last executing test programs: 8m13.254252937s ago: executing program 1 (id=210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10a, 0xfffffffffffffffe}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setgroups(0x0, 0x0) setregid(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) getpeername(r1, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x80) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @dev, @dev}, &(0x7f00000003c0)=0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x20, 0x3, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x100099f3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 8m12.058198757s ago: executing program 1 (id=211): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_bcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x10150) 8m9.643644939s ago: executing program 1 (id=216): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) 8m8.554907862s ago: executing program 1 (id=219): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x6c) fcntl$setlease(r3, 0x400, 0x0) link(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x800) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x15, 0x3, 'sed\x00', 0x1, 0x0, 0x4}, 0x2c) socket$kcm(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$ax25(r4, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x104}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8m2.750908703s ago: executing program 1 (id=229): fsopen(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) 8m0.982895546s ago: executing program 1 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ee6000/0x1000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @local}, 0x10001}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x32315659, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}}) ioctl$KDGKBMETA(r4, 0x4bfa, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) 7m44.742779887s ago: executing program 32 (id=234): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ee6000/0x1000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @local}, 0x10001}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0xe, 0x32315659, 0x0, 0x0, 0x0, 0x3, 0xfeedcafe, 0x3, 0x0, 0x2, 0x2}}) ioctl$KDGKBMETA(r4, 0x4bfa, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) 5m58.965174038s ago: executing program 2 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) write$binfmt_elf64(r6, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x2e, 0x2, 0x8, 0x7fffffffffffffff, 0x2, 0x3e, 0x2, 0x359, 0x40, 0x71, 0x10001, 0x9, 0x38, 0x4, 0x4, 0xf, 0x5}, [{0x5, 0x5, 0xfff, 0x1, 0x0, 0x3, 0x5, 0x10000000000}, {0x1, 0x0, 0x0, 0x6, 0xff, 0x9, 0x6, 0xffff}, {0x6, 0x9, 0x0, 0x0, 0xfffffffffffffffa, 0x4, 0x80, 0x3}, {0x2, 0x9, 0xe27, 0x8, 0x8, 0x3, 0x9, 0x6}], "b27b3f98beab13eafe025e1e33ced08758cc6048e4bab4f19caa8e68f878de7ceaeda0afb5e1b4150babe5af1e5362d31e13579917c0ace9f41fb09eb39e2de539995b3a1eeaa11d10120b6964800d668f8029f6c8b3109b85ab5c9f1969368350de3475ce582ad8d8eb33e61a55fa1ac1ccb4bb99625e3d370a47ab1cd1fdc5db77d35a8b330cc65256e9618729cf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9af) io_uring_setup(0x346, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_setup(0x80000001, &(0x7f0000000080)) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write(r7, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r7, 0x8b24f000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, r2, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 5m57.921474319s ago: executing program 2 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x10, r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020) write$binfmt_elf64(r6, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x2e, 0x2, 0x8, 0x7fffffffffffffff, 0x2, 0x3e, 0x2, 0x359, 0x40, 0x71, 0x10001, 0x9, 0x38, 0x4, 0x4, 0xf, 0x5}, [{0x5, 0x5, 0xfff, 0x1, 0x0, 0x3, 0x5, 0x10000000000}, {0x1, 0x0, 0x0, 0x6, 0xff, 0x9, 0x6, 0xffff}, {0x6, 0x9, 0x0, 0x0, 0xfffffffffffffffa, 0x4, 0x80, 0x3}, {0x2, 0x9, 0xe27, 0x8, 0x8, 0x3, 0x9, 0x6}], "b27b3f98beab13eafe025e1e33ced08758cc6048e4bab4f19caa8e68f878de7ceaeda0afb5e1b4150babe5af1e5362d31e13579917c0ace9f41fb09eb39e2de539995b3a1eeaa11d10120b6964800d668f8029f6c8b3109b85ab5c9f1969368350de3475ce582ad8d8eb33e61a55fa1ac1ccb4bb99625e3d370a47ab1cd1fdc5db77d35a8b330cc65256e9618729cf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9af) io_uring_setup(0x346, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_setup(0x80000001, &(0x7f0000000080)) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write(r7, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r7, 0x8b24f000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, r2, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 5m55.68503583s ago: executing program 2 (id=526): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x6c) fcntl$setlease(r3, 0x400, 0x0) link(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x800) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) socket$kcm(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) bind$ax25(r4, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$ax25(r4, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @null, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8=r0], 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x7a360) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x104}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffff001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5m49.661194262s ago: executing program 2 (id=535): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x8, 0x1, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000100)=""/41, 0x29}, {&(0x7f0000000680)=""/139, 0x8b}, {&(0x7f0000000740)=""/254, 0xfe}, {&(0x7f00000005c0)=""/104, 0x68}, {&(0x7f0000000940)=""/19, 0x13}, {&(0x7f0000000980)=""/76, 0x4c}, {0x0}, {0x0}], &(0x7f0000000d00)=[0x6, 0x9, 0x7fff, 0x4a, 0xfffffffffffffffd]}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000020000080000000000000000105000000080000000000000001000005000000400000000001"], 0x0, 0x5a}, 0x28) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8a, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}], 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f00000002c0)=0x10) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={r2, 0x2}, 0x8) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0xb, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9}) 5m49.421272877s ago: executing program 2 (id=537): fsopen(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x43) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0000078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7b8df8e61740b9af2d4d58654a4af0fa0ce1f830cc1eaf991fd00"}, 0xd8) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xca, 0x4) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) ftruncate(r4, 0x2007ffb) sched_setattr(r1, 0x0, 0x0) 5m47.277872892s ago: executing program 2 (id=540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) getdents(r1, &(0x7f0000000f40)=""/243, 0xf3) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 5m30.667558754s ago: executing program 33 (id=540): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) getdents(r1, &(0x7f0000000f40)=""/243, 0xf3) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) 21.322446032s ago: executing program 3 (id=1247): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x0, 0x1, 0x0, &(0x7f0000000c40), 0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000020000080000000000000000105000000080000000000000001000005000000400000000001"], 0x0, 0x5a}, 0x28) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8a, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}], 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f00000002c0)=0x10) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={r3, 0x2}, 0x8) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0xb, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9}) 20.487917651s ago: executing program 3 (id=1250): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xf3) chdir(0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000008c0)={0xc0}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 19.005526738s ago: executing program 3 (id=1253): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x7, 0x0) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) io_cancel(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004140)="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", 0x2000, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 16.796033176s ago: executing program 5 (id=1257): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0d", 0x1e}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15.37238648s ago: executing program 5 (id=1260): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200"], 0xa0}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) write$binfmt_elf64(r7, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x2e, 0x2, 0x8, 0x7fffffffffffffff, 0x2, 0x3e, 0x2, 0x359, 0x40, 0x71, 0x10001, 0x9, 0x38, 0x4, 0x4, 0xf, 0x5}, [{0x5, 0x5, 0xfff, 0x1, 0x0, 0x3, 0x5, 0x10000000000}, {0x1, 0x0, 0x0, 0x6, 0xff, 0x9, 0x6, 0xffff}, {0x6, 0x9, 0x0, 0x0, 0xfffffffffffffffa, 0x4, 0x80, 0x3}, {0x2, 0x9, 0xe27, 0x8, 0x8, 0x3, 0x9, 0x6}], "b27b3f98beab13eafe025e1e33ced08758cc6048e4bab4f19caa8e68f878de7ceaeda0afb5e1b4150babe5af1e5362d31e13579917c0ace9f41fb09eb39e2de539995b3a1eeaa11d10120b6964800d668f8029f6c8b3109b85ab5c9f1969368350de3475ce582ad8d8eb33e61a55fa1ac1ccb4bb99625e3d370a47ab1cd1fdc5db77d35a8b330cc65256e9618729cf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9af) io_uring_setup(0x346, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_setup(0x80000001, &(0x7f0000000080)) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write(r8, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r8, 0x8b24f000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 14.121874483s ago: executing program 5 (id=1262): socket(0x11, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 13.584944195s ago: executing program 0 (id=1264): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r3, 0x0, r4, 0x0, 0x10000000000016, 0x0) 12.451023091s ago: executing program 0 (id=1265): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0xffe, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x1, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) readv(r2, 0x0, 0x0) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 10.632293537s ago: executing program 6 (id=1267): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x4, 0xf, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn, @generic={0x8, 0xa3, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x270}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.527153684s ago: executing program 0 (id=1268): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unlink(&(0x7f0000000000)='./cgroup/file0\x00') ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df, 0x6}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) 8.792374495s ago: executing program 6 (id=1270): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="1beb41ea4ea9ca354f167d9eaee7dc35eca218b865688d79fe31cbe00d190c853bfe6a22bd7dec0023aa0e038d07000040e37e00f7dd3afafdbc70e1b5928033df5e82fd76f31e8b29a0f05c2cef56f56cd0330dc984004f220b7dcb23a05d530df65691cf6a3cceb7a97c673856f552ded9530b52fe6d1e662090d2802233ec1adca9eaab9dd6f04b2717ed1552cf46dc28cd3fbf1ec1eaedd80d1da838a00a1e229ce16d2c1a411be06f715e8b6aa7552800d5282e4e0bf3eaf55a", 0xbc}, {&(0x7f0000000b00)}], 0x2, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0d", 0x1e}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.610787396s ago: executing program 0 (id=1271): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0800c3007413000008"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)}], 0x1, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.523676849s ago: executing program 6 (id=1273): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@getsadinfo={0x78, 0x23, 0x10, 0x70bd28, 0x25dfdbfd, 0x0, [@algo_aead={0x5a, 0x12, {{'echainiv(echainiv(aegis128l))\x00'}, 0x70, 0x200, "80455d7cc4e880fe39ff57ed9f47"}}, @replay_thresh={0x8, 0xb, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x800, 0x100000, 0x1000}}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xf}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x32600) 6.581833594s ago: executing program 3 (id=1274): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740), 0x0, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6.508124739s ago: executing program 5 (id=1275): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b534, 0x1, 0x18, 0x13, "53af0f0b4ece6c29bf81c173f4a8f5f73eb62f"}) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) epoll_create(0xaf2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xb5{\xa0k\x95s\xa8l\xd4\b|m\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}', 0x42, 0x101, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x26aadf42, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r6) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36, 0x0) close(r5) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r7, &(0x7f0000000280)={0x2, 0x80, @remote}, 0x10) close(r7) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030e000000002800000000000004000900a800b0f453bb467d04f14562c5f463273ef4a720564f485af200000003000600000000000200100000000000000000000000000002000100000000000000060d00000000030005000000000002000000ac1414000000000000000000", @ANYRES32=r0, @ANYRES32=r5], 0x70}, 0x1, 0x7}, 0x40000) 6.32091496s ago: executing program 3 (id=1276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r3, 0x0, r4, 0x0, 0x10000000000016, 0x0) 6.210616937s ago: executing program 6 (id=1277): socket$packet(0x11, 0x3, 0x300) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6ee, &(0x7f0000000d80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpgid(0x0) sched_rr_get_interval(r0, &(0x7f0000000200)) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x3, &(0x7f0000000080)={0x3, 0xa5b}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r2, 0x200004) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) openat(r3, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400202, 0x12b) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)) 4.907566293s ago: executing program 0 (id=1278): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000080)='./file0\x00', 0x115) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0xfffffff9) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x100000000003ff, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, &(0x7f0000000c80)=""/135, 0x87) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000a00)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8004080}, 0x0) 4.823803807s ago: executing program 4 (id=1279): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) fchdir(0xffffffffffffffff) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, &(0x7f0000000d40)=[{0x0, 0x1, 0x0, &(0x7f0000000c40), 0x0}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000300000000020000000200000020000080000000000000000105000000080000000000000001000005000000400000000001"], 0x0, 0x5a}, 0x28) clock_adjtime(0x17, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7ff, 0x8a, 0x3, 0x6, 0x7ffffffe, 0x3, 0x4, 0x9, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x800000, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in={0x2, 0x4e20, @local}], 0x10) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000300)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)='q', 0x1}], 0x1}}], 0x1, 0xf0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f00000002c0)=0x10) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000d80)={r3, 0x2}, 0x8) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x1ff, 0x2, {0xb, @vbi={0x3, 0xec, 0x4, 0xa0363159, [0x1, 0x2], [0x2, 0x3], 0x108}}, 0x9}) 3.803886347s ago: executing program 4 (id=1280): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="020000000000800080001200080001007674693674"], 0xa0}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x10, r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@nested={0xc, 0xb, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) write$binfmt_elf64(r7, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x2e, 0x2, 0x8, 0x7fffffffffffffff, 0x2, 0x3e, 0x2, 0x359, 0x40, 0x71, 0x10001, 0x9, 0x38, 0x4, 0x4, 0xf, 0x5}, [{0x5, 0x5, 0xfff, 0x1, 0x0, 0x3, 0x5, 0x10000000000}, {0x1, 0x0, 0x0, 0x6, 0xff, 0x9, 0x6, 0xffff}, {0x6, 0x9, 0x0, 0x0, 0xfffffffffffffffa, 0x4, 0x80, 0x3}, {0x2, 0x9, 0xe27, 0x8, 0x8, 0x3, 0x9, 