last executing test programs: 12.01855428s ago: executing program 2 (id=4711): bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) accept$alg(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x880) getpid() syz_pidfd_open(0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt(r1, 0x0, 0x8001, &(0x7f0000000040)="98531ecf3a980c79868b8300cbdc2830b5c4bf2e5e8bd93e744c0e245d825515cf08b8248aaac81089503224884046d9efc12e48b297b2ca0f681737fc3b5ba256fa2a46d557fe2874b33563e748f9f4459fa8e2bb34acd4e33c2d1383e973288549c256c75f7de9d41c7fe340c725fa5f2d23ce9c4fc5de4c1d065190d8b86930b91b0ae07dd6e06a55ce701da34c698f8373d3d6e24c9ea03f245b29eaaf260bc8f5fbe55af32205930f0182b3edd50a1c7add576386cbcc1e0867d1fac7bfddb35bd93618d21b3c8418112af851507df53e5e7f054468265a99027ea19022dce716192fbfe70c36d885f7c5d07d5f716d0a82a7a57c435522", 0xfa) syz_pidfd_open(0x0, 0x0) ioctl$HCIINQUIRY(r1, 0x400448cb, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x7fff) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x3, r2, 0x5}) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x56, @rand_addr=' \x01\x00', 0x1}, 0x1c) 9.531845167s ago: executing program 0 (id=4722): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x2, 0xd8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) 9.360188531s ago: executing program 2 (id=4723): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x4400, &(0x7f0000000040), 0x1, 0x76f, &(0x7f0000000c40)="$eJzs3M9rHGUfAPDvM802/RHezQvv4X3fgwgttFC6SZpLezJexEuhUPBaQ7IJIZNsyW5qEwttPQu1uSgIomc9ehVK/QN6k4KCd0G0xoN6icxms7XpJt3ENNvGzwcm8zwz88z3+c5MnsxAZgL4x3q1+JEiBiLiUkSUW8uziDjcLB2JuLW+3eqjGxPFlGJt7fJPqWgWq2vl9r5Sa348mk3ivxFxvxRx5r2n49aXlmfH87y60KoPNeauDtWXls/OzI1PV6er8yOjF4bPj46eHx7ds1xPvnXh6N0Hb6ysfPNl484rfWdTjDXzjlZu27X9fZcx149JKcY2LZ/f5f5eVKmLbfr2oR8AAGyvuM8/1Lo3K0U5DrlLAwAAgANnrX8NAAAAOPBS9LoHAAAAwPO18X8AG+/2Pus92L324+sRMdgpfl/zHeKII1GKiGOr6Yk3E9Ln+9lLDqpbtyPi3liH6y+1rr/dG95U7+YdafbXvWL8Ges0/mTt8Sc6jD99G99O+Ju2Hv8exz/Uafxrfa+hG1998r/SlvFvR/y/r1P81I6ftoj/dpfx76y8f3erdWufRZzq+PcnPRFrm+9DDE3N5Nv+at3/4/TD7fI/9lT8lJpRUyv/B53zv9pl/u+u/jK71VhSxD99Yvvzv378+59oV1wTH7T6kUXE3da8qK9sinFi7tuvn46cbm3En9zi+Hc+/2+28/+0y/y//6L/epebAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQFMWEQORskq7nGWVSsTxiPhPHMvyWr1xZqq2OD9ZrIsYjFI2NZNXhyOivF5PRX2kWX5cP7epPhoR//7u6HrQmbxamajlk71OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLbjETEQKatERBYRv5azrFLpda8AAACAPTfY6w4AAAAAz53nfwAAADj4dvv8n/a4HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCBdunixWJaW310Y6KoT15bWpytXTs7Wa3PVuYWJyoTtYWrlelabTqvViZqc8/aXxYRIxdi8fpQo1pvDNWXlq/M1RbnG1dm5sanq1eqpX3JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ0aaE4pq0RE1ixnKdL6usEopamZvDocEf+KiIflUn9RH+l1pwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhz9aXl2fE8ry4ovIyFSBEvQDdehsKRiNhBq7STjYtCxE76czNe9BPX65EJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBeqC8tz47neXWh3uueAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0FvZDykiiulU+eTA5rWH02/l5jwi3vn48ofXxxuNhZFi+c/t5aWPWsvP/aXhzf3MAQAAAA6813ay8cZz+sZzPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLfqS8uz43leXXiOhbjd6ywBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDd+DMAAP//rJPCJQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$FUSE_OPEN(r4, &(0x7f0000000080)={0x20}, 0x20) sendfile(r4, r3, 0x0, 0x2c62) 8.85908989s ago: executing program 3 (id=4725): syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz71Rw0AQBeCnQ0gioBUSOqAHEopBKZUQ0Ae9uAaPPeuR/NeB7eD7gpt7N+9mZ8N9tWxr8V+pLsmwHHPLW6bkJW0tffRTltynxlQyX77XuD91fp6/h7RNxjV9vXe7quuY1+TpePvtz29dPv9utSYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLJDAAAA//+4SRWs") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}], 0x2, 0x16da) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet(r0, &(0x7f00000002c0)="1e777778b5d17296", 0x8, 0x0, 0x0, 0x0) 8.725365025s ago: executing program 0 (id=4726): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x9]}, @timestamp_prespec={0x44, 0x2c, 0xc1, 0x3, 0x0, [{@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private}]}, @timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x0, [{@multicast2}, {@private}]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000e40)="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", 0x216, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) syz_usb_connect(0x0, 0x43d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 7.234052725s ago: executing program 3 (id=4729): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev, 0x20000}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x25f9, &(0x7f0000000080), 0x0, 0x0) 7.191488141s ago: executing program 2 (id=4730): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488"], 0x0, 0x38}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000280)="b81fe260a47e9d899e5fa6acf9b6c920d8f2c00245b9a67bab06ae0a40c8845c4cbfe63efc081c057bb213d098ba0746c655fb3ce86a528a1e68585dc28cd648cdaf05908474c316f6e61cb45186100e6609eaed94b091ba7d8355af6a895dc3b658db58038afc63a9ce397a8acade7600855d294b00", &(0x7f0000000000)=@udp, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x1, '\x00', {}, 0x3}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x2500, 0x2500, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x0, [@remote]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@broadcast}, {@in6=@dev, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha224-avx2\x00'}}}, @replay_esn_val={0x1c}]}, 0x158}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 6.954650722s ago: executing program 1 (id=4731): socket$packet(0x11, 0x0, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) readv(0xffffffffffffffff, &(0x7f0000000a00)=[{0x0}, {&(0x7f00000008c0)=""/167, 0xa7}, {&(0x7f0000000980)=""/82, 0x52}], 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3332, 0x0, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000580)=""/52, 0x34}], 0x1) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000a80)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r2}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) 6.678506216s ago: executing program 1 (id=4732): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x3, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x12, 0x0, 0x9, [0x401, 0x80005, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65a}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@multicast2}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote, 0x6}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@empty, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev={0xac, 0x14, 0x14, 0x32}, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6.3773845s ago: executing program 3 (id=4733): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c}, 0x38) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488"], 0x0, 0x38}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=@udp, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000540)={0x1, '\x00', {}, 0x3}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@broadcast}, {@in6=@dev, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha224-avx2\x00'}}}, @replay_esn_val={0x1c}]}, 0x158}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 5.772812084s ago: executing program 2 (id=4734): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev, 0x20000}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.259442194s ago: executing program 3 (id=4735): bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.090440408s ago: executing program 3 (id=4737): syz_mount_image$bcachefs(&(0x7f0000011a00), &(0x7f0000011a40)='./file0\x00', 0x1200014, &(0x7f0000000100)=ANY=[@ANYBLOB="617461cd056865636b73756d3d7878686173682c7370725f686173683d736970686173682c646174615f638465636b73756d3d7878686173682c636f6d7072657373696f6e3d7a7374642c00"], 0x1, 0x119fc, &(0x7f0000011ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000900)={0x368, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7d5}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffe1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6e}, @TIPC_NLA_NODE_ID={0xdf, 