last executing test programs: 21m0.013779508s ago: executing program 32 (id=76): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20000000) openat$mice(0xffffffffffffff9c, 0x0, 0x80800) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 20m53.729633526s ago: executing program 33 (id=91): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="0c040000100001040000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 20m47.592647836s ago: executing program 34 (id=102): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x3, 0x4001}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 20m40.824116455s ago: executing program 35 (id=112): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x20000000) openat$mice(0xffffffffffffff9c, 0x0, 0x80800) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = io_uring_setup(0x3b44, &(0x7f00000002c0)={0x0, 0x86a1, 0x0, 0x0, 0x20000004}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r2, 0xffffffffffffffff, 0x0) 19m10.0912647s ago: executing program 36 (id=356): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) syz_clone3(0x0, 0x0) 12m45.661143016s ago: executing program 37 (id=1860): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000f8fe68ca", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r2, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 11m59.01198029s ago: executing program 38 (id=2018): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) write$cgroup_devices(r0, 0x0, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a5000000230000"], 0x0}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r3, r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) 8m0.358938589s ago: executing program 39 (id=2954): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0x807900, 0x0, 0x0, 0xbfdfffff}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) 7m53.175369381s ago: executing program 40 (id=2946): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2000680) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20) ftruncate(0xffffffffffffffff, 0x68561538) r2 = fsmount(r1, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) preadv(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) 7m36.303804099s ago: executing program 41 (id=2972): migrate_pages(0x0, 0x2, 0x0, &(0x7f00000000c0)=0x3ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002240)=""/102400, 0x19000) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r1) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) 7m3.58398071s ago: executing program 42 (id=3000): write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x802, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000500, r2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) gettid() r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5414, &(0x7f0000000000)) 6m40.370699826s ago: executing program 43 (id=3030): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6m30.519408107s ago: executing program 0 (id=3054): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x0, 0x306, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20044000}) readv(r6, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) 6m15.348907793s ago: executing program 44 (id=3054): r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x0, 0x306, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r7, 0x5201) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20044000}) readv(r6, 0x0, 0x0) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) 6m1.726250722s ago: executing program 45 (id=3085): r0 = getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setpriority(0x1, r0, 0x5) 5m27.712236727s ago: executing program 46 (id=3108): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x90) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x47b6, 0x800000, 0x0, 0x0, 0x0) 5m14.661695663s ago: executing program 47 (id=3126): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) r2 = dup2(r1, r1) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) 5m13.495525959s ago: executing program 7 (id=3151): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 5m12.253393753s ago: executing program 7 (id=3154): r0 = syz_open_dev$loop(0x0, 0xa4f, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de231d791dde6008003000000000000000000000000000000000000000000000000000000e1ffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 5m11.053344718s ago: executing program 7 (id=3156): r0 = socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00)="2700000015000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 5m10.042081511s ago: executing program 7 (id=3158): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) rt_sigsuspend(&(0x7f0000000000)={[0xffffffff]}, 0x8) 5m9.085133263s ago: executing program 8 (id=3159): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) dup(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac2900000001090224"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000007}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x3b}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) pipe2$9p(&(0x7f0000001900), 0x4800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 5m9.081175663s ago: executing program 7 (id=3160): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r2, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) getdents64(r3, 0x0, 0x0) 5m7.202395223s ago: executing program 7 (id=3162): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffff7fd, [{0x5, 0x2, 0x80000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61]}}, 0x0, 0x47}, 0x28) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r2, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) 5m5.503819196s ago: executing program 8 (id=3163): memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x4}, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x80, 0x14, 0x150}, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x8000) 5m3.099121257s ago: executing program 8 (id=3166): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x400381, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@local, 0x6, 0x0, 0x1, 0x0, 0x2, 0x3c}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000006840)=@raw={'raw\x00', 0x3c1, 0x3, 0x340, 0x0, 0x111, 0x4b4, 0x110, 0x700, 0x270, 0x278, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvlan0\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) getresuid(&(0x7f0000000440), &(0x7f0000000180), 0x0) stat(0x0, &(0x7f0000000340)) msgctl$IPC_SET(0x0, 0x1, 0x0) 4m57.994760311s ago: executing program 8 (id=3170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) preadv(r4, 0x0, 0x0, 0x5b3d2934, 0xfffffff8) sendmsg$NFC_CMD_DEV_UP(r5, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m55.267918829s ago: executing program 8 (id=3172): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122"], 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0x86dd, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4m51.505387035s ago: executing program 48 (id=3162): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r0], &(0x7f00000002c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) epoll_create1(0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0xfffff7fd, [{0x5, 0x2, 0x80000000}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61]}}, 0x0, 0x47}, 0x28) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) tkill(r2, 0xb) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)=r5}, 0x20) 4m51.260614055s ago: executing program 8 (id=3177): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x3, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4m49.056849494s ago: executing program 5 (id=3178): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x102) socket$nl_route(0x10, 0x3, 0x0) socket(0xb, 0x5, 0xc) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000000)={0x1, @default, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @default]}) sendmsg$IPCTNL_MSG_EXP_GET(r1, 0x0, 0x8000804) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, 0x0, 0x20000001) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08000100e00000022c0010"], 0x1f0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRESDEC=r5, @ANYBLOB="0000000000000000240012800b00010062617461647600001400babcdb99d05330130280100001004241544d414e5f56"], 0xfd12}}, 0x0) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000340)={0x0, @phonet={0x23, 0xf3, 0x1, 0x6}, @llc={0x1a, 0x118, 0x6, 0x4, 0x7, 0x7}, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x2}, 0x3ff, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000300)='ipvlan1\x00', 0x200, 0x9, 0x200}) 4m43.835416322s ago: executing program 5 (id=3182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x50) setresgid(0xee01, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x200408c4) 4m33.414404055s ago: executing program 49 (id=3177): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x3, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4m31.92078956s ago: executing program 5 (id=3189): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004680)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1414bb000000000000000000000000fe8000000000000000000000000000bb000000004e2300"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d332000000ffffffff0400000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000002abd7000000000000200000000000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 4m30.82656257s ago: executing program 5 (id=3190): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000640)={0x1, "3734f55a370900000a0000203ef7e0efdb358b1f57ff0f0000982f5d4b79b200", 0x0, 0x20, 0xf92d}) 4m29.369545101s ago: executing program 5 (id=3193): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x12, 0x4, 0x0, 0x2c, 0x0, 0x0, 0x4df, 0x0, 0x1, 0x0, @dev, @local, {[@ssrr={0x89, 0x17, 0x86, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @private=0xa010101]}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast2}]}, @ssrr={0x89, 0xb, 0x0, [@private=0xa010102, @broadcast]}, @timestamp={0x44, 0x4, 0x10, 0x0, 0xf}]}}}}}}}, 0x0) syz_usb_connect$uac1(0x0, 0x96, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x4, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, "", 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0xcc, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6896, 0x2, 0x0, "78f4cd"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x8000600) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001b40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40002101) 4m26.145121983s ago: executing program 5 (id=3198): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0x0) r2 = io_uring_setup(0x407d, &(0x7f0000000500)={0x0, 0x2b11, 0x800, 0x20000001, 0x24b}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)}}], 0x2, 0xc040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019800)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="afaaaaaaaaaa00000000000086dd604dd30800140601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5042000090780000"], 0x0) sendmmsg(r4, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f00000024c0)}}], 0x1, 0x20000880) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0x88, 0x0, 0x0, @remote}, 0x10) listen(r3, 0xffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bfa, 0x4, 0x8, 0xffffff9a, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x200007, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x6}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x7, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x2000527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0x9, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x7, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x0, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x4, 0x4, 0x8, 0x69, 0x6}, {0xffff, 0xffffffff, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x6, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0xfffffffd, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xbffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x5, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x289, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x6, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0xc0000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x0, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc459, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x40008, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x8000007}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x881, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 4m10.095259962s ago: executing program 50 (id=3198): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10000008ebc, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) socket$inet6(0xa, 0x6, 0x0) r2 = io_uring_setup(0x407d, &(0x7f0000000500)={0x0, 0x2b11, 0x800, 0x20000001, 0x24b}) io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000680)}}], 0x2, 0xc040) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000019800)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="afaaaaaaaaaa00000000000086dd604dd30800140601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5042000090780000"], 0x0) sendmmsg(r4, &(0x7f0000009340)=[{{0x0, 0x0, &(0x7f00000024c0)}}], 0x1, 0x20000880) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0x88, 0x0, 0x0, @remote}, 0x10) listen(r3, 0xffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bfa, 0x4, 0x8, 0xffffff9a, 0x10000004}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x200007, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x6}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x7, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x2000527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xad52, 0x80, 0xef35}, {0x9, 0x9, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x7, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x0, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0xc}, {0x4, 0x4, 0x8, 0x69, 0x6}, {0xffff, 0xffffffff, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x80000001, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x6, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0xfffffffd, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xbffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x5, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x289, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x6, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0xc0000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x0, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc459, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0xa, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x40008, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x8000007}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x881, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) 3m45.628019443s ago: executing program 0 (id=3186): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000003400010000000009ffdbdf"], 0x14}], 0x1}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) shutdown(r2, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x107c80, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x240080c1) 3m40.253844279s ago: executing program 0 (id=3260): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000007}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) pipe2$9p(&(0x7f0000001900), 0x4800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 3m37.367383725s ago: executing program 0 (id=3268): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='xdp_exception\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, r3}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xd81, &(0x7f00000005c0)={@remote, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x5, 0xd73, 0x67, 0x0, 0xab, 0x11, 0x0, @rand_addr=0x64010100, @remote}, {0x4e23, 0x4e20, 0xd5f, 0x0, @opaque="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"}}}}}, 0x0) 3m35.365852424s ago: executing program 0 (id=3271): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) signalfd(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000100) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$SNDCTL_FM_LOAD_INSTR(r2, 0x40285107) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"b3472eb9cd42d2030000002000", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m29.876817335s ago: executing program 0 (id=3279): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x8) r2 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000580)={@loopback, 0x1, 0x0, 0x10, 0x0, [{@local}]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) readahead(r2, 0x7, 0x4000) mknod$loop(0x0, 0x400, 0x0) 3m14.40015894s ago: executing program 51 (id=3279): read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x8) r2 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000580)={@loopback, 0x1, 0x0, 0x10, 0x0, [{@local}]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r2, 0x0) readahead(r2, 0x7, 0x4000) mknod$loop(0x0, 0x400, 0x0) 1m21.57940563s ago: executing program 6 (id=3562): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m20.811255775s ago: executing program 6 (id=3567): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x4fc0, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) syz_open_dev$sg(0x0, 0xffffffff, 0x8002) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x3f00, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) openat$audio(0xffffff9c, 0x0, 0x800, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m13.912753778s ago: executing program 6 (id=3579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x1a}, @void, @eth={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@generic={0x4305}}}}, 0x12) 1m10.536496178s ago: executing program 6 (id=3586): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 1m10.035994633s ago: executing program 6 (id=3588): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0xdd68, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 1m9.688260775s ago: executing program 6 (id=3590): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x400080) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000980)={0x400, 0x4, 0x0, 'queue1\x00', 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaa93aaaaaaaaaaaaaa008100200086dd60e400ff00403a00fe880000000000000000000000000001fe8000000060f0f0fd83aedf4c3800000000000000000000aa02009078000000006000000000801100fc00"/109], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x400c045) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100001}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0x1f3e, 0x81, 0x8, 0x8}, {0x12d, 0x30, 0x3, 0x8ff7}, {0xfffc, 0x7f, 0xd, 0x3ff2}, {0xab5f, 0x5, 0x2, 0x9}]}) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 53.589352097s ago: executing program 52 (id=3590): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x400080) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000980)={0x400, 