 ioctl c0306201 2000000001c0 returned -11 [ 879.746921][ T29] audit: type=1326 audit(1781701104.696:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 880.062217][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.081403][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.212321][ T29] audit: type=1326 audit(1781701104.716:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 880.714946][ T29] audit: type=1326 audit(1781701105.206:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 881.173640][ T29] audit: type=1326 audit(1781701105.206:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 881.431020][ T29] audit: type=1326 audit(1781701105.216:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 881.482904][T10380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.519865][ T29] audit: type=1326 audit(1781701105.216:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 881.543580][T10380] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.758336][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.765937][ T770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.811458][ T29] audit: type=1326 audit(1781701105.216:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 882.832512][ T29] audit: type=1326 audit(1781701105.216:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.7.747" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5c96f9ce59 code=0x7ffc0000 [ 882.915200][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.923072][ T6236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.343614][T10708] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 888.727759][T10712] syzkaller0: entered promiscuous mode [ 888.809282][T10712] syzkaller0: entered allmulticast mode [ 889.213249][T10712] tipc: Enabled bearer , priority 0 [ 889.408911][T10710] tipc: Resetting bearer [ 889.583629][T10710] tipc: Disabling bearer [ 890.159981][ T29] audit: type=1326 audit(1781701117.686:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 890.978573][ T29] audit: type=1326 audit(1781701117.686:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 891.447090][ T29] audit: type=1326 audit(1781701117.686:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 891.736983][ T29] audit: type=1326 audit(1781701117.686:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 892.054491][ T29] audit: type=1326 audit(1781701117.686:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 892.283527][T10740] Bluetooth: MGMT ver 1.23 [ 892.344393][ T29] audit: type=1326 audit(1781701117.686:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 892.765459][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.761'. [ 893.161806][ T29] audit: type=1326 audit(1781701118.336:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 893.207882][ T29] audit: type=1326 audit(1781701118.336:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 893.269693][ T29] audit: type=1326 audit(1781701118.376:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 893.301770][ T29] audit: type=1326 audit(1781701118.376:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.9.758" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46039ce59 code=0x7ffc0000 [ 894.026892][T10755] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 894.961656][T10761] input: syz1 as /devices/virtual/input/input43 [ 894.969857][T10761] input: failed to attach handler leds to device input43, error: -6 [ 895.481503][T10765] fuse: root generation should be zero [ 896.507422][T10778] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 897.839023][T10787] syzkaller0: entered promiscuous mode [ 897.888035][T10786] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 897.942775][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 897.942861][ T29] audit: type=1326 audit(1781701126.116:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 898.016999][T10787] syzkaller0: entered allmulticast mode [ 898.114396][ T29] audit: type=1326 audit(1781701126.126:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 898.369236][ T29] audit: type=1326 audit(1781701126.166:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 898.530558][T10780] tipc: Enabled bearer , priority 0 [ 898.608499][ T29] audit: type=1326 audit(1781701126.176:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 898.645875][T10380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.694966][T10777] tipc: Resetting bearer [ 899.693360][ T29] audit: type=1326 audit(1781701126.176:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 900.645072][ T29] audit: type=1326 audit(1781701126.176:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 900.702758][T10777] tipc: Disabling bearer [ 900.846569][ T29] audit: type=1326 audit(1781701126.826:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 900.991574][ T5690] tipc: Node number set to 376760562 [ 901.008790][ T29] audit: type=1326 audit(1781701126.826:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 901.237391][ T29] audit: type=1326 audit(1781701126.846:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 901.377756][ T29] audit: type=1326 audit(1781701126.846:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.8.771" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f477339ce59 code=0x7ffc0000 [ 902.010459][T10818] binder: 10817:10818 ioctl c0306201 0 returned -14 [ 903.032247][T10824] input: syz1 as /devices/virtual/input/input44 [ 903.038686][T10824] input: failed to attach handler leds to device input44, error: -6 [ 905.694689][ T3246] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.382653][ T5690] libceph: connect (1)[c::]:6789 error -101 [ 906.581443][ T3246] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.621230][ T5690] libceph: mon0 (1)[c::]:6789 connect error [ 906.725965][T10853] ceph: No mds server is up or the cluster is laggy [ 906.847233][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 906.878783][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 906.900991][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 906.988967][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 907.016728][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 907.080413][ T3246] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.533170][ T3246] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.613380][T10869] binder: 10865:10869 ioctl c0306201 0 returned -14 [ 908.443907][ T3246] bridge_slave_1: left allmulticast mode [ 908.457322][ T3246] bridge_slave_1: left promiscuous mode [ 908.486885][ T3246] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.594688][ T3246] bridge_slave_0: left allmulticast mode [ 908.643821][ T3246] bridge_slave_0: left promiscuous mode [ 908.650410][ T3246] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.065046][ T8868] Bluetooth: hci0: command tx timeout [ 909.576854][ T3246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.666865][ T3246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.751159][ T3246] bond0 (unregistering): Released all slaves [ 910.418833][T10889] input: syz1 as /devices/virtual/input/input45 [ 910.436671][ T3246] tipc: Left network mode [ 910.482723][T10889] input: failed to attach handler leds to device input45, error: -6 [ 911.146489][ T8868] Bluetooth: hci0: command tx timeout [ 911.411013][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 911.422735][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 911.436791][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 911.457257][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 911.484217][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 911.699957][T10910] fuse: Bad value for 'fd' [ 911.734011][ T3246] hsr_slave_0: left promiscuous mode [ 911.788994][ T3246] hsr_slave_1: left promiscuous mode [ 911.831277][ T3246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 911.895667][ T3246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.951025][ T3246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 911.991158][ T3246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 912.155352][T10918] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 912.281795][ T3246] veth1_macvtap: left promiscuous mode [ 912.322868][ T3246] veth0_macvtap: left promiscuous mode [ 912.352429][ T3246] veth1_vlan: left promiscuous mode [ 912.360138][ T3246] veth0_vlan: left promiscuous mode [ 913.243349][ T8868] Bluetooth: hci0: command tx timeout [ 913.686987][ T8868] Bluetooth: hci2: command tx timeout [ 915.305159][ T8868] Bluetooth: hci0: command tx timeout [ 915.308475][ T3246] team0 (unregistering): Port device team_slave_1 removed [ 915.419162][ T3246] team0 (unregistering): Port device team_slave_0 removed [ 915.703760][ T8868] Bluetooth: hci2: command tx timeout [ 916.909136][T10960] input: syz1 as /devices/virtual/input/input46 [ 916.977205][T10960] input: failed to attach handler leds to device input46, error: -6 [ 917.784231][ T8868] Bluetooth: hci2: command tx timeout [ 918.139044][T10976] fuse: Bad value for 'fd' [ 918.843551][T10984] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 919.872615][ T8868] Bluetooth: hci2: command tx timeout [ 921.257782][ T3246] bridge_slave_1: left allmulticast mode [ 921.266007][ T3246] bridge_slave_1: left promiscuous mode [ 921.272917][ T3246] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.349380][ T3246] bridge_slave_0: left allmulticast mode [ 921.355718][ T3246] bridge_slave_0: left promiscuous mode [ 921.363259][ T3246] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.389078][ T3246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.440132][ T3246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.470239][ T3246] bond0 (unregistering): Released all slaves [ 922.646639][T11007] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 922.656612][T11007] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 922.666449][T11007] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 922.710428][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 922.710500][ T29] audit: type=1800 audit(1781701150.826:53): pid=11007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.809" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 923.106787][T11022] input: syz1 as /devices/virtual/input/input47 [ 923.471797][ T3246] hsr_slave_0: left promiscuous mode [ 923.516593][ T3246] hsr_slave_1: left promiscuous mode [ 923.539989][ T3246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 923.606772][ T3246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.249447][T11044] raw_sendmsg: syz.5.815 forgot to set AF_INET. Fix it! [ 926.126148][T11044] ceph: No mds server is up or the cluster is laggy [ 927.100164][ T5681] libceph: connect (1)[c::]:6789 error -101 [ 927.745521][ T5681] libceph: mon0 (1)[c::]:6789 connect error [ 927.812417][ T3246] team0 (unregistering): Port device team_slave_1 removed [ 927.856803][ T3246] team0 (unregistering): Port device team_slave_0 removed [ 928.357571][ T5232] 8021q: adding VLAN 0 to HW filter on device eth13 [ 