0x3, "bb3514e1268529947aa57b9889579590e61dda0ecad86516c88c06f3e5d81516dcb1b4d54fa0794a64683830c443742f6019e6dd0ed048646b1b0537e08f02ac914fafd2c56da9681fcc2abd15c6106caa3838d09b0c55b1727f3b2802dbd9c98811af6fe0b53abf23d542cc16bb3d7cd7a84453ef228fc1abec083e0ea67114bfbb59f6b267157041e221605f30f2ec91fba3284262d3fc6dee6f940bd1cb81a681ecd5505c0f5c0ffc8302bd9789f7b3fc53dd822113911e66032e62ce0d1fbf66111e42a67507589d0ecedc58407ffe26c295ae7f8e519563f1"}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "a8ddf55514fed82302fbd219d72ae657a11c45a49ceae1510fa0"}}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "aedded2051f61f9ad63d5cf1d2fdf1e8e33542098aca7fd79f5433063ab56c9ad1"}}, @TIPC_NLA_NODE_ID={0x3b, 0x3, "fddc1eaa83cf22b083bfc4bf42d8e4fc42a46bf81e54ea471f9d5dac5d367b9946c62e3986488c21aa1ab70e50b26dc2876619d1e67a8e"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "721ed5d73fda18b6118b3057a1dec8c15a5cdc9db63f532035"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "d5201d6d18421b04e50a8be13e2e09949bd7ee3460b5ed03cf"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x13, 0x3, "4de9ca60c509ebfa863725a890b50d"}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x4}]}, 0x368}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x2000) 4.973287018s ago: executing program 0 (id=4738): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x300000a, &(0x7f0000000680)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000001480)={{r0}, 0x0, 0x0, @unused, @subvolid}) 4.808783739s ago: executing program 1 (id=4739): syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz71Rw0AQBeCnQ0gioBUSOqAHEopBKZUQ0Ae9uAaPPeuR/NeB7eD7gpt7N+9mZ8N9tWxr8V+pLsmwHHPLW6bkJW0tffRTltynxlQyX77XuD91fp6/h7RNxjV9vXe7quuY1+TpePvtz29dPv9utSYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLJDAAAA//+4SRWs") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}], 0x2, 0x16da) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet(r0, &(0x7f00000002c0)="1e777778b5d17296", 0x8, 0x0, 0x0, 0x0) 4.649855103s ago: executing program 2 (id=4740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x0, 0x0) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) socketpair(0x5, 0x2, 0x6, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0xa8, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x89, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x4, [{}, {}, {}, {}]}, @void, @val={0x4, 0x6}, @void, @val={0x5, 0x1b, {0x0, 0x0, 0x0, "3685f9fc8e6d8539a1ef1bf3926704374b867603d91eb0ea"}}, @val={0x25, 0x2a, {0x0, 0x40}}, @void, @void, @val={0x2d, 0x0, {0x8000, 0x2, 0x4, 0x0, {0x1ff, 0x7, 0x0, 0x31d, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x7cfadfd09456c78c, 0x401, 0x7}}, @void, @void, @void, [{0xdd, 0x1e, "4681fcb2fb4323c9f657e659a392e70d299679756854196d371f504d9b18"}]}}]}, 0xa8}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0xc4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x94, 0x2, {{0x2, [0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfe], 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x34, 0x4, 0x0, 0x1, [{0xc}, {0xc, 0x4, 0x80000001}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0xfff}]}]}}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4040}, 0x20040080) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000440)=@newqdisc={0xec, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xb2, 0x0, 0x9}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x0, 0x7, 0x800, 0x99, 0x9}}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0xfffffd5b, 0x1, {0x0, 0x0, 0xeb}}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x0, 0x100000}}, @NETEM_LOSS_GI={0x18}]}]}}}]}, 0xec}}, 0x0) 4.228698307s ago: executing program 2 (id=4741): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x68, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x50, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x0, 0x3}, {0x6, 0x24, 0x1a, 0x0, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x400}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x7f}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000a2220840d219bc75819b0102c5f809021200010000000009040000000202"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0xc7, 0xe64}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x6, 0xd, {0xd, 0x12, "6e21d5a0a4fb2a356a4791"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x44, &(0x7f0000000140)={0x40, 0xc, 0x8a, "b950b2f65d7c0427f3ff2421f0689c9c659cf8114d719951cc9787303dae2611dcc40a71b0ee92e58102e19905d22066185a2a6c51297a008689ec27b3852800274b75900331610634b7117237e85e87783b149174edb5595fc4d584c05613a3f31bff79f24240ccfc3e7d270b1b80925316a30012e2eb20c7cae250955cbff07ddea9cfb714ad5cd9ad"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x0, 0x200, 0x4, 0x1000, 0x9, 0xfffc, 0x7fff, 0x9, 0x4, 0x7f5c, 0x659, 0x1}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x15}, &(0x7f0000000340)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000380)={0x20, 0x87, 0x2, 0x5}, &(0x7f00000003c0)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000004500)={0x90, 0x8000000000000001}, 0x90) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.444335135s ago: executing program 4 (id=4742): socket$packet(0x11, 0x0, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) readv(0xffffffffffffffff, &(0x7f0000000a00)=[{0x0}, {&(0x7f00000008c0)=""/167, 0xa7}, {&(0x7f0000000980)=""/82, 0x52}], 0x3) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, r1}, 0x90) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_setup(0x297a, &(0x7f0000000200), &(0x7f00000002c0)=0x0, &(0x7f0000000080)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3332, 0x0, 0x0, 0x0, 0x0) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000580)=""/52, 0x34}], 0x1) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000a80)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r2}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.386350463s ago: executing program 1 (id=4743): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev, 0x20000}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x25f9, &(0x7f0000000080), 0x0, 0x0) 2.779871458s ago: executing program 0 (id=4744): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001800dd040000000000000000000000000000000905000000630dcbb40488"], 0x0, 0x38}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0}, 0x90) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000280)="b81fe260a47e9d899e5fa6acf9b6c920d8f2c00245b9a67bab06ae0a40c8845c4cbfe63efc081c057bb213d098ba0746c655fb3ce86a528a1e68585dc28cd648cdaf05908474c316f6e61cb45186100e6609eaed94b091ba7d8355af6a895dc3b658db58038afc63a9ce397a8acade7600855d294b00", &(0x7f0000000000)=@udp, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x1, '\x00', {}, 0x3}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000800000008000200000000000c0099000300000002"], 0x28}}, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'erspan0\x00', 0x0, 0x2500, 0x2500, 0x0, 0x0, {{0x15, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0x0, [@remote]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast2}, {@private}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}, @timestamp={0x44, 0xc, 0x0, 0x0, 0x0, [0x0, 0x0]}]}}}}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@broadcast}, {@in6=@dev, 0x0, 0x32}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth_trunc={0x4c, 0x14, {{'sha224-avx2\x00'}}}, @replay_esn_val={0x1c}]}, 0x158}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 2.726982839s ago: executing program 4 (id=4745): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) connect$can_bcm(r0, &(0x7f0000000300), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 2.483240559s ago: executing program 4 (id=4746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0xb0}}, 0x0) 2.407527514s ago: executing program 1 (id=4747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "dc"}]}], {0x14}}, 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) socket$phonet(0x23, 0x2, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0xff, 0x29d5, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x58, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x14, {0x0, 0x0, @void, @void, @val="ee7bfbc5191c3ca7d825d735cfd13d65"}}}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xffffffffffffffa3, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000040000000000000000000000000020000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) recvmsg(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@initdev}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 