0x6}], "b27b3f98beab13eafe025e1e33ced08758cc6048e4bab4f19caa8e68f878de7ceaeda0afb5e1b4150babe5af1e5362d31e13579917c0ace9f41fb09eb39e2de539995b3a1eeaa11d10120b6964800d668f8029f6c8b3109b85ab5c9f1969368350de3475ce582ad8d8eb33e61a55fa1ac1ccb4bb99625e3d370a47ab1cd1fdc5db77d35a8b330cc65256e9618729cf", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9af) io_uring_setup(0x346, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_setup(0x80000001, &(0x7f0000000080)) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write(r8, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000003, 0x13, r8, 0x8b24f000) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x64, r3, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback={0xffff0000}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x0) 2.770258328s ago: executing program 4 (id=1281): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x98, 0x29, 0x4, {0x4, 0xf, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @hopopts={{0x118, 0x29, 0x36, {0x5e, 0x20, '\x00', [@generic={0xff, 0x23, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b"}, @pad1, @pad1, @padn, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0xa3, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005"}, @calipso={0x7, 0x20, {0x3, 0x6, 0x3, 0x7, [0x0, 0x8000, 0xffffffffffffff04]}}, @generic={0x1}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x278}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.72403675s ago: executing program 0 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000000)="1c681411f7a496c0dacc6a3c24465b016f64b4c00b5f7c691cb24cb8000000001a0000200000000000201500", 0x0, 0x48) 2.611566987s ago: executing program 6 (id=1283): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r3, @ANYBLOB="0800c300741300000800c40001"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7", 0x1f}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x2, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.55594006s ago: executing program 3 (id=1284): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x7, 0x0) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) io_cancel(0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x4, {0x7, 0x29, 0x100001, 0x24ff871999e0dde7, 0x1, 0x1, 0xd, 0x8, 0x0, 0x0, 0x8, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)={{}, {0x1, 0x7}, [], {}, [], {0x10, 0x6}, {0x20, 0x4}}, 0x4, 0x3) io_getevents(0x0, 0x1, 0x1, &(0x7f0000000040)=[{}], 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) 2.440833317s ago: executing program 5 (id=1285): recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x640, 0x300, 0x40, 0x1000, 0x4, 0x2, 0x0, 0x100, {0x0, 0x40003000}, {0x3, 0x2, 0xfffffffd}, {0x4000000, 0x7}, {0x0, 0x28, 0x40000}, 0x0, 0x3f0, 0x0, 0x7, 0x0, 0x40000, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x8) timerfd_create(0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) personality(0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd, 0x3, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) sched_getscheduler(r1) 2.22200487s ago: executing program 6 (id=1286): socket(0x11, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000540)={'bond_slave_1\x00', @ifru_flags=0x1000}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x7ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0003000000000000000000000000ffff"], 0x4c}}, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.101001547s ago: executing program 5 (id=1287): r0 = socket$inet_sctp(0x2, 0x1, 0x84) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4) syz_emit_ethernet(0x6e, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@getsadinfo={0x78, 0x23, 0x10, 0x70bd28, 0x25dfdbfd, 0x0, [@algo_aead={0x5a, 0x12, {{'echainiv(echainiv(aegis128l))\x00'}, 0x70, 0x200, "80455d7cc4e880fe39ff57ed9f47"}}, @replay_thresh={0x8, 0xb, 0x80000000}]}, 0x78}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, 0x0, 0x1) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x11, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x800, 0x100000, 0x1000}}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xf}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x4c014) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x32600) 1.502199962s ago: executing program 4 (id=1288): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0800c3007413000008"], 0x33fe0}, 0x1, 0x0, 0x0, 0x40002}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000004c80)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)}], 0x1, 0x0, 0x0, 0x4004090}, {0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)="d21e61c0af08368aedabcf6e445f1ca30a2f37d1f6d14042afeb21e49b0da7fd9f", 0x21}, {&(0x7f0000000c00)}], 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000fc0)}], 0x2, 0x0, 0x0, 0x84090}], 0x3, 0x4004000) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.131706914s ago: executing program 4 (id=1289): r0 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40085) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) r4 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r4) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) 0s ago: executing program 4 (id=1290): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0xf3) chdir(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000008c0)={0xc0}) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): team0: link becomes ready [ 82.120739][ T4269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.159598][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.197010][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.221579][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.231714][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.241360][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.253467][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.264332][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.280244][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.293064][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.306561][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.313915][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.329797][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.339939][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.351758][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.359345][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.371237][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.380785][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.441239][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.454854][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.465027][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.473976][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.484654][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.496560][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.523365][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.540182][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.562128][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.577576][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.596102][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.616967][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.637523][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.685133][ T4280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.755821][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.788090][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.822690][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.848855][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.860506][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.874917][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.895054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.940102][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.966669][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.012722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.050615][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.094257][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.123770][ T4278] device veth0_vlan entered promiscuous mode [ 83.150297][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.166597][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.216440][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.252954][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.276952][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.287388][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.298207][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.306398][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.318724][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.328611][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.338530][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.348056][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.368784][ T4278] device veth1_vlan entered promiscuous mode [ 83.378577][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.397466][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.426739][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.455365][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.520077][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.534343][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.551248][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 83.551274][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 83.560427][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 83.583388][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.602193][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.616489][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 83.616585][ T4274] Bluetooth: hci2: command 0x040f tx timeout [ 83.653109][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.665353][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.702596][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.734944][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.745382][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.755295][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.766600][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.783888][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.797334][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.818997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.830242][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.840827][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.854245][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.873403][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.883827][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.901335][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.916524][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.948761][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.974005][ T4278] device veth0_macvtap entered promiscuous mode [ 84.009232][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.030126][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.060236][ T4278] device veth1_macvtap entered promiscuous mode [ 84.089151][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.123144][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.135410][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.146361][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.158160][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.168696][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.182017][ T4268] device veth0_vlan entered promiscuous mode [ 84.219693][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.233334][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.243295][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.253508][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.272973][ T4269] device veth0_vlan entered promiscuous mode [ 84.287984][ T4280] device veth0_vlan entered promiscuous mode [ 84.309604][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.318431][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.329329][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.348509][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.366397][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.376962][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.386611][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.408028][ T4280] device veth1_vlan entered promiscuous mode [ 84.417595][ T4269] device veth1_vlan entered promiscuous mode [ 84.441999][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.461835][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.477158][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.488938][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.500990][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.511767][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.545144][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.557361][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.568895][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.584075][ T4268] device veth1_vlan entered promiscuous mode [ 84.601312][ T4280] device veth0_macvtap entered promiscuous mode [ 84.613584][ T4278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.624910][ T4278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.634773][ T4278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.646753][ T4278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.670925][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.685323][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.694600][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.704526][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.713546][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.738421][ T4280] device veth1_macvtap entered promiscuous mode [ 84.764193][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.780919][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.791473][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.806820][ T4269] device veth0_macvtap entered promiscuous mode [ 84.820867][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.859951][ T4269] device veth1_macvtap entered promiscuous mode [ 84.891774][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.902669][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.915298][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.933527][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.961442][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.974442][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.992145][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.003787][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.014617][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.040820][ T4268] device veth0_macvtap entered promiscuous mode [ 85.063810][ T4268] device veth1_macvtap entered promiscuous mode [ 85.085206][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.097911][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.112174][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.132896][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.145981][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.154264][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.165568][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.176846][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.189676][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.201650][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.210054][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.221668][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.233697][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.243833][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.254595][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.270792][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.280696][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.304080][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.315331][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.324684][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.340479][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.354410][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.371280][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.384296][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.396969][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.409446][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.445995][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.454508][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.458668][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.479233][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.489420][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.501250][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.513040][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.524801][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.537972][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.549935][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.561761][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.573543][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.585356][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.596113][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.607464][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.618881][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 