0x4, 0x0, 'queue1\x00', 0x7}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaa93aaaaaaaaaaaaaa008100200086dd60e400ff00403a00fe880000000000000000000000000001fe8000000060f0f0fd83aedf4c3800000000000000000000aa02009078000000006000000000801100fc00"/109], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x400c045) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(0xffffffffffffffff, 0x7a9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x100001}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)={0x4, &(0x7f0000000080)=[{0x1f3e, 0x81, 0x8, 0x8}, {0x12d, 0x30, 0x3, 0x8ff7}, {0xfffc, 0x7f, 0xd, 0x3ff2}, {0xab5f, 0x5, 0x2, 0x9}]}) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 22.849872437s ago: executing program 1 (id=3711): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54}) socket$nl_generic(0x10, 0x3, 0x10) write$sysctl(0xffffffffffffffff, &(0x7f0000000080)='6\x00', 0x2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'team0\x00', &(0x7f0000000180)=@ethtool_modinfo={0x4b, 0x40, 0x8}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsync(0xffffffffffffffff) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) init_module(0x0, 0xa10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.202338168s ago: executing program 1 (id=3722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x17, 0x0, &(0x7f0000000380)="e07b292fe01084af18396c91254f2f2d1a65a577010047", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 14.517276786s ago: executing program 1 (id=3727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r1, r0, 0x7}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13.92950154s ago: executing program 1 (id=3733): syz_open_dev$evdev(&(0x7f0000000b80), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x8000000a}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.594926625s ago: executing program 1 (id=3734): socket$igmp(0x2, 0x3, 0x2) io_uring_setup(0x4f15, &(0x7f0000000040)={0x0, 0x3aa9, 0x0, 0x3, 0x80c8}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket(0xb, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x848, &(0x7f0000000040)={[{@subsystem='hugetlb'}, {@subsystem='memory'}]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 13.123943728s ago: executing program 4 (id=3737): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x17, 0x0, &(0x7f0000000380)="e07b292fe01084af18396c91254f2f2d1a65a577010047", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.791686082s ago: executing program 4 (id=3739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a50000000060a0b040000000000000000020000002400048020000180080001006c6f670014000280080006400000003ec6000140000300000900010073797a30000000000900020073797a3200"], 0x78}}, 0x40) 12.395875845s ago: executing program 4 (id=3741): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000007640)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e44", 0x7b, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 11.012693303s ago: executing program 2 (id=3746): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000002c0)='sched_switch\x00', r1}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) setresgid(0xee01, 0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x200408c4) 10.482174656s ago: executing program 2 (id=3748): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x6055) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x2, 0x12) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240), &(0x7f0000000040)}) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000080)='_', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r5 = socket(0x25, 0x3, 0x2006) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x6, 0x80000000, 0x75, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x80, 0x7fffffff, 0x5}}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'xfrm0\x00', 0x4122}) r7 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r7, 0x8b32, &(0x7f0000000040)) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x1}, 0x18) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}, 0x40014) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@setlink={0x40, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x30000800}, 0x20040850) 8.968205049s ago: executing program 2 (id=3750): socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000080), 0x4800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x0) 8.138633046s ago: executing program 2 (id=3752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$loop(0x0, 0x8, 0x105101) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_GET_DEVICE(r8, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x8040) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xa0) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0xb3) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0xfffffffdffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) tkill(0xffffffffffffffff, 0x2a) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000035380)={0x1, 0x8, 0x10, 0x6, 0x20, 0x9, 0x2, 0x7, 0xffffffff, 0x7, 0x80, 0x9, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELOBJ={0x100, 0x14, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_USERDATA={0xec, 0x8, "78db38431e302b97056a6b69a6883818c919ff3f956baf07f7c69ae866dbbc1e7e1cbcb1c67fe327d862216eb7d49c3a39b776eedd8b787dac75891379f6b799f2150b08e0892412ad8d6dcf9a755d7d854776550fdda9f3a7d2eccd3ba473e36aceba661d5cabf9f7911000e2e0be271bd7176c7ba2c4d780117ae710575732ef349dc0bdb1363347f1db712572aacb3502742ab1752887efe2a85e14cc35a477d586064a02eb2c919a2b6cbf4f41692930cd4bd542b05d057f9c08d0118416270ea184dd0da87ca7a7dffdf13b8d8eade4c0b2c8b06d016c940172e7957cbfb223c65611ebd81f"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x174}}, 0x800) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r10, 0x80811501, &(0x7f0000000000)={0x80}) 7.081654333s ago: executing program 4 (id=3755): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8c000}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={r1, 0x0, 0x9, 0x0, &(0x7f00000001c0)}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0x8, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000007c0)={0x0, r0, 0x9, 0xdf, 0xb, 0x7ff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r4}, 0x10) readv(r2, &(0x7f0000000380)=[{0x0}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/159, 0x9f) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x8001, 0x1, 0x7, 0x0, 0xa98c}, {0x8, 0x8, 0x9c0, 0x5, 0xffffffff, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="bc010000190001000000000000000000000000000000000000000000000000006401010000000000000000000000000000000000000080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r4], 0x1bc}}, 0x4894) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r7, &(0x7f0000004e40)=[{{&(0x7f0000000800)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/119, 0x77}, {0x0}, {&(0x7f0000000940)=""/174, 0xae}], 0x3}, 0x2}, {{&(0x7f00000010c0)=@isdn, 0x80, &(0x7f0000001500)=[{&(0x7f0000001140)=""/227, 0xe3}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001440)=""/191, 0xbf}], 0x5}, 0x7f}, {{&(0x7f0000001580)=@can, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)=""/210, 0xd2}], 0x1, &(0x7f00000017c0)=""/59, 0x3b}, 0x3}, {{&(0x7f0000001800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)}, 0x2}], 0x4, 0x40000040, &(0x7f0000004fc0)={0x0, 0x989680}) 4.8639668s ago: executing program 4 (id=3762): socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000080), 0x4800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x64}}, 0x0) 4.36923331s ago: executing program 4 (id=3765): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, &(0x7f0000002880), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x401, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000500)={'comedi_test\x00', [0xa, 0x7fe, 0x1, 0x0, 0x0, 0x80000000, 0x8, 0xb, 0xa, 0xfc, 0x4, 0x8, 0xa, 0x4, 0x3, 0x80, 0xdf9, 0x1a449, 0x3, 0x40000007, 0x100, 0x2, 0xf27, 0x6, 0xa, 0x0, 0x5, 0x7, 0x4, 0x10000, 0x8]}) 4.178057736s ago: executing program 3 (id=3766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.821406984s ago: executing program 9 (id=3767): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) r1 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 3.572802079s ago: executing program 3 (id=3768): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3.159380843s ago: executing program 1 (id=3769): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x4a183) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in=@loopback, 0x0, 0x20, 0x2001, 0x2, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x0, 0x0, 0xffffffffffffffff, 0x40000, 0xffffffff}, {0x0, 0x0, 0x40000000, 0x1}, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x37}, 0x3507, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x3}}, 0xe8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0xfff6, 0x508, 0x8000, 0xffffffff, 0x9, 0x6, 0x5, 0x2}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xa000, 0x8563, 0x9, 0x1, 0x0, [{0x80, 0x8, 0x4, '\x00', 0x5}, {0x10, 0x1, 0xc, '\x00', 0xee}, {0x2, 0x4, 0x7, '\x00', 0x4}, {0x9, 0x2f, 0x6, '\x00', 0x3}, {0x2d, 0x8, 0x5, '\x00', 0x5}, {0x0, 0x1, 0xa3}, {0xfe, 0x8, 0xf, '\x00', 0x5}, {0xfb, 0x3, 0xfb, '\x00', 0x7}, {0x1, 0x2, 0x7, '\x00', 0x76}, {0xa4, 0x5e, 0x42, '\x00', 0x1}, {0x7, 0x5, 0x5, '\x00', 0x4}, {0x6f, 0x40, 0x2, '\x00', 0x3}, {0xb8, 0x7, 0x9, '\x00', 0xd}, {0xc, 0x5, 0xf, '\x00', 0x6}, {0x6, 0xa9, 0x0, '\x00', 0x9}, {0x4, 0x4, 0xfb, '\x00', 0xc7}, {0x40, 0xe, 0x7d, '\x00', 0x6}, {0x7, 0x8, 0x6, '\x00', 0x5}, {0x29, 0xb, 0xd, '\x00', 0x8}, {0x8, 0x9, 0x9, '\x00', 0xd}, {0x7, 0x3, 0x7f, '\x00', 0x80}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0xda, 0x8, 0x2, '\x00', 0x2}, {0x2, 0xf8, 0xd, '\x00', 0x2}]}}) sendmsg$kcm(r5, 0x0, 0x0) bind$rxrpc(r4, &(0x7f00000000c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) socket(0x840000000002, 0x3, 0xff) lremovexattr(0x0, &(0x7f0000000000)=@random={'trusted.', '}{\xac){@]\\\x00'}) 3.120333222s ago: executing program 3 (id=3770): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64=0x0], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) setresgid(0xee01, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x200408c4) 3.073802936s ago: executing program 9 (id=3771): r0 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcmda12\x00', [0x3, 0xffffffff, 0x7fffffff, 0x84e1, 0x2f, 0x2007, 0x7, 0x5, 0xffe, 0x1fffffff, 0x1, 0x8500, 0x1003, 0x4, 0xffff, 0x10002, 0xffffffa8, 0x8, 0x41ff, 0x3, 0xf, 0x0, 0x9, 0xe2df, 0x746f, 0x2000008, 0x5, 0x3, 0x4, 0x4, 0x8049]}) 2.939067429s ago: executing program 2 (id=3772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8c000}, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000240)={r1, 0x0, 0x9, 0x0, &(0x7f00000001c0)}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_open_dev$video4linux(&(0x7f0000000400), 0x8, 0x80) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f00000007c0)={0x0, r0, 0x9, 0xdf, 0xb, 0x7ff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000001c0)={0x1d, r4}, 0x10) readv(r2, &(0x7f0000000380)=[{0x0}], 0x1) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000200)=0xd, 0x4) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/159, 0x9f) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20000000) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x9, 0x0, '\x00', [{0x8001, 0x1, 0x7, 0x0, 0xa98c}, {0x8, 0x8, 0x9c0, 0x5, 0xffffffff, 0x8}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="bc010000190001000000000000000000000000000000000000000000000000006401010000000000000000000000000000000000000080000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r4], 0x1bc}}, 0x4894) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x181, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r7, &(0x7f0000004e40)=[{{&(0x7f0000000800)=@qipcrtr, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/119, 0x77}, {0x0}, {&(0x7f0000000940)=""/174, 0xae}], 0x3}, 0x2}, {{&(0x7f00000010c0)=@isdn, 0x80, &(0x7f0000001500)=[{&(0x7f0000001140)=""/227, 0xe3}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001c80)=""/4096, 0x1000}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000001440)=""/191, 0xbf}], 0x5}, 0x7f}, {{&(0x7f0000001580)=@can, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)=""/210, 0xd2}], 0x1, &(0x7f00000017c0)=""/59, 0x3b}, 0x3}, {{&(0x7f0000001800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)}, 0x2}], 0x4, 0x40000040, &(0x7f0000004fc0)={0x0, 0x989680}) 2.694661988s ago: executing program 9 (id=3773): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x17, 0x0, &(0x7f0000000380)="e07b292fe01084af18396c91254f2f2d1a65a577010047", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.60989554s ago: executing program 3 (id=3774): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x6055) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x2, 0x12) r4 = accept4$unix(r0, 0x0, 0x0, 0x0) sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000300)={&(0x7f0000000240), &(0x7f0000000040)}) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)=""/74, 0x4a}], 0x2d}, 0x10000) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000080)='_', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r7 = socket(0x25, 0x3, 0x2006) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x6, 0x80000000, 0x75, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x80, 0x7fffffff, 0x5}}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'xfrm0\x00', 0x4122}) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r9, 0x8b32, &(0x7f0000000040)) bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x1}, 0x18) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='$', 0x1}], 0x1}, 0x40014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@setlink={0x40, 0x13, 0x331, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24604, 0x46001}, [@IFLA_IFNAME={0x14, 0x3, 'dummy0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x30000800}, 0x20040850) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 2.068930916s ago: executing program 9 (id=3775): socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) pipe2$watch_queue(&(0x7f0000000040), 0x80) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000080), 0x4800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[], 0x64}}, 0x0) 1.340074403s ago: executing program 9 (id=3776): syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 1.01744713s ago: executing program 3 (id=3777): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000001640)='./file0\x00') 383.851617ms ago: executing program 3 (id=3778): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x4c01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x80001, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 177.544881ms ago: executing program 9 (id=3779): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) 0s ago: executing program 2 (id=3780): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): problem. [ 1081.361138][T14202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.583098][T14202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1081.590634][T14202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.626787][T14202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.686525][T14117] bridge_slave_1: left allmulticast mode [ 1081.692559][T14117] bridge_slave_1: left promiscuous mode [ 1081.700973][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.717471][ T5796] Bluetooth: hci7: command tx timeout [ 1081.730555][T14117] bridge_slave_0: left allmulticast mode [ 1081.737423][T14117] bridge_slave_0: left promiscuous mode [ 1081.744168][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.687151][T14246] loop8: detected capacity change from 0 to 256 [ 1083.002211][T14246] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1083.025745][T14117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.272499][T14117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.289936][T14117] bond0 (unregistering): Released all slaves [ 1083.631479][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.640651][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.264354][T14202] hsr_slave_0: entered promiscuous mode [ 1084.284380][T14202] hsr_slave_1: entered promiscuous mode [ 1084.292841][T14202] debugfs: 'hsr0' already exists in 'hsr' [ 1084.298867][T14202] Cannot create hsr debugfs directory [ 1084.457767][T12688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.466042][T12688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.321691][T14117] hsr_slave_0: left promiscuous mode [ 1085.339962][T14117] hsr_slave_1: left promiscuous mode [ 1085.347613][T14117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.355424][T14117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.407784][T14117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.415887][T14117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.583354][T14117] veth1_macvtap: left promiscuous mode [ 1085.589245][T14117] veth0_macvtap: left promiscuous mode [ 1085.595257][T14117] veth1_vlan: left promiscuous mode [ 1085.609773][T14117] veth0_vlan: left promiscuous mode [ 1086.555648][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1086.754114][ T11] usb 1-1: device descriptor read/64, error -71 [ 1087.146252][ T11] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1087.233013][T14117] team0 (unregistering): Port device team_slave_1 removed [ 1087.323981][ T11] usb 1-1: device descriptor read/64, error -71 [ 1087.362147][T14117] team0 (unregistering): Port device team_slave_0 removed [ 1087.537127][ T11] usb usb1-port1: attempt power cycle [ 1088.004622][ T11] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1088.068982][ T11] usb 1-1: device descriptor read/8, error -71 [ 1088.330478][ T11] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1088.424365][ T11] usb 1-1: device descriptor read/8, error -71 [ 1088.540706][ T11] usb usb1-port1: unable to enumerate USB device [ 1088.829420][T14117] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.157511][T14117] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.320949][T14117] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.687276][T14117] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.921931][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1089.929353][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.538783][T14268] (syz.8.3039,14268,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 1090.588094][T14117] bridge_slave_1: left allmulticast mode [ 1090.594318][T14117] bridge_slave_1: left promiscuous mode [ 1090.600679][T14117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.739495][T14117] bridge_slave_0: left allmulticast mode [ 1090.745655][T14117] bridge_slave_0: left promiscuous mode [ 