2.231315357s ago: executing program 4 (id=4748): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.058876802s ago: executing program 1 (id=4749): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r4 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x20100, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000540)="8326705d4dc215df0051d933fd48a0e9c1035681545705897a3748cb3da8f4ae7ef5cb0b9e53043143491340ba4f25558d7c85a5328c68417e1cae50d55202387a14724f", 0x44}], 0x1, &(0x7f0000001ec0)=ANY=[@ANYRESHEX, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES16, @ANYBLOB="000000001c00000000ffff00010000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=0xee00, @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB], 0xb8, 0x4090}}], 0x1, 0x4000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/fscaps', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="3d00001126ee28dcd11ce5ec583d7039267bfd91e686737de5", @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="0c00990004000000580000000800010057000000080001002e000000", @ANYRES32=r7], 0x48}}, 0x11) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000680)=@add_del={0x2, &(0x7f00000001c0)='syzkaller1\x00'}) ftruncate(r4, 0x2007ffb) sendfile(r3, r4, 0x0, 0x1000000211005) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001200)={0x0, 0x0, 0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB]}) 2.005467361s ago: executing program 3 (id=4750): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev, 0x20000}, {@remote}, {@multicast2, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.00350148s ago: executing program 4 (id=4751): socket(0x2, 0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x75, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400070a0101000000000000000005000000"], 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68010000100013070000030000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000a8c95e370a9a424d0bae70216a4958b3d147782ae1bc117f6b02f60480eb4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="3c00330080000000080211000001080211000000505050505050000000000002aba519ed06dd895d00000100040600000000000025030000002a0100"], 0x58}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @empty}, 'syzkaller0\x00'}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) openat$cgroup_ro(r10, 0x0, 0x26e1, 0x0) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000009c0)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}]}, 0x34}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 1.757245102s ago: executing program 0 (id=4752): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="dd85801e280142d80885d3dddebc7a08cc1265a9df7da852f1dfd56877a913e476e7f783888ad34d681f0dc2a69831619acd87b4e262cbf69628b32b041d559f423feb673203f6ec0d27708cb3222942b2aeb68d4dc7057e1cda7f82e8a5e766913ce3ff8ca583f20f8e0e79754e333c8f7efe01bd610d1c535f7cb2865720d14e2b6d5aee"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0xa002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) 120.279851ms ago: executing program 4 (id=4753): syz_read_part_table(0x105c, &(0x7f0000001080)="$eJzsz71Rw0AQBeCnQ0gioBUSOqAHEopBKZUQ0Ae9uAaPPeuR/NeB7eD7gpt7N+9mZ8N9tWxr8V+pLsmwHHPLW6bkJW0tffRTltynxlQyX77XuD91fp6/h7RNxjV9vXe7quuY1+TpePvtz29dPv9utSYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLJDAAAA//+4SRWs") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0xfffffdef}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="bb", 0x1}], 0x1}}], 0x2, 0x16da) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet(r0, &(0x7f00000002c0)="1e777778b5d17296", 0x8, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=4754): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="dd85801e280142d80885d3dddebc7a08cc1265a9df7da852f1dfd56877a913e476e7f783888ad34d681f0dc2a69831619acd87b4e262cbf69628b32b041d559f423feb673203f6ec0d27708cb3222942b2aeb68d4dc7057e1cda7f82e8a5e766913ce3ff8ca583f20f8e0e79754e333c8f7efe01bd610d1c535f7cb2865720d14e2b6d5aee"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x800}}, './file0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x0, &(0x7f0000000040)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0xa002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) kernel console output (not intermixed with test programs): 683][T20465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.678632][T20465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.082152][T20465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.387520][T11742] Bluetooth: hci4: command tx timeout [ 974.697005][T20465] hsr_slave_0: entered promiscuous mode [ 974.728913][T20465] hsr_slave_1: entered promiscuous mode [ 974.746195][T20465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.748456][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4286'. [ 974.754071][T20465] Cannot create hsr debugfs directory [ 974.996148][T20517] chnl_net:caif_netlink_parms(): no params data found [ 975.264619][ T3481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.372573][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4289'. [ 975.484603][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4289'. [ 975.494232][T20636] loop0: detected capacity change from 0 to 32768 [ 975.593699][T20636] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 975.638231][ T3481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.718804][T20636] XFS (loop0): Ending clean mount [ 975.787193][T20636] XFS (loop0): Quotacheck needed: Please wait. [ 975.788562][ T3481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.798579][T20667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4290'. [ 975.984608][T20636] XFS (loop0): Quotacheck: Done. [ 976.100792][ T3481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.157850][T13694] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 976.295810][T20517] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.337757][T20517] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.356784][T20517] bridge_slave_0: entered allmulticast mode [ 976.389170][T20517] bridge_slave_0: entered promiscuous mode [ 976.418820][T20517] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.426135][T20517] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.479024][T20517] bridge_slave_1: entered allmulticast mode [ 976.542668][T20517] bridge_slave_1: entered promiscuous mode [ 977.019399][T20517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.074058][T20714] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4299'. [ 977.079747][T20517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.159364][T20715] xt_TPROXY: Can be used only with -p tcp or -p udp [ 977.338143][ T5134] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 977.454318][T20517] team0: Port device team_slave_0 added [ 977.466721][T20517] team0: Port device team_slave_1 added [ 977.558813][ T5134] usb 5-1: config 253 has an invalid interface number: 174 but max is 1 [ 977.596382][ T5134] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 977.637109][ T5134] usb 5-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 977.642882][ T3481] bridge_slave_1: left allmulticast mode [ 977.666116][ T5134] usb 5-1: config 253 has no interface number 0 [ 977.669810][ T3481] bridge_slave_1: left promiscuous mode [ 977.683397][ T5134] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 977.694011][ T3481] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.701703][ T5134] usb 5-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 977.701739][ T5134] usb 5-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 977.750498][ T3481] bridge_slave_0: left allmulticast mode [ 977.756218][ T3481] bridge_slave_0: left promiscuous mode [ 977.778570][ T3481] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.784880][ T5134] usb 5-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 977.810494][ T5134] usb 5-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 977.838601][ T5134] usb 5-1: config 253 interface 174 has no altsetting 0 [ 977.857745][ T5134] usb 