85.626230][ T4276] Bluetooth: hci3: command 0x0419 tx timeout [ 85.626243][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 85.641492][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.660703][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.678204][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.689365][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.696281][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 85.700425][ T4274] Bluetooth: hci2: command 0x0419 tx timeout [ 85.707014][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.724893][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.736958][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.750132][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.758347][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.772191][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.784241][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.797317][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.808501][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.821461][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.857768][ T4282] device veth0_vlan entered promiscuous mode [ 85.879548][ T4268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.895333][ T4268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.904450][ T4268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.913590][ T4268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.926732][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.946473][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.974015][ T4282] device veth1_vlan entered promiscuous mode [ 86.080400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.090193][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.090624][ T124] cfg80211: failed to load regulatory.db [ 87.098367][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.108108][ T4375] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.132340][ T4375] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.163186][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.206184][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.238610][ T4282] device veth0_macvtap entered promiscuous mode [ 87.258564][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.292133][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.305332][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.307926][ T4282] device veth1_macvtap entered promiscuous mode [ 87.357634][ T1174] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.413081][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.426367][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.437609][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.449421][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.460951][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.472159][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.483935][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.496506][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.511569][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.533281][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.552817][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.578350][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.587823][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.597836][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.612352][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.632047][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.646244][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.698935][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.711038][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.724433][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.737959][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.750891][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.767153][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.798801][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.811917][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.849038][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.851370][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.880335][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.889336][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.899459][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.909865][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.985257][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.045624][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.377444][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.379175][ T4375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.403250][ T4405] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.424104][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.612243][ T4375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.644816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.665574][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.674927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.684563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.693584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.703193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.712711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.722471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.731986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.741636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 89.001704][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.063070][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.093665][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.167847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.197775][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.213184][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.247306][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.489021][ T4465] device syzkaller0 entered promiscuous mode [ 94.676290][ T4473] netlink: 112 bytes leftover after parsing attributes in process `syz.2.19'. [ 95.674390][ T4487] netlink: 112 bytes leftover after parsing attributes in process `syz.4.22'. [ 95.949248][ T4453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 95.974569][ T4488] netlink: 'syz.4.22': attribute type 1 has an invalid length. [ 97.251988][ T4510] device syzkaller0 entered promiscuous mode [ 97.344255][ T4513] kernel profiling enabled (shift: 9) [ 98.602564][ T4527] netlink: 112 bytes leftover after parsing attributes in process `syz.4.35'. [ 99.152573][ T4528] Illegal XDP return value 4294967274 on prog (id 2) dev N/A, expect packet loss! [ 100.484896][ T4551] ax25_connect(): syz.2.40 uses autobind, please contact jreuter@yaina.de [ 101.287860][ T4563] random: crng reseeded on system resumption [ 103.992105][ T4614] random: crng reseeded on system resumption [ 104.255010][ T4616] netlink: 112 bytes leftover after parsing attributes in process `syz.2.57'. [ 112.224514][ T4681] netlink: 112 bytes leftover after parsing attributes in process `syz.3.77'. [ 114.477459][ T4689] Can't find ip_set type hash: [ 115.048992][ T4708] overlayfs: failed to resolve './file1': -2 [ 116.488530][ T4729] random: crng reseeded on system resumption [ 118.217280][ T4723] mkiss: ax0: crc mode is auto. [ 122.123062][ T4366] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 122.352133][ T4276] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 122.656084][ T4366] usb 5-1: device descriptor read/64, error -71 [ 123.078095][ T4366] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 123.675753][ T4366] usb 5-1: device descriptor read/64, error -71 [ 123.712505][ T4806] loop1: detected capacity change from 0 to 512 [ 123.745618][ T4346] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 123.805017][ T4806] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 123.827069][ T4366] usb usb5-port1: attempt power cycle [ 123.879494][ T4806] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.929369][ T4806] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 123.935934][ T4346] usb 3-1: device descriptor read/64, error -71 [ 123.944687][ T4806] System zones: 1-12 [ 123.983068][ T4806] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 124.008480][ T4806] EXT4-fs (loop1): 1 truncate cleaned up [ 124.014342][ T4806] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 124.255805][ T4346] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 124.320177][ T4269] EXT4-fs (loop1): unmounting filesystem. [ 124.393621][ T4812] netlink: 'syz.4.109': attribute type 13 has an invalid length. [ 124.402300][ T4812] netlink: 'syz.4.109': attribute type 17 has an invalid length. [ 124.874758][ T4346] usb 3-1: device descriptor read/64, error -71 [ 125.572361][ T4346] usb usb3-port1: attempt power cycle [ 125.794006][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.950913][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.015806][ T4346] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 126.765564][ T4346] usb 3-1: device not accepting address 4, error -71 [ 126.775804][ T4812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.510213][ T4835] loop1: detected capacity change from 0 to 256 [ 128.578813][ T4276] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 128.657590][ T4835] FAT-fs (loop1): Directory bread(block 64) failed [ 128.711295][ T4835] FAT-fs (loop1): Directory bread(block 65) failed [ 128.808632][ T4835] FAT-fs (loop1): Directory bread(block 66) failed [ 128.826311][ T4835] FAT-fs (loop1): Directory bread(block 67) failed [ 128.835382][ T4835] FAT-fs (loop1): Directory bread(block 68) failed [ 128.904954][ T4835] FAT-fs (loop1): Directory bread(block 69) failed [ 128.948067][ T4835] FAT-fs (loop1): Directory bread(block 70) failed [ 128.976442][ T4835] FAT-fs (loop1): Directory bread(block 71) failed [ 128.985933][ T4835] FAT-fs (loop1): Directory bread(block 72) failed [ 129.039741][ T4835] FAT-fs (loop1): Directory bread(block 73) failed [ 129.180778][ T4860] loop4: detected capacity change from 0 to 128 [ 129.196869][ T4860] EXT4-fs: Ignoring removed nobh option [ 129.413864][ T4860] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.426516][ T4860] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.104471][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 131.133427][ T4875] loop3: detected capacity change from 0 to 256 [ 132.215639][ T4257] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.247623][ T4276] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 132.435749][ T4257] usb 5-1: Using ep0 maxpacket: 8 [ 132.460493][ T4257] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 132.505803][ T4257] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.600504][ T4257] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.661510][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.761721][ T4257] usbtmc 5-1:16.0: bulk endpoints not found [ 132.980858][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989224][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.362938][ T4905] netlink: 112 bytes leftover after parsing attributes in process `syz.1.136'. [ 133.537642][ T4276] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 133.548226][ T4276] Bluetooth: hci0: Injecting HCI hardware error event [ 133.561116][ T4274] Bluetooth: hci0: hardware error 0x00 [ 133.721702][ T4896] sctp: failed to load transform for md5: -4 [ 135.259738][ T4366] usb 5-1: USB disconnect, device number 5 [ 135.421791][ T4921] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.775872][ T4274] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 136.495334][ T4921] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.615411][ T4921] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.777250][ T4921] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.821267][ T4936] process 'syz.3.139' launched './file0' with NULL argv: empty string added [ 137.083197][ T4921] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.140752][ T4921] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.208523][ T4921] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.302784][ T4921] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.230027][ T4957] loop2: detected capacity change from 0 to 1024 [ 142.444818][ T5007] netlink: 112 bytes leftover after parsing attributes in process `syz.2.164'. [ 142.494232][ T5007] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 144.555438][ T5022] overlayfs: overlapping lowerdir path [ 144.717865][ T5023] random: crng reseeded on system resumption [ 147.701498][ T5058] overlayfs: failed to resolve './file0': -2 [ 151.281316][ T5073] netlink: 112 bytes leftover after parsing attributes in process `syz.0.182'. [ 151.914872][ T5073] netlink: 'syz.0.182': attribute type 1 has an invalid length. [ 153.001880][ T5077] vivid-000: kernel_thread() failed [ 155.338528][ T5098] overlayfs: missing 'lowerdir' [ 156.646830][ T5105] random: crng reseeded on system resumption [ 160.002622][ T5122] netlink: 112 bytes leftover after parsing attributes in process `syz.4.198'. [ 160.027088][ T5122] netlink: 'syz.4.198': attribute type 1 has an invalid length. [ 160.616263][ T4337] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 162.106989][ T4337] usb 3-1: device descriptor read/64, error -71 [ 164.685733][ T14] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 164.856112][ T14] usb 1-1: device descriptor read/64, error -71 [ 165.145814][ T14] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 165.335786][ T14] usb 1-1: device descriptor read/64, error -71 [ 165.466019][ T14] usb usb1-port1: attempt power cycle [ 165.915701][ T5157] ufs: You didn't specify the type of your ufs filesystem [ 165.915701][ T5157] [ 165.915701][ T5157] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 165.915701][ T5157] [ 165.915701][ T5157] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 165.948666][ T5157] ufs: ufstype=old is supported read-only [ 165.992638][ T5157] ufs: ufs_fill_super(): bad magic number [ 169.512684][ T5182] netlink: 112 bytes leftover after parsing attributes in process `syz.3.214'. [ 169.533553][ T5182] netlink: 'syz.3.214': attribute type 1 has an invalid length. [ 170.995787][ T4389] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 171.029304][ T5199] random: crng reseeded on system resumption [ 171.205628][ T4389] usb 1-1: device descriptor read/64, error -71 [ 171.915633][ T4389] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 172.075596][ T4389] usb 1-1: device descriptor read/64, error -71 [ 172.218115][ T4389] usb usb1-port1: attempt power cycle [ 172.666055][ T4389] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 172.706217][ T4389] usb 1-1: device descriptor read/8, error -71 [ 172.986493][ T4389] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 173.036021][ T4389] usb 1-1: device descriptor read/8, error -71 [ 173.166826][ T4389] usb usb1-port1: unable to enumerate USB device [ 173.578686][ T22] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 174.973110][ T22] usb 2-1: device descriptor read/64, error -71 [ 176.175760][ T22] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 179.968433][ T5269] netlink: 112 bytes leftover after parsing attributes in process `syz.0.235'. [ 179.999697][ T5269] netlink: 'syz.0.235': attribute type 1 has an invalid length. [ 180.016137][ T22] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 180.265807][ T22] usb 4-1: device descriptor read/64, error -71 [ 180.625592][ T22] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 180.916521][ T22] usb 4-1: device descriptor read/64, error -71 [ 