929.252555][T10858] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.322723][T10858] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.330381][T10858] bridge_slave_0: entered allmulticast mode [ 929.364911][T10858] bridge_slave_0: entered promiscuous mode [ 929.510781][T10858] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.528116][T10858] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.545093][T10858] bridge_slave_1: entered allmulticast mode [ 929.555800][T10858] bridge_slave_1: entered promiscuous mode [ 930.794368][T10858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.971390][T10858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.508130][T10858] team0: Port device team_slave_0 added [ 931.641566][T10858] team0: Port device team_slave_1 added [ 932.108849][T10858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.125368][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.216970][T10858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.277196][T10858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.313394][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.316842][T11097] overlayfs: statfs failed on './file0' [ 932.399448][T10858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 933.071654][T11080] Bluetooth: hci6: command 0x0406 tx timeout [ 933.085176][T10860] Bluetooth: hci7: command 0x0406 tx timeout [ 933.274297][T10858] hsr_slave_0: entered promiscuous mode [ 933.316828][T10858] hsr_slave_1: entered promiscuous mode [ 935.008855][T10905] bridge0: port 1(bridge_slave_0) entered blocking state [ 935.053407][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.092629][T10905] bridge_slave_0: entered allmulticast mode [ 935.195880][T10905] bridge_slave_0: entered promiscuous mode [ 935.290256][T10905] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.316603][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.352945][T10905] bridge_slave_1: entered allmulticast mode [ 935.530178][T10905] bridge_slave_1: entered promiscuous mode [ 936.557013][ T5232] 8021q: adding VLAN 0 to HW filter on device eth14 [ 936.933285][T10905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.028128][T10905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.356478][T10905] team0: Port device team_slave_0 added [ 937.478034][T10905] team0: Port device team_slave_1 added [ 937.845718][T10905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.856050][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.909632][T10905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.981329][T10905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.019942][T10905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.113454][T10905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.089937][T10905] hsr_slave_0: entered promiscuous mode [ 939.108609][T10905] hsr_slave_1: entered promiscuous mode [ 939.148348][T10905] debugfs: 'hsr0' already exists in 'hsr' [ 939.170183][T10905] Cannot create hsr debugfs directory [ 939.504206][T10858] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 940.299856][T10858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 940.483319][T10858] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 941.092424][T10858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 941.237700][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.244652][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.439631][T10858] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 942.485613][T10858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 942.550673][T10858] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 942.638130][T10858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 942.819560][T11179] 9pnet_virtio: no channels available for device syz [ 942.901204][T11179] overlayfs: overlapping lowerdir path [ 943.309910][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 946.152188][T10858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 946.659183][T10905] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 946.803439][T10905] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 946.818454][T10905] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 946.935136][T10905] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 946.975334][T10858] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.017627][T10905] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 947.660130][T10905] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 947.843875][T10905] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 948.004642][T10905] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 948.197562][ T5232] 8021q: adding VLAN 0 to HW filter on device eth15 [ 948.689881][ T770] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.697514][ T770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.740440][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.747960][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.988109][T11233] misc userio: Invalid payload size [ 949.075964][T11233] 9pnet_virtio: no channels available for device syz [ 950.937026][T10905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.370090][T10905] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.527822][ T5894] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.535430][ T5894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.722492][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.730031][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.446859][T11257] netlink: 40 bytes leftover after parsing attributes in process `syz.8.856'. [ 955.680318][T10858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.246799][T11288] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 956.253535][T11288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 956.318775][T11288] vhci_hcd vhci_hcd.0: Device attached [ 956.572436][ T5681] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 956.613783][ T5690] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 956.854289][ T5690] usb 9-1: Using ep0 maxpacket: 16 [ 956.899923][ T5690] usb 9-1: unable to get BOS descriptor or descriptor too short [ 956.963693][ T5690] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 956.998840][ T5690] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 957.100209][ T5690] usb 9-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 957.131766][ T5690] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 957.212586][ T5690] usb 9-1: Manufacturer: 걪瀸㴴䰴腨䥰缢۸鳘➼錚ê¶ï ˆíž¡ë—¥ä½ë“„繰맂ꔕ䡓뎊軰맼Ᾰí™çŽ¤í•ˆä­´á¢ä¢î’î…檅ﮈ쥭䬯护î¡ä°“䃭æ‚罘䭌䄓肈뤑颎䇫⭼ì£åŽ›ìª€ç†¥å¯ìƒŸ [ 957.277528][ T5690] usb 9-1: SerialNumber: 걪瀸㴴䰴腨䥰缢۸鳘➼錚ê¶ï ˆíž¡ë—¥ä½ë“„繰맂ꔕ䡓뎊軰맼Ᾰí™çŽ¤í•ˆä­´á¢ä¢î’î…檅ﮈ쥭䬯护î¡ä°“䃭æ‚罘䭌䄓肈뤑颎䇫⭼ì£åŽ›ìª€ç†¥å¯ìƒŸ [ 957.605406][T11290] usb 49-1: recv xbuf, 0 [ 957.630077][ T5894] vhci_hcd vhci_hcd.8: stop threads [ 957.692749][ T5894] vhci_hcd vhci_hcd.8: release socket [ 957.718146][ T5894] vhci_hcd vhci_hcd.8: disconnect device [ 957.763160][ T5681] usb 49-1: device descriptor read/64, error -71 [ 957.984821][ T5681] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 958.056737][ T5690] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 958.077768][T10905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.787225][ T5690] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 958.912805][ T5690] usb 9-1: USB disconnect, device number 2 [ 959.179133][T10390] udevd[10390]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 959.277199][T10905] veth0_vlan: entered promiscuous mode [ 959.531086][T10858] veth0_vlan: entered promiscuous mode [ 959.584033][T10905] veth1_vlan: entered promiscuous mode [ 960.071063][T10858] veth1_vlan: entered promiscuous mode [ 960.660670][T10905] veth0_macvtap: entered promiscuous mode [ 960.883959][T10905] veth1_macvtap: entered promiscuous mode [ 960.980571][T10858] veth0_macvtap: entered promiscuous mode [ 961.164754][T10858] veth1_macvtap: entered promiscuous mode [ 961.398446][T10905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.631359][T10905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.723592][T10858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.965580][T10858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.184746][ T5891] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.232601][ T5891] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.609161][ T5891] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.618438][ T5891] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.628927][ T5894] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.785000][ T5894] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.910139][ T3246] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.965214][ T3246] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.880372][T11355] netlink: 40 bytes leftover after parsing attributes in process `syz.8.867'. [ 967.390925][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 967.407265][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 967.419859][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 967.458969][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 967.478674][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 967.597904][T11369] loop5: detected capacity change from 0 to 7 [ 967.759440][T11369] Dev loop5: unable to read RDB block 7 [ 967.776979][T11369] loop5: unable to read partition table [ 967.819995][T11369] loop5: partition table beyond EOD, truncated [ 967.841628][T11369] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 969.094313][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 969.104284][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 969.115148][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 969.140069][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 969.154577][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 969.542249][ T8868] Bluetooth: hci3: command tx timeout [ 971.129220][T10608] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.223142][ T8868] Bluetooth: hci4: command tx timeout [ 971.699437][ T8868] Bluetooth: hci3: command tx timeout [ 972.786243][T10608] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.126097][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 973.140674][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 973.162597][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 973.185906][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 973.204760][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 973.302972][ T48] Bluetooth: hci4: command tx timeout [ 973.448572][T10608] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.782542][ T48] Bluetooth: hci3: command tx timeout [ 973.856663][T10608] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.302652][ T48] Bluetooth: hci0: command tx timeout [ 975.382447][ T48] Bluetooth: hci4: command tx timeout [ 975.586883][T11454] netlink: 40 bytes leftover after parsing attributes in process `syz.8.877'. [ 975.882315][ T48] Bluetooth: hci3: command tx timeout [ 977.681310][ T8868] Bluetooth: hci4: command tx timeout [ 977.681310][ T48] Bluetooth: hci0: command tx timeout [ 978.689878][T10608] bridge_slave_1: left allmulticast mode [ 978.714666][T10608] bridge_slave_1: left promiscuous mode [ 978.741121][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.806467][T10608] bridge_slave_0: left allmulticast mode [ 978.833853][T10608] bridge_slave_0: left promiscuous mode [ 978.867028][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 979.782832][ T48] Bluetooth: hci0: command tx timeout [ 980.224362][T10608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.309461][T10608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.334530][T10608] bond0 (unregistering): Released all slaves [ 981.015358][T10608] hsr_slave_0: left promiscuous mode [ 981.036352][T10608] hsr_slave_1: left promiscuous mode [ 981.050940][T10608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 981.090581][T10608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 981.121580][T10608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 981.152941][T10608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.245061][T10608] veth1_macvtap: left promiscuous mode [ 981.266212][T10608] veth0_macvtap: left promiscuous mode [ 981.282544][T10608] veth1_vlan: left promiscuous mode [ 981.291280][T10608] veth0_vlan: left promiscuous mode [ 981.868067][ T48] Bluetooth: hci0: command tx timeout [ 983.673751][T10608] team0 (unregistering): Port device team_slave_1 removed [ 983.790710][T10608] team0 (unregistering): Port device team_slave_0 removed [ 985.633929][T11518] netlink: 40 bytes leftover after parsing attributes in process `syz.8.885'. [ 986.953398][T10608] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.205319][T10608] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.897524][T10608] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.367935][ T8373] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 988.418599][T10608] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.660246][ T8373] usb 9-1: unable to get BOS descriptor or descriptor too short [ 988.716468][ T8373] usb 9-1: not running at top speed; connect to a high speed hub [ 988.720901][T11370] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.733316][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.741149][T11370] bridge_slave_0: entered allmulticast mode [ 988.754154][T11370] bridge_slave_0: entered promiscuous mode [ 988.805465][ T8373] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 988.821182][ T8373] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 988.943137][T11370] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.945734][ T8373] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 988.973499][ T8373] usb 9-1: config 14 has no interface number 0 [ 988.979938][ T8373] usb 9-1: config 14 has no interface number 1 [ 988.993026][ T8373] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 989.024400][ T8373] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 989.046577][ T8373] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 989.059628][ T8373] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 989.078542][ T8373] usb 9-1: config 14 interface 57 has no altsetting 0 [ 989.105589][ T8373] usb 9-1: config 14 interface 228 has no altsetting 0 [ 989.233471][T11370] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.267541][T11370] bridge_slave_1: entered allmulticast mode [ 989.270655][ T8373] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 989.287917][ T8373] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.360888][T11370] bridge_slave_1: entered promiscuous mode [ 989.363796][ T8373] usb 9-1: Product: syz [ 989.415376][ T8373] usb 9-1: Manufacturer: syz [ 989.431646][ T8373] usb 9-1: SerialNumber: syz [ 989.933939][T11370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.055312][ T8373] legousbtower 9-1:14.57: interrupt endpoints not found [ 990.455500][ T8373] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 990.514930][ T8373] legousbtower 9-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 990.552867][T11370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.798128][T11393] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.827703][T11393] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.870334][T11393] bridge_slave_0: entered allmulticast mode [ 990.916486][T11393] bridge_slave_0: entered promiscuous mode [ 991.232904][ C1] usb 9-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 991.246249][ T8583] usb 9-1: USB disconnect, device number 3 [ 991.307931][ T8583] legousbtower 9-1:14.228: LEGO USB Tower #-160 now disconnected [ 991.424496][T11393] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.438067][T11393] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.461544][T11393] bridge_slave_1: entered allmulticast mode [ 991.493671][T11393] bridge_slave_1: entered promiscuous mode [ 991.643090][T11370] team0: Port device team_slave_0 added [ 991.881273][T11370] team0: Port device team_slave_1 added [ 992.383032][T11393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.443557][T10608] bridge_slave_1: left allmulticast mode [ 992.449494][T10608] bridge_slave_1: left promiscuous mode [ 992.508212][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.610208][T10608] bridge_slave_0: left allmulticast mode [ 992.648103][T10608] bridge_slave_0: left promiscuous mode [ 992.678797][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.768498][T10608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.854650][T10608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.882495][T10608] bond0 (unregistering): Released all slaves [ 994.949944][T11370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.989003][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 995.076348][T11370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.150219][T11393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.692404][T11370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 995.818073][T11370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.105065][T11370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.365155][T10608] hsr_slave_0: left promiscuous mode [ 996.379998][T10608] hsr_slave_1: left promiscuous mode [ 996.400505][T10608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.418314][T10608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.483203][T10608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.502299][T10608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.687178][T10608] veth1_macvtap: left promiscuous mode [ 996.712609][T10608] veth0_macvtap: left promiscuous mode [ 996.786584][T10608] veth1_vlan: left promiscuous mode [ 996.806925][T10608] veth0_vlan: left promiscuous mode [ 998.517911][ T8373] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 998.762585][ T8373] usb 9-1: unable to get BOS descriptor or descriptor too short [ 998.787329][ T8373] usb 9-1: not running at top speed; connect to a high speed hub [ 998.824099][ T8373] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 998.841248][ T8373] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 998.872241][ T8373] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 998.913388][ T8373] usb 9-1: config 14 has no interface number 0 [ 998.956563][ T8373] usb 9-1: config 14 has no interface number 1 [ 998.976129][ T8373] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 999.010458][ T8373] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 999.076031][ T8373] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 999.090154][ T8373] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 999.111216][ T8373] usb 9-1: config 14 interface 57 has no altsetting 0 [ 999.121150][T10608] team0 (unregistering): Port device team_slave_1 removed [ 999.123176][ T8373] usb 9-1: config 14 interface 228 has no altsetting 0 [ 999.176622][ T8373] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 999.186540][ T8373] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.207460][ T8373] usb 9-1: Product: syz [ 999.217271][ T8373] usb 9-1: Manufacturer: syz [ 999.229793][T10608] team0 (unregistering): Port device team_slave_0 removed [ 999.233782][ T8373] usb 9-1: SerialNumber: syz [ 999.799831][ T8373] legousbtower 9-1:14.57: interrupt endpoints not found [ 999.960673][T11393] team0: Port device team_slave_0 added [ 1000.174785][ T8373] legousbtower 9-1:14.228: get version request failed: -121 [ 1000.199925][ T8373] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121 [ 1000.278782][T11393] team0: Port device team_slave_1 added [ 1000.403456][ T8373] usb 9-1: USB disconnect, device number 4 [ 1000.765199][T11434] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.786318][T11434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.797214][T11434] bridge_slave_0: entered allmulticast mode [ 1000.838209][T11434] bridge_slave_0: entered promiscuous mode [ 1000.952539][T11370] hsr_slave_0: entered promiscuous mode [ 1000.978691][T11370] hsr_slave_1: entered promiscuous mode [ 1001.023069][T11393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1001.054377][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1001.142144][T11393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1001.193338][T11434] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.224984][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.253831][T11434] bridge_slave_1: entered allmulticast mode [ 1001.495498][T11434] bridge_slave_1: entered promiscuous mode [ 1002.046516][T11393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.058368][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.085565][T11393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.347062][T11434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.681443][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.688154][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.688704][T11434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.205551][T10608] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.260364][T11393] hsr_slave_0: entered promiscuous mode [ 1003.271570][T11393] hsr_slave_1: entered promiscuous mode [ 1003.302984][T11393] debugfs: 'hsr0' already exists in 'hsr' [ 1003.309167][T11393] Cannot create hsr debugfs directory [ 1003.351710][T11666] input: syz1 as /devices/virtual/input/input48 [ 1003.397371][T11666] input: failed to attach handler leds to device input48, error: -6 [ 1003.533364][T11434] team0: Port device team_slave_0 added [ 1003.971210][T11434] team0: Port device team_slave_1 added [ 1004.290464][T10608] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.392733][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.5.906'. [ 1004.507567][T11673] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1004.866125][T10608] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.946799][T11434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1004.981003][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.078753][T11434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.333935][T11434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.341056][T11434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.373191][T11434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.452266][ T8583] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1005.486249][T10608] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.649043][ T8583] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1005.689360][ T8583] usb 9-1: not running at top speed; connect to a high speed hub [ 1005.725620][ T8583] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1005.746052][ T8583] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1005.783576][ T8583] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.880524][ T8583] usb 9-1: config 14 has no interface number 0 [ 1005.929333][ T8583] usb 9-1: config 14 has no interface number 1 [ 1005.967925][ T8583] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1006.086330][ T8583] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1006.207419][ T8583] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1006.280626][ T8583] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1006.356292][ T8583] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1006.414998][ T8583] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1006.467231][ T8583] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1006.493124][ T8583] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.525525][ T8583] usb 9-1: Product: syz [ 1006.553571][ T8583] usb 9-1: Manufacturer: syz [ 1006.582684][ T8583] usb 9-1: SerialNumber: syz [ 1006.899733][T11434] hsr_slave_0: entered promiscuous mode [ 1006.927255][T11434] hsr_slave_1: entered promiscuous mode [ 1006.938321][T11434] debugfs: 'hsr0' already exists in 'hsr' [ 1006.946092][T11434] Cannot create hsr debugfs directory [ 1007.066274][ T8583] legousbtower 9-1:14.57: interrupt endpoints not found [ 1007.441090][ T8583] legousbtower 9-1:14.228: get version request failed: -121 [ 1007.459908][ T8583] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121 [ 1007.653071][ T5690] usb 9-1: USB disconnect, device number 5 [ 1007.988739][T10608] bridge_slave_1: left allmulticast mode [ 1007.996893][T10608] bridge_slave_1: left promiscuous mode [ 1008.009726][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.027336][T10608] bridge_slave_0: left allmulticast mode [ 1008.048678][T10608] bridge_slave_0: left promiscuous mode [ 1008.057687][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.782377][T10608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.821791][T10608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.880785][T10608] bond0 (unregistering): Released all slaves [ 1009.245251][T10608] tipc: Left network mode [ 1009.990087][T11733] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1010.514061][T10608] hsr_slave_0: left promiscuous mode [ 1010.556770][T10608] hsr_slave_1: left promiscuous mode [ 1010.582855][T10608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.612512][T10608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.626986][T10608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.641132][T11745] netlink: 12 bytes leftover after parsing attributes in process `syz.8.916'. [ 1010.654730][T10608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.718017][T10608] veth1_macvtap: left promiscuous mode [ 1010.726555][T10608] veth0_macvtap: left promiscuous mode [ 1010.738411][T10608] veth1_vlan: left promiscuous mode [ 1010.746448][T10608] veth0_vlan: left promiscuous mode [ 1012.589738][T10608] team0 (unregistering): Port device team_slave_1 removed [ 1012.675059][T10608] team0 (unregistering): Port device team_slave_0 removed [ 1013.478166][T11393] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1013.523357][T11393] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1013.540458][T11393] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1013.585947][T11393] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1013.643690][T11393] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1013.691158][T11393] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1013.722983][T11393] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1013.743184][T11393] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1013.761624][ T5232] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1013.773575][ T8583] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1014.000883][ T8583] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1014.062440][ T8583] usb 9-1: not running at top speed; connect to a high speed hub [ 1014.118602][ T8583] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1014.162551][ T8583] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1014.171482][T11370] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1014.213163][ T8583] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.303544][ T8583] usb 9-1: config 14 has no interface number 0 [ 1014.320921][T11370] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1014.332768][ T8583] usb 9-1: config 14 has no interface number 1 [ 1014.358955][ T8583] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1014.387523][ T8583] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1014.413561][ T8583] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1014.434120][ T8583] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1014.445977][T11370] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1014.473590][ T8583] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1014.504072][ T8583] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1014.521204][T11370] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.557072][ T8583] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1014.581290][ T8583] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.616358][ T8583] usb 9-1: Product: syz [ 1014.648266][T11370] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1014.658103][ T8583] usb 9-1: Manufacturer: syz [ 1014.678257][ T8583] usb 9-1: SerialNumber: syz [ 1014.758745][T11370] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1014.851017][T11370] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1014.918255][T11370] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1015.168450][ T8583] legousbtower 9-1:14.57: interrupt endpoints not found [ 1015.570879][ T8583] legousbtower 9-1:14.228: get version request failed: -121 [ 1015.604639][ T8583] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -121 [ 1015.787578][ T8583] usb 9-1: USB disconnect, device number 6 [ 1015.864956][T11434] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1015.945059][T11434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.013015][T11434] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1016.110338][T11434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1016.158033][T11434] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1016.202662][T11434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1016.242137][T11434] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1016.295691][T11434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1016.935650][T11393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.067127][T11393] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.138301][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz.8.926'. [ 1018.366745][ T3246] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.374640][ T3246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.499107][T11370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.708545][ T3246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.716205][ T3246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.966796][T11370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.139526][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.147237][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.277175][ T3246] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.284963][ T3246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.465699][T11434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.015914][T11434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.209251][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.216893][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.437460][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.445091][ T6236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.056147][ T5681] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1021.279666][ T5681] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1021.315582][ T5681] usb 9-1: not running at top speed; connect to a high speed hub [ 1021.366004][ T5681] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1021.408053][ T5681] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1021.440069][ T5681] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.496134][ T5681] usb 9-1: config 14 has no interface number 0 [ 1022.162033][ T5681] usb 9-1: config 14 has no interface number 1 [ 1022.174618][ T5681] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1022.187632][ T5681] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1022.203219][ T5681] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1022.260522][ T5681] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1022.628427][ T5681] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1022.659141][ T5681] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1022.727713][ T5681] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1022.759056][ T5681] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.804316][ T5681] usb 9-1: Product: syz [ 1022.822850][ T5681] usb 9-1: Manufacturer: syz [ 1022.845766][ T5681] usb 9-1: SerialNumber: syz [ 1023.534366][ T5681] legousbtower 9-1:14.57: interrupt endpoints not found [ 1023.879670][ T5681] legousbtower 9-1:14.228: get version request failed: -71 [ 1023.971344][ T5681] legousbtower 9-1:14.228: probe with driver legousbtower failed with error -71 [ 1024.176736][ T5681] usb 9-1: USB disconnect, device number 7 [ 1026.261448][T11393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1026.682900][T11885] netlink: 12 bytes leftover after parsing attributes in process `syz.5.935'. [ 1026.951685][ T8868] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1026.978369][ T8868] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1027.011018][ T8868] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1027.032788][ T8868] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1027.048519][ T8868] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1029.142466][ T48] Bluetooth: hci2: command tx timeout [ 1029.481547][T11434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.526466][T10607] bridge_slave_1: left allmulticast mode [ 1030.571535][T10607] bridge_slave_1: left promiscuous mode [ 1030.593470][T10607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.673212][T10607] bridge_slave_0: left allmulticast mode [ 