5-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 977.875948][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.111534][ T5134] usb 5-1: string descriptor 0 read error: -71 [ 978.142433][ T5134] usb 5-1: USB disconnect, device number 54 [ 978.407070][T20723] loop0: detected capacity change from 0 to 32768 [ 978.522555][T20723] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 978.657117][T20723] XFS (loop0): Ending clean mount [ 978.699692][T20723] XFS (loop0): Quotacheck needed: Please wait. [ 978.767152][ T3481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.798611][T20723] XFS (loop0): Quotacheck: Done. [ 978.816489][ T3481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.860141][ T3481] bond0 (unregistering): Released all slaves [ 978.896952][T20517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.908114][T20517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.937324][T20517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.000181][T20517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.012432][T20517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.014878][T13694] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 979.040974][T20517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.542078][T20745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4310'. [ 979.576926][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4310'. [ 979.791126][T20517] hsr_slave_0: entered promiscuous mode [ 979.825426][T20517] hsr_slave_1: entered promiscuous mode [ 979.838681][T20517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.859103][T20751] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.4311'. [ 979.861606][T20517] Cannot create hsr debugfs directory [ 979.887749][T20751] net_ratelimit: 116 callbacks suppressed [ 979.887773][T20751] netlink: zone id is out of range [ 979.907534][T20751] netlink: zone id is out of range [ 979.923048][T20751] netlink: zone id is out of range [ 979.957616][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4311'. [ 979.977945][T20751] netlink: zone id is out of range [ 980.004326][T20751] netlink: zone id is out of range [ 980.018640][T20751] netlink: zone id is out of range [ 980.048866][T20751] netlink: zone id is out of range [ 980.054069][T20751] netlink: zone id is out of range [ 980.077777][T20751] netlink: zone id is out of range [ 980.090634][T20751] netlink: zone id is out of range [ 980.247673][T20465] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 980.254846][T20739] loop4: detected capacity change from 0 to 40427 [ 980.365135][T20739] F2FS-fs (loop4): invalid crc value [ 980.413855][T20739] F2FS-fs (loop4): Found nat_bits in checkpoint [ 980.459061][T20465] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 980.547649][T20739] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 980.548628][T20465] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 980.684619][T20465] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 980.735703][ T3481] hsr_slave_0: left promiscuous mode [ 980.751857][ T3481] hsr_slave_1: left promiscuous mode [ 980.779714][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 980.797712][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.809457][ T3481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 980.816940][ T3481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.886601][ T3481] veth1_macvtap: left promiscuous mode [ 980.902827][ T3481] veth0_macvtap: left promiscuous mode [ 980.918117][ T3481] veth1_vlan: left promiscuous mode [ 980.927990][ T3481] veth0_vlan: left promiscuous mode [ 982.033149][T20777] loop2: detected capacity change from 0 to 32768 [ 982.059697][T20779] loop4: detected capacity change from 0 to 32768 [ 982.169403][T20777] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 982.252706][T20779] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 982.257651][T20777] XFS (loop2): Ending clean mount [ 982.278574][T20779] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 982.319983][T20777] XFS (loop2): Quotacheck needed: Please wait. [ 982.376032][T20779] bcachefs (loop4): alloc_read... done [ 982.381887][T20779] bcachefs (loop4): stripes_read... done [ 982.406549][T20779] bcachefs (loop4): snapshots_read... done [ 982.415177][T20779] bcachefs (loop4): journal_replay... done [ 982.422826][T20779] bcachefs (loop4): resume_logged_ops... done [ 982.432874][T20779] bcachefs (loop4): going read-write [ 982.509505][T20779] bcachefs (loop4): done starting filesystem [ 982.514362][T20777] XFS (loop2): Quotacheck: Done. [ 982.523324][ T3481] team0 (unregistering): Port device team_slave_1 removed [ 982.673643][T15153] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 982.703420][ T3481] team0 (unregistering): Port device team_slave_0 removed [ 982.784768][T20779] syz.4.4313 (20779) used greatest stack depth: 14072 bytes left [ 982.900136][T14078] bcachefs (loop4): shutting down [ 982.905248][T14078] bcachefs (loop4): going read-only [ 982.911322][T14078] bcachefs (loop4): finished waiting for writes to stop [ 982.962559][T14078] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 983.057738][T14078] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 14 [ 983.074530][T14078] bcachefs (loop4): shutdown complete, journal seq 15 [ 983.128390][T14078] bcachefs (loop4): marking filesystem clean [ 983.176256][T14078] bcachefs (loop4): shutdown complete [ 983.200991][T20803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4316'. [ 985.825029][T20465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.958311][T20830] bond_slave_0: entered promiscuous mode [ 985.971677][T20830] bond_slave_1: entered promiscuous mode [ 986.043365][T20830] vlan2: entered promiscuous mode [ 986.072620][T20830] bond0: entered promiscuous mode [ 986.108791][T20830] bridge0: entered promiscuous mode [ 986.125497][T20830] bond0: left promiscuous mode [ 986.143721][T20830] bridge0: left promiscuous mode [ 986.163795][T20830] bond_slave_0: left promiscuous mode [ 986.169470][T20830] bond_slave_1: left promiscuous mode [ 986.279481][T20465] 8021q: adding VLAN 0 to HW filter on device team0 [ 986.412982][T17797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 986.431452][T17797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 986.443048][T17797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 986.453182][T17797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 986.462352][T17797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 986.472144][T17797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 986.543551][T20842] netlink: 'syz.2.4325': attribute type 10 has an invalid length. [ 986.589546][T16354] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.596828][T16354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.646033][T16354] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.653352][T16354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.787667][T20839] lo speed is unknown, defaulting to 1000 [ 986.944464][ T8436] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.062714][T20856] vlan2: entered promiscuous mode [ 987.074780][T20856] bond0: entered promiscuous mode [ 987.098472][T20856] bond_slave_0: entered promiscuous mode [ 987.104839][T20856] bond_slave_1: entered promiscuous mode [ 987.112346][T20856] bridge0: entered promiscuous mode [ 987.132121][T20856] bond0: left promiscuous mode [ 987.137127][T20856] bond_slave_0: left promiscuous mode [ 987.143800][T20856] bond_slave_1: left promiscuous mode [ 987.151861][T20856] bridge0: left promiscuous mode [ 987.343646][ T8436] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.413235][T20517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 987.431310][T20517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 987.526387][T20869] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4329'. [ 987.540640][ T8436] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.586735][T20517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 987.605019][T20870] xt_TPROXY: Can be used only with -p tcp or -p udp [ 987.701284][T20517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 987.789344][ T8436] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.836798][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4331'. [ 988.474561][ T8436] bridge_slave_0: left allmulticast mode [ 988.486677][ T8436] bridge_slave_0: left promiscuous mode [ 988.496944][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.517862][T11742] Bluetooth: hci0: command tx timeout [ 988.569392][ T8436] bridge_slave_1: left allmulticast mode [ 988.575824][ T8436] bridge_slave_1: left promiscuous mode [ 988.599541][ T8436] bridge1: port 1(bridge_slave_1) entered disabled state [ 988.818354][T20890] loop0: detected capacity change from 0 to 32768 [ 988.991554][T20890] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 989.007225][T20890] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 989.043543][T20890] bcachefs (loop0): alloc_read... done [ 989.059247][T20890] bcachefs (loop0): stripes_read... done [ 989.065567][T20890] bcachefs (loop0): snapshots_read... done [ 989.086731][T20890] bcachefs (loop0): journal_replay... done [ 989.099871][T20890] bcachefs (loop0): resume_logged_ops... done [ 989.107394][T20890] bcachefs (loop0): going read-write [ 989.123881][T20890] bcachefs (loop0): done starting filesystem [ 989.201460][ T8436] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 989.239506][ T8436] bridge0 (unregistering): left promiscuous mode [ 989.273827][T13694] bcachefs (loop0): shutting down [ 989.280083][T13694] bcachefs (loop0): going read-only [ 989.291265][T13694] bcachefs (loop0): finished waiting for writes to stop [ 989.299460][T13694] bcachefs (loop0): flushing journal and stopping allocators, journal seq 12 [ 989.332193][T13694] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14 [ 989.364914][T13694] bcachefs (loop0): shutdown complete, journal seq 15 [ 989.372908][T13694] bcachefs (loop0): marking filesystem clean [ 989.400359][T13694] bcachefs (loop0): shutdown complete [ 989.697194][ T8436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.723067][ T8436] bond_slave_0: left promiscuous mode [ 989.755061][ T8436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.775157][ T8436] bond_slave_1: left promiscuous mode [ 989.785863][ T8436] bond0 (unregistering): (slave bond1): Releasing backup interface [ 989.802822][ T8436] bond0 (unregistering): Released all slaves [ 990.276078][ T8436] bond1 (unregistering): Released all slaves [ 990.502510][T20839] chnl_net:caif_netlink_parms(): no params data found [ 990.562732][T20465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.598317][T17797] Bluetooth: hci0: command tx timeout [ 990.788585][T20928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4338'. [ 990.857125][ T29] audit: type=1326 audit(1719288819.328:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20925 comm="syz.0.4338" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6896375d39 code=0x0 [ 991.161651][T20839] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.169338][T20839] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.196157][T20839] bridge_slave_0: entered allmulticast mode [ 991.226182][T20839] bridge_slave_0: entered promiscuous mode [ 991.278168][T20517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.387898][T20839] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.395157][T20839] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.417182][T20839] bridge_slave_1: entered allmulticast mode [ 991.441070][T20839] bridge_slave_1: entered promiscuous mode [ 991.490419][ T8436] hsr_slave_0: left promiscuous mode [ 991.498636][ T8436] hsr_slave_1: left promiscuous mode [ 991.515999][ T8436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.531128][ T8436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.554816][ T8436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.577055][ T8436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.623415][ T8436] veth1_macvtap: left promiscuous mode [ 991.629512][ T8436] veth0_macvtap: left promiscuous mode [ 991.635513][ T8436] veth1_vlan: left promiscuous mode [ 991.646498][ T8436] veth0_vlan: left promiscuous mode [ 992.435028][ T8436] team0 (unregistering): Port device team_slave_1 removed [ 992.524575][ T8436] team0 (unregistering): Port device team_slave_0 removed [ 992.677799][T17797] Bluetooth: hci0: command tx timeout [ 993.232868][T20517] 8021q: adding VLAN 0 to HW filter on device team0 [ 993.292975][T20839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.323831][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.341272][T20839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.454525][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 993.461809][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.535029][T20839] team0: Port device team_slave_0 added [ 993.600341][T20839] team0: Port device team_slave_1 added [ 993.659341][T14099] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.666577][T14099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.842220][T20839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.860072][T20839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.897246][T20839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.929451][T20465] veth0_vlan: entered promiscuous mode [ 993.959019][T20839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.974190][T20839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.017490][T20839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.072383][T20465] veth1_vlan: entered promiscuous mode [ 994.291668][T20839] hsr_slave_0: entered promiscuous mode [ 994.305091][T20839] hsr_slave_1: entered promiscuous mode [ 994.524379][T20465] veth0_macvtap: entered promiscuous mode [ 994.676491][T20465] veth1_macvtap: entered promiscuous mode [ 994.758660][T17797] Bluetooth: hci0: command tx timeout [ 994.832462][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.845838][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.856482][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 994.874670][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.886688][T20465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.943668][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 994.973039][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 994.990421][T20465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 995.001580][T20465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 995.013812][T20465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 995.028461][T20517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 995.080113][T20465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.091794][T20465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.103759][T20465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.112670][T20465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 995.481855][T20517] veth0_vlan: entered promiscuous mode [ 995.587969][T20517] veth1_vlan: entered promiscuous mode [ 995.673407][ T8430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.718634][ T8430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.869130][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.876962][T20517] veth0_macvtap: entered promiscuous mode [ 995.877000][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.935572][T20517] veth1_macvtap: entered promiscuous mode [ 996.121001][T20517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.187573][T20517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.205773][T20517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.236970][T20517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.257975][T20517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 996.277045][T20517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.327826][T20517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 996.459051][T11742] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 996.492960][T11742] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 996.508362][T11742] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 996.539092][T11742] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 996.539764][T20839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 996.570959][T11742] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 