181.039655][ T22] usb usb4-port1: attempt power cycle [ 181.666903][ T22] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 181.905612][ T22] usb 4-1: device not accepting address 4, error -71 [ 185.667338][ T5319] loop0: detected capacity change from 0 to 128 [ 185.678964][ T5319] EXT4-fs: Ignoring removed nobh option [ 186.743249][ T5319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 186.753447][ T5319] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 187.299599][ T5328] random: crng reseeded on system resumption [ 187.497660][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 187.851956][ T5337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.246'. [ 189.198663][ T5342] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 191.379001][ T4274] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 191.388065][ T4274] Bluetooth: hci4: Injecting HCI hardware error event [ 191.397776][ T4276] Bluetooth: hci4: hardware error 0x00 [ 191.603267][ T5361] netlink: 'syz.4.258': attribute type 13 has an invalid length. [ 191.611379][ T5361] netlink: 'syz.4.258': attribute type 17 has an invalid length. [ 191.640200][ T5361] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.073571][ T5361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.456366][ T4276] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 193.987457][ T5379] loop0: detected capacity change from 0 to 128 [ 193.997772][ T5379] EXT4-fs: Ignoring removed nobh option [ 194.417722][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.424355][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.831833][ T5379] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 194.846522][ T5379] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 195.154445][ T5386] netlink: 112 bytes leftover after parsing attributes in process `syz.3.265'. [ 195.222778][ T5386] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 195.962807][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 196.105608][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 197.626885][ T7] usb 4-1: config 0 has an invalid interface number: 238 but max is 0 [ 197.635325][ T7] usb 4-1: config 0 has no interface number 0 [ 197.665612][ T7] usb 4-1: config 0 interface 238 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 197.685551][ T7] usb 4-1: config 0 interface 238 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 197.703828][ T7] usb 4-1: config 0 interface 238 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 197.714666][ T7] usb 4-1: config 0 interface 238 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 197.739481][ T7] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=f6.6a [ 197.752758][ T7] usb 4-1: New USB device strings: Mfr=181, Product=147, SerialNumber=160 [ 197.761937][ T7] usb 4-1: Product: syz [ 197.776863][ T7] usb 4-1: Manufacturer: syz [ 197.782076][ T7] usb 4-1: SerialNumber: syz [ 197.816837][ T7] usb 4-1: config 0 descriptor?? [ 197.886952][ T7] ni6501 4-1:0.238: driver 'ni6501' failed to auto-configure device. [ 197.940878][ T5409] netlink: 'syz.0.272': attribute type 1 has an invalid length. [ 197.988854][ T5408] netlink: 112 bytes leftover after parsing attributes in process `syz.0.272'. [ 198.080717][ T4257] usb 4-1: USB disconnect, device number 6 [ 198.144863][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.172673][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 198.181774][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 198.192369][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 198.203281][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 198.221035][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 198.273719][ T4407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.438019][ T4407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.596143][ T4407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.754681][ T4407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.797151][ T5427] netlink: 112 bytes leftover after parsing attributes in process `syz.4.276'. [ 199.888937][ T5427] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 200.234768][ T5412] chnl_net:caif_netlink_parms(): no params data found [ 200.256455][ T4287] Bluetooth: hci1: command 0x0409 tx timeout [ 200.539071][ T5434] ax25_connect(): syz.4.278 uses autobind, please contact jreuter@yaina.de [ 201.634123][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.695810][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 201.703160][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 201.746789][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.800608][ T5412] device bridge_slave_0 entered promiscuous mode [ 201.979305][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.006414][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.014940][ T5412] device bridge_slave_1 entered promiscuous mode [ 202.212989][ T5457] netlink: 'syz.4.282': attribute type 1 has an invalid length. [ 202.213830][ T5454] netlink: 112 bytes leftover after parsing attributes in process `syz.4.282'. [ 202.465410][ T4287] Bluetooth: hci1: command 0x041b tx timeout [ 202.902998][ T5412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.045240][ T5412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.283512][ T5412] team0: Port device team_slave_0 added [ 203.421783][ T5412] team0: Port device team_slave_1 added [ 203.544274][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.653610][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.505589][ T4287] Bluetooth: hci1: command 0x040f tx timeout [ 204.815546][ T5412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.257360][ T5412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.264713][ T5412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.511788][ T5412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.046365][ T5509] netlink: 'syz.2.292': attribute type 1 has an invalid length. [ 206.145573][ T4257] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 206.242468][ T5506] netlink: 112 bytes leftover after parsing attributes in process `syz.2.292'. [ 206.345561][ T4257] usb 1-1: Using ep0 maxpacket: 8 [ 206.366080][ T4257] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 206.405691][ T4257] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 206.455706][ T4257] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 206.499873][ T4257] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 206.533416][ T4257] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.551745][ T4257] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.562045][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.576389][ T4287] Bluetooth: hci1: command 0x0419 tx timeout [ 206.714710][ T4257] usbtmc: probe of 1-1:16.0 failed with error -22 [ 206.781552][ T5412] device hsr_slave_0 entered promiscuous mode [ 206.801655][ T5412] device hsr_slave_1 entered promiscuous mode [ 206.813527][ T5412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.822600][ T5412] Cannot create hsr debugfs directory [ 207.163284][ T4407] device hsr_slave_0 left promiscuous mode [ 207.194278][ T4407] device hsr_slave_1 left promiscuous mode [ 207.222082][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.236404][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.271860][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.284188][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.298949][ T4407] device bridge_slave_1 left promiscuous mode [ 207.312909][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.348516][ T4407] device bridge_slave_0 left promiscuous mode [ 207.359549][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.445062][ T4407] device veth1_macvtap left promiscuous mode [ 207.463705][ T4407] device veth0_macvtap left promiscuous mode [ 207.500436][ T4407] device veth1_vlan left promiscuous mode [ 207.549948][ T4407] device veth0_vlan left promiscuous mode [ 209.396311][ T124] usb 1-1: USB disconnect, device number 9 [ 209.910289][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 210.040158][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 210.183504][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.273942][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.272814][ T5568] overlayfs: missing 'lowerdir' [ 211.866711][ T4407] bond0 (unregistering): Released all slaves [ 212.525687][ T4324] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 212.715828][ T4324] usb 5-1: Using ep0 maxpacket: 8 [ 212.777863][ T4324] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 212.789294][ T4324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.802463][ T4324] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 212.814513][ T4324] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 212.826910][ T4324] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.844348][ T4324] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.858976][ T4324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.913272][ T4324] usbtmc: probe of 5-1:16.0 failed with error -22 [ 213.211956][ T5412] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 213.262289][ T5412] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.623027][ T5412] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.699360][ T5412] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 215.457356][ T5412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.595756][ T5412] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.782313][ T5412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 215.793268][ T5412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.085924][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.094475][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.104626][ T4346] usb 5-1: USB disconnect, device number 6 [ 216.117631][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.181676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.226146][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.233538][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.301375][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.342393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.398598][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.406105][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.448732][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.481742][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.520307][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.572772][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.614542][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.672696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.713222][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 216.733938][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 216.771816][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 216.830634][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 216.879254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.917976][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 216.951785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.431792][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 217.454630][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 217.509514][ T5412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.519735][ T5639] overlayfs: missing 'lowerdir' [ 218.592736][ T5648] loop3: detected capacity change from 0 to 1024 [ 221.055779][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 221.265903][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 221.279911][ T27] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 221.776045][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 221.835689][ T27] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.868405][ T27] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.912539][ T27] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.932373][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.138690][ T5685] overlayfs: missing 'lowerdir' [ 222.241742][ T27] usb 4-1: usb_control_msg returned -32 [ 222.253078][ T27] usbtmc 4-1:16.0: can't read capabilities [ 222.402313][ T27] usb 4-1: USB disconnect, device number 7 [ 222.734721][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.746243][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 222.884806][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 222.912814][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.015423][ T5412] device veth0_vlan entered promiscuous mode [ 223.025862][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.065247][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.139119][ T5412] device veth1_vlan entered promiscuous mode [ 223.286317][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.328193][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.361525][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.380886][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.427115][ T5412] device veth0_macvtap entered promiscuous mode [ 223.457643][ T5412] device veth1_macvtap entered promiscuous mode [ 223.523785][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.615775][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.662523][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.711804][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.735205][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.764850][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.819543][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.853083][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.896701][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.921415][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.935998][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 223.957520][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.737737][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.844776][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.879880][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.912627][ T5707] loop0: detected capacity change from 0 to 32768 [ 224.935628][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.005542][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.035577][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.114110][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.166980][ T5412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.187551][ T5707] UFO tlock:0xffffc9000287a090 [ 225.218254][ T5412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.226361][ T5722] MetaData crosses page boundary!! [ 225.251453][ T5722] lblock = 6300000010, size = -820051968 [ 225.288250][ T5722] CPU: 0 PID: 5722 Comm: syz.0.336 Not tainted syzkaller #0 [ 225.290993][ T5412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.295764][ T5722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 225.295781][ T5722] Call Trace: [ 225.295791][ T5722] [ 225.295800][ T5722] dump_stack_lvl+0x188/0x24e [ 225.295834][ T5722] ? __wake_up_bit+0x210/0x210 [ 225.295862][ T5722] ? show_regs_print_info+0x12/0x12 [ 225.295886][ T5722] ? load_image+0x400/0x400 [ 225.295912][ T5722] ? folio_unlock+0x114/0x2e0 [ 225.295941][ T5722] __get_metapage+0xaa8/0xfa0 [ 225.295972][ T5722] dtReadFirst+0xd5/0x8f0 [ 225.296006][ T5722] jfs_readdir+0x9d3/0x3d10 [ 225.296027][ T5722] ? _raw_spin_lock_irqsave+0x100/0x100 [ 225.296054][ T5722] ? trace_contention_end+0x5f/0x190 [ 225.296091][ T5722] ? rwsem_down_write_slowpath+0xe8d/0x1110 [ 225.296123][ T5722] ? rwsem_down_write_slowpath+0x7ed/0x1110 [ 225.296161][ T5722] ? dtInitRoot+0x660/0x660 [ 225.389218][ T5722] ? end_current_label_crit_section+0x14b/0x170 [ 225.395479][ T5722] ? common_file_perm+0x171/0x1c0 [ 225.400645][ T5722] ? iterate_dir+0x133/0x560 [ 225.405981][ T5722] iterate_dir+0x218/0x560 [ 225.410543][ T5722] __se_sys_getdents64+0xf2/0x270 [ 225.415944][ T5722] ? __x64_sys_getdents64+0x80/0x80 [ 225.421235][ T5722] ? filldir+0x700/0x700 [ 225.425671][ T5722] ? lockdep_hardirqs_on+0x94/0x140 [ 225.431895][ T5722] do_syscall_64+0x4c/0xa0 [ 225.436435][ T5722] ? clear_bhb_loop+0x60/0xb0 [ 225.441151][ T5722] ? clear_bhb_loop+0x60/0xb0 [ 225.446012][ T5722] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.452105][ T5722] RIP: 0033:0x7fe22779bf79 [ 225.456709][ T5722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.478694][ T5722] RSP: 002b:00007fe22865b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 225.488870][ T5722] RAX: ffffffffffffffda RBX: 00007fe227a16090 RCX: 00007fe22779bf79 [ 225.498647][ T5722] RDX: 0000000000000523 RSI: 0000200000001dc0 RDI: 0000000000000004 [ 225.507861][ T5722] RBP: 00007fe2278327e0 R08: 0000000000000000 R09: 0000000000000000 [ 225.516020][ T5722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.524207][ T5722] R13: 00007fe227a16128 R14: 00007fe227a16090 R15: 00007ffe7067d978 [ 225.532768][ T5722] [ 225.587730][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.608285][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.660124][ T5412] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.720830][ T5412] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.750556][ T5412] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.778409][ T5412] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.034128][ T5146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.068415][ T5146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.171726][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.226817][ T5727] overlayfs: unrecognized mount option "/" or missing value [ 226.277630][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.316337][ T5722] bread failed! [ 226.322336][ T5722] jfs_readdir: unexpected rc = -5 from dtReadNext [ 226.347198][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.407484][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.115767][ T14] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 227.325951][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 227.343028][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 227.421283][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 227.455542][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.502980][ T14] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.555579][ T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.595550][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.851487][ T14] usb 5-1: usb_control_msg returned -32 [ 227.870552][ T14] usbtmc 5-1:16.0: can't read capabilities [ 227.966641][ T14] usb 5-1: USB disconnect, device number 7 [ 228.349957][ T5742] loop3: detected capacity change from 0 to 32768 [ 228.410415][ T5742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.345 (5742) [ 228.567253][ T5742] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.661863][ T5742] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 228.765713][ T5742] BTRFS info (device loop3): using free space tree [ 229.742851][ T5742] BTRFS info (device loop3): enabling ssd optimizations [ 229.794074][ T5792] overlayfs: unrecognized mount option "/" or missing value [ 229.981065][ T5794] netlink: 112 bytes leftover after parsing attributes in process `syz.2.353'. [ 230.882287][ T5742] BTRFS warning (device loop3): failed to trim 1 device(s), last error -512 [ 231.130291][ T5794] netlink: 'syz.2.353': attribute type 1 has an invalid length. [ 231.748961][ T4280] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 232.836092][ T4346] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 232.921585][ T4885] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4885) [ 233.035717][ T4346] usb 5-1: Using ep0 maxpacket: 8 [ 233.062241][ T4346] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 233.138209][ T4346] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 233.214268][ T4346] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.304397][ T4346] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.399374][ T4346] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.445602][ T4346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.740367][ T4346] usb 5-1: usb_control_msg returned -32 [ 233.746499][ T4346] usbtmc 5-1:16.0: can't read capabilities [ 233.844687][ T4346] usb 5-1: USB disconnect, device number 8 [ 234.824119][ T5852] overlayfs: unrecognized mount option "/" or missing value [ 234.959452][ T5857] netlink: 28 bytes leftover after parsing attributes in process `syz.2.365'. [ 236.973332][ T5879] random: crng reseeded on system resumption [ 239.257789][ T5899] overlayfs: missing 'lowerdir' [ 240.499805][ T5919] netlink: 24 bytes leftover after parsing attributes in process `syz.5.381'. [ 242.145696][ T124] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 242.306596][ T5943] loop3: detected capacity change from 0 to 1024 [ 242.355927][ T124] usb 1-1: Using ep0 maxpacket: 8 [ 242.395971][ T124] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 242.408802][ T124] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 242.425597][ T124] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 242.425679][ T14] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 242.451978][ T124] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.495913][ T124] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.515812][ T124] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.838966][ T124] usb 1-1: usb_control_msg returned -32 [ 242.848444][ T124] usbtmc 1-1:16.0: can't read capabilities [ 242.894230][ T124] usb 1-1: USB disconnect, device number 10 [ 243.286208][ T14] usb 5-1: device descriptor read/64, error -71 [ 243.645748][ T14] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 243.683728][ T5949] netlink: 112 bytes leftover after parsing attributes in process `syz.3.387'. [ 243.746487][ T5949] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 243.823515][ T14] usb 5-1: device descriptor read/64, error -71 [ 244.017108][ T14] usb usb5-port1: attempt power cycle [ 244.615583][ T14] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 244.762186][ T14] usb 5-1: device descriptor read/8, error -71 [ 244.866815][ T5977] overlayfs: missing 'lowerdir' [ 246.213071][ T5998] loop0: detected capacity change from 0 to 1024 [ 246.355670][ T4324] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 246.455068][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.399'. [ 246.485614][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 246.695655][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 246.759669][ T27] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 246.775590][ T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 246.787236][ T27] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.805744][ T27] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.896231][ T27] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 246.906991][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.128340][ T4324] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 247.151398][ T4324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.174298][ T4324] usb 3-1: Product: syz [ 247.182717][ T4324] usb 3-1: Manufacturer: syz [ 247.198368][ T27] usb 6-1: usb_control_msg returned -32 [ 247.204599][ T27] usbtmc 6-1:16.0: can't read capabilities [ 247.225872][ T4324] usb 3-1: SerialNumber: syz [ 247.284042][ T4324] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 247.309781][ T27] usb 6-1: USB disconnect, device number 2 [ 247.397581][ T4316] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 247.820952][ T6019] ax25_connect(): syz.0.403 uses autobind, please contact jreuter@yaina.de [ 248.421618][ T5993] random: crng reseeded on system resumption [ 248.576075][ T4316] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 248.591340][ T6028] Zero length message leads to an empty skb [ 248.593057][ T4316] ath9k_htc: Failed to initialize the device [ 248.671245][ T4316] usb 3-1: ath9k_htc: USB layer deinitialized [ 248.894360][ T6036] overlayfs: missing 'workdir' [ 250.944138][ T14] usb 3-1: USB disconnect, device number 8 [ 251.238297][ T6070] loop4: detected capacity change from 0 to 256 [ 251.286595][ T6070] exfat: Deprecated parameter 'namecase' [ 251.292695][ T6070] exfat: Deprecated parameter 'utf8' [ 251.589189][ T6070] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 251.754769][ T6070] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 252.869098][ T6087] netlink: 24 bytes leftover after parsing attributes in process `syz.0.419'. [ 252.909745][ T6094] overlayfs: missing 'workdir' [ 256.377058][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.383797][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.185029][ T6159] netlink: 112 bytes leftover after parsing attributes in process `syz.2.434'. [ 257.279109][ T6159] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 258.112198][ T6169] overlayfs: missing 'workdir' [ 259.126386][ T4344] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 260.125561][ T4344] usb 1-1: Using ep0 maxpacket: 8 [ 260.140771][ T6184] loop5: detected capacity change from 0 to 1024 [ 260.149452][ T4344] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 260.192025][ T4344] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 260.259017][ T4344] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 260.353365][ T4344] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.459356][ T4344] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 260.469338][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.719039][ T4344] usb 1-1: GET_CAPABILITIES returned 0 [ 260.725131][ T4344] usbtmc 1-1:16.0: can't read capabilities [ 260.975738][ T4337] usb 1-1: USB disconnect, device number 11 [ 261.302745][ T6197] loop3: detected capacity change from 0 to 1024 [ 263.911345][ T6220] overlayfs: missing 'lowerdir' [ 265.832915][ T6238] netlink: 24 bytes leftover after parsing attributes in process `syz.2.452'. [ 268.276171][ T6268] netlink: 'syz.4.445': attribute type 13 has an invalid length. [ 270.311373][ T6299] random: crng reseeded on system resumption [ 270.506832][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.516427][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.485386][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.542891][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.101974][ T6268] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.111462][ T6268] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.122240][ T6268] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.131934][ T6268] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.805646][ T6314] loop5: detected capacity change from 0 to 1024 [ 275.303111][ T6318] netlink: 112 bytes leftover after parsing attributes in process `syz.3.467'. [ 275.596501][ T6318] netlink: 'syz.3.467': attribute type 1 has an invalid length. [ 276.738921][ T6340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 279.505075][ T6365] loop3: detected capacity change from 0 to 1024 [ 281.383103][ T6381] random: crng reseeded on system resumption [ 281.881709][ T6383] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 282.950585][ T6399] netlink: 112 bytes leftover after parsing attributes in process `syz.2.483'. [ 283.011058][ T6400] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 284.087856][ T6409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.485'. [ 284.095561][ T4337] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 284.260462][ T4337] usb 4-1: device descriptor read/64, error -71 [ 285.289443][ T4337] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 285.776604][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.5.489'. [ 285.945692][ T4337] usb 4-1: device descriptor read/64, error -71 [ 286.002712][ T6433] netlink: 112 bytes leftover after parsing attributes in process `syz.0.491'. [ 286.065785][ T4337] usb usb4-port1: attempt power cycle [ 286.080571][ T6433] netlink: 'syz.0.491': attribute type 1 has an invalid length. [ 289.724731][ T6468] netlink: 'syz.3.498': attribute type 1 has an invalid length. [ 292.805642][ T6497] netlink: 'syz.4.505': attribute type 1 has an invalid length. [ 293.256250][ T6503] netlink: 112 bytes leftover after parsing attributes in process `syz.5.506'. [ 293.585820][ T6503] netlink: 'syz.5.506': attribute type 1 has an invalid length. [ 294.592205][ T6521] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.902580][ T4287] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 295.255762][ T14] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 295.435846][ T14] usb 3-1: device descriptor read/64, error -71 [ 295.715895][ T14] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 295.842436][ T6521] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.906039][ T14] usb 3-1: device descriptor read/64, error -71 [ 296.154206][ T14] usb usb3-port1: attempt power cycle [ 296.479136][ T6521] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.264158][ T6521] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.265571][ T14] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 300.742053][ T14] usb 3-1: device descriptor read/8, error -71 [ 300.925036][ T6521] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.945833][ T6565] netlink: 'syz.2.519': attribute type 1 has an invalid length. [ 301.480144][ T6521] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.562663][ T6521] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.597434][ T6521] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.856720][ T6573] netlink: 112 bytes leftover after parsing attributes in process `syz.5.520'. [ 301.879163][ T6573] netlink: 'syz.5.520': attribute type 1 has an invalid length. [ 302.631013][ T6581] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 303.447776][ T6594] ax25_connect(): syz.5.523 uses autobind, please contact jreuter@yaina.de [ 308.585668][ T4577] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 308.736122][ T4577] usb 3-1: device descriptor read/64, error -71 [ 309.015806][ T4577] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 309.205874][ T4577] usb 3-1: device descriptor read/64, error -71 [ 309.338233][ T4577] usb usb3-port1: attempt power cycle [ 309.366194][ T6628] netlink: 112 bytes leftover after parsing attributes in process `syz.4.533'. [ 309.394024][ T6628] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 309.775664][ T4577] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 310.019789][ T4577] usb 3-1: device descriptor read/8, error -71 [ 310.629033][ T6643] ax25_connect(): syz.4.536 uses autobind, please contact jreuter@yaina.de [ 314.506148][ T4344] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 314.821932][ T4344] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 314.832350][ T4344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.840803][ T4344] usb 5-1: Product: syz [ 314.845360][ T4344] usb 5-1: Manufacturer: syz [ 314.850953][ T4344] usb 5-1: SerialNumber: syz [ 314.897916][ T4344] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 314.966263][ T4344] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 315.153850][ T6689] netlink: 'syz.5.546': attribute type 1 has an invalid length. [ 315.829032][ T6695] random: crng reseeded on system resumption [ 315.932236][ T4346] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 316.016317][ T4344] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 316.056793][ T4344] ath9k_htc: Failed to initialize the device [ 316.110994][ T4344] usb 5-1: ath9k_htc: USB layer deinitialized [ 316.143127][ T4346] usb 4-1: device descriptor read/64, error -71 [ 316.808228][ T4346] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 316.923294][ T4287] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 317.018510][ T4346] usb 4-1: device descriptor read/64, error -71 [ 317.146220][ T4346] usb usb4-port1: attempt power cycle [ 317.298609][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.305390][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.499625][ T6711] ax25_connect(): syz.5.549 uses autobind, please contact jreuter@yaina.de [ 318.055736][ T4346] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 318.096509][ T4346] usb 4-1: device descriptor read/8, error -71 [ 319.639124][ T4344] usb 5-1: USB disconnect, device number 13 [ 320.698506][ T6731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.540'. [ 323.876489][ T6754] ax25_connect(): syz.3.561 uses autobind, please contact jreuter@yaina.de [ 324.315900][ T4366] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 324.495585][ T4366] usb 1-1: device descriptor read/64, error -71 [ 324.505536][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 325.695635][ T4366] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 325.885877][ T4366] usb 1-1: device descriptor read/64, error -71 [ 326.016603][ T4366] usb usb1-port1: attempt power cycle [ 333.114662][ T6808] overlayfs: missing 'lowerdir' [ 334.286510][ T4274] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 334.302903][ T4274] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 334.315255][ T4274] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 334.331566][ T4274] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 334.339584][ T4274] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 