1090.752434][T14117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.866440][T14117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.955607][T14117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.041585][T14117] bond0 (unregistering): Released all slaves [ 1092.696368][T14202] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1092.915214][T14202] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1093.106249][T14117] hsr_slave_0: left promiscuous mode [ 1093.147755][T14117] hsr_slave_1: left promiscuous mode [ 1093.156294][T14117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1093.164268][T14117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.251828][T14117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1093.259721][T14117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.434501][T14117] veth1_macvtap: left promiscuous mode [ 1093.440414][T14117] veth0_macvtap: left promiscuous mode [ 1093.449309][T14117] veth1_vlan: left promiscuous mode [ 1093.455367][T14117] veth0_vlan: left promiscuous mode [ 1094.860911][T14117] team_slave_1 (unregistering): left promiscuous mode [ 1095.209206][T14117] team0 (unregistering): Port device team_slave_1 removed [ 1095.239731][T14117] team_slave_0 (unregistering): left promiscuous mode [ 1095.370011][T14117] team0 (unregistering): Port device team_slave_0 removed [ 1095.701573][T14202] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1095.750132][T14274] loop0: detected capacity change from 0 to 256 [ 1095.918134][T14202] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1096.258685][T14274] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 1096.437507][ T30] audit: type=1800 audit(1767622550.198:118): pid=14274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3042" name="bus" dev="loop0" ino=1048804 res=0 errno=0 [ 1096.646164][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1096.657570][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1096.683485][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1096.717069][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1096.736330][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1096.950970][ T35] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.063261][ T35] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.249064][ T35] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.469754][ T35] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.219708][ T35] bridge_slave_1: left allmulticast mode [ 1098.226873][ T35] bridge_slave_1: left promiscuous mode [ 1098.233725][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.275462][ T35] bridge_slave_0: left allmulticast mode [ 1098.281573][ T35] bridge_slave_0: left promiscuous mode [ 1098.288460][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.828976][ T5794] Bluetooth: hci0: command tx timeout [ 1098.858397][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1098.878854][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1098.970481][ T35] bond0 (unregistering): Released all slaves [ 1099.187157][T14202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.864638][T14202] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.960845][ T35] hsr_slave_0: left promiscuous mode [ 1099.974972][ T35] hsr_slave_1: left promiscuous mode [ 1099.983188][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.991044][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.008920][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.016760][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.074975][ T35] veth1_macvtap: left promiscuous mode [ 1100.080898][ T35] veth0_macvtap: left promiscuous mode [ 1100.087138][ T35] veth1_vlan: left promiscuous mode [ 1100.092582][ T35] veth0_vlan: left promiscuous mode [ 1100.914137][ T5796] Bluetooth: hci0: command tx timeout [ 1101.228725][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1101.270840][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1101.583223][ T11] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1101.722872][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.730534][ T1887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1101.804227][ T11] usb 1-1: Using ep0 maxpacket: 16 [ 1101.813359][T14277] chnl_net:caif_netlink_parms(): no params data found [ 1101.846974][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1101.857532][ T11] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1101.870122][ T11] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1101.879936][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.960239][ T1887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.968041][ T1887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1102.160514][ T11] usb 1-1: config 0 descriptor?? [ 1102.977887][ T5796] Bluetooth: hci0: command tx timeout [ 1103.004397][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.149432][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.272285][T14307] bond_slave_0: entered promiscuous mode [ 1103.278469][T14307] bond_slave_1: entered promiscuous mode [ 1103.284834][T14307] vlan2: entered promiscuous mode [ 1103.290074][T14307] bond0: entered promiscuous mode [ 1103.459570][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.635079][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.845655][T14277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.853371][T14277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.861665][T14277] bridge_slave_0: entered allmulticast mode [ 1103.872061][T14277] bridge_slave_0: entered promiscuous mode [ 1104.080949][T14277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.089113][T14277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.097005][T14277] bridge_slave_1: entered allmulticast mode [ 1104.106917][T14277] bridge_slave_1: entered promiscuous mode [ 1104.119612][ T35] bridge_slave_1: left allmulticast mode [ 1104.125783][ T35] bridge_slave_1: left promiscuous mode [ 1104.132455][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.177843][ T35] bridge_slave_0: left allmulticast mode [ 1104.184556][ T35] bridge_slave_0: left promiscuous mode [ 1104.191304][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.343192][ T38] usb 1-1: USB disconnect, device number 10 [ 1104.699251][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1104.718975][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.747657][ T35] bond0 (unregistering): Released all slaves [ 1104.795586][T14202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.054535][ T5796] Bluetooth: hci0: command tx timeout [ 1105.276808][T14277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.575479][T14277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1105.818579][ T35] hsr_slave_0: left promiscuous mode [ 1105.829887][ T35] hsr_slave_1: left promiscuous mode [ 1105.837869][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1105.845811][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1105.885323][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1105.893217][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1105.928893][ T35] veth1_macvtap: left promiscuous mode [ 1105.936528][ T35] veth0_macvtap: left promiscuous mode [ 1105.942469][ T35] veth1_vlan: left promiscuous mode [ 1105.948545][ T35] veth0_vlan: left promiscuous mode [ 1106.945531][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1106.995897][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1107.696812][T14277] team0: Port device team_slave_0 added [ 1107.799736][T14277] team0: Port device team_slave_1 added [ 1108.103142][T14277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1108.110674][T14277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.139345][T14277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1108.461530][T14277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1108.469075][T14277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.495564][T14277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.025803][T14277] hsr_slave_0: entered promiscuous mode [ 1109.042686][T14277] hsr_slave_1: entered promiscuous mode [ 1109.059334][T14277] debugfs: 'hsr0' already exists in 'hsr' [ 1109.066163][T14277] Cannot create hsr debugfs directory [ 1109.672428][T14202] veth0_vlan: entered promiscuous mode [ 1109.785778][T14345] Illegal XDP return value 4294967274 on prog (id 251) dev syz_tun, expect packet loss! [ 1109.791864][T14202] veth1_vlan: entered promiscuous mode [ 1110.300589][T14202] veth0_macvtap: entered promiscuous mode [ 1110.366214][T14348] vlan2: entered promiscuous mode [ 1110.542262][T14202] veth1_macvtap: entered promiscuous mode [ 1110.992353][T14202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.107362][T14202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.253238][T14259] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.328624][T14259] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.413153][T14259] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.437543][T14259] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.672644][T14277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1111.701389][T14277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1111.740876][T14277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1111.809535][T14277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1113.175876][T14277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.258927][T11307] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1113.345449][T14277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.429322][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.437068][T13999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.542120][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.549725][T13999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.642335][T11307] usb 9-1: Using ep0 maxpacket: 32 [ 1113.864426][T11307] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1113.929653][T11307] usb 9-1: config 4 has an invalid interface number: 124 but max is 0 [ 1113.938332][T11307] usb 9-1: config 4 has no interface number 0 [ 1113.945321][T11307] usb 9-1: config 4 interface 124 altsetting 3 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 1113.956609][T11307] usb 9-1: config 4 interface 124 altsetting 3 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1113.968887][T11307] usb 9-1: config 4 interface 124 has no altsetting 0 [ 1114.152626][T11307] usb 9-1: New USB device found, idVendor=1199, idProduct=683c, bcdDevice=fb.51 [ 1114.162299][T11307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.171588][T11307] usb 9-1: Product: syz [ 1114.176479][T11307] usb 9-1: Manufacturer: syz [ 1114.181391][T11307] usb 9-1: SerialNumber: syz [ 1114.466122][T11307] sierra 9-1:4.124: Sierra USB modem converter detected [ 1114.560014][T11307] usb 9-1: Sierra USB modem converter now attached to ttyUSB0 [ 1114.624874][T11307] usb 9-1: Sierra USB modem converter now attached to ttyUSB1 [ 1114.734502][T11307] usb 9-1: USB disconnect, device number 3 [ 1114.802741][T11307] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1114.834953][T11307] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 1114.845307][T11307] sierra 9-1:4.124: device disconnected [ 1115.613047][T14277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.011579][T14277] veth0_vlan: entered promiscuous mode [ 1116.142483][T14277] veth1_vlan: entered promiscuous mode [ 1116.404739][T14277] veth0_macvtap: entered promiscuous mode [ 1116.489747][T14277] veth1_macvtap: entered promiscuous mode [ 1116.676289][T14277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.785078][T14277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.900767][ T1887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.008873][T13016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.095358][T13016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.352564][ T1887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.468074][T14259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.476376][T14259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.501486][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.509663][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.330457][T14395] binder: BINDER_SET_CONTEXT_MGR already set [ 1118.337656][T14395] binder: 14393:14395 ioctl 4018620d 800002c0 returned -16 [ 1118.407121][ T30] audit: type=1326 audit(1767622572.168:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1118.468305][ T30] audit: type=1326 audit(1767622572.188:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1118.495067][ T30] audit: type=1326 audit(1767622572.198:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1118.520764][ T30] audit: type=1326 audit(1767622572.198:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1118.543907][ T30] audit: type=1326 audit(1767622572.198:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1118.566779][ T30] audit: type=1326 audit(1767622572.198:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1118.593413][ T30] audit: type=1326 audit(1767622572.198:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1118.617686][ T30] audit: type=1326 audit(1767622572.198:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1118.640198][ T30] audit: type=1326 audit(1767622572.208:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1118.664209][ T30] audit: type=1326 audit(1767622572.208:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14397 comm="syz.6.3069" exe="/root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf70bd539 code=0x7ffc0000 [ 1119.809330][T14408] IPv6: NLM_F_CREATE should be specified when creating new route [ 1120.896170][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1120.986601][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1121.003117][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1121.039460][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1121.065903][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1121.282624][T14415] loop9: detected capacity change from 0 to 512 [ 1121.578872][T14415] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3074: inode has both inline data and extents flags [ 1121.620197][T14415] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3074: couldn't read orphan inode 15 (err -117) [ 1121.705416][T14415] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1121.803505][T14418] chnl_net:caif_netlink_parms(): no params data found [ 1122.076015][T14202] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.139195][ T5796] Bluetooth: hci3: command tx timeout [ 1123.214272][T11427] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1123.450268][T11427] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 1123.459427][T11427] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.470235][T11427] usb 10-1: config 0 has no interface number 0 [ 1123.476999][T11427] usb 10-1: config 0 interface 117 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1123.494961][T11427] usb 10-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1123.955129][T11427] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1123.965061][T11427] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.973291][T11427] usb 10-1: Product: syz [ 1123.977930][T11427] usb 10-1: Manufacturer: syz [ 1123.982839][T11427] usb 10-1: SerialNumber: syz [ 1124.039037][T11427] usb 10-1: config 0 descriptor?? [ 1124.502711][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.520173][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.527965][T14418] bridge_slave_0: entered allmulticast mode [ 1124.536837][T14418] bridge_slave_0: entered promiscuous mode [ 1124.641651][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.650945][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.658769][T14418] bridge_slave_1: entered allmulticast mode [ 1124.667691][T14418] bridge_slave_1: entered promiscuous mode [ 1124.934963][ T5794] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1124.944095][ T5794] Bluetooth: hci1: Injecting HCI hardware error event [ 1124.951903][ T5794] Bluetooth: hci1: hardware error 0x00 [ 1124.983899][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.993395][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.117643][T14119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.126924][T14119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1125.178214][T14418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1125.214298][ T5796] Bluetooth: hci3: command tx timeout [ 1125.286073][T14418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.607498][T14418] team0: Port device team_slave_0 added [ 1125.692449][T14418] team0: Port device team_slave_1 added [ 1125.907538][T11427] usb 10-1: USB disconnect, device number 48 [ 1126.192557][T14418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.199860][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.226180][T14418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.471278][T14418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.478662][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1126.505619][T14418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.975484][ T5794] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1127.168140][T14418] hsr_slave_0: entered promiscuous mode [ 1127.186409][T14418] hsr_slave_1: entered promiscuous mode [ 1127.195076][T14418] debugfs: 'hsr0' already exists in 'hsr' [ 1127.200934][T14418] Cannot create hsr debugfs directory [ 1127.293921][ T5794] Bluetooth: hci3: command tx timeout [ 1127.364283][T14456] binder: BINDER_SET_CONTEXT_MGR already set [ 1127.370500][T14456] binder: 14455:14456 ioctl 4018620d 800002c0 returned -16 [ 1127.810283][T14459] loop9: detected capacity change from 0 to 128 [ 1127.904281][T14459] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1127.968718][T14459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.594958][T14202] UDF-fs: error (device loop9): udf_read_inode: (ino 114) failed !bh [ 1128.604594][T14202] UDF-fs: error (device loop9): udf_read_inode: (ino 114) failed !bh [ 1129.374026][ T5794] Bluetooth: hci3: command tx timeout [ 1129.616003][ T1887] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.749236][T14418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1129.883198][ T1887] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.976086][T14418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1130.059927][ T1887] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.154782][T14418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1130.280455][ T1887] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1130.336766][T14418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1130.845575][ T1887] bridge_slave_1: left allmulticast mode [ 1130.851416][ T1887] bridge_slave_1: left promiscuous mode [ 1130.857995][ T1887] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.997331][ T1887] bridge_slave_0: left allmulticast mode [ 1131.003153][ T1887] bridge_slave_0: left promiscuous mode [ 1131.009673][ T1887] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.147051][ T1887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1132.235727][ T1887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.270376][ T1887] bond0 (unregistering): Released all slaves [ 1133.843460][ T1887] hsr_slave_0: left promiscuous mode [ 1133.874769][ T1887] hsr_slave_1: left promiscuous mode [ 1133.882220][ T1887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.890064][ T1887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.996499][ T1887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1134.004167][ T1887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1134.166898][ T1887] veth1_macvtap: left promiscuous mode [ 1134.172619][ T1887] veth0_macvtap: left promiscuous mode [ 1134.179773][ T1887] veth1_vlan: left promiscuous mode [ 1134.185502][ T1887] veth0_vlan: left promiscuous mode [ 1134.233004][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1134.304608][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1134.314408][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1134.328117][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1134.345841][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1135.324373][ T1887] team0 (unregistering): Port device team_slave_1 removed [ 1135.372389][ T1887] team0 (unregistering): Port device team_slave_0 removed [ 1135.543985][ T5796] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1135.552674][ T5796] Bluetooth: hci0: Injecting HCI hardware error event [ 1135.560518][ T5796] Bluetooth: hci0: hardware error 0x00 [ 1136.222218][T14418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.573354][T14418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.671100][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.679122][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1136.756224][ T5794] Bluetooth: hci4: command tx timeout [ 1136.819613][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.827060][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.715524][T14472] chnl_net:caif_netlink_parms(): no params data found [ 1137.865446][ T5796] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1138.814866][ T5796] Bluetooth: hci4: command tx timeout [ 1139.118148][T14418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.519543][T14418] veth0_vlan: entered promiscuous mode [ 1139.653177][T14418] veth1_vlan: entered promiscuous mode [ 1140.000815][T14418] veth0_macvtap: entered promiscuous mode [ 1140.073322][T14418] veth1_macvtap: entered promiscuous mode [ 1140.491716][T11427] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1141.016521][ T5796] Bluetooth: hci4: command tx timeout [ 1141.643277][T14418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1143.058785][ T5796] Bluetooth: hci4: command tx timeout [ 1143.364057][ T11] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1143.928620][T14418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1144.064945][T11427] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1144.076691][T11427] usb 9-1: can't read configurations, error -71 [ 1144.146788][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.201185][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.320770][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1144.370800][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.411351][T14472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.419281][T14472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.427361][T14472] bridge_slave_0: entered allmulticast mode [ 1145.437268][T14472] bridge_slave_0: entered promiscuous mode [ 1145.589289][T14472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.597119][T14472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.605707][T14472] bridge_slave_1: entered allmulticast mode [ 1145.623130][T14472] bridge_slave_1: entered promiscuous mode [ 1146.681283][T14472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.972313][T14472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.728478][T14472] team0: Port device team_slave_0 added [ 1147.773213][T14472] team0: Port device team_slave_1 added [ 1148.108975][T14472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.116761][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.144455][T14472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.322113][T14472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.329785][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.357912][T14472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.715186][T14472] hsr_slave_0: entered promiscuous mode [ 1148.724983][T14472] hsr_slave_1: entered promiscuous mode [ 1148.733251][T14472] debugfs: 'hsr0' already exists in 'hsr' [ 1148.742089][T14472] Cannot create hsr debugfs directory [ 1150.516053][T14541] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3105'. [ 1150.554990][T14472] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1150.695914][T14472] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1150.964650][T14472] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1151.347350][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.354980][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.452908][T14472] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1153.981045][T14472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.436355][T14472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1154.870172][ T1887] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.877823][ T1887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.895935][ T1887] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.903786][ T1887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1155.103315][T14472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1155.114156][T14472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1156.642743][T14472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.430846][T13016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.439335][T13016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1158.756089][T14259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1158.764363][T14259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.112290][T14472] veth0_vlan: entered promiscuous mode [ 1160.216107][T14472] veth1_vlan: entered promiscuous mode [ 1160.239615][T14593] loop8: detected capacity change from 0 to 256 [ 1160.267080][T14593] exfat: Deprecated parameter 'namecase' [ 1160.482517][T14472] veth0_macvtap: entered promiscuous mode [ 1160.648612][T14472] veth1_macvtap: entered promiscuous mode [ 1160.686315][T14593] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1160.939653][T11313] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1160.998644][T14472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.210461][T14472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.220106][T11313] usb 4-1: Using ep0 maxpacket: 16 [ 1161.308814][T11313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1161.319770][T11313] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1161.329173][T11313] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1161.338574][T11313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.401204][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.416363][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.426563][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.452693][T11313] usb 4-1: config 0 descriptor?? [ 1161.543674][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1163.101352][ T11] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1163.312365][ T11] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.328404][ T11] usb 3-1: config 0 has no interfaces? [ 1163.336180][ T11] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1163.345697][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.481046][ T11] usb 3-1: config 0 descriptor?? [ 1163.562629][T11313] usb 4-1: USB disconnect, device number 44 [ 1163.972527][T11313] usb 3-1: USB disconnect, device number 16 [ 1164.132208][T14619] loop3: detected capacity change from 0 to 128 [ 1164.327305][T14619] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1164.424974][T14619] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1164.630896][T14619] fuse: Bad value for 'fd' [ 1165.668996][T14631] vivid-000: ================= START STATUS ================= [ 1165.683323][T14631] vivid-000: Radio HW Seek Mode: Bounded [ 1165.691037][T14631] vivid-000: Radio Programmable HW Seek: false [ 1165.698244][T14631] vivid-000: RDS Rx I/O Mode: Block I/O [ 1165.704675][T14631] vivid-000: Generate RBDS Instead of RDS: false [ 1165.711218][T14631] vivid-000: RDS Reception: true [ 1165.716508][T14631] vivid-000: RDS Program Type: 0 inactive [ 1165.722470][T14631] vivid-000: RDS PS Name: inactive [ 1165.728011][T14631] vivid-000: RDS Radio Text: inactive [ 1165.733837][T14631] vivid-000: RDS Traffic Announcement: false inactive [ 1165.740825][T14631] vivid-000: RDS Traffic Program: false inactive [ 1165.747477][T14631] vivid-000: RDS Music: false inactive [ 1165.753211][T14631] vivid-000: ================== END STATUS ================== [ 1165.954310][ T11] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1166.160412][T14634] loop8: detected capacity change from 0 to 256 [ 1166.232573][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.243192][ T11] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1166.252520][ T11] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1166.262380][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.287477][T14634] exfat: Deprecated parameter 'namecase' [ 1166.354406][T14634] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1166.374859][ T11] usb 4-1: config 0 descriptor?? [ 1166.682597][ T11] usb 4-1: USB disconnect, device number 45 [ 1166.795481][ T1330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.966219][ T1330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.132753][ T1330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.257369][ T1330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.031055][ T1330] bridge_slave_1: left allmulticast mode [ 1168.044583][ T1330] bridge_slave_1: left promiscuous mode [ 1168.051068][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.213879][ T1330] bridge_slave_0: left allmulticast mode [ 1168.220080][ T1330] bridge_slave_0: left promiscuous mode [ 1168.226714][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.835392][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1168.885907][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1168.910732][ T1330] bond0 (unregistering): Released all slaves [ 1169.170897][ T5794] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1169.193089][ T5794] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1169.227315][ T5794] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1169.268513][ T5794] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1169.283212][ T5794] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1169.436303][ T1330] hsr_slave_0: left promiscuous mode [ 1169.487931][ T1330] hsr_slave_1: left promiscuous mode [ 1169.496421][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1169.504246][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1169.544242][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1169.551786][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1169.603893][ T1330] veth1_macvtap: left promiscuous mode [ 1169.610103][ T1330] veth0_macvtap: left promiscuous mode [ 1169.616003][ T1330] veth1_vlan: left promiscuous mode [ 1169.621437][ T1330] veth0_vlan: left promiscuous mode [ 1170.572771][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 1170.572761][T11427] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1170.686115][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 1170.770812][T11427] usb 4-1: Using ep0 maxpacket: 16 [ 1170.808415][T11427] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.818992][T11427] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1170.832384][T11427] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1170.839529][T11427] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1170.849011][T11427] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.948389][T11427] usb 4-1: config 0 descriptor?? [ 1170.972840][T11427] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1171.375297][ T5794] Bluetooth: hci5: command tx timeout [ 1172.022221][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.032324][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.144091][T11427] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1172.170812][ T1871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.179144][ T1871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.387531][T11427] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.398190][T11427] usb 9-1: config 0 has no interfaces? [ 1172.404978][T11427] usb 9-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1172.417223][T11427] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.532506][T11427] usb 9-1: config 0 descriptor?? [ 1172.691802][ T1330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.034422][ T1330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.096250][ T9] usb 9-1: USB disconnect, device number 6 [ 1173.327034][ T1330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.388973][ T9] usb 4-1: USB disconnect, device number 46 [ 1173.418221][T14668] loop7: detected capacity change from 0 to 512 [ 1173.455414][ T5794] Bluetooth: hci5: command tx timeout [ 1173.468269][T14668] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.3086: inode has both inline data and extents flags [ 1173.496821][ T1330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.577687][T14668] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3086: couldn't read orphan inode 15 (err -117) [ 1173.613432][T14668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1173.719905][T14646] chnl_net:caif_netlink_parms(): no params data found [ 1173.830917][T14673] loop3: detected capacity change from 0 to 128 [ 1173.901902][T14673] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1173.985376][T14673] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1173.987664][ T1330] bridge_slave_1: left allmulticast mode [ 1174.000464][ T1330] bridge_slave_1: left promiscuous mode [ 1174.008955][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.107930][T14673] fuse: Bad value for 'fd' [ 1174.119144][ T1330] bridge_slave_0: left allmulticast mode [ 1174.125366][ T1330] bridge_slave_0: left promiscuous mode [ 1174.132034][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1174.308052][T14472] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.991576][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.060829][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.085485][T14681] loop3: detected capacity change from 0 to 256 [ 1175.120585][T14681] exfat: Deprecated parameter 'namecase' [ 1175.132492][ T1330] bond0 (unregistering): Released all slaves [ 1175.157471][ T1330] bond1 (unregistering): Released all slaves [ 1175.198741][T14681] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1175.252379][ T1330] team0: Port device bond2 removed [ 1175.264578][ T1330] bond2 (unregistering): Released all slaves [ 1175.541797][ T5794] Bluetooth: hci5: command tx timeout [ 1175.889282][ T1330] hsr_slave_0: left promiscuous mode [ 1175.907142][ T1330] hsr_slave_1: left promiscuous mode [ 1175.925328][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1175.932940][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.974521][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1175.982059][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.011059][ T1330] veth1_macvtap: left promiscuous mode [ 1176.017026][ T1330] veth0_macvtap: left promiscuous mode [ 1176.027724][ T1330] veth1_vlan: left promiscuous mode [ 1176.033207][ T1330] veth0_vlan: left promiscuous mode [ 1176.934894][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 1177.018293][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 1177.678801][ T5794] Bluetooth: hci5: command tx timeout [ 1177.778184][T14646] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.785921][T14646] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.794757][T14646] bridge_slave_0: entered allmulticast mode [ 1177.804255][T14646] bridge_slave_0: entered promiscuous mode [ 1177.821585][T14646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.830117][T14646] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.837956][T14646] bridge_slave_1: entered allmulticast mode [ 1177.846969][T14646] bridge_slave_1: entered promiscuous mode [ 1178.131556][T14646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.220273][T14646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.552740][T14646] team0: Port device team_slave_0 added [ 1178.695980][T14646] team0: Port device team_slave_1 added [ 1178.901585][T14646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.908946][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.919087][ T9] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1178.935943][T14646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.087731][T14646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.098806][T14646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.126239][T14646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.154144][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1179.174665][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.185490][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1179.201819][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1179.210205][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1179.219738][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.355755][ T9] usb 4-1: config 0 descriptor?? [ 1179.406206][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1179.541626][T14646] hsr_slave_0: entered promiscuous mode [ 1179.552764][T14646] hsr_slave_1: entered promiscuous mode [ 1179.621485][T14703] loop8: detected capacity change from 0 to 512 [ 1179.676656][T14703] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.3147: inode has both inline data and extents flags [ 1179.719850][T11313] usb 8-1: new full-speed USB device number 120 using dummy_hcd [ 1179.789750][T14703] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3147: couldn't read orphan inode 15 (err -117) [ 1179.827225][T14703] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1179.904025][T11313] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.917612][T11313] usb 8-1: config 0 has no interfaces? [ 