996.589695][T11742] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 996.656953][T20517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.687571][T20517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.704327][T20517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.717336][T20517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.774772][T20517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 996.798374][T20517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 996.816911][T20517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 996.831756][T20517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.841294][T20517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.861483][T20517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.875340][T20517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 996.894236][T20839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 996.936814][T20839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 997.006932][T21021] lo speed is unknown, defaulting to 1000 [ 997.035237][T20839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 997.314932][T18141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.352973][T18141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.497222][T18141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 997.519282][T18141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 997.649488][T20839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.776175][T20839] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.079262][T16354] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.086491][T16354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.165358][T16354] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.172672][T16354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.679384][T17797] Bluetooth: hci2: command tx timeout [ 998.722898][T21053] loop3: detected capacity change from 0 to 8192 [ 998.747080][T21062] netlink: 'syz.3.4354': attribute type 4 has an invalid length. [ 998.790550][T21053] loop3: p1 p2 p3 p4 [ 998.802089][T21053] loop3: p1 size 108922248 extends beyond EOD, truncated [ 998.890134][T21053] loop3: p2 start 861536256 is beyond EOD, truncated [ 998.927704][T21053] loop3: p3 start 851968 is beyond EOD, truncated [ 998.935614][T21021] chnl_net:caif_netlink_parms(): no params data found [ 998.957636][T21053] loop3: p4 size 65536 extends beyond EOD, truncated [ 998.978824][T20839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 999.264482][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 999.276674][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 999.329983][T21075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4355'. [ 999.458054][T21021] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.492193][T21021] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.508209][T21021] bridge_slave_0: entered allmulticast mode [ 999.515930][T21021] bridge_slave_0: entered promiscuous mode [ 999.564624][T21021] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.588681][T21021] bridge0: port 2(bridge_slave_1) entered disabled state [ 999.621570][T21021] bridge_slave_1: entered allmulticast mode [ 999.645695][T21021] bridge_slave_1: entered promiscuous mode [ 999.747638][T21021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 999.790446][T21021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 999.880175][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4356'. [ 999.949422][T21021] team0: Port device team_slave_0 added [ 999.989827][T21021] team0: Port device team_slave_1 added [ 1000.105801][T21021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.118914][T21092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4357'. [ 1000.121005][T21021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.174043][T21021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.207144][T21021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.218947][T21021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.248363][T21021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.771067][T17797] Bluetooth: hci2: command tx timeout [ 1001.339157][T21106] loop0: detected capacity change from 0 to 2048 [ 1001.463678][T21107] loop1: detected capacity change from 0 to 2048 [ 1002.766909][T21021] hsr_slave_0: entered promiscuous mode [ 1002.826922][T21107] loop1: p1 < > p4 [ 1002.826933][T21106] loop0: p1 < > p4 [ 1002.829796][T21106] loop0: p4 size 8388608 extends beyond EOD, truncated [ 1002.848663][T21107] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1002.988069][T17797] Bluetooth: hci2: command tx timeout [ 1003.033446][T21021] hsr_slave_1: entered promiscuous mode [ 1003.049379][T21021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1003.057074][T21021] Cannot create hsr debugfs directory [ 1003.160024][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1003.177750][T21113] netlink: 'syz.3.4362': attribute type 10 has an invalid length. [ 1003.188951][T21113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.196786][T21113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.275792][T21113] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.283108][T21113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1003.290813][T21113] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.298085][T21113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.354397][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1003.387273][T20408] udevd[20408]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1003.414682][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1003.451822][T21113] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1003.500735][T20839] veth0_vlan: entered promiscuous mode [ 1003.690643][T21120] loop1: detected capacity change from 0 to 2048 [ 1004.001212][T21120] loop1: p1 < > p4 [ 1004.013831][T21120] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1004.337766][ T4533] loop1: p1 < > p4 [ 1004.361562][ T4533] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1004.405424][T21115] loop0: detected capacity change from 0 to 8192 [ 1004.534478][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1004.586548][T20839] veth1_vlan: entered promiscuous mode [ 1004.622130][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1004.650305][T21119] netlink: 'syz.0.4363': attribute type 4 has an invalid length. [ 1004.768797][T20298] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1004.973776][T20839] veth0_macvtap: entered promiscuous mode [ 1005.000413][T17797] Bluetooth: hci2: command tx timeout [ 1005.046399][T20408] udevd[20408]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1005.058452][T21132] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4366'. [ 1005.067297][T21130] netlink: 51 bytes leftover after parsing attributes in process `syz.0.4367'. [ 1005.082212][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1005.155300][T21133] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1005.177116][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1005.204380][T21021] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.208267][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1005.290585][T20839] veth1_macvtap: entered promiscuous mode [ 1005.328351][T21130] netlink: 'syz.0.4367': attribute type 10 has an invalid length. [ 1005.665740][T21021] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.759610][T20839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.790476][T20839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.816470][T20839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.837303][T20839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.867378][T20839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.892927][T20839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.914036][T20839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1005.933513][T21143] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1005.938895][T20839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1005.964976][T21143] net_ratelimit: 116 callbacks suppressed [ 1005.964999][T21143] netlink: zone id is out of range [ 