334.347238][ T4274] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 334.941172][ T33] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.156673][ T33] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.971104][ T33] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.193455][ T33] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.508409][ T4287] Bluetooth: hci2: command 0x0409 tx timeout [ 338.599626][ T6846] loop4: detected capacity change from 0 to 1024 [ 338.710206][ T6812] chnl_net:caif_netlink_parms(): no params data found [ 340.657498][ T4287] Bluetooth: hci2: command 0x041b tx timeout [ 342.174957][ T6812] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.192699][ T6812] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.230950][ T6812] device bridge_slave_0 entered promiscuous mode [ 342.365057][ T6812] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.385661][ T6812] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.408974][ T6812] device bridge_slave_1 entered promiscuous mode [ 342.920069][ T4287] Bluetooth: hci2: command 0x040f tx timeout [ 343.121350][ T6812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.162342][ T6812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.205543][ T4389] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 344.157321][ T4389] usb 1-1: device descriptor read/64, error -71 [ 344.224540][ T6812] team0: Port device team_slave_0 added [ 344.391342][ T6812] team0: Port device team_slave_1 added [ 344.425664][ T4389] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 344.557809][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.564825][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.625600][ T4389] usb 1-1: device descriptor read/64, error -71 [ 344.815858][ T6812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.823760][ T6899] loop4: detected capacity change from 0 to 1024 [ 344.829264][ T6812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.853902][ T6812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.855682][ T4389] usb usb1-port1: attempt power cycle [ 344.880334][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.897587][ T6812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.978878][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 346.423658][ T6922] loop5: detected capacity change from 0 to 1024 [ 347.075165][ T6812] device hsr_slave_0 entered promiscuous mode [ 347.141355][ T6812] device hsr_slave_1 entered promiscuous mode [ 347.389362][ T33] device hsr_slave_0 left promiscuous mode [ 347.456355][ T33] device hsr_slave_1 left promiscuous mode [ 347.521350][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.545532][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.667298][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.675734][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.719260][ T6952] netlink: 'syz.3.598': attribute type 1 has an invalid length. [ 348.051559][ T33] device bridge_slave_1 left promiscuous mode [ 348.070594][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.324240][ T33] device bridge_slave_0 left promiscuous mode [ 348.390745][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.516649][ T33] device veth1_macvtap left promiscuous mode [ 348.538135][ T33] device veth0_macvtap left promiscuous mode [ 348.554735][ T33] device veth1_vlan left promiscuous mode [ 348.567093][ T33] device veth0_vlan left promiscuous mode [ 350.419520][ T33] team0 (unregistering): Port device team_slave_1 removed [ 350.477006][ T33] team0 (unregistering): Port device team_slave_0 removed [ 350.532247][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.588976][ T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.039067][ T33] bond0 (unregistering): Released all slaves [ 351.198730][ T6950] netlink: 112 bytes leftover after parsing attributes in process `syz.3.598'. [ 352.174340][ T7] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 352.398740][ T7] usb 6-1: device descriptor read/64, error -71 [ 352.803641][ T6812] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 352.810712][ T7] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 352.860446][ T6812] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 352.920485][ T6812] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 352.985519][ T7] usb 6-1: device descriptor read/64, error -71 [ 352.996638][ T6812] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 353.126043][ T7] usb usb6-port1: attempt power cycle [ 353.328663][ T6812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.410734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 353.441894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 353.468570][ T6812] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.507234][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 353.535637][ T7] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 353.541226][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 353.580175][ T7] usb 6-1: device descriptor read/8, error -71 [ 353.598754][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.606228][ T6912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.662696][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.721661][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.766294][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.773446][ T6912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.855863][ T7] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 353.881460][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.900867][ T7] usb 6-1: device descriptor read/8, error -71 [ 353.923356][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.945835][ T7028] netlink: 112 bytes leftover after parsing attributes in process `syz.3.609'. [ 353.970498][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 353.982942][ T7028] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 354.069867][ T7] usb usb6-port1: unable to enumerate USB device [ 354.132215][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.292047][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.526160][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.764714][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.836484][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.896460][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.936257][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.098414][ T7046] capability: warning: `syz.5.610' uses deprecated v2 capabilities in a way that may be insecure [ 356.148714][ T7048] netlink: 112 bytes leftover after parsing attributes in process `syz.3.611'. [ 356.177777][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.206584][ T7048] netlink: 'syz.3.611': attribute type 1 has an invalid length. [ 356.280594][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.618587][ T6812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.812807][ T7053] netlink: 112 bytes leftover after parsing attributes in process `syz.0.612'. [ 356.853800][ T7053] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 358.884736][ T7084] loop4: detected capacity change from 0 to 128 [ 358.896480][ T7084] EXT4-fs: Ignoring removed nobh option [ 359.801309][ T7084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 359.810831][ T7084] ext4 filesystem being mounted at /150/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.969373][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.986350][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.049238][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 360.106574][ T6812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.396406][ T7100] netlink: 112 bytes leftover after parsing attributes in process `syz.5.620'. [ 360.431441][ T7100] netlink: 'syz.5.620': attribute type 1 has an invalid length. [ 361.771064][ T7127] loop3: detected capacity change from 0 to 512 [ 361.803812][ T7127] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 363.370266][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 363.371041][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 363.466570][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 363.476284][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 363.500521][ T6812] device veth0_vlan entered promiscuous mode [ 363.517772][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 363.551499][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 363.594638][ T6812] device veth1_vlan entered promiscuous mode [ 363.617062][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 363.714995][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 363.729774][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 363.764825][ T6812] device veth0_macvtap entered promiscuous mode [ 363.804207][ T6812] device veth1_macvtap entered promiscuous mode [ 363.874814][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.896192][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.927529][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.959416][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.993574][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 364.034814][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.077086][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.117419][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 364.142214][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 364.182300][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 364.200516][ T6912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 364.260557][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.341650][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.373412][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.401305][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.421182][ T7160] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 364.615721][ T6812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.728261][ T6812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.999678][ T6812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.035613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 365.076495][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 365.117404][ T6812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.164311][ T6812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.183677][ T6812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.203916][ T6812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.549824][ T4700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.565520][ T4700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.640118][ T4700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 365.745093][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.774000][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.837413][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 368.343603][ T7190] loop0: detected capacity change from 0 to 1024 [ 368.433334][ T7190] ======================================================= [ 368.433334][ T7190] WARNING: The mand mount option has been deprecated and [ 368.433334][ T7190] and is ignored by this kernel. Remove the mand [ 368.433334][ T7190] option from the mount to silence this warning. [ 368.433334][ T7190] ======================================================= [ 368.638739][ T7190] EXT4-fs: Ignoring removed oldalloc option [ 368.644786][ T7190] EXT4-fs: Ignoring removed bh option [ 368.750428][ T7190] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 368.940152][ T7190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 369.096284][ T26] audit: type=1804 audit(1770745374.475:2): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.641" name="/newroot/131/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 369.839390][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 369.899283][ T7217] loop6: detected capacity change from 0 to 1024 [ 370.014776][ T7218] netlink: 'syz.5.646': attribute type 1 has an invalid length. [ 373.955593][ T4389] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 373.976708][ T7256] loop5: detected capacity change from 0 to 1024 [ 374.145800][ T4389] usb 7-1: device descriptor read/64, error -71 [ 374.525826][ T4389] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 374.965521][ T4389] usb 7-1: device descriptor read/64, error -71 [ 375.087735][ T4389] usb usb7-port1: attempt power cycle [ 375.505499][ T4389] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 375.556157][ T4389] usb 7-1: device descriptor read/8, error -71 [ 375.642155][ T7274] loop5: detected capacity change from 0 to 512 [ 375.826748][ T4389] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 375.839864][ T7274] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 375.881077][ T7274] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.895652][ T4389] usb 7-1: device descriptor read/8, error -71 [ 376.017413][ T4389] usb usb7-port1: unable to enumerate USB device [ 376.129757][ T7274] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.658: bg 0: block 145: padding at end of block bitmap is not set [ 377.152938][ T5412] EXT4-fs (loop5): unmounting filesystem. [ 378.740219][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.746780][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.969279][ T7303] loop0: detected capacity change from 0 to 1024 [ 380.485743][ T4364] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 380.635593][ T4364] usb 7-1: device descriptor read/64, error -71 [ 380.905506][ T4364] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 381.072438][ T4364] usb 7-1: device descriptor read/64, error -71 [ 381.216315][ T4364] usb usb7-port1: attempt power cycle [ 381.728128][ T4364] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 381.766226][ T4364] usb 7-1: device descriptor read/8, error -71 [ 382.097049][ T4364] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 382.459743][ T7322] loop5: detected capacity change from 0 to 32768 [ 382.529115][ T4364] usb 7-1: device descriptor read/8, error -71 [ 382.648633][ T7322] UFO tlock:0xffffc9000287a0d8 [ 382.656048][ T4364] usb usb7-port1: unable to enumerate USB device [ 382.725594][ T4337] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 382.999473][ T4337] usb 4-1: device descriptor read/64, error -71 [ 383.510944][ T4337] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 385.285486][ T4337] usb 4-1: device descriptor read/64, error -71 [ 385.368264][ T7358] device syzkaller0 entered promiscuous mode [ 385.405718][ T4337] usb usb4-port1: attempt power cycle [ 386.988632][ T7365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.124884][ T7365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.323506][ T7365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.504915][ T7381] loop5: detected capacity change from 0 to 1024 [ 387.835757][ T7365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.081358][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.6.683'. [ 388.372831][ T7365] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.467331][ T7365] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.539312][ T7365] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.613586][ T7365] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.196044][ T4389] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 391.424202][ T7422] netlink: 'syz.5.685': attribute type 13 has an invalid length. [ 391.432369][ T7422] netlink: 'syz.5.685': attribute type 17 has an invalid length. [ 391.565582][ T4389] usb 4-1: device descriptor read/64, error -71 [ 391.846464][ T4389] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 391.910941][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.943109][ T7422] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 391.969744][ T7422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.055503][ T4389] usb 4-1: device descriptor read/64, error -71 [ 392.147487][ T7426] ax25_connect(): syz.0.691 uses autobind, please contact jreuter@yaina.de [ 392.250243][ T7431] No such timeout policy "syz1" [ 392.287187][ T4389] usb usb4-port1: attempt power cycle [ 396.139302][ T7459] loop5: detected capacity change from 0 to 512 [ 396.214153][ T7459] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 398.239699][ T7479] ax25_connect(): syz.3.706 uses autobind, please contact jreuter@yaina.de [ 399.855416][ T4287] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 399.864083][ T4287] Bluetooth: hci1: Injecting HCI hardware error event [ 399.894599][ T4276] Bluetooth: hci1: hardware error 0x00 [ 400.008517][ T7488] netlink: 112 bytes leftover