1179.923527][T11313] usb 8-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1179.933997][T11313] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.967452][T11313] usb 8-1: config 0 descriptor?? [ 1180.049265][ T6344] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1180.431962][ T9] usb 8-1: USB disconnect, device number 120 [ 1180.866768][T14646] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1180.894670][T14646] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1180.918056][T14646] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1180.950991][T14646] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1181.876355][T14646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.986159][ T9] usb 4-1: USB disconnect, device number 47 [ 1182.045515][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1182.054997][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1182.094113][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1182.119430][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1182.133916][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1182.186364][T14646] 8021q: adding VLAN 0 to HW filter on device team0 [ 1182.403111][T14722] loop8: detected capacity change from 0 to 256 [ 1182.518079][T13016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.525669][T13016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.539383][T13016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.546907][T13016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1182.578352][T14722] exfat: Deprecated parameter 'namecase' [ 1182.801489][T14722] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1184.179655][ T5794] Bluetooth: hci2: command tx timeout [ 1184.524015][T14717] chnl_net:caif_netlink_parms(): no params data found [ 1184.721947][T14746] loop8: detected capacity change from 0 to 512 [ 1184.914645][T14746] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.3157: inode has both inline data and extents flags [ 1185.168572][T14746] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.3157: couldn't read orphan inode 15 (err -117) [ 1185.212530][T14746] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1185.330281][T14646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1186.098778][ T6344] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.257635][ T5794] Bluetooth: hci2: command tx timeout [ 1186.834542][T11313] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1186.858954][T11307] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1187.066316][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.075933][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.088749][T14717] bridge_slave_0: entered allmulticast mode [ 1187.097716][T14717] bridge_slave_0: entered promiscuous mode [ 1187.112648][T11313] usb 4-1: Using ep0 maxpacket: 16 [ 1187.127270][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.141089][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.149290][T14717] bridge_slave_1: entered allmulticast mode [ 1187.158451][T14717] bridge_slave_1: entered promiscuous mode [ 1187.268650][T11313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.279363][T11313] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1187.295310][T11313] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1187.302232][T11313] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1187.312502][T11313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.395286][T11307] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.406259][T11307] usb 9-1: config 0 has no interfaces? [ 1187.412012][T11307] usb 9-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1187.421834][T11307] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.438674][T11313] usb 4-1: config 0 descriptor?? [ 1187.457804][T11307] usb 9-1: config 0 descriptor?? [ 1187.546885][T14717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.571161][T11313] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1187.678665][T14717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.932931][T14717] team0: Port device team_slave_0 added [ 1187.974693][T14717] team0: Port device team_slave_1 added [ 1187.987702][T11427] libceph: connect (1)[c::]:6789 error -101 [ 1187.994577][T11427] libceph: mon0 (1)[c::]:6789 connect error [ 1188.111554][T14771] ceph: No mds server is up or the cluster is laggy [ 1188.148971][T14717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.156492][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.184216][T14717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.210465][T14717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.219699][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.246858][T14717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.295516][T11427] libceph: connect (1)[c::]:6789 error -101 [ 1188.302274][T11427] libceph: mon0 (1)[c::]:6789 connect error [ 1188.376666][ T5794] Bluetooth: hci2: command tx timeout [ 1188.564300][T11313] usb 9-1: USB disconnect, device number 7 [ 1189.031209][T14717] hsr_slave_0: entered promiscuous mode [ 1189.041840][T14717] hsr_slave_1: entered promiscuous mode [ 1189.050462][T14717] debugfs: 'hsr0' already exists in 'hsr' [ 1189.060674][T14717] Cannot create hsr debugfs directory [ 1189.119252][T14646] veth0_vlan: entered promiscuous mode [ 1189.303308][T14646] veth1_vlan: entered promiscuous mode [ 1189.716212][T11427] usb 4-1: USB disconnect, device number 48 [ 1190.414049][ T5794] Bluetooth: hci2: command tx timeout [ 1191.300136][T14646] veth0_macvtap: entered promiscuous mode [ 1191.428585][T14646] veth1_macvtap: entered promiscuous mode [ 1191.704456][T14646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.784539][T14646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.846535][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.925144][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.955223][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.017785][T13999] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.377870][T14787] loop3: detected capacity change from 0 to 256 [ 1192.535386][T14787] exfat: Deprecated parameter 'namecase' [ 1192.757361][T14787] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1192.831945][T14717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1192.903119][T14717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1193.008151][T14717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1193.084492][T14717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1194.306565][T14717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1194.362892][T14795] loop3: detected capacity change from 0 to 512 [ 1194.550399][T14717] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.598130][T14795] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.3167: inode has both inline data and extents flags [ 1194.667046][T14795] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3167: couldn't read orphan inode 15 (err -117) [ 1194.775828][T14795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1194.941560][T14717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1194.952333][T14717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1195.081639][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.089387][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.106233][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.113873][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.411762][T14418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.931058][T14805] syzkaller1: entered promiscuous mode [ 1195.937060][T14805] syzkaller1: entered allmulticast mode [ 1198.124768][T14717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1199.191399][ T9] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 1199.467178][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.481066][ T9] usb 4-1: config 0 has no interfaces? [ 1199.488031][ T9] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1199.497473][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.594181][ T9] usb 4-1: config 0 descriptor?? [ 1199.957289][ T9] usb 4-1: USB disconnect, device number 49 [ 1200.178929][T11427] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1200.418725][T11427] usb 9-1: Using ep0 maxpacket: 16 [ 1200.430908][T11427] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.441873][T11427] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1200.455246][T11427] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1200.462057][T11427] usb 9-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1200.471476][T11427] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.654233][T11427] usb 9-1: config 0 descriptor?? [ 1200.724847][T11427] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1201.003094][T14717] veth0_vlan: entered promiscuous mode [ 1201.041036][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.049978][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.180659][T14717] veth1_vlan: entered promiscuous mode [ 1201.389060][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.398438][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1201.404521][T11313] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1201.505680][T14717] veth0_macvtap: entered promiscuous mode [ 1201.554810][T14717] veth1_macvtap: entered promiscuous mode [ 1201.756946][T14717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.851302][T14717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1202.068882][T14117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.126558][T14117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.232513][T14117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.598134][T14258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.183922][T11313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1203.447067][T11307] usb 9-1: USB disconnect, device number 8 [ 1203.673280][T11313] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1203.681299][T11313] usb 4-1: can't read configurations, error -71 [ 1204.028324][T14850] loop3: detected capacity change from 0 to 256 [ 1204.080478][T14850] exfat: Deprecated parameter 'namecase' [ 1204.229036][T14853] loop5: detected capacity change from 0 to 512 [ 1204.320048][T14853] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.3176: inode has both inline data and extents flags [ 1204.404934][T14850] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 1204.456034][T14853] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.3176: couldn't read orphan inode 15 (err -117) [ 1204.511276][T14853] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1205.811092][T14646] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.287479][ T5796] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1206.305355][ T5796] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1206.365285][ T5796] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1206.388461][ T5796] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1206.421435][ T5796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1208.503411][ T5796] Bluetooth: hci6: command tx timeout [ 1208.913320][T14864] chnl_net:caif_netlink_parms(): no params data found [ 1210.506354][T14885] fuse: Bad value for 'fd' [ 1210.576407][ T5796] Bluetooth: hci6: command tx timeout [ 1212.668806][ T5796] Bluetooth: hci6: command tx timeout [ 1212.835586][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.842130][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1213.167018][T14864] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.174625][T14864] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.182324][T14864] bridge_slave_0: entered allmulticast mode [ 1213.200480][T14864] bridge_slave_0: entered promiscuous mode [ 1213.220344][T14864] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.228049][T14864] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.235824][T14864] bridge_slave_1: entered allmulticast mode [ 1213.244901][T14864] bridge_slave_1: entered promiscuous mode [ 1213.973943][T11313] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1213.986470][T13999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1213.995078][T13999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.085817][T14864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.498613][T14864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.536939][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.545629][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1214.838597][ T5796] Bluetooth: hci6: command tx timeout [ 1215.021707][T14864] team0: Port device team_slave_0 added [ 1215.070099][T14864] team0: Port device team_slave_1 added [ 1217.944910][T11313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1218.063379][T14864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1218.070642][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.097283][T14864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1218.220593][T11313] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1218.228674][T11313] usb 4-1: can't read configurations, error -71 [ 1218.241373][T14864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1218.249221][T14864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1218.276025][T14864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1219.993285][T14864] hsr_slave_0: entered promiscuous mode [ 1220.004400][T14864] hsr_slave_1: entered promiscuous mode [ 1220.013471][T14864] debugfs: 'hsr0' already exists in 'hsr' [ 1220.019591][T14864] Cannot create hsr debugfs directory [ 1221.536823][T14891] Set syz1 is full, maxelem 65536 reached [ 1222.959560][ T5794] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1223.004350][ T5794] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1223.034403][ T5794] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1223.070697][ T5794] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1223.082961][ T5794] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1223.255220][T14864] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1223.291584][T14864] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1223.355782][T14864] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1223.595459][T14864] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1223.694935][T14911] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1225.134288][ T5796] Bluetooth: hci7: command tx timeout [ 1225.407118][T14906] chnl_net:caif_netlink_parms(): no params data found [ 1226.112550][T14925] loop4: detected capacity change from 0 to 256 [ 1226.338215][T14925] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 1226.384026][ T9] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1226.439384][ T30] audit: type=1800 audit(1767622680.198:129): pid=14925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3192" name="bus" dev="loop4" ino=1048835 res=0 errno=0 [ 1226.626475][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1226.717938][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1226.726987][ T9] usb 6-1: config 1 has an invalid interface number: 204 but max is 2 [ 1226.736862][ T9] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1226.746067][ T9] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1226.756400][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1226.765706][ T9] usb 6-1: config 1 has no interface number 1 [ 1226.771910][ T9] usb 6-1: too many endpoints for config 1 interface 204 altsetting 7: 37, using maximum allowed: 30 [ 1226.783223][ T9] usb 6-1: config 1 interface 204 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1226.796808][ T9] usb 6-1: config 1 interface 204 has no altsetting 0 [ 1227.210756][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1227.228047][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.235026][ T5796] Bluetooth: hci7: command tx timeout [ 1227.241982][ T9] usb 6-1: Product: syz [ 1227.246458][ T9] usb 6-1: Manufacturer: syz [ 1227.251183][ T9] usb 6-1: SerialNumber: syz [ 1227.829352][T14906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.847655][T14906] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.855872][T14906] bridge_slave_0: entered allmulticast mode [ 1227.866141][T14906] bridge_slave_0: entered promiscuous mode [ 1228.099188][T14864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1228.118141][T14906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1228.126876][T14906] bridge0: port 2(bridge_slave_1) entered disabled state [ 1228.135326][T14906] bridge_slave_1: entered allmulticast mode [ 1228.155185][T14906] bridge_slave_1: entered promiscuous mode [ 1228.646452][T14906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1228.828017][T14906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1228.850713][ T9] usb 6-1: 0:2 : does not exist [ 1228.938205][ T9] usb 6-1: unknown interface protocol 0x7f, assuming v1 [ 1228.949887][ T9] usb 6-1: cannot find UAC_HEADER [ 1229.072145][ T9] snd-usb-audio 6-1:1.204: probe with driver snd-usb-audio failed with error -22 [ 1229.227629][ T9] usb 6-1: USB disconnect, device number 117 [ 1229.320779][ T5796] Bluetooth: hci7: command tx timeout [ 1229.396996][T14906] team0: Port device team_slave_0 added [ 1229.428073][T14906] team0: Port device team_slave_1 added [ 1229.443395][T14864] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.284268][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.291776][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.452415][T14906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1230.460009][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1230.486296][T14906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1230.709095][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.716555][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.314033][T14906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.324467][T14906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.352098][T14906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1231.408827][ T5796] Bluetooth: hci7: command tx timeout [ 1231.740014][T14951] overlayfs: failed lookup in lower (newroot/31, name='file0', err=-40): overlapping layers [ 1232.304685][T14906] hsr_slave_0: entered promiscuous mode [ 1232.314262][T14906] hsr_slave_1: entered promiscuous mode [ 1232.322451][T14906] debugfs: 'hsr0' already exists in 'hsr' [ 1232.328580][T14906] Cannot create hsr debugfs directory [ 1232.534886][T14954] loop3: detected capacity change from 0 to 256 [ 1232.909967][T14954] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 1233.064585][ T30] audit: type=1800 audit(1767622686.788:130): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3204" name="bus" dev="loop3" ino=1048836 res=0 errno=0 [ 