1030.699418][T10607] bridge_slave_0: left promiscuous mode [ 1030.729145][T10607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.812467][ T8868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1030.829975][ T8868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1030.840433][ T8868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1030.859650][ T8868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1030.888790][ T8868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1031.228733][ T48] Bluetooth: hci2: command tx timeout [ 1032.104999][T10607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.192577][T10607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.212359][ T8868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1032.223683][ T8868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1032.236240][ T8868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1032.253600][ T8868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1032.268458][ T8868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1032.268855][T10607] bond0 (unregistering): Released all slaves [ 1032.938573][T10607] hsr_slave_0: left promiscuous mode [ 1032.982198][ T8868] Bluetooth: hci3: command tx timeout [ 1032.990747][T10607] hsr_slave_1: left promiscuous mode [ 1033.066524][T10607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.118888][T10607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.303451][ T8868] Bluetooth: hci2: command tx timeout [ 1034.343097][ T8868] Bluetooth: hci4: command tx timeout [ 1035.027363][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.5.944'. [ 1035.069323][ T8868] Bluetooth: hci3: command tx timeout [ 1035.238991][T10607] team0 (unregistering): Port device team_slave_1 removed [ 1035.339035][T10607] team0 (unregistering): Port device team_slave_0 removed [ 1035.382856][ T8868] Bluetooth: hci2: command tx timeout [ 1036.422398][ T8868] Bluetooth: hci4: command tx timeout [ 1036.971615][T11997] fuse: Unknown parameter 'grou00000000000000000000' [ 1037.144917][ T8868] Bluetooth: hci3: command tx timeout [ 1038.503409][ T8868] Bluetooth: hci4: command tx timeout [ 1038.574214][T12021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1039.222617][ T8868] Bluetooth: hci3: command tx timeout [ 1040.588807][ T8868] Bluetooth: hci4: command tx timeout [ 1040.667927][T12046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.953'. [ 1040.685895][T11887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.709000][T11887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.736466][T11887] bridge_slave_0: entered allmulticast mode [ 1040.746102][T11887] bridge_slave_0: entered promiscuous mode [ 1040.778666][T11887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.786509][T11887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.814403][T11887] bridge_slave_1: entered allmulticast mode [ 1040.845687][T11887] bridge_slave_1: entered promiscuous mode [ 1041.245423][T11887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.542583][T11887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.087131][T11887] team0: Port device team_slave_0 added [ 1042.229033][ T3246] bridge_slave_1: left allmulticast mode [ 1042.240117][ T3246] bridge_slave_1: left promiscuous mode [ 1042.253678][ T3246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.281145][ T3246] bridge_slave_0: left allmulticast mode [ 1042.287664][ T3246] bridge_slave_0: left promiscuous mode [ 1042.295896][ T3246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.318486][ T3246] bridge_slave_1: left allmulticast mode [ 1042.328228][ T3246] bridge_slave_1: left promiscuous mode [ 1042.368720][ T3246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.408468][ T3246] bridge_slave_0: left allmulticast mode [ 1042.429269][ T3246] bridge_slave_0: left promiscuous mode [ 1042.449617][ T3246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.583736][ T3246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.609936][ T3246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.627787][ T3246] bond0 (unregistering): Released all slaves [ 1046.973663][ T3246] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.996780][ T3246] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.026831][ T3246] bond0 (unregistering): Released all slaves [ 1047.063139][T11887] team0: Port device team_slave_1 added [ 1047.722101][ T3246] hsr_slave_0: left promiscuous mode [ 1047.745744][ T3246] hsr_slave_1: left promiscuous mode [ 1047.780059][ T3246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.798129][ T3246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1047.835320][ T3246] hsr_slave_0: left promiscuous mode [ 1047.845906][ T3246] hsr_slave_1: left promiscuous mode [ 1047.874469][ T3246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.888796][ T3246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.054553][ T3246] team0 (unregistering): Port device team_slave_1 removed [ 1049.136577][ T3246] team0 (unregistering): Port device team_slave_0 removed [ 1049.507022][T12090] fuse: Unknown parameter 'grou00000000000000000000' [ 1050.099233][ T3246] team0 (unregistering): Port device team_slave_1 removed [ 1050.186275][ T3246] team0 (unregistering): Port device team_slave_0 removed [ 1050.629639][T12104] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1050.759089][T11887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.788531][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.864339][T11887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.935517][T11887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.978737][T11887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1051.146383][T11887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1051.641449][T12118] netlink: 12 bytes leftover after parsing attributes in process `syz.8.961'. [ 1052.958431][T11887] hsr_slave_0: entered promiscuous mode [ 1053.008920][T11887] hsr_slave_1: entered promiscuous mode [ 1053.030988][T11940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.097298][T11940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.117407][T11940] bridge_slave_0: entered allmulticast mode [ 1053.134484][T11940] bridge_slave_0: entered promiscuous mode [ 1053.327894][T11940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.360784][T11940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.385812][T11940] bridge_slave_1: entered allmulticast mode [ 1053.428886][T11940] bridge_slave_1: entered promiscuous mode [ 1053.454066][T12136] tipc: Started in network mode [ 1053.486042][T12136] tipc: Node identity 6e2b2141e379, cluster identity 4711 [ 1053.495867][T12136] tipc: Enabled bearer , priority 0 [ 1053.558231][T12139] syzkaller0: entered promiscuous mode [ 1053.576578][T12139] syzkaller0: entered allmulticast mode [ 1053.814816][T12131] tipc: Resetting bearer [ 1053.869810][T12131] tipc: Disabling bearer [ 1054.020353][T11940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.068080][T11940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.261501][T11953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.282262][T11953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.299947][T11953] bridge_slave_0: entered allmulticast mode [ 1054.327830][T11953] bridge_slave_0: entered promiscuous mode [ 1054.346581][T11953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.355266][T11953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.364405][T11953] bridge_slave_1: entered allmulticast mode [ 1054.375403][T11953] bridge_slave_1: entered promiscuous mode [ 1054.578590][T11940] team0: Port device team_slave_0 added [ 1054.687931][T12150] fuse: Unknown parameter 'grou00000000000000000000' [ 1054.881491][T11940] team0: Port device team_slave_1 added [ 1055.111525][T11953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.287785][T11953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.368629][T11940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.377952][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.451759][T11940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.487486][T11940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.494812][T11940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.567544][T11940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.897112][T11953] team0: Port device team_slave_0 added [ 1055.988631][T11953] team0: Port device team_slave_1 added [ 1056.488150][T11940] hsr_slave_0: entered promiscuous mode [ 1056.518934][T11940] hsr_slave_1: entered promiscuous mode [ 1056.544948][T11940] debugfs: 'hsr0' already exists in 'hsr' [ 1056.557011][T11940] Cannot create hsr debugfs directory [ 1056.663893][T11953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.697866][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.778133][T11953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.817748][T11953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.837200][T11953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.903818][T11953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.440627][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.8.969'. [ 1057.863759][T11953] hsr_slave_0: entered promiscuous mode [ 1057.898898][T11953] hsr_slave_1: entered promiscuous mode [ 1057.928627][T11953] debugfs: 'hsr0' already exists in 'hsr' [ 1057.956778][T11953] Cannot create hsr debugfs directory [ 1059.382976][T11887] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1059.447497][T11887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1059.554700][T11887] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1059.606328][T11887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1059.626928][T11887] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1059.679929][T11887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1059.706130][T11887] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1059.732313][T11887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1059.980342][T12197] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1060.495586][T12208] fuse: Unknown parameter 'group_i00000000000000000000' [ 1060.968615][T12213] binder: 12211:12213 ioctl 4018620d 0 returned -22 [ 1060.991735][T12213] binder: 12211:12213 ioctl c0306201 200000000040 returned -22 [ 1061.069027][T12213] binder: 12211:12213 ioctl c0306201 200000000640 returned -22 [ 1061.100750][T12213] binder: 12211:12213 ioctl c0306201 2000000001c0 returned -11 [ 1061.571056][T11887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.021229][T11887] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.124670][T11940] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1062.210970][T11940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1062.242762][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.250409][ T5896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.260783][T12224] netlink: 12 bytes leftover after parsing attributes in process `syz.8.977'. [ 