after parsing attributes in process `syz.5.709'. [ 400.092210][ T7488] netlink: 'syz.5.709': attribute type 1 has an invalid length. [ 401.544167][ T7515] loop0: detected capacity change from 0 to 512 [ 401.600609][ T7515] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 402.016142][ T4276] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 406.651992][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 407.514427][ T7576] overlayfs: missing 'lowerdir' [ 409.808516][ T7590] netlink: 112 bytes leftover after parsing attributes in process `syz.0.724'. [ 409.902463][ T7590] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 415.667275][ T7651] loop3: detected capacity change from 0 to 1024 [ 416.431296][ T7659] overlayfs: missing 'lowerdir' [ 418.436833][ T7667] netlink: 112 bytes leftover after parsing attributes in process `syz.3.749'. [ 418.521155][ T7667] netlink: 'syz.3.749': attribute type 1 has an invalid length. [ 425.164183][ T7715] netlink: 'syz.6.756': attribute type 13 has an invalid length. [ 425.172260][ T7715] netlink: 'syz.6.756': attribute type 17 has an invalid length. [ 425.759925][ T7719] loop0: detected capacity change from 0 to 1024 [ 425.837395][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.871582][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 425.944762][ T7715] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.810468][ T7747] netlink: 112 bytes leftover after parsing attributes in process `syz.4.755'. [ 426.868874][ T7747] netlink: 'syz.4.755': attribute type 1 has an invalid length. [ 427.365868][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.766'. [ 427.401663][ T7749] device bond1 entered promiscuous mode [ 427.407984][ T7749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.491798][ T7749] IPv6: sit1: Disabled Multicast RS [ 427.516347][ T7749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.526139][ T7749] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 428.120128][ T7749] bond1: (slave sit1): Error -95 calling set_mac_address [ 428.222568][ T7765] netlink: 112 bytes leftover after parsing attributes in process `syz.4.769'. [ 428.257980][ T7765] netlink: 'syz.4.769': attribute type 1 has an invalid length. [ 431.846822][ T7805] netlink: 'syz.4.774': attribute type 13 has an invalid length. [ 431.855288][ T7805] netlink: 'syz.4.774': attribute type 17 has an invalid length. [ 432.287464][ T7805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 432.305686][ T7805] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 432.414687][ T7805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.544521][ T7805] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.124714][ T7814] overlayfs: missing 'lowerdir' [ 433.980654][ T7805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 434.013232][ T7805] syz.4.774 (7805) used greatest stack depth: 20112 bytes left [ 434.156501][ T7819] netlink: 112 bytes leftover after parsing attributes in process `syz.5.777'. [ 434.197961][ T7819] netlink: 'syz.5.777': attribute type 1 has an invalid length. [ 438.769821][ T7851] device syzkaller0 entered promiscuous mode [ 439.945616][ T4346] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 440.155549][ T4346] usb 7-1: Using ep0 maxpacket: 16 [ 440.173472][ T4346] usb 7-1: config 0 has an invalid interface number: 251 but max is 0 [ 440.184684][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.191801][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.228582][ T7878] netlink: 112 bytes leftover after parsing attributes in process `syz.0.782'. [ 440.277891][ T4346] usb 7-1: config 0 has no interface number 0 [ 440.791589][ T7876] netlink: 'syz.0.782': attribute type 1 has an invalid length. [ 440.929314][ T4346] usb 7-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 441.124960][ T4346] usb 7-1: config 0 interface 251 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 441.462463][ T4346] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 441.532852][ T4346] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.563225][ T4346] usb 7-1: Product: syz [ 441.825987][ T4346] usb 7-1: Manufacturer: syz [ 441.846779][ T4346] usb 7-1: SerialNumber: syz [ 441.901249][ T4346] usb 7-1: config 0 descriptor?? [ 441.936144][ T7866] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 441.988383][ T4346] asix: probe of 7-1:0.251 failed with error -22 [ 443.756656][ T4344] usb 7-1: USB disconnect, device number 10 [ 445.144762][ T7972] device syzkaller0 entered promiscuous mode [ 447.173540][ T8000] netlink: 112 bytes leftover after parsing attributes in process `syz.3.806'. [ 447.215496][ T8000] netlink: 'syz.3.806': attribute type 1 has an invalid length. [ 447.936818][ T7992] trusted_key: encrypted_key: insufficient parameters specified [ 448.190953][ T8011] loop4: detected capacity change from 0 to 1024 [ 450.185587][ T4389] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 450.375434][ T4389] usb 6-1: Using ep0 maxpacket: 16 [ 450.388362][ T4389] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 450.451282][ T4389] usb 6-1: config 0 has no interface number 0 [ 450.491875][ T4389] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 450.575905][ T4389] usb 6-1: config 0 interface 251 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 450.655562][ T4389] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 452.474381][ T8041] loop0: detected capacity change from 0 to 128 [ 452.482664][ T8041] EXT4-fs: Ignoring removed nobh option [ 452.544155][ T4389] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.554364][ T4389] usb 6-1: Product: syz [ 452.559650][ T4389] usb 6-1: Manufacturer: syz [ 452.565152][ T4389] usb 6-1: SerialNumber: syz [ 452.578173][ T4389] usb 6-1: config 0 descriptor?? [ 452.621452][ T4389] usb 6-1: can't set config #0, error -71 [ 452.636982][ T4389] usb 6-1: USB disconnect, device number 7 [ 452.651763][ T8041] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 452.660717][ T8041] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 453.357742][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 453.644152][ T8060] device syzkaller0 entered promiscuous mode [ 455.728610][ T8103] Bluetooth: MGMT ver 1.22 [ 457.615678][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 457.804446][ T8123] device syzkaller0 entered promiscuous mode [ 457.860127][ T8127] loop6: detected capacity change from 0 to 1024 [ 459.975521][ T7] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 460.965680][ T7] usb 7-1: device descriptor read/64, error -71 [ 461.324408][ T7] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 461.525582][ T7] usb 7-1: device descriptor read/64, error -71 [ 462.014217][ T8173] overlayfs: missing 'lowerdir' [ 462.803959][ T7] usb usb7-port1: attempt power cycle [ 463.265647][ T7] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 463.317933][ T7] usb 7-1: device descriptor read/8, error -71 [ 463.595589][ T7] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 463.646248][ T7] usb 7-1: device descriptor read/8, error -71 [ 463.765707][ T7] usb usb7-port1: unable to enumerate USB device [ 465.739385][ T8205] netlink: 'syz.4.854': attribute type 13 has an invalid length. [ 465.777949][ T8205] netlink: 'syz.4.854': attribute type 17 has an invalid length. [ 465.814001][ T8205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 465.951907][ T8205] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 466.177647][ T8209] device syzkaller0 entered promiscuous mode [ 466.751277][ T8219] loop4: detected capacity change from 0 to 1024 [ 466.762611][ T8219] EXT4-fs: Ignoring removed oldalloc option [ 468.242541][ T8219] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 468.679225][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 469.424584][ T8236] loop6: detected capacity change from 0 to 512 [ 469.467488][ T8236] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 470.542610][ T8246] netlink: 12 bytes leftover after parsing attributes in process `syz.5.864'. [ 470.650650][ T8246] device bond1 entered promiscuous mode [ 470.677792][ T8229] loop4: detected capacity change from 0 to 32768 [ 470.691276][ T8246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.711771][ T8246] IPv6: sit1: Disabled Multicast RS [ 470.741807][ T8246] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.751729][ T8246] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 470.770353][ T8246] bond1: (slave sit1): Error -95 calling set_mac_address [ 470.793207][ T8229] XFS (loop4): Mounting V5 Filesystem [ 470.948109][ T8229] XFS (loop4): Ending clean mount [ 471.128128][ T8264] device syzkaller0 entered promiscuous mode [ 471.615671][ T8268] overlayfs: missing 'lowerdir' [ 472.990273][ T4268] XFS (loop4): Unmounting Filesystem [ 473.526693][ T8287] loop3: detected capacity change from 0 to 512 [ 473.566476][ T8287] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 476.130435][ T8304] netlink: 20 bytes leftover after parsing attributes in process `syz.5.869'. [ 477.327451][ T8311] device syzkaller0 entered promiscuous mode [ 478.370839][ T8321] loop3: detected capacity change from 0 to 1024 [ 478.729419][ T8325] netlink: 'syz.0.884': attribute type 1 has an invalid length. [ 480.372924][ T8348] loop0: detected capacity change from 0 to 512 [ 480.457076][ T8348] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 482.470283][ T8344] loop4: detected capacity change from 0 to 32768 [ 482.835527][ T8344] JBD2: Ignoring recovery information on journal [ 483.663403][ T8344] JBD2: recovery failed [ 483.671227][ T8344] (syz.4.888,8344,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 483.708665][ T8344] (syz.4.888,8344,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 483.755606][ T8344] (syz.4.888,8344,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 483.798809][ T8344] (syz.4.888,8344,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 483.852583][ T8344] (syz.4.888,8344,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 484.579432][ T8388] loop4: detected capacity change from 0 to 1024 [ 486.859831][ T8409] loop6: detected capacity change from 0 to 1024 [ 486.869892][ T8409] EXT4-fs: Ignoring removed oldalloc option [ 487.107284][ T8409] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 487.642532][ T6812] EXT4-fs (loop6): unmounting filesystem. [ 487.740814][ T8421] netlink: 'syz.3.910': attribute type 1 has an invalid length. [ 488.559401][ T8434] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 492.825938][ T8477] netlink: 'syz.4.906': attribute type 13 has an invalid length. [ 492.867273][ T8477] netlink: 'syz.4.906': attribute type 17 has an invalid length. [ 493.083766][ T8477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 493.125713][ T8477] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 496.368380][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.6.931'. [ 498.770176][ T8522] loop4: detected capacity change from 0 to 1024 [ 499.976762][ T8534] device syzkaller0 entered promiscuous mode [ 501.618114][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.624486][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.265395][ T8559] netlink: 'syz.0.934': attribute type 13 has an invalid length. [ 503.485630][ T8559] netlink: 'syz.0.934': attribute type 17 has an invalid length. [ 503.957384][ T8559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 504.007652][ T8559] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 504.106203][ T8559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 505.748022][ T8578] loop5: detected capacity change from 0 to 1024 [ 512.916801][ T8632] device syzkaller0 entered promiscuous mode [ 514.456028][ T8642] netlink: 'syz.6.966': attribute type 1 has an invalid length. [ 518.747645][ T8676] device syzkaller0 entered promiscuous mode [ 519.229732][ T8681] loop5: detected capacity change from 0 to 1024 [ 520.083795][ T8693] IPv6: sit1: Disabled Multicast RS [ 524.848898][ T8715] device syzkaller0 entered promiscuous mode [ 527.544972][ T8720] loop4: detected capacity change from 0 to 32768 [ 529.836543][ T8756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.901582][ T8758] loop4: detected capacity change from 0 to 512 [ 529.921358][ T8758] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 531.454238][ T8758] EXT4-fs (loop4): 1 truncate cleaned up [ 531.460249][ T8758] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 531.776778][ T8756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.886720][ T8756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.907329][ T8761] device syzkaller0 entered promiscuous mode [ 531.948750][ T4268] EXT4-fs (loop4): unmounting filesystem. [ 532.028877][ T8756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.190803][ T8756] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.203279][ T8756] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.216653][ T8756] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.228946][ T8756] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.715243][ T8777] ax25_connect(): syz.0.1002 uses autobind, please contact jreuter@yaina.de [ 532.906325][ T8779] loop4: detected capacity change from 0 to 1024 [ 536.728559][ T8801] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.824373][ T8801] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.860950][ T8803] device syzkaller0 entered promiscuous mode [ 536.962838][ T8801] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.100814][ T8801] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.233008][ T8801] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.246980][ T8801] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.262369][ T8801] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.274956][ T8801] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.440400][ T8815] netlink: 'syz.3.1015': attribute type 1 has an invalid length. [ 539.660287][ T8830] netlink: 'syz.4.1020': attribute type 1 has an invalid length. [ 540.515291][ T8839] ax25_connect(): syz.6.1021 uses autobind, please contact jreuter@yaina.de [ 543.908303][ T8858] loop3: detected capacity change from 0 to 32768 [ 543.991522][ T8858] JBD2: Ignoring recovery information on journal [ 544.186469][ T8858] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 545.694405][ T8903] device syzkaller0 entered promiscuous mode [ 546.486291][ T4280] ocfs2: Unmounting device (7,3) on (node local) [ 546.912514][ T8916] device syzkaller0 entered promiscuous mode [ 548.675787][ T8941] overlayfs: missing 'lowerdir' [ 552.570838][ T8969] device syzkaller0 entered promiscuous mode [ 552.742356][ T8968] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.841882][ T8968] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.003253][ T8968] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.128135][ T8968] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.255162][ T8968] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.284994][ T8968] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.476195][ T8968] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.494952][ T8968] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.808991][ T8994] trusted_key: encrypted_key: insufficient parameters specified [ 556.599088][ T9012] loop5: detected capacity change from 0 to 1024 [ 558.555264][ T9019] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.808435][ T9019] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.916309][ T9019] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.008665][ T9019] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.200130][ T9025] loop6: detected capacity change from 0 to 512 [ 559.430937][ T9025] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 559.851231][ T9025] EXT4-fs (loop6): 1 truncate cleaned up [ 559.857415][ T9025] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 560.162375][ T9019] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.252449][ T9019] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.324004][ T9019] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.477401][ T6812] EXT4-fs (loop6): unmounting filesystem. [ 560.497381][ T9019] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.398222][ T9042] trusted_key: encrypted_key: insufficient parameters specified [ 563.517588][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.524130][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.829470][ T9060] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1089'. [ 565.130399][ T9060] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 565.286429][ T9067] trusted_key: encrypted_key: insufficient parameters specified [ 566.702086][ T9078] loop0: detected capacity change from 0 to 512 [ 566.821504][ T9078] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 567.390954][ T9084] trusted_key: encrypted_key: insufficient parameters specified [ 570.382289][ T9104] IPv6: sit1: Disabled Multicast RS [ 573.474238][ T9125] overlayfs: missing 'lowerdir' [ 574.635662][ T9129] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1108'. [ 574.690252][ T9129] netlink: 'syz.6.1108': attribute type 1 has an invalid length. [ 577.844480][ T9150] overlayfs: missing 'lowerdir' [ 580.167731][ T9170] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1121'. [ 580.213012][ T9170] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 581.439982][ T9184] netlink: 'syz.3.1125': attribute type 1 has an invalid length. [ 581.813479][ T9189] overlayfs: missing 'lowerdir' [ 584.342606][ T9210] loop0: detected capacity change from 0 to 1024 [ 586.299010][ T9233] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1137'. [ 586.604765][ T9233] netlink: 'syz.6.1137': attribute type 1 has an invalid length. [ 587.129715][ T9236] vivid-002: kernel_thread() failed [ 588.434984][ T9247] netlink: 'syz.5.1140': attribute type 1 has an invalid length. [ 590.587739][ T9264] loop0: detected capacity change from 0 to 1024 [ 591.580034][ T9274] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1150'. [ 591.620119][ T4316] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 591.629799][ T9274] netlink: 'syz.5.1150': attribute type 1 has an invalid length. [ 591.773717][ T9272] loop3: detected capacity change from 0 to 8192 [ 591.845533][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 591.863239][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 591.953643][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 591.964044][ T4316] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 591.975092][ T4316] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 591.987166][ T4316] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 591.998366][ T4316] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 592.027196][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.055055][ T4316] usb 5-1: config 0 descriptor?? [ 592.070521][ T9270] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 592.931857][ T4287] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 593.124590][ T4316] usb 5-1: USB disconnect, device number 14 [ 593.663916][ T9293] netlink: 300 bytes leftover after parsing attributes in process `syz.6.1151'. [ 596.381829][ T9304] netlink: 'syz.5.1156': attribute type 1 has an invalid length. [ 599.006825][ T9321] loop5: detected capacity change from 0 to 40427 [ 599.096865][ T9321] F2FS-fs (loop5): build fault injection attr: rate: 684, type: 0x3ffff [ 599.115695][ T9321] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7 [ 599.123631][ T9333] loop6: detected capacity change from 0 to 64 [ 599.189443][ T9321] F2FS-fs (loop5): invalid crc value [ 599.305917][ T9321] F2FS-fs (loop5): Found nat_bits in checkpoint [ 600.107340][ T9321] F2FS-fs (loop5): Start checkpoint disabled! [ 600.200960][ T9345] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1167'. [ 600.216438][ T9321] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 600.456116][ T9345] netlink: 'syz.6.1167': attribute type 1 has an invalid length. [ 601.223109][ T7951] kworker/u4:23: attempt to access beyond end of device [ 601.223109][ T7951] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 602.322550][ T9367] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1173'. [ 602.369312][ T9367] netlink: 'syz.0.1173': attribute type 1 has an invalid length. [ 602.967271][ T9369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1174'. [ 603.075871][ T9369] device bond1 entered promiscuous mode [ 603.329633][ T9369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.802825][ T9397] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1177'. [ 605.652626][ T9402] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1180'. [ 605.698657][ T9402] netlink: 'syz.0.1180': attribute type 1 has an invalid length. [ 606.006607][ T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 606.215642][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 606.228298][ T14] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 606.397155][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.126863][ T14] usb 5-1: config 0 descriptor?? [ 607.347483][ T14] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 607.383557][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 607.395471][ T4324] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 607.416473][ T14] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 607.430756][ T14] usb 5-1: media controller created [ 607.626141][ T4324] usb 6-1: too many configurations: 70, using maximum allowed: 8 [ 607.628823][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 607.645696][ T4324] usb 6-1: config index 0 descriptor too short (expected 65505, got 72) [ 607.671771][ T4324] usb 6-1: config index 1 descriptor too short (expected 65505, got 72) [ 607.719919][ T4324] usb 6-1: config index 2 descriptor too short (expected 65505, got 72) [ 607.767998][ T4324] usb 6-1: config index 3 descriptor too short (expected 65505, got 72) [ 607.816451][ T4324] usb 6-1: config index 4 descriptor too short (expected 65505, got 72) [ 607.864189][ T4324] usb 6-1: config index 5 descriptor too short (expected 65505, got 72) [ 607.923663][ T4324] usb 6-1: config index 6 descriptor too short (expected 65505, got 72) [ 607.965640][ T4324] usb 6-1: config index 7 descriptor too short (expected 65505, got 72) [ 608.035636][ T4324] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 608.079412][ T4324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.117777][ T4324] usb 6-1: Product: syz [ 608.139273][ T4324] usb 6-1: Manufacturer: syz [ 608.161704][ T4324] usb 6-1: SerialNumber: syz [ 608.213572][ T4324] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 608.259626][ T4324] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 608.464171][ T9436] loop6: detected capacity change from 0 to 1024 [ 609.211715][ T9440] overlayfs: missing 'lowerdir' [ 609.295441][ T4324] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 609.309311][ T4324] ath9k_htc: Failed to initialize the device [ 609.389322][ T4324] usb 6-1: ath9k_htc: USB layer deinitialized [ 609.395394][ T14] stb0899_attach: Driver disabled by Kconfig [ 609.451763][ T14] az6027: no front-end attached [ 609.451763][ T14] [ 609.888301][ T14] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 609.892621][ T4324] usb 6-1: USB disconnect, device number 8 [ 609.898854][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 610.281340][ T14] dvb-usb: schedule remote query interval to 400 msecs. [ 610.367944][ T14] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 610.487809][ T14] usb 5-1: USB disconnect, device number 15 [ 610.791129][ T14] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 614.041947][ T9475] loop3: detected capacity change from 0 to 512 [ 614.113583][ T9475] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 617.080533][ T9491] IPv6: sit1: Disabled Multicast RS [ 617.817580][ T9496] trusted_key: encrypted_key: insufficient parameters specified [ 618.320434][ T9501] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1205'. [ 618.368567][ T9498] netlink: 'syz.5.1205': attribute type 1 has an invalid length. [ 618.481933][ T9500] loop6: detected capacity change from 0 to 1024 [ 618.914449][ T9505] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1206'. [ 619.058453][ T9505] netlink: 'syz.0.1206': attribute type 1 has an invalid length. [ 620.188543][ T9526] loop5: detected capacity change from 0 to 512 [ 620.300264][ T9526] EXT4-fs (loop5): can't mount with data=, fs mounted w/o journal [ 623.156573][ T9545] trusted_key: encrypted_key: insufficient parameters specified [ 624.370140][ T9551] trusted_key: encrypted_key: insufficient parameters specified [ 624.498463][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.505087][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.721702][ T9558] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1219'. [ 624.781278][ T9561] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1220'. [ 624.808721][ T9562] netlink: 'syz.3.1219': attribute type 1 has an invalid length. [ 625.357737][ T9561] netlink: 'syz.4.1220': attribute type 1 has an invalid length. [ 627.356481][ T9586] overlayfs: missing 'lowerdir' [ 627.990010][ T9594] loop6: detected capacity change from 0 to 512 [ 628.000849][ T9594] EXT4-fs (loop6): can't mount with data=, fs mounted w/o journal [ 630.468440][ T9601] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.626987][ T9601] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.816996][ T9601] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.963165][ T9601] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.314904][ T9601] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.406728][ T9601] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.451120][ T9601] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.616583][ T9601] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.559498][ T9626] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1233'. [ 632.651601][ T9627] netlink: 'syz.5.1233': attribute type 1 has an invalid length. [ 634.185874][ T9636] overlayfs: missing 'lowerdir' [ 636.052536][ T9650] loop3: detected capacity change from 0 to 512 [ 636.140961][ T9650] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 636.276981][ T9655] trusted_key: encrypted_key: insufficient parameters specified [ 638.313262][ T9663] trusted_key: encrypted_key: insufficient parameters specified [ 640.425882][ T9674] overlayfs: missing 'lowerdir' [ 640.819929][ T9678] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1252'. [ 640.881548][ T9680] loop6: detected capacity change from 0 to 1024 [ 640.883633][ T9682] netlink: 'syz.4.1252': attribute type 1 has an invalid length. [ 642.803848][ T9703] loop0: detected capacity change from 0 to 512 [ 642.875583][ T9703] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 644.478539][ T9714] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1260'. [ 644.569958][ T9714] netlink: 'syz.5.1260': attribute type 1 has an invalid length. [ 645.352680][ T9724] netlink: 'syz.4.1261': attribute type 13 has an invalid length. [ 645.361137][ T9724] netlink: 'syz.4.1261': attribute type 17 has an invalid length. [ 645.393413][ T9724] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 645.531874][ T9724] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 647.575779][ T9749] overlayfs: missing 'lowerdir' [ 649.190089][ T9758] netlink: 'syz.4.1266': attribute type 1 has an invalid length. [ 651.075456][ T9772] loop4: detected capacity change from 0 to 512 [ 651.131388][ T9772] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 652.748744][ T9783] netlink: 'syz.6.1273': attribute type 13 has an invalid length. [ 652.757060][ T9783] netlink: 'syz.6.1273': attribute type 17 has an invalid length. [ 652.972497][ T9783] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 653.083364][ T9783] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 653.760569][ T9797] loop6: detected capacity change from 0 to 1024 [ 656.176607][ T9817] netlink: 'syz.4.1280': attribute type 1 has an invalid length. [ 658.090133][ T9845] netlink: 'syz.5.1287': attribute type 13 has an invalid length. [ 658.120925][ T9845] netlink: 'syz.5.1287': attribute type 17 has an invalid length. [ 658.399238][ T9845] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 658.489194][ T9845] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 768.705216][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 768.711987][ C0] rcu: 0-...!: (10800 ticks this GP) idle=fc5c/1/0x4000000000000000 softirq=37607/37609 fqs=355 [ 768.723820][ C0] (t=10500 jiffies g=54841 q=125 ncpus=2) [ 768.729691][ C0] rcu: rcu_preempt kthread starved for 9788 jiffies! g54841 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 768.740969][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 768.751191][ C0] rcu: RCU grace-period kthread stack dump: [ 768.757174][ C0] task:rcu_preempt state:R running task stack:26864 pid:16 ppid:2 flags:0x00004000 [ 768.768072][ C0] Call Trace: [ 768.771719][ C0] [ 768.774660][ C0] __schedule+0x11d1/0x40e0 [ 768.779352][ C0] ? __sched_text_start+0x8/0x8 [ 768.784299][ C0] ? __mod_timer+0x91e/0xd00 [ 768.788899][ C0] schedule+0xb9/0x180 [ 768.793162][ C0] schedule_timeout+0x184/0x2d0 [ 768.798105][ C0] ? console_conditional_schedule+0x40/0x40 [ 768.804092][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 768.809979][ C0] ? update_process_times+0x1b0/0x1b0 [ 768.815435][ C0] ? prepare_to_swait_event+0x335/0x350 [ 768.821030][ C0] rcu_gp_fqs_loop+0x303/0x1340 [ 768.825930][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 768.832242][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 768.837698][ C0] ? rcu_gp_init+0x14e0/0x14e0 [ 768.842468][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 768.848648][ C0] ? finish_swait+0xc3/0x1d0 [ 768.853269][ C0] rcu_gp_kthread+0x99/0x3b0 [ 768.857894][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 768.863365][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 768.869444][ C0] ? __kthread_parkme+0x162/0x1c0 [ 768.874582][ C0] kthread+0x29d/0x330 [ 768.879015][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 768.884244][ C0] ? kthread_blkcg+0xd0/0xd0 [ 768.888972][ C0] ret_from_fork+0x1f/0x30 [ 768.893868][ C0] [ 768.896890][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 768.903272][ C0] Sending NMI from CPU 0 to CPUs 1: [ 768.908688][ C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10 [ 768.909664][ C0] CPU: 0 PID: 9854 Comm: syz.0.1282 Not tainted syzkaller #0 [ 768.925218][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 768.935615][ C0] RIP: 0010:_raw_spin_unlock_irq+0x25/0x40 [ 768.941617][ C0] Code: 00 00 00 66 90 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 9e 12 2e f7 48 89 df e8 e6 da 2e f7 e8 a1 2d 52 f7 fb bf 01 00 00 00 86 3b 22 f7 65 8b 05 47 c0 cb 75 85 c0 74 02 5b c3 e8 94 d4 c9 [ 768.961932][ C0] RSP: 0018:ffffc90004eb7b98 EFLAGS: 00000282 [ 768.968000][ C0] RAX: bea3a8e97299c600 RBX: ffff888072b22e40 RCX: bea3a8e97299c600 [ 768.976054][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 768.984127][ C0] RBP: ffff888072b232d8 R08: ffff888072b22e43 R09: 1ffff1100e5645c8 [ 768.992222][ C0] R10: dffffc0000000000 R11: ffffed100e5645c9 R12: 1ffff1100e56465b [ 769.000485][ C0] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 769.008557][ C0] FS: 00007fe22867c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 769.017501][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 769.024089][ C0] CR2: 0000200000ffb020 CR3: 000000002e24d000 CR4: 00000000003506f0 [ 769.032060][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 769.040114][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 769.048359][ C0] Call Trace: [ 769.051809][ C0] [ 769.054970][ C0] get_signal+0x1163/0x1350 [ 769.059505][ C0] arch_do_signal_or_restart+0xc4/0x1350 [ 769.065317][ C0] ? __ia32_sys_rt_sigreturn+0x619/0x760 [ 769.071444][ C0] ? load_gs_index+0x130/0x130 [ 769.076233][ C0] ? get_sigframe_size+0x10/0x10 [ 769.081183][ C0] ? exit_to_user_mode_loop+0x3b/0x110 [ 769.086739][ C0] exit_to_user_mode_loop+0x70/0x110 [ 769.092110][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 769.097677][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 769.103253][ C0] do_syscall_64+0x58/0xa0 [ 769.107701][ C0] ? clear_bhb_loop+0x60/0xb0 [ 769.112468][ C0] ? clear_bhb_loop+0x60/0xb0 [ 769.117150][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 769.123132][ C0] RIP: 0033:0x7fe22776aeed [ 769.127832][ C0] Code: 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b 4c 16 f8 48 8b 36 48 89 37 48 89 4c 17 f8 c3 c5 fe 6f 54 16 e0 c5 fe 6f 5c 16 c0 fe 7f 07 c5 fe 7f 4f 20 c5 fe 7f 54 17 e0 c5 fe 7f 5c 17 c0 e9 [ 769.147720][ C0] RSP: 002b:00007fe22867c018 EFLAGS: 00010283 [ 769.154239][ C0] RAX: 0000200000ffb020 RBX: 00007fe227a15fa0 RCX: 0000000000000048 [ 769.162553][ C0] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000200000ffb020 [ 769.171231][ C0] RBP: 00007fe2278327e0 R08: 0000000000000048 R09: 0000000000000000 [ 769.179203][ C0] R10: 0000200000ffb000 R11: 0000200000000000 R12: 0000000000000000 [ 769.187344][ C0] R13: 00007fe227a16038 R14: 00007fe227a15fa0 R15: 00007ffe7067d978 [ 769.195415][ C0]