1235.398199][T14906] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1235.634080][T11313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1235.690160][T14906] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1235.901725][T14906] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1235.934137][T11313] usb 5-1: Using ep0 maxpacket: 8 [ 1235.975909][T11313] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1235.988199][T11313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1235.998312][T11313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1236.164333][T14864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1236.199794][T14906] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1236.738822][T11313] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1236.751056][T11313] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1236.760524][T11313] usb 5-1: Product: syz [ 1236.765028][T11313] usb 5-1: Manufacturer: syz [ 1236.769845][T11313] usb 5-1: SerialNumber: syz [ 1237.247926][T11313] usb 5-1: config 0 descriptor?? [ 1237.447937][T11313] smsusb:smsusb_probe: board id=2, interface number 0 [ 1237.677254][T11313] smsusb:smsusb_probe: Device initialized with return code -19 [ 1237.963454][T14864] veth0_vlan: entered promiscuous mode [ 1238.190578][T14864] veth1_vlan: entered promiscuous mode [ 1238.571639][T11313] usb 5-1: USB disconnect, device number 3 [ 1238.871098][T14906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.030062][T14864] veth0_macvtap: entered promiscuous mode [ 1239.159353][ T1093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.450219][T14978] loop4: detected capacity change from 0 to 256 [ 1239.569218][T14978] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1239.587053][T14864] veth1_macvtap: entered promiscuous mode [ 1239.724486][ T1093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.807281][T14864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1239.915713][ T1093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.984346][T14864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.062835][ T1093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.199430][ T1155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.324030][T14259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.484990][T14259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.524461][T14259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.709930][T14906] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.770341][ T1093] bridge_slave_1: left allmulticast mode [ 1240.776428][ T1093] bridge_slave_1: left promiscuous mode [ 1240.782767][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.900449][ T1093] bridge_slave_0: left allmulticast mode [ 1240.906426][ T1093] bridge_slave_0: left promiscuous mode [ 1240.912834][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.323443][T14987] loop4: detected capacity change from 0 to 256 [ 1241.613041][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.672563][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1241.704467][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.719922][ T1093] bond0 (unregistering): Released all slaves [ 1241.804528][T14117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.811938][T14117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.944015][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1241.984918][T14987] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d) [ 1242.030805][ T9] usb 4-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1242.044266][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1242.051063][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1242.060425][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.298376][ T9] usb 4-1: config 0 descriptor?? [ 1242.342808][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1242.362947][ T30] audit: type=1800 audit(1767622696.118:131): pid=14987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3214" name="bus" dev="loop4" ino=1048837 res=0 errno=0 [ 1242.564626][T14117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1242.572218][T14117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1243.763415][ T1093] hsr_slave_0: left promiscuous mode [ 1243.861315][ T1093] hsr_slave_1: left promiscuous mode [ 1243.869618][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.877303][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1244.020030][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1244.027873][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1244.184145][ T1093] veth1_macvtap: left promiscuous mode [ 1244.189931][ T1093] veth0_macvtap: left promiscuous mode [ 1244.196031][ T1093] veth1_vlan: left promiscuous mode [ 1244.201619][ T1093] veth0_vlan: left promiscuous mode [ 1244.468234][ T9] usb 4-1: USB disconnect, device number 54 [ 1245.534004][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 1245.540547][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 1245.693486][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 1247.634784][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1247.658948][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1247.671794][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1247.711856][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1247.723939][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1248.145085][T15019] loop3: detected capacity change from 0 to 256 [ 1248.465069][T15019] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1248.561760][T15024] loop4: detected capacity change from 0 to 256 [ 1249.060943][T14906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.936610][ T5794] Bluetooth: hci0: command tx timeout [ 1249.949257][T14906] veth0_vlan: entered promiscuous mode [ 1249.993258][T14906] veth1_vlan: entered promiscuous mode [ 1250.418682][T14906] veth0_macvtap: entered promiscuous mode [ 1250.453211][T14906] veth1_macvtap: entered promiscuous mode [ 1250.719631][T14906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1250.823783][T15015] chnl_net:caif_netlink_parms(): no params data found [ 1250.859826][T14906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1250.961014][ T1871] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.226169][ T1887] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.467171][ T1887] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.647412][ T1887] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.875191][ T9] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1252.013864][ T5794] Bluetooth: hci0: command tx timeout [ 1252.115798][ T9] usb 4-1: config 0 has no interfaces? [ 1252.121568][ T9] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1252.130967][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.248196][ T9] usb 4-1: config 0 descriptor?? [ 1252.661260][ T9] usb 4-1: USB disconnect, device number 55 [ 1254.093915][ T5794] Bluetooth: hci0: command tx timeout [ 1254.308360][T15015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.316226][T15015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.325959][T15015] bridge_slave_0: entered allmulticast mode [ 1254.339549][T15015] bridge_slave_0: entered promiscuous mode [ 1254.446048][T15015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.453460][T15015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.472251][T15015] bridge_slave_1: entered allmulticast mode [ 1254.481168][T15015] bridge_slave_1: entered promiscuous mode [ 1254.946758][T15015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1254.991885][T15015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1255.183150][T15063] loop3: detected capacity change from 0 to 256 [ 1255.240948][T15015] team0: Port device team_slave_0 added [ 1255.273841][T15015] team0: Port device team_slave_1 added [ 1255.750203][T15015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1255.757467][T15015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.785775][T15015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.927598][T15015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.937087][T15015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1255.964446][T15015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1256.049780][T14258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.058093][T14258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.182814][ T5794] Bluetooth: hci0: command tx timeout [ 1256.461780][ T4539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.470269][ T4539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.688594][T15015] hsr_slave_0: entered promiscuous mode [ 1256.698201][T15015] hsr_slave_1: entered promiscuous mode [ 1256.706561][T15015] debugfs: 'hsr0' already exists in 'hsr' [ 1256.723127][T15015] Cannot create hsr debugfs directory [ 1256.941841][T15071] netlink: 83 bytes leftover after parsing attributes in process `syz.3.3234'. [ 1259.047272][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1259.260446][ T9] usb 2-1: config 0 has no interfaces? [ 1259.268572][ T9] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1259.285327][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.354122][ T9] usb 2-1: config 0 descriptor?? [ 1259.791011][T11427] usb 2-1: USB disconnect, device number 4 [ 1259.975528][T15015] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1260.131242][T15015] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1260.248454][T15015] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1260.368307][T15015] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1260.894739][ T5796] Bluetooth: hci4: command 0x0406 tx timeout [ 1261.620551][T15015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.869937][T15100] netlink: 83 bytes leftover after parsing attributes in process `syz.3.3244'. [ 1261.926725][T15015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.059525][T14259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.067237][T14259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1262.216734][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.224220][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.712551][T15106] loop1: detected capacity change from 0 to 256 [ 1263.176156][T15106] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1265.390630][ T1012] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.586919][ T1012] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1265.984231][ T1012] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.246767][ T1012] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.360304][T14259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.368694][T14259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.074914][ T1012] bridge_slave_1: left allmulticast mode [ 1267.080724][ T1012] bridge_slave_1: left promiscuous mode [ 1267.087372][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.132760][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1267.141614][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1267.311320][ T1012] bridge_slave_0: left allmulticast mode [ 1267.317288][ T1012] bridge_slave_0: left promiscuous mode [ 1267.323811][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.704620][T15130] loop1: detected capacity change from 0 to 256 [ 1268.353292][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1268.470131][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1268.520785][ T1012] bond0 (unregistering): Released all slaves [ 1269.145425][T15015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.816970][T15138] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3253'. [ 1270.003006][ T1012] hsr_slave_0: left promiscuous mode [ 1270.032522][ T1012] hsr_slave_1: left promiscuous mode [ 1270.040095][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1270.048161][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.195065][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1270.202602][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.384276][ T1012] veth1_macvtap: left promiscuous mode [ 1270.390053][ T1012] veth0_macvtap: left promiscuous mode [ 1270.396389][ T1012] veth1_vlan: left promiscuous mode [ 1270.401837][ T1012] veth0_vlan: left promiscuous mode [ 1272.046334][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 1272.215505][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 1274.231692][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.238390][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1275.934835][ T9] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 1275.992513][T15169] netlink: 83 bytes leftover after parsing attributes in process `syz.3.3264'. [ 1276.188524][ T9] usb 1-1: config 0 has no interfaces? [ 1276.194367][ T9] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1276.203809][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.324883][ T9] usb 1-1: config 0 descriptor?? [ 1276.609987][ T9] usb 1-1: USB disconnect, device number 11 [ 1277.077110][T15015] veth0_vlan: entered promiscuous mode [ 1277.283311][T15015] veth1_vlan: entered promiscuous mode [ 1277.728917][T15015] veth0_macvtap: entered promiscuous mode [ 1277.819178][T15015] veth1_macvtap: entered promiscuous mode [ 1278.166007][T15015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.277762][T15015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.394133][ T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.476424][T12688] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.617977][ T1155] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.665714][T14258] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.236330][T13016] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.470274][T13016] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.671325][T13016] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.918353][T13016] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.561854][T13016] bridge_slave_1: left allmulticast mode [ 1280.568153][T13016] bridge_slave_1: left promiscuous mode [ 1280.587254][T13016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.749001][T13016] bridge_slave_0: left allmulticast mode [ 1280.755235][T13016] bridge_slave_0: left promiscuous mode [ 1280.761523][T13016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.616311][T13016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.634976][T13016] bond_slave_0: left promiscuous mode [ 1281.650040][T13016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.661216][T13016] bond_slave_1: left promiscuous mode [ 1281.672024][T13016] bond0 (unregistering): Released all slaves [ 1281.690646][T13016] bond1 (unregistering): Released all slaves [ 1282.963175][T15205] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1282.993445][T13016] hsr_slave_0: left promiscuous mode [ 1283.012718][T13016] hsr_slave_1: left promiscuous mode [ 1283.020379][T13016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1283.035810][T13016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1283.079080][T13016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1283.087092][T13016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1283.167449][T13016] veth1_macvtap: left promiscuous mode [ 1283.173459][T13016] veth0_macvtap: left promiscuous mode [ 1283.181890][T13016] veth1_vlan: left promiscuous mode [ 1283.187538][T13016] veth0_vlan: left promiscuous mode [ 1283.962699][T13016] team0 (unregistering): Port device team_slave_1 removed [ 1283.990108][T13016] team0 (unregistering): Port device team_slave_0 removed [ 1287.412162][T15237] fuse: Bad value for 'fd' [ 1287.746608][ T4539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.754853][ T4539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.916085][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.924363][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.415723][T15247] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3287'. [ 1291.431492][ T9] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 1291.614224][ T5796] Bluetooth: hci5: command 0x0406 tx timeout [ 1291.644547][ T9] usb 10-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1291.655546][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1291.666943][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1291.686305][ T9] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1291.696021][ T9] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1291.705300][ T9] usb 10-1: Manufacturer: syz [ 1291.818792][ T9] usb 10-1: config 0 descriptor?? [ 1294.439470][ T9] usb 10-1: USB disconnect, device number 49 [ 1295.889382][T15274] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1297.700970][T15288] fuse: root generation should be zero [ 1298.486238][T15294] loop9: detected capacity change from 0 to 256 [ 1299.195392][T15300] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1299.268227][T15302] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3312'. [ 1301.638474][ T4539] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.799245][ T4539] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.896245][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1301.919286][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1301.930518][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1301.950349][ T4539] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.004495][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1302.018949][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1302.130278][ T4539] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.865860][ T4539] bridge_slave_1: left allmulticast mode [ 1302.871698][ T4539] bridge_slave_1: left promiscuous mode [ 1302.878594][ T4539] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.966887][ T4539] bridge_slave_0: left allmulticast mode [ 1302.972978][ T4539] bridge_slave_0: left promiscuous mode [ 1302.982190][ T4539] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.791078][ T4539] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1303.842027][ T4539] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1303.866706][ T4539] bond0 (unregistering): Released all slaves [ 1304.114248][ T5796] Bluetooth: hci1: command tx timeout [ 1304.572328][ T4539] hsr_slave_0: left promiscuous mode [ 1304.591512][ T4539] hsr_slave_1: left promiscuous mode [ 1304.599188][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1304.607046][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1304.650163][ T4539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1304.658806][ T4539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1304.786296][ T4539] veth1_macvtap: left promiscuous mode [ 1304.791972][ T4539] veth0_macvtap: left promiscuous mode [ 1304.798051][ T4539] veth1_vlan: left promiscuous mode [ 1304.803916][ T4539] veth0_vlan: left promiscuous mode [ 1305.443859][T15333] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1305.586102][ T4539] team0 (unregistering): Port device team_slave_1 removed [ 