1062.293259][T11940] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1062.330413][T11940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.387410][T11940] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1062.443831][T11940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.475219][T10606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.482710][T10606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.567038][T11940] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1062.615220][T11940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.966322][T11953] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1063.061015][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.100482][T11953] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1063.191641][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.274466][T11953] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1063.288043][T12239] 9pnet_virtio: no channels available for device syz [ 1063.343005][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.379866][T11953] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1063.460790][T11953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1064.114750][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.133592][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.889502][T12256] fuse: Unknown parameter 'group_i00000000000000000000' [ 1065.548404][T11953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.638308][T11940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.881362][T11953] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.049256][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.056966][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.147517][T11940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.303495][T12268] binder: 12267:12268 ioctl 4018620d 0 returned -22 [ 1066.316620][T12268] binder: 12267:12268 ioctl c0306201 200000000040 returned -22 [ 1066.334646][T12268] binder: 12267:12268 ioctl c0306201 200000000640 returned -22 [ 1066.335485][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.349959][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.350879][T12268] binder: 12267:12268 ioctl c0306201 2000000001c0 returned -11 [ 1066.415276][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.422851][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.627351][T10606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.634946][T10606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.027775][ T8583] libceph: connect (1)[c::]:6789 error -101 [ 1069.159017][ T8583] libceph: mon0 (1)[c::]:6789 connect error [ 1069.404331][T12283] ceph: No mds server is up or the cluster is laggy [ 1069.604469][T10160] libceph: connect (1)[c::]:6789 error -101 [ 1069.624428][T10160] libceph: mon0 (1)[c::]:6789 connect error [ 1071.871123][T12312] tipc: Enabled bearer , priority 0 [ 1071.993992][T12312] syzkaller0: entered promiscuous mode [ 1072.031102][T12312] syzkaller0: entered allmulticast mode [ 1072.081681][T12317] fuse: Unknown parameter 'group_i00000000000000000000' [ 1072.142802][T11887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.183851][T12311] tipc: Resetting bearer [ 1072.275864][T12311] tipc: Disabling bearer [ 1073.094953][T11887] veth0_vlan: entered promiscuous mode [ 1073.259149][T12330] binder: 12329:12330 ioctl 4018620d 0 returned -22 [ 1073.274129][T11887] veth1_vlan: entered promiscuous mode [ 1073.313350][T12330] binder: 12329:12330 ioctl c0306201 200000000040 returned -22 [ 1073.353768][T12330] binder: 12329:12330 ioctl c0306201 200000000640 returned -22 [ 1073.401560][T12330] binder: 12329:12330 ioctl c0306201 2000000001c0 returned -11 [ 1073.697867][T11887] veth0_macvtap: entered promiscuous mode [ 1073.836820][T11887] veth1_macvtap: entered promiscuous mode [ 1074.072356][T11887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1074.212597][T11887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1074.439938][T10606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.498167][T10606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.528405][ T5891] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.574139][ T5896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.024875][T11953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.136096][T12349] ceph: No mds server is up or the cluster is laggy [ 1075.177980][ T9144] libceph: connect (1)[c::]:6789 error -101 [ 1075.184376][ T9144] libceph: mon0 (1)[c::]:6789 connect error [ 1075.431640][T11940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.450046][ T9144] libceph: connect (1)[c::]:6789 error -101 [ 1075.526503][ T9144] libceph: mon0 (1)[c::]:6789 connect error [ 1076.167221][T11953] veth0_vlan: entered promiscuous mode [ 1076.317760][T11953] veth1_vlan: entered promiscuous mode [ 1077.008031][T11953] veth0_macvtap: entered promiscuous mode [ 1077.105796][T11953] veth1_macvtap: entered promiscuous mode [ 1077.341945][T11953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.470281][T11953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.605490][ T770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.644165][ T770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.686361][ T770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.725586][ T770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.502992][T12388] fuse: Unknown parameter 'group_id00000000000000000000' [ 1078.709343][T11940] veth0_vlan: entered promiscuous mode [ 1079.506007][T11940] veth1_vlan: entered promiscuous mode [ 1080.139631][T11940] veth0_macvtap: entered promiscuous mode [ 1080.232946][T11940] veth1_macvtap: entered promiscuous mode [ 1080.470751][T12407] syzkaller0: entered promiscuous mode [ 1080.491493][T12407] syzkaller0: entered allmulticast mode [ 1080.569842][T12414] binder: 12413:12414 ioctl c0306201 200000000040 returned -22 [ 1080.755289][T11940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.869869][T11940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.027869][T10606] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.046192][T10606] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.106847][T10606] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.135869][T10606] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.484326][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1002'. [ 1083.927856][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.952059][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.256030][ T3246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.298002][ T3246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.905840][T12468] fuse: Unknown parameter 'group_id00000000000000000000' [ 1086.330083][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1086.340982][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1086.356714][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1086.387310][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1086.402374][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1087.122756][T10606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.184297][T10606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.118992][ T3246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.154224][ T3246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.502075][ T8868] Bluetooth: hci0: command tx timeout [ 1089.036300][T12498] syzkaller0: entered promiscuous mode [ 1089.060054][T12498] syzkaller0: entered allmulticast mode [ 1089.244346][ T9144] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1089.491519][ T9144] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1089.540900][ T9144] usb 4-1: not running at top speed; connect to a high speed hub [ 1089.604999][ T9144] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1089.631751][ T9144] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1089.670419][ T9144] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.696150][ T9144] usb 4-1: config 14 has no interface number 0 [ 1089.764977][ T9144] usb 4-1: config 14 has no interface number 1 [ 1089.771385][ T9144] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1089.817203][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.847636][ T9144] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1089.912298][ T9144] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1089.946543][ T9144] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1089.993777][ T9144] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1090.009074][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.022028][ T9144] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1090.076973][ T9144] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1090.109261][ T9144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.139575][ T9144] usb 4-1: Product: syz [ 1090.157294][ T9144] usb 4-1: Manufacturer: syz [ 1090.194237][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.201975][ T9144] usb 4-1: SerialNumber: syz [ 1090.535743][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.583170][ T8868] Bluetooth: hci0: command tx timeout [ 1090.680898][ T9144] legousbtower 4-1:14.57: interrupt endpoints not found [ 1090.808504][T12516] binder: 12514:12516 ioctl c0306201 200000000040 returned -22 [ 1091.069356][ T9144] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1091.277208][ T9144] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1093.300776][ T8868] Bluetooth: hci0: command tx timeout [ 1096.876211][ T48] Bluetooth: hci0: command tx timeout [ 1097.576190][ T34] bridge_slave_1: left allmulticast mode [ 1097.582815][ T34] bridge_slave_1: left promiscuous mode [ 1097.594988][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.699923][ T34] bridge_slave_0: left allmulticast mode [ 1097.727374][ T34] bridge_slave_0: left promiscuous mode [ 1097.786053][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.853748][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1097.879927][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1097.890066][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1097.914517][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1097.927994][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1098.264523][ T9144] usb 4-1: USB disconnect, device number 2 [ 1098.331856][ T9144] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1099.005652][T12543] fuse: Unknown parameter 'group_id00000000000000000000' [ 1099.908961][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1100.022254][ T48] Bluetooth: hci2: command tx timeout [ 1100.035894][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1100.128143][ T34] bond0 (unregistering): Released all slaves [ 1102.103956][ T48] Bluetooth: hci2: command tx timeout [ 1104.202961][ T48] Bluetooth: hci2: command tx timeout [ 1104.861659][ T34] hsr_slave_0: left promiscuous mode [ 1104.878372][ T34] hsr_slave_1: left promiscuous mode [ 1104.888794][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.896826][T12579] binder: 12577:12579 ioctl c0306201 200000000040 returned -22 [ 