1005.974931][T20839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1006.013418][T20839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.035355][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1006.047024][T20839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.082480][T20839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.111170][T20839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.134295][T20839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.163319][T20839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.187806][T20839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1006.213521][T20839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1006.237077][T20839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1006.355329][T21021] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.418594][T20839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.457771][T20839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.476038][T20839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.497522][T20839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1006.576077][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4370'. [ 1006.604178][T21021] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.635886][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4370'. [ 1006.888587][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4370'. [ 1006.905824][ T8436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.917534][ T8436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.070268][T21152] loop3: detected capacity change from 0 to 2048 [ 1007.299355][T21152] loop3: p1 < > p4 [ 1007.437001][T21152] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1007.754701][ T4533] loop3: p1 < > p4 [ 1007.776496][ T4533] loop3: p4 size 8388608 extends beyond EOD, truncated [ 1008.065120][T21021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1008.193179][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1008.216167][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1008.246544][ T8441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1008.247329][T21021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1008.257498][ T8441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1008.308329][T21158] lo speed is unknown, defaulting to 1000 [ 1008.320978][T21021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1008.372475][T21161] loop1: detected capacity change from 0 to 2048 [ 1008.410332][T21161] loop1: p1 < > p4 [ 1008.648200][T21161] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1009.262236][T21021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1009.328721][T21166] fuse: Bad value for 'fd' [ 1009.558733][T14099] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1009.656999][T21021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.728224][T21021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.751327][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.758619][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.776056][T21168] loop0: detected capacity change from 0 to 8192 [ 1009.785509][T14099] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.804425][T14099] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1009.818274][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.825538][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.842747][T21171] netlink: 'syz.0.4375': attribute type 4 has an invalid length. [ 1009.843754][T21168] loop0: p1 p2 p3 p4 [ 1009.874503][T14099] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1009.882592][T21168] loop0: p1 size 108922248 extends beyond EOD, [ 1009.886801][T14099] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.889932][T21168] truncated [ 1009.893846][T14099] usb 5-1: Product: syz [ 1009.925143][T14099] usb 5-1: Manufacturer: syz [ 1009.925447][T21168] loop0: p2 start 861536256 is beyond EOD, truncated [ 1009.937614][ T783] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1009.951807][T21168] loop0: p3 start 851968 is beyond EOD, truncated [ 1009.960927][T14099] usb 5-1: SerialNumber: syz [ 1009.982664][T21168] loop0: p4 size 65536 extends beyond EOD, truncated [ 1010.005294][T21021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.048998][ T4533] loop0: p1 p2 p3 p4 [ 1010.053836][ T4533] loop0: p1 size 108922248 extends beyond EOD, truncated [ 1010.115495][ T4533] loop0: p2 start 861536256 is beyond EOD, truncated [ 1010.144524][ T4533] loop0: p3 start 851968 is beyond EOD, truncated [ 1010.152107][ T4533] loop0: p4 size 65536 extends beyond EOD, truncated [ 1010.178734][ T783] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 1010.179685][T21164] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1010.199705][ T783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.225598][ T783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.259286][ T783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.291405][ T783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.296320][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1010.319547][ T783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.324143][T20408] udevd[20408]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1010.340685][ T783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.411201][ T783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.445941][ T783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.457880][T21164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.463839][ T783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.501802][ T783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.524659][ T783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.528500][T21164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.545935][ T783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.548750][T20408] udevd[20408]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1010.567006][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1010.603980][ T783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.625239][ T783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.659079][ T783] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.685904][T21021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.693317][ T783] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1010.727340][ T783] usb 2-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 1010.780374][ T783] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 1010.802163][ T783] usb 2-1: Product: syz [ 1010.823663][ T783] usb 2-1: Manufacturer: syz [ 1010.845293][ T783] usb 2-1: SerialNumber: syz [ 1010.868679][ T783] usb 2-1: config 0 descriptor?? [ 1010.925057][T21021] veth0_vlan: entered promiscuous mode [ 1011.017043][T21164] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1011.089601][ T783] usb 2-1: USB disconnect, device number 53 [ 1011.250041][T14099] cdc_ncm 5-1:1.0: failed to get mac address [ 1011.274354][T14099] cdc_ncm 5-1:1.0: bind() failure [ 1011.285227][T14099] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1011.301451][T14099] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1011.311499][T14099] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1011.341965][T14099] usb 5-1: USB disconnect, device number 55 [ 1011.347217][T21021] veth1_vlan: entered promiscuous mode [ 1011.521762][T21021] veth0_macvtap: entered promiscuous mode [ 1011.550774][T21021] veth1_macvtap: entered promiscuous mode [ 1011.593017][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.611344][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.638237][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.652128][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.662253][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.675395][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.685562][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.712751][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.742864][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.753831][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.766265][T21021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.784627][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4381'. [ 