1305.891717][ T4539] team0 (unregistering): Port device team_slave_0 removed [ 1306.247501][ T5794] Bluetooth: hci1: command tx timeout [ 1306.717704][T15338] netlink: 83 bytes leftover after parsing attributes in process `syz.3.3326'. [ 1306.973816][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 1307.154572][T15323] chnl_net:caif_netlink_parms(): no params data found [ 1309.115692][ T5796] Bluetooth: hci1: command tx timeout [ 1311.070044][T15323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.077699][T15323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.093676][T15323] bridge_slave_0: entered allmulticast mode [ 1311.102402][T15323] bridge_slave_0: entered promiscuous mode [ 1311.138359][ T5796] Bluetooth: hci1: command tx timeout [ 1311.175528][T15323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.183218][T15323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.199363][T15323] bridge_slave_1: entered allmulticast mode [ 1311.208146][T15323] bridge_slave_1: entered promiscuous mode [ 1311.361606][T15323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.443014][T15323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1311.646898][T15323] team0: Port device team_slave_0 added [ 1311.671645][T15323] team0: Port device team_slave_1 added [ 1311.825757][T15323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.833361][T15323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.862649][T15323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.885715][T15323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1311.893176][T15323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.925746][T15323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.269541][T15323] hsr_slave_0: entered promiscuous mode [ 1312.278841][T15323] hsr_slave_1: entered promiscuous mode [ 1313.879977][T15362] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1314.170581][T15323] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1314.285857][T15323] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1314.436731][T15323] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1314.534430][T15323] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1314.764600][T15369] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3339'. [ 1315.736030][T15323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.936211][T15323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1316.022208][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.029767][T13999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.118717][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.126229][T13999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.250369][T15323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1316.262037][T15323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1320.156102][T15323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.077634][T15396] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1322.336994][T15404] netlink: 83 bytes leftover after parsing attributes in process `syz.9.3350'. [ 1322.793421][T15323] veth0_vlan: entered promiscuous mode [ 1322.941375][T15323] veth1_vlan: entered promiscuous mode [ 1323.196154][T15323] veth0_macvtap: entered promiscuous mode [ 1323.240879][T15323] veth1_macvtap: entered promiscuous mode [ 1323.384862][T15323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1323.447630][T15323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1323.600327][ T86] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.656395][ T3533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.704321][ T3533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1323.724490][ T3533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.876984][T15438] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1328.982167][T15447] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3363'. [ 1329.575664][T15450] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3365'. [ 1331.837878][T14117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1331.847112][T14117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.123935][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1332.132098][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1332.584461][ T5796] Bluetooth: hci6: command 0x0406 tx timeout [ 1333.657976][T15470] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1334.909351][ T1093] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.027680][T15480] netlink: 83 bytes leftover after parsing attributes in process `syz.6.3374'. [ 1335.099066][ T1093] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.249438][ T1093] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.450683][ T1093] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.658794][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.673127][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.016030][ T1093] bridge_slave_1: left allmulticast mode [ 1336.021926][ T1093] bridge_slave_1: left promiscuous mode [ 1336.028709][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.044241][ T1093] bridge_slave_0: left allmulticast mode [ 1336.050233][ T1093] bridge_slave_0: left promiscuous mode [ 1336.057066][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.860843][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.946156][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.983424][ T1093] bond0 (unregistering): Released all slaves [ 1337.878646][ T1093] hsr_slave_0: left promiscuous mode [ 1337.895848][ T1093] hsr_slave_1: left promiscuous mode [ 1337.904363][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.912112][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.964766][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.972493][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.062340][ T1093] veth1_macvtap: left promiscuous mode [ 1338.069907][ T1093] veth0_macvtap: left promiscuous mode [ 1338.076197][ T1093] veth1_vlan: left promiscuous mode [ 1338.081760][ T1093] veth0_vlan: left promiscuous mode [ 1339.195589][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 1339.297810][T15502] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1339.371633][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 1339.922985][T15506] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3386'. [ 1340.528725][T15512] bond_slave_0: entered promiscuous mode [ 1340.534800][T15512] bond_slave_1: entered promiscuous mode [ 1340.541002][T15512] vlan2: entered promiscuous mode [ 1340.546358][T15512] bond0: entered promiscuous mode [ 1341.083804][T11427] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1341.283950][T11427] usb 7-1: Using ep0 maxpacket: 16 [ 1341.335847][T11427] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.347284][T11427] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.357470][T11427] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1341.364614][T11427] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1341.375392][T11427] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.474034][T11427] usb 7-1: config 0 descriptor?? [ 1341.969187][T11427] usbhid 7-1:0.0: can't add hid device: -71 [ 1341.976600][T11427] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1342.004484][T11427] usb 7-1: USB disconnect, device number 101 [ 1343.327176][T15531] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1343.870156][T15535] netlink: 83 bytes leftover after parsing attributes in process `syz.4.3398'. [ 1344.558489][T15542] bond_slave_0: entered promiscuous mode [ 1344.564536][T15542] bond_slave_1: entered promiscuous mode [ 1344.580188][T15542] vlan2: entered promiscuous mode [ 1344.585572][T15542] bond0: entered promiscuous mode [ 1346.166723][T15560] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1346.563406][T15562] netlink: 83 bytes leftover after parsing attributes in process `syz.3.3410'. [ 1347.426673][T11307] IPVS: starting estimator thread 0... [ 1347.550951][T15574] IPVS: using max 192 ests per chain, 9600 per kthread [ 1351.332745][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 1351.608132][T15587] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1352.731001][T15604] PKCS8: Unsupported PKCS#8 version [ 1353.284560][T15603] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3424'. [ 1354.481451][T11307] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1354.689897][T11307] usb 7-1: Using ep0 maxpacket: 32 [ 1354.773194][T11307] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1354.883983][T11307] usb 7-1: config 14 has an invalid interface number: 115 but max is 0 [ 1354.892445][T11307] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.903037][T11307] usb 7-1: config 14 has no interface number 0 [ 1354.909537][T11307] usb 7-1: config 14 interface 115 has no altsetting 0 [ 1355.129303][T11307] usb 7-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 1355.138876][T11307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.147243][T11307] usb 7-1: Product: syz [ 1355.151649][T11307] usb 7-1: Manufacturer: syz [ 1355.156604][T11307] usb 7-1: SerialNumber: syz [ 1357.979851][T15622] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3432'. [ 1358.116775][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'. [ 1359.398998][T15625] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1360.343215][T11307] usb 7-1: can't set config #14, error -110 [ 1363.281262][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3444'. [ 1363.589194][T15653] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1364.756323][ T38] usb 7-1: USB disconnect, device number 102 [ 1366.365099][T15669] Bluetooth: MGMT ver 1.23 [ 1366.369781][T15669] Bluetooth: hci0: unsupported parameter 255 [ 1366.376070][T15669] Bluetooth: hci0: unsupported parameter 255 [ 1367.840267][T15675] overlayfs: failed to clone upperpath [ 1368.904274][T15683] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1369.485250][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3459'. [ 1372.641152][T15713] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1373.534907][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 1374.469310][T15743] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1384.704390][ T30] audit: type=1326 audit(1767622838.368:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1384.729129][ T30] audit: type=1326 audit(1767622838.388:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1384.752500][ T30] audit: type=1326 audit(1767622838.408:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=332 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1384.775017][ T30] audit: type=1326 audit(1767622838.408:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1384.797726][ T30] audit: type=1326 audit(1767622838.408:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1384.824399][ T30] audit: type=1326 audit(1767622838.418:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1384.848019][ T30] audit: type=1326 audit(1767622838.448:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1384.870718][ T30] audit: type=1326 audit(1767622838.448:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1384.893288][ T30] audit: type=1326 audit(1767622838.448:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1384.918302][ T30] audit: type=1326 audit(1767622838.458:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15818 comm="syz.1.3511" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 1386.296498][T15824] fuse: Bad value for 'fd' [ 1390.011121][T15800] Set syz1 is full, maxelem 65536 reached [ 1390.189119][T15834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1390.544396][T15836] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.554640][T15836] bridge0: port 1(bridge_slave_0) entered disabled state [ 1390.844461][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1390.873028][T15836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1391.594961][ T4539] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.630442][ T4539] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.650326][ T4539] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.689740][T15840] netlink: 264 bytes leftover after parsing attributes in process `syz.9.3520'. [ 1391.715142][ T4539] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.513369][T15857] fuse: Unknown parameter 'user_id00000000000000000000' [ 1392.759720][T15861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3524'. [ 1392.777995][T15861] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3524'. [ 1393.423729][ T38] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1393.774222][ T38] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1393.785509][ T38] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1393.795874][ T38] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1393.805261][ T38] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.885523][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3528'. [ 1393.898456][ T38] usb 7-1: config 0 descriptor?? [ 1394.317975][ T38] usbhid 7-1:0.0: can't add hid device: -71 [ 1394.324597][ T38] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1394.379121][ T38] usb 7-1: USB disconnect, device number 103 [ 1397.155986][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1397.162921][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1398.685810][T15880] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3533'. [ 1400.589121][T15890] fuse: Bad value for 'fd' [ 1401.665210][T15870] Set syz1 is full, maxelem 65536 reached [ 1402.434376][T15898] loop6: detected capacity change from 0 to 4096 [ 1402.453886][T15898] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1402.680796][T15898] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1402.725455][T15898] ntfs3(loop6): ino=19, mi_enum_attr [ 1402.795599][T15898] ntfs3(loop6): failed to convert "c46c" to iso8859-7 [ 1402.821639][T15898] ntfs3(loop6): ino=20, mi_enum_attr [ 1402.863046][T15906] netlink: 264 bytes leftover after parsing attributes in process `syz.6.3540'. [ 1403.845360][T15914] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3547'. [ 1404.524950][T15918] overlayfs: failed to clone upperpath [ 1405.146102][T15920] fuse: Bad value for 'fd' [ 1408.899867][ T38] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1410.185030][ T38] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.198693][ T38] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1410.210559][ T38] usb 7-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1410.220303][ T38] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.796839][ T38] usb 7-1: config 0 descriptor?? [ 1411.246016][ T38] usbhid 7-1:0.0: can't add hid device: -71 [ 1411.252713][ T38] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1411.377498][ T38] usb 7-1: USB disconnect, device number 104 [ 1412.911373][T15946] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3559'. [ 1413.045411][T15926] Set syz1 is full, maxelem 65536 reached [ 1413.699318][T15953] fuse: Bad value for 'fd' [ 1417.948363][T15983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3575'. [ 1418.086084][T15985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3574'. [ 1419.569273][T15990] fuse: Bad value for 'fd' [ 1423.445725][T15981] Set syz1 is full, maxelem 65536 reached [ 1424.179301][T16007] overlayfs: failed to clone upperpath [ 1424.772974][T16017] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3587'. [ 1425.086828][T16019] fuse: Bad value for 'fd' [ 1425.309823][T16022] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3589'. [ 1425.338189][ T38] IPVS: starting estimator thread 0... [ 1425.380975][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 1425.434145][T16023] IPVS: using max 240 ests per chain, 12000 per kthread [ 1427.707514][T16026] syz.6.3590 (16026): drop_caches: 2 [ 1428.289946][T16039] bridge0: entered promiscuous mode [ 1428.296005][T16039] vlan2: entered promiscuous mode [ 1428.501881][T16041] overlayfs: failed to resolve './file0': -2 [ 1430.232100][T16049] fuse: Unknown parameter '0xffffffffffffffff' [ 1430.816513][T16053] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3601'. [ 1431.253217][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1431.253279][ T30] audit: type=1326 audit(1767622885.008:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16054 comm="syz.1.3602" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fb2539 code=0x0 [ 1433.802336][T16067] bridge0: entered promiscuous mode [ 1433.808232][T16067] vlan2: entered promiscuous mode [ 1434.973765][ T30] audit: type=1326 audit(1767622888.728:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16076 comm="syz.4.3614" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d539 code=0x0 [ 1435.001298][T16079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1435.115345][T16082] fuse: Unknown parameter '0xffffffffffffffff' [ 1436.923648][T16097] vlan2: entered promiscuous mode [ 1438.365665][T16110] fuse: Unknown parameter '0xffffffffffffffff' [ 1438.455921][T16112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3627'. [ 1439.229985][ T30] audit: type=1326 audit(1767622892.988:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16115 comm="syz.4.3629" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702d539 code=0x0 [ 1442.072612][T16135] vlan2: entered promiscuous mode [ 1442.078075][T16135] bridge0: entered promiscuous mode [ 1442.225547][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1442.277017][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1442.288464][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1442.304143][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1442.316625][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1443.249276][T16148] fuse: Unknown parameter '0xffffffffffffffff' [ 1444.405154][T16137] chnl_net:caif_netlink_parms(): no params data found [ 1444.418846][ T5794] Bluetooth: hci4: command tx timeout [ 1444.448948][T16157] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3641'. [ 1446.495556][ T5794] Bluetooth: hci4: command tx timeout [ 1446.717492][T16176] vlan2: entered promiscuous mode [ 1446.873717][T16137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.881647][T16137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.891075][T16137] bridge_slave_0: entered allmulticast mode [ 1446.901059][T16137] bridge_slave_0: entered promiscuous mode [ 1446.945999][T16137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.953777][T16137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.961614][T16137] bridge_slave_1: entered allmulticast mode [ 1446.975412][T16137] bridge_slave_1: entered promiscuous mode [ 1447.448750][T16180] fuse: Unknown parameter '0x0000000000000003' [ 1447.557260][T16137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1447.641207][T16137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.989262][T16137] team0: Port device team_slave_0 added [ 1448.104769][T16137] team0: Port device team_slave_1 added [ 1448.357275][T16137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.364724][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.391377][T16137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.461684][T16137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1448.469172][T16137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.495890][T16137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1448.598330][ T5794] Bluetooth: hci4: command tx timeout [ 1448.929393][T16137] hsr_slave_0: entered promiscuous mode [ 1448.938882][T16137] hsr_slave_1: entered promiscuous mode [ 1448.947111][T16137] debugfs: 'hsr0' already exists in 'hsr' [ 1448.952963][T16137] Cannot create hsr debugfs directory [ 1449.000235][T16191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3654'. [ 1450.506622][T16137] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1450.560052][T16137] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1450.642880][T16137] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1450.654072][ T5794] Bluetooth: hci4: command tx timeout [ 1450.712735][T16137] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1451.615903][T16206] fuse: Unknown parameter '0x0000000000000003' [ 1452.421500][T16137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.578153][T16137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.652404][ T1871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.659889][ T1871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.747393][ T1871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.754955][ T1871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1453.550735][T16222] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3666'. [ 1455.756672][T16239] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1455.959045][T16137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.994557][T16242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3672'. [ 1456.003889][T16242] netlink: 'syz.3.3672': attribute type 20 has an invalid length. [ 1456.011877][T16242] netlink: 'syz.3.3672': attribute type 29 has an invalid length. [ 1456.020059][T16242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 1456.652074][T16137] veth0_vlan: entered promiscuous mode [ 1456.697469][T16137] veth1_vlan: entered promiscuous mode [ 1457.033100][T16137] veth0_macvtap: entered promiscuous mode [ 1457.128789][T16137] veth1_macvtap: entered promiscuous mode [ 1457.307445][T16137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1457.451435][T16137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1457.614732][ T4539] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.663888][ T4539] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.732111][ T4539] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.842041][ T4539] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.120535][T16257] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3679'. [ 1458.509803][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1458.516751][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1459.172414][T16270] fuse: Unknown parameter 'fd0x0000000000000003' [ 1460.150776][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1460.160177][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1462.840091][T16301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3693'. [ 1464.410239][ T1155] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.567870][ T1155] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.764553][ T1155] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.874487][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1464.882540][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1464.886669][T16310] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1465.005506][ T1155] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.174050][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1465.182146][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1465.485987][ T1155] bridge_slave_1: left allmulticast mode [ 1465.491932][ T1155] bridge_slave_1: left promiscuous mode [ 1465.498697][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.637739][ T1155] bridge_slave_0: left allmulticast mode [ 1465.644381][ T1155] bridge_slave_0: left promiscuous mode [ 1465.651194][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.477184][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.585154][ T1155] bond_slave_0: left promiscuous mode [ 1466.641825][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.709907][ T1155] bond_slave_1: left promiscuous mode [ 1466.720193][ T1155] bond0 (unregistering): Released all slaves [ 1467.563858][ T1155] hsr_slave_0: left promiscuous mode [ 1467.582700][ T1155] hsr_slave_1: left promiscuous mode [ 1467.591449][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1467.599246][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1467.645158][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1467.652768][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.744696][ T1155] veth1_macvtap: left promiscuous mode [ 1467.750757][ T1155] veth0_macvtap: left promiscuous mode [ 1467.765955][ T1155] veth1_vlan: left promiscuous mode [ 1467.771851][ T1155] veth0_vlan: left promiscuous mode [ 1468.083557][T11307] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1468.294295][T11307] usb 3-1: Using ep0 maxpacket: 16 [ 1468.316577][T11307] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 1468.325350][T11307] usb 3-1: config 0 has no interface number 0 [ 1468.358603][T11307] usb 3-1: New USB device found, idVendor=046d, idProduct=0840, bcdDevice=2c.30 [ 1468.368201][T11307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.378688][T11307] usb 3-1: Product: syz [ 1468.383087][T11307] usb 3-1: Manufacturer: syz [ 1468.388591][T11307] usb 3-1: SerialNumber: syz [ 1468.455781][T11307] usb 3-1: config 0 descriptor?? [ 1468.499256][T11307] gspca_main: STV06xx-2.14.0 probing 046d:0840 [ 1469.131851][T11307] usb 3-1: USB disconnect, device number 17 [ 1469.182175][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 1469.245645][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 1469.517831][T16330] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3703'. [ 1469.842500][ T1155] IPVS: stop unused estimator thread 0... [ 1472.766945][T16347] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3709'. [ 1473.353943][T16362] fuse: Bad value for 'fd' [ 1475.646988][T16369] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3719'. [ 1477.443904][T16373] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3720'. [ 1479.664419][T16359] Set syz1 is full, maxelem 65536 reached [ 1480.683305][T16390] fuse: Bad value for 'fd' [ 1480.944027][T16396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3731'. [ 1481.576253][T16394] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3730'. [ 1483.175579][T16424] fuse: Bad value for 'fd' [ 1484.579661][T16435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3747'. [ 1487.206228][T16452] overlayfs: missing 'lowerdir' [ 1488.122316][T16458] netlink: 264 bytes leftover after parsing attributes in process `syz.4.3755'. [ 1488.847840][T16466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3759'. [ 1490.787374][T16481] overlayfs: missing 'lowerdir' [ 1491.502359][T16486] fuse: Bad value for 'fd' [ 1492.228721][T16496] netlink: 264 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1494.273877][T16511] overlayfs: missing 'lowerdir' [ 1494.948725][ C0] ===================================================== [ 1494.956114][ C0] BUG: KMSAN: uninit-value in eth_type_trans+0x7d5/0x9b0 [ 1494.963373][ C0] eth_type_trans+0x7d5/0x9b0 [ 1494.968444][ C0] ip_tunnel_rcv+0x2d98/0x3610 [ 1494.973550][ C0] gre_rcv+0x1c9d/0x20f0 [ 1494.978018][ C0] gre_rcv+0x285/0x380 [ 1494.982284][ C0] ip_protocol_deliver_rcu+0xb2c/0x13d0 [ 1494.988203][ C0] ip_local_deliver_finish+0x409/0x730 [ 1494.994017][ C0] ip_local_deliver+0x228/0x4b0 [ 1494.999075][ C0] ip_rcv_finish+0x4f7/0x5c0 [ 1495.004006][ C0] ip_rcv+0xcb/0x380 [ 1495.008060][ C0] __netif_receive_skb+0x312/0xac0 [ 1495.013510][ C0] process_backlog+0x47c/0x9f0 [ 1495.018437][ C0] __napi_poll+0xd8/0x880 [ 1495.022982][ C0] net_rx_action+0xa3f/0x1c90 [ 1495.027949][ C0] handle_softirqs+0x169/0x6e0 [ 1495.032996][ C0] __do_softirq+0x14/0x1b [ 1495.037642][ C0] do_softirq+0x58/0x90 [ 1495.041986][ C0] __local_bh_enable_ip+0xa1/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1495.047312][ C0] __dev_queue_xmit+0x3bb4/0x58e0 [ 1495.052542][ C0] neigh_resolve_output+0x9c5/0xaf0 [ 1495.058085][ C0] ip_finish_output2+0x1abf/0x1d50 [ 1495.063580][ C0] ip_finish_output+0x292/0x8e0 [ 1495.068812][ C0] ip_mc_output+0x58a/0x8d0 [ 1495.073606][ C0] ip_send_skb+0x3d5/0x420 [ 1495.078215][ C0] udp_send_skb+0x1373/0x1ca0 [ 1495.083083][ C0] udp_sendmsg+0x3022/0x3370 [ 1495.088012][ C0] inet_sendmsg+0x1ef/0x2a0 [ 1495.092721][ C0] __sock_sendmsg+0x278/0x3d0 [ 1495.097679][ C0] ____sys_sendmsg+0x863/0xcf0 [ 1495.102662][ C0] ___sys_sendmsg+0x271/0x3b0 [ 1495.107663][ C0] __sys_sendmmsg+0x3bf/0x7c0 [ 1495.112573][ C0] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1495.118560][ C0] ia32_sys_call+0x3cd2/0x4340 [ 1495.123670][ C0] __do_fast_syscall_32+0x154/0x320 [ 1495.129101][ C0] do_fast_syscall_32+0x38/0x80 [ 1495.134335][ C0] do_SYSENTER_32+0x1f/0x30 [ 1495.139071][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1495.145742][ C0] [ 1495.148154][ C0] Uninit was created at: [ 1495.152657][ C0] kmem_cache_alloc_node_noprof+0x9e7/0x17a0 [ 1495.159008][ C0] kmalloc_reserve+0x13c/0x4b0 [ 1495.164093][ C0] __alloc_skb+0x805/0x1040 [ 1495.168769][ C0] alloc_skb_with_frags+0xc5/0xa60 [ 1495.174197][ C0] sock_alloc_send_pskb+0xacc/0xc60 [ 1495.179580][ C0] __ip_append_data+0x4e9f/0x7160 [ 1495.184826][ C0] ip_make_skb+0x1df/0x5f0 [ 1495.189395][ C0] udp_sendmsg+0x27dc/0x3370 [ 1495.194282][ C0] inet_sendmsg+0x1ef/0x2a0 [ 1495.198900][ C0] __sock_sendmsg+0x278/0x3d0 [ 1495.203811][ C0] ____sys_sendmsg+0x863/0xcf0 [ 1495.208818][ C0] ___sys_sendmsg+0x271/0x3b0 [ 1495.213840][ C0] __sys_sendmmsg+0x3bf/0x7c0 [ 1495.218715][ C0] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1495.224574][ C0] ia32_sys_call+0x3cd2/0x4340 [ 1495.229484][ C0] __do_fast_syscall_32+0x154/0x320 [ 1495.234899][ C0] do_fast_syscall_32+0x38/0x80 [ 1495.239885][ C0] do_SYSENTER_32+0x1f/0x30 [ 1495.244602][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1495.251074][ C0] [ 1495.253699][ C0] CPU: 0 UID: 0 PID: 16513 Comm: syz.3.3778 Not tainted syzkaller #0 PREEMPT(none) [ 1495.263249][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1495.273564][ C0] ===================================================== [ 1495.280609][ C0] Disabling lock debugging due to kernel taint [ 1495.286944][ C0] Kernel panic - not syncing: kmsan.panic set ... [ 1495.293494][ C0] CPU: 0 UID: 0 PID: 16513 Comm: syz.3.3778 Tainted: G B syzkaller #0 PREEMPT(none) [ 1495.304605][ C0] Tainted: [B]=BAD_PAGE [ 1495.308863][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1495.319110][ C0] Call Trace: [ 1495.322477][ C0] [ 1495.325390][ C0] __dump_stack+0x26/0x30 [ 1495.329865][ C0] dump_stack_lvl+0x50/0x1c0 [ 1495.334593][ C0] ? dump_stack+0x12/0x25 [ 1495.339152][ C0] dump_stack+0x1e/0x25 [ 1495.343474][ C0] vpanic+0x435/0xd30 [ 1495.347875][ C0] panic+0x15d/0x160 [ 1495.352045][ C0] kmsan_report+0x31c/0x320 [ 1495.356794][ C0] ? __sock_sendmsg+0x278/0x3d0 [ 1495.361766][ C0] ? __msan_warning+0x1b/0x30 [ 1495.366700][ C0] ? eth_type_trans+0x7d5/0x9b0 [ 1495.371704][ C0] ? ip_tunnel_rcv+0x2d98/0x3610 [ 1495.376805][ C0] ? gre_rcv+0x1c9d/0x20f0 [ 1495.381356][ C0] ? gre_rcv+0x285/0x380 [ 1495.385751][ C0] ? ip_protocol_deliver_rcu+0xb2c/0x13d0 [ 1495.391732][ C0] ? ip_local_deliver_finish+0x409/0x730 [ 1495.397714][ C0] ? ip_local_deliver+0x228/0x4b0 [ 1495.402976][ C0] ? ip_rcv_finish+0x4f7/0x5c0 [ 1495.408063][ C0] ? ip_rcv+0xcb/0x380 [ 1495.412475][ C0] ? __netif_receive_skb+0x312/0xac0 [ 1495.418038][ C0] ? process_backlog+0x47c/0x9f0 [ 1495.423184][ C0] ? __napi_poll+0xd8/0x880 [ 1495.427836][ C0] ? net_rx_action+0xa3f/0x1c90 [ 1495.432963][ C0] ? handle_softirqs+0x169/0x6e0 [ 1495.438107][ C0] ? __do_softirq+0x14/0x1b [ 1495.442839][ C0] ? do_softirq+0x58/0x90 [ 1495.447308][ C0] ? __local_bh_enable_ip+0xa1/0xb0 [ 1495.452630][ C0] ? __dev_queue_xmit+0x3bb4/0x58e0 [ 1495.457983][ C0] ? neigh_resolve_output+0x9c5/0xaf0 [ 1495.463524][ C0] ? ip_finish_output2+0x1abf/0x1d50 [ 1495.469073][ C0] ? ip_finish_output+0x292/0x8e0 [ 1495.474222][ C0] ? ip_mc_output+0x58a/0x8d0 [ 1495.479011][ C0] ? ip_send_skb+0x3d5/0x420 [ 1495.483734][ C0] ? udp_send_skb+0x1373/0x1ca0 [ 1495.488792][ C0] ? udp_sendmsg+0x3022/0x3370 [ 1495.493692][ C0] ? inet_sendmsg+0x1ef/0x2a0 [ 1495.498652][ C0] ? __sock_sendmsg+0x278/0x3d0 [ 1495.503625][ C0] ? ____sys_sendmsg+0x863/0xcf0 [ 1495.508721][ C0] ? ___sys_sendmsg+0x271/0x3b0 [ 1495.513777][ C0] ? __sys_sendmmsg+0x3bf/0x7c0 [ 1495.518759][ C0] ? __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1495.524711][ C0] ? ia32_sys_call+0x3cd2/0x4340 [ 1495.529792][ C0] ? __do_fast_syscall_32+0x154/0x320 [ 1495.535306][ C0] ? do_fast_syscall_32+0x38/0x80 [ 1495.540465][ C0] ? do_SYSENTER_32+0x1f/0x30 [ 1495.545279][ C0] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1495.551938][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.557200][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1495.563667][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.568913][ C0] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1495.575380][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.580661][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.585932][ C0] __msan_warning+0x1b/0x30 [ 1495.590569][ C0] eth_type_trans+0x7d5/0x9b0 [ 1495.595409][ C0] ip_tunnel_rcv+0x2d98/0x3610 [ 1495.600356][ C0] gre_rcv+0x1c9d/0x20f0 [ 1495.604719][ C0] ? __rcu_read_unlock+0x47/0xd0 [ 1495.609811][ C0] ? raw_local_deliver+0x388/0x1690 [ 1495.615185][ C0] ? raw_local_deliver+0x1650/0x1690 [ 1495.620611][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 1495.625331][ C0] gre_rcv+0x285/0x380 [ 1495.629522][ C0] ? __pfx_gre_rcv+0x10/0x10 [ 1495.634231][ C0] ip_protocol_deliver_rcu+0xb2c/0x13d0 [ 1495.639977][ C0] ip_local_deliver_finish+0x409/0x730 [ 1495.645642][ C0] ip_local_deliver+0x228/0x4b0 [ 1495.650674][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1495.656843][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1495.662584][ C0] ip_rcv_finish+0x4f7/0x5c0 [ 1495.667494][ C0] ip_rcv+0xcb/0x380 [ 1495.671632][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1495.676969][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1495.681744][ C0] __netif_receive_skb+0x312/0xac0 [ 1495.687281][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.692687][ C0] process_backlog+0x47c/0x9f0 [ 1495.697711][ C0] ? __pfx_process_backlog+0x10/0x10 [ 1495.703479][ C0] __napi_poll+0xd8/0x880 [ 1495.707990][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.714061][ C0] net_rx_action+0xa3f/0x1c90 [ 1495.718992][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.725053][ C0] ? sched_clock_cpu+0x59/0xa80 [ 1495.730114][ C0] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1495.736541][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.741849][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1495.747078][ C0] handle_softirqs+0x169/0x6e0 [ 1495.751973][ C0] ? tick_nohz_irq_exit+0x164/0x1e0 [ 1495.757302][ C0] __do_softirq+0x14/0x1b [ 1495.761770][ C0] do_softirq+0x58/0x90 [ 1495.766034][ C0] [ 1495.769061][ C0] [ 1495.772069][ C0] __local_bh_enable_ip+0xa1/0xb0 [ 1495.777439][ C0] __dev_queue_xmit+0x3bb4/0x58e0 [ 1495.782795][ C0] ? __local_bh_enable_ip+0x75/0xb0 [ 1495.788207][ C0] ? _raw_spin_unlock_bh+0x2d/0x40 [ 1495.793552][ C0] ? ___neigh_create+0x34f4/0x3b90 [ 1495.798962][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.804267][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.809536][ C0] ? __dev_queue_xmit+0x27a/0x58e0 [ 1495.814945][ C0] neigh_resolve_output+0x9c5/0xaf0 [ 1495.820412][ C0] ? __pfx_neigh_resolve_output+0x10/0x10 [ 1495.826560][ C0] ip_finish_output2+0x1abf/0x1d50 [ 1495.831924][ C0] ip_finish_output+0x292/0x8e0 [ 1495.837087][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.843075][ C0] ip_mc_output+0x58a/0x8d0 [ 1495.847818][ C0] ? __ip_local_out+0x5a4/0x7f0 [ 1495.852920][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 1495.858527][ C0] ? __pfx_ip_mc_output+0x10/0x10 [ 1495.863730][ C0] ip_send_skb+0x3d5/0x420 [ 1495.868318][ C0] udp_send_skb+0x1373/0x1ca0 [ 1495.873291][ C0] udp_sendmsg+0x3022/0x3370 [ 1495.878121][ C0] ? tomoyo_socket_bind_permission+0x341/0x370 [ 1495.884693][ C0] ? filter_irq_stacks+0x49/0x190 [ 1495.890131][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.895515][ C0] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1495.901425][ C0] ? __pfx_udp_sendmsg+0x10/0x10 [ 1495.906521][ C0] inet_sendmsg+0x1ef/0x2a0 [ 1495.911148][ C0] __sock_sendmsg+0x278/0x3d0 [ 1495.915939][ C0] ____sys_sendmsg+0x863/0xcf0 [ 1495.920907][ C0] ___sys_sendmsg+0x271/0x3b0 [ 1495.925869][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.931153][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.937256][ C0] ? __rcu_read_unlock+0x6d/0xd0 [ 1495.942344][ C0] ? __fget_files+0x3b4/0x4a0 [ 1495.947302][ C0] ? __fget_files+0x3b9/0x4a0 [ 1495.952261][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.957790][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.963957][ C0] __sys_sendmmsg+0x3bf/0x7c0 [ 1495.968811][ C0] ? kmsan_get_metadata+0xfb/0x160 [ 1495.974209][ C0] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1495.980409][ C0] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 1495.986331][ C0] ia32_sys_call+0x3cd2/0x4340 [ 1495.991360][ C0] __do_fast_syscall_32+0x154/0x320 [ 1495.996753][ C0] do_fast_syscall_32+0x38/0x80 [ 1496.001785][ C0] do_SYSENTER_32+0x1f/0x30 [ 1496.006723][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1496.013298][ C0] RIP: 0023:0xf707d539 [ 1496.017492][ C0] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1496.037688][ C0] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1496.046251][ C0] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080004d00 [ 1496.054344][ C0] RDX: 0000000000000300 RSI: 0000000000000f00 RDI: 0000000000000000 [ 1496.062409][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1496.070475][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1496.078561][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1496.086686][ C0] [ 1496.090455][ C0] Kernel Offset: disabled [ 1496.094875][ C0] Rebooting in 86400 seconds..