1104.898966][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.953092][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.971528][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.016033][ T34] veth1_macvtap: left promiscuous mode [ 1105.021736][ T34] veth0_macvtap: left promiscuous mode [ 1105.036196][ T34] veth1_vlan: left promiscuous mode [ 1105.042854][ T34] veth0_vlan: left promiscuous mode [ 1105.997633][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1106.052587][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1106.063830][T10160] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 1106.262122][ T48] Bluetooth: hci2: command tx timeout [ 1106.268073][T10160] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1106.288296][T10160] usb 4-1: not running at top speed; connect to a high speed hub [ 1106.320491][T10160] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1106.330305][T10160] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1106.342707][T10160] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1106.358848][T10160] usb 4-1: config 14 has no interface number 0 [ 1106.389976][T10160] usb 4-1: config 14 has no interface number 1 [ 1106.400739][T12576] syzkaller0: entered promiscuous mode [ 1106.406879][T10160] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1106.418755][T12576] syzkaller0: entered allmulticast mode [ 1106.428656][T10160] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1106.456736][T10160] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1106.469712][T10160] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1106.500473][T10160] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1106.523700][T10160] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1106.579495][T10160] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1106.618649][T10160] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.637222][T10160] usb 4-1: Product: syz [ 1106.641659][T10160] usb 4-1: Manufacturer: syz [ 1106.656640][T10160] usb 4-1: SerialNumber: syz [ 1106.965197][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.186927][T10160] legousbtower 4-1:14.57: interrupt endpoints not found [ 1107.213289][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.462763][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.574283][T10160] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1107.639150][T10160] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1107.805094][T12596] fuse: Bad value for 'user_id' [ 1107.825644][T12596] fuse: Bad value for 'user_id' [ 1108.166562][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.426044][T12602] usb 4-1: LEGO USB Tower reset control request failed [ 1109.709836][T11845] usb 4-1: USB disconnect, device number 3 [ 1109.768408][T11845] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 1111.408687][ T34] bridge_slave_1: left allmulticast mode [ 1111.432714][ T34] bridge_slave_1: left promiscuous mode [ 1111.469872][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.523406][ T34] bridge_slave_0: left allmulticast mode [ 1111.548061][ T34] bridge_slave_0: left promiscuous mode [ 1111.556757][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.368432][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.416457][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.475921][ T34] bond0 (unregistering): Released all slaves [ 1112.751132][T12641] fuse: Bad value for 'user_id' [ 1112.781267][T12641] fuse: Bad value for 'user_id' [ 1113.001626][ T34] hsr_slave_0: left promiscuous mode [ 1113.014931][ T34] hsr_slave_1: left promiscuous mode [ 1113.029149][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1113.043319][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1113.060923][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1113.080529][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1113.126517][ T34] veth1_macvtap: left promiscuous mode [ 1113.132830][ T34] veth0_macvtap: left promiscuous mode [ 1113.141330][ T34] veth1_vlan: left promiscuous mode [ 1113.148688][ T34] veth0_vlan: left promiscuous mode [ 1113.222159][ T5681] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 1113.399268][ T5681] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1113.420611][ T5681] usb 9-1: not running at top speed; connect to a high speed hub [ 1113.448261][ T5681] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1113.459348][ T5681] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1113.490285][ T5681] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.521366][ T5681] usb 9-1: config 14 has no interface number 0 [ 1113.529231][ T5681] usb 9-1: config 14 has no interface number 1 [ 1113.540098][ T5681] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1113.569304][ T5681] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1113.582269][ T5681] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1113.582537][T11853] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1113.602020][ T5681] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1113.639337][ T5681] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1113.647093][ T5681] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1113.665912][ T5681] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1113.679242][ T5681] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.689247][ T5681] usb 9-1: Product: syz [ 1113.700781][ T5681] usb 9-1: Manufacturer: syz [ 1113.718486][ T5681] usb 9-1: SerialNumber: syz [ 1113.804222][T11853] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 1113.830425][T11853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1113.848798][T11853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1113.860980][T11853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1113.886898][T11853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1113.901709][T11853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1113.913997][T11853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1113.934640][T11853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1113.969737][T11853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1113.997107][T11853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1114.022417][T11853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1114.039863][T11853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1114.056675][T11853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1114.070169][T11853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1114.088785][T11853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1114.118327][T11853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1114.137167][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1114.157910][T11853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1114.167777][T11853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1114.181221][T11853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1114.200739][ T5681] legousbtower 9-1:14.57: interrupt endpoints not found [ 1114.209662][T11853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1114.216047][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1114.236202][T11853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1114.248579][T11853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1114.260790][T11853] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1114.271457][T11853] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1114.284466][T11853] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1114.302107][T11853] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1114.312705][T11853] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1114.321312][T11853] usb 6-1: Product: syz [ 1114.331393][T11853] usb 6-1: Manufacturer: syz [ 1114.362668][T11853] usb 6-1: SerialNumber: syz [ 1114.376250][T11853] usb 6-1: config 0 descriptor?? [ 1114.416335][T11853] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 1114.589284][ T5681] legousbtower 9-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1114.657270][ T5681] legousbtower 9-1:14.228: LEGO USB Tower #-159 now attached to major 180 minor 1 [ 1115.405861][T12474] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.414979][T12474] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.429005][T12474] bridge_slave_0: entered allmulticast mode [ 1115.454208][ T5681] usb 9-1: USB disconnect, device number 8 [ 1115.471761][T12474] bridge_slave_0: entered promiscuous mode [ 1115.535829][ T5681] legousbtower 9-1:14.228: LEGO USB Tower #-159 now disconnected [ 1115.589286][T12474] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.671300][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.704970][T12474] bridge_slave_1: entered allmulticast mode [ 1115.755233][T12474] bridge_slave_1: entered promiscuous mode [ 1115.874888][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1037'. [ 1116.855843][T10160] usb 6-1: USB disconnect, device number 2 [ 1116.878007][T10160] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 1116.901342][T12474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.947826][T12474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.339168][T12474] team0: Port device team_slave_0 added [ 1118.499131][T12474] team0: Port device team_slave_1 added [ 1119.146288][T12474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.153660][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.282065][T12474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.331011][T12474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.366191][T12474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.414694][T12678] fuse: Bad value for 'user_id' [ 1119.420646][T12678] fuse: Bad value for 'user_id' [ 1119.439328][T12474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.767036][T12531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.784223][T12531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.798215][T12531] bridge_slave_0: entered allmulticast mode [ 1119.812452][T12531] bridge_slave_0: entered promiscuous mode [ 1119.868599][T12531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.897254][T12531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.931514][T12531] bridge_slave_1: entered allmulticast mode [ 1119.986022][T12531] bridge_slave_1: entered promiscuous mode [ 1121.717988][T12531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.749101][T12531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.819604][T12474] hsr_slave_0: entered promiscuous mode [ 1121.855921][T12474] hsr_slave_1: entered promiscuous mode [ 1121.896194][T12693] syzkaller0: entered promiscuous mode [ 1121.929434][T12693] syzkaller0: entered allmulticast mode [ 1122.156889][T12531] team0: Port device team_slave_0 added [ 1122.262668][ T5681] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 1122.301448][T12699] binder: 12698:12699 ioctl 4018620d 0 returned -22 [ 1122.361275][T12531] team0: Port device team_slave_1 added [ 1123.003703][ T5681] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1123.323936][ T5681] usb 9-1: not running at top speed; connect to a high speed hub [ 1123.657739][ T5681] usb 9-1: config 14 has an invalid interface number: 57 but max is 1 [ 1123.738491][ T5681] usb 9-1: config 14 has an invalid interface number: 228 but max is 1 [ 1123.837687][ T5681] usb 9-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.901686][ T5681] usb 9-1: config 14 has no interface number 0 [ 1123.932061][ T5681] usb 9-1: config 14 has no interface number 1 [ 1123.939340][ T5681] usb 9-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1123.974223][ T5681] usb 9-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1124.428999][ T5681] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1124.440698][ T5681] usb 9-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 1124.452233][ T5681] usb 9-1: config 14 interface 57 has no altsetting 0 [ 1124.459216][ T5681] usb 9-1: config 14 interface 228 has no altsetting 0 [ 1124.485875][ T5681] usb 9-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1124.497809][ T5681] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.510317][ T5681] usb 9-1: Product: syz [ 1124.515687][ T5681] usb 9-1: Manufacturer: syz [ 1124.520607][ T5681] usb 9-1: SerialNumber: syz [ 1126.486199][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.492904][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1129.570806][T12531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.622077][T12531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.629193][T12531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.823245][ T5681] usb 9-1: can't set config #14, error -110 [ 1131.414590][T12531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1131.440103][T12531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1131.472049][ T5681] usb 9-1: USB disconnect, device number 9 [ 1131.522494][T12531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.152780][T12531] hsr_slave_0: entered promiscuous mode [ 1133.171375][T12531] hsr_slave_1: entered promiscuous mode [ 1133.217806][T12531] debugfs: 'hsr0' already exists in 'hsr' [ 1133.232082][T12531] Cannot create hsr debugfs directory [ 1133.407272][T12729] fuse: Bad value for 'fd' [ 1134.776656][T12474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1134.834301][T12474] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1134.885701][T12734] tipc: Started in network mode [ 1134.895174][T12734] tipc: Node identity d267c63e0e3b, cluster identity 4711 [ 1134.904638][T12734] tipc: Enabled bearer , priority 0 [ 1134.917957][T12474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1134.967938][T12474] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1135.004187][T12734] syzkaller0: entered promiscuous mode [ 1135.017102][T12734] syzkaller0: entered allmulticast mode [ 1135.072988][T12474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1135.122802][T12474] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1135.239621][T12734] tipc: Resetting bearer [ 1135.264657][T12474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1135.332008][T12474] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1135.343731][ C1] ===================================================== [ 1135.351060][ C1] BUG: KMSAN: uninit-value in __flush_smp_call_function_queue+0x343/0x1810 [ 1135.359833][ C1] __flush_smp_call_function_queue+0x343/0x1810 [ 1135.366239][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1135.373379][ C1] __sysvec_call_function_single+0x48/0x350 [ 1135.379451][ C1] sysvec_call_function_single+0x7c/0x90 [ 1135.385369][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 1135.391510][ C1] virt_to_page_or_null+0x51/0x170 [ 1135.396786][ C1] kmsan_get_metadata+0xf1/0x160 [ 1135.401871][ C1] kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 1135.407666][ C1] __msan_metadata_ptr_for_load_1+0x24/0x40 [ 1135.413711][ C1] __scm_recv_common+0x6f/0x910 [ 1135.418773][ C1] scm_recv_unix+0x5e/0x580 [ 1135.423391][ C1] __unix_dgram_recvmsg+0x14e1/0x1750 [ 1135.428943][ C1] unix_dgram_recvmsg+0x112/0x180 [ 1135.434096][ C1] sock_recvmsg_nosec+0x1e2/0x270 [ 1135.439287][ C1] ____sys_recvmsg+0x4e5/0x620 [ 1135.444226][ C1] ___sys_recvmsg+0x20b/0x850 [ 1135.449052][ C1] do_recvmmsg+0x40e/0xdf0 [ 1135.453571][ C1] __x64_sys_recvmmsg+0x383/0x500 [ 1135.458702][ C1] x64_sys_call+0x96d/0x3ea0 [ 1135.463426][ C1] do_syscall_64+0x15d/0x3c0 [ 1135.468129][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.474146][ C1] [ 1135.476526][ C1] Local variable tmp created at: [ 1135.481513][ C1] number+0x83/0x2190 [ 1135.485661][ C1] vsnprintf+0xd0d/0x1b00 [ 1135.490108][ C1] [ 1135.492524][ C1] CPU: 1 UID: 0 PID: 12724 Comm: syz.8.1050 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1135.503604][ C1] Tainted: [L]=SOFTLOCKUP [ 1135.507990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1135.518129][ C1] ===================================================== [ 1135.525124][ C1] Disabling lock debugging due to kernel taint [ 1135.531347][ C1] Kernel panic - not syncing: kmsan.panic set ... [ 1135.537863][ C1] CPU: 1 UID: 0 PID: 12724 Comm: syz.8.1050 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 1135.548964][ C1] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1135.554572][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1135.564728][ C1] Call Trace: [ 1135.568069][ C1] [ 1135.570977][ C1] __dump_stack+0x26/0x30 [ 1135.575446][ C1] dump_stack_lvl+0x50/0x1c0 [ 1135.580170][ C1] ? dump_stack+0x12/0x25 [ 1135.584666][ C1] dump_stack+0x1e/0x25 [ 1135.588946][ C1] vpanic+0x7b4/0x1430 [ 1135.593182][ C1] panic+0x15d/0x160 [ 1135.597263][ C1] kmsan_report+0x31a/0x320 [ 1135.601927][ C1] ? __msan_warning+0x1b/0x30 [ 1135.606743][ C1] ? __flush_smp_call_function_queue+0x343/0x1810 [ 1135.613323][ C1] ? generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1135.620600][ C1] ? __sysvec_call_function_single+0x48/0x350 [ 1135.626821][ C1] ? sysvec_call_function_single+0x7c/0x90 [ 1135.632800][ C1] ? asm_sysvec_call_function_single+0x1f/0x30 [ 1135.639092][ C1] ? virt_to_page_or_null+0x51/0x170 [ 1135.644547][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.649819][ C1] ? kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 1135.655789][ C1] ? __msan_metadata_ptr_for_load_1+0x24/0x40 [ 1135.662009][ C1] ? __scm_recv_common+0x6f/0x910 [ 1135.667159][ C1] ? scm_recv_unix+0x5e/0x580 [ 1135.671958][ C1] ? __unix_dgram_recvmsg+0x14e1/0x1750 [ 1135.677626][ C1] ? unix_dgram_recvmsg+0x112/0x180 [ 1135.682957][ C1] ? sock_recvmsg_nosec+0x1e2/0x270 [ 1135.688305][ C1] ? ____sys_recvmsg+0x4e5/0x620 [ 1135.693409][ C1] ? ___sys_recvmsg+0x20b/0x850 [ 1135.698417][ C1] ? do_recvmmsg+0x40e/0xdf0 [ 1135.703113][ C1] ? __x64_sys_recvmmsg+0x383/0x500 [ 1135.708445][ C1] ? x64_sys_call+0x96d/0x3ea0 [ 1135.713365][ C1] ? do_syscall_64+0x15d/0x3c0 [ 1135.718263][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.724476][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1135.730475][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.735767][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1135.742266][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.747558][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.752839][ C1] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1135.759330][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.764608][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1135.770593][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.775882][ C1] __msan_warning+0x1b/0x30 [ 1135.780538][ C1] __flush_smp_call_function_queue+0x343/0x1810 [ 1135.786954][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.792257][ C1] generic_smp_call_function_single_interrupt+0x1c/0x30 [ 1135.799364][ C1] __sysvec_call_function_single+0x48/0x350 [ 1135.805422][ C1] sysvec_call_function_single+0x7c/0x90 [ 1135.811238][ C1] [ 1135.814234][ C1] [ 1135.817230][ C1] asm_sysvec_call_function_single+0x1f/0x30 [ 1135.823365][ C1] RIP: 0010:virt_to_page_or_null+0x51/0x170 [ 1135.829436][ C1] Code: 48 85 f6 74 1a 31 c0 e9 fd 2f 4d 0e cc 48 3d ff ff ff 1f 77 f0 48 8b 15 5d ff b7 0f 48 01 c2 55 48 89 e5 65 ff 05 67 5f b1 12 <48> 89 d6 48 c1 ee 1b b9 00 00 08 00 eb 08 cc cc cc b9 00 00 00 02 [ 1135.849186][ C1] RSP: 0018:ffff8880878c36b0 EFLAGS: 00000282 [ 1135.855379][ C1] RAX: ffff8880acfa4724 RBX: ffff88802cfa4724 RCX: 000000000000002e [ 1135.863453][ C1] RDX: 000000002cfa4724 RSI: 0000000000000000 RDI: ffff88802cfa4724 [ 1135.871523][ C1] RBP: ffff8880878c36b0 R08: ffffea000000000f R09: ffffffff8dbaa8f0 [ 1135.879612][ C1] R10: ffff888237cb2028 R11: ffffffff8ef28b00 R12: 0000000000000008 [ 1135.887778][ C1] R13: ffff88802cfa4724 R14: 0000000000000000 R15: ffff8880878c3800 [ 1135.895861][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1135.901558][ C1] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1135.907473][ C1] kmsan_get_metadata+0xf1/0x160 [ 1135.912607][ C1] kmsan_get_shadow_origin_ptr+0x35/0xb0 [ 1135.918435][ C1] __msan_metadata_ptr_for_load_1+0x24/0x40 [ 1135.924506][ C1] __scm_recv_common+0x6f/0x910 [ 1135.929501][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.934809][ C1] scm_recv_unix+0x5e/0x580 [ 1135.939446][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.944735][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1135.950732][ C1] __unix_dgram_recvmsg+0x14e1/0x1750 [ 1135.956286][ C1] unix_dgram_recvmsg+0x112/0x180 [ 1135.961468][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1135.967181][ C1] sock_recvmsg_nosec+0x1e2/0x270 [ 1135.972368][ C1] ____sys_recvmsg+0x4e5/0x620 [ 1135.977357][ C1] ___sys_recvmsg+0x20b/0x850 [ 1135.982236][ C1] ? kmsan_internal_check_memory+0x9f/0x240 [ 1135.988301][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1135.993576][ C1] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1135.999567][ C1] do_recvmmsg+0x40e/0xdf0 [ 1136.004121][ C1] ? stack_depot_save_flags+0x35/0x790 [ 1136.009758][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1136.015066][ C1] __x64_sys_recvmmsg+0x383/0x500 [ 1136.020209][ C1] ? kmsan_get_metadata+0xf1/0x160 [ 1136.025501][ C1] x64_sys_call+0x96d/0x3ea0 [ 1136.030252][ C1] do_syscall_64+0x15d/0x3c0 [ 1136.034969][ C1] ? clear_bhb_loop+0x50/0xa0 [ 1136.039793][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.045817][ C1] RIP: 0033:0x7f477339ce59 [ 1136.050344][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1136.070079][ C1] RSP: 002b:00007f47742f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1136.078632][ C1] RAX: ffffffffffffffda RBX: 00007f4773616090 RCX: 00007f477339ce59 [ 1136.086710][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1136.094777][ C1] RBP: 00007f4773432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1136.102837][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1136.110898][ C1] R13: 00007f4773616128 R14: 00007f4773616090 R15: 00007fff65762428 [ 1136.119007][ C1] [ 1136.122420][ C1] Kernel Offset: disabled [ 1136.126802][ C1] Rebooting in 86400 seconds..