1011.802532][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.843696][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.883423][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.904970][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.930448][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.941418][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.960983][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.978939][T21198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4381'. [ 1011.992230][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.002914][T21021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1012.014090][T21021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1012.081466][T21021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.109926][T21189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4381'. [ 1012.145605][T21021] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.166768][T21021] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.196165][T21021] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.245523][T21021] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.423114][T21204] rdma_rxe: rxe_newlink: failed to add lo [ 1012.547615][ T8436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.561294][ T8436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.672677][ T7113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.706126][ T7113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.888773][T21210] netlink: 'syz.1.4386': attribute type 4 has an invalid length. [ 1013.004019][T21208] loop1: detected capacity change from 0 to 8192 [ 1013.096906][T21208] loop1: p1 p2 p3 p4 [ 1013.123997][T21208] loop1: p1 size 108922248 extends beyond EOD, truncated [ 1013.138882][T21208] loop1: p2 start 861536256 is beyond EOD, truncated [ 1013.149207][T21208] loop1: p3 start 851968 is beyond EOD, truncated [ 1013.155978][T21208] loop1: p4 size 65536 extends beyond EOD, truncated [ 1013.409143][T17797] Bluetooth: hci3: unexpected event 0x09 length: 8 > 3 [ 1013.643799][T17797] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1013.667974][T21230] binder: 21229:21230 ioctl c0306201 0 returned -14 [ 1013.707606][T14064] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1013.982811][T21231] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4391'. [ 1014.166114][T21235] loop2: detected capacity change from 0 to 2048 [ 1014.220433][T14064] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 1014.594143][T14064] usb 4-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 1014.810426][T14064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 1014.832367][T14064] usb 4-1: Product: syz [ 1014.836607][T14064] usb 4-1: Manufacturer: syz [ 1014.842447][T14064] usb 4-1: SerialNumber: syz [ 1014.850485][T14064] usb 4-1: config 0 descriptor?? [ 1014.935796][ T4533] loop2: p1 < > p4 [ 1014.951013][ T4533] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1015.071801][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1015.095657][T20408] udevd[20408]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1015.116789][ T5136] usb 4-1: USB disconnect, device number 48 [ 1015.584339][T21247] rdma_rxe: rxe_newlink: failed to add lo [ 1016.077646][T21252] loop2: detected capacity change from 0 to 2048 [ 1016.742824][T21254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4397'. [ 1016.923969][ T4533] loop2: p1 < > p4 [ 1016.980949][ T4533] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1017.109656][T21260] loop4: detected capacity change from 0 to 8192 [ 1017.169910][T21269] netlink: 'syz.4.4401': attribute type 4 has an invalid length. [ 1017.213312][T21260] loop4: p1 p2 p3 p4 [ 1017.242625][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1017.253366][T21260] loop4: p1 size 108922248 extends beyond EOD, truncated [ 1017.264560][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1017.284640][T21266] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1017.318894][T21266] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1017.342760][T21260] loop4: p2 start 861536256 is beyond EOD, truncated [ 1017.355911][T21260] loop4: p3 start 851968 is beyond EOD, truncated [ 1017.406490][T21260] loop4: p4 size 65536 extends beyond EOD, truncated [ 1017.731653][T21281] loop2: detected capacity change from 0 to 2048 [ 1018.054689][T21281] loop2: p1 < > p4 [ 1018.081309][T21281] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1018.397340][ T4533] loop2: p1 < > p4 [ 1018.409520][ T4533] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1018.686893][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1018.699611][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1018.821770][T21021] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 1019.028972][T21297] loop0: detected capacity change from 0 to 1024 [ 1019.135635][T21297] hfsplus: invalid attributes max_key_len 768 [ 1019.143077][T21297] hfsplus: failed to load attributes file [ 1019.528816][T20303] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1019.643478][T20303] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1019.757992][T20303] Buffer I/O error on dev loop2p4, logical block 1, async page read [ 1019.877341][T21303] rdma_rxe: rxe_newlink: failed to add lo [ 1020.270977][T21311] loop2: detected capacity change from 0 to 2048 [ 1020.382043][T21311] loop2: p1 < > p4 [ 1020.467645][T21311] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1021.004657][T21310] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4410'. [ 1021.025121][ T4533] loop2: p1 < > p4 [ 1021.053735][T21310] netlink: zone id is out of range [ 1021.059211][T21310] netlink: zone id is out of range [ 1021.063911][ T4533] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1021.070204][T21310] netlink: zone id is out of range [ 1021.076548][T21310] netlink: zone id is out of range [ 1021.082102][T21310] netlink: zone id is out of range [ 1021.087259][T21310] netlink: zone id is out of range [ 1021.094276][T21310] netlink: zone id is out of range [ 1021.099854][T21310] netlink: zone id is out of range [ 1021.105106][T21310] netlink: zone id is out of range [ 1021.113435][T21310] netlink: zone id is out of range [ 1021.138166][T21312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4410'. [ 1021.198792][T21021] __loop_clr_fd: partition scan of loop2 failed (rc=-16) [ 1021.205619][T20303] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1021.227598][T20300] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1021.248009][T20303] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.257564][T20303] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1021.265812][T20303] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.277771][T20300] I/O error, dev loop2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.314025][T20303] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1021.320509][T20300] Buffer I/O error on dev loop2p4, logical block 1, async page read [ 1021.324777][T20303] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.343652][T20303] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1021.361183][T20303] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.377916][T20303] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1021.412704][T21326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4412'. [ 1021.424035][T20303] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1021.448426][T20303] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 1021.646152][T21330] loop1: detected capacity change from 0 to 256 [ 1021.686339][T21330] exfat: Deprecated parameter 'namecase' [ 1021.714144][T21330] exfat: Deprecated parameter 'namecase' [ 1021.744017][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1021.770325][T20298] udevd[20298]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1021.796480][T21333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4416'. [ 1021.804084][T21330] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1021.873439][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1021.896251][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1021.934167][T21330] tipc: Started in network mode [ 1021.946845][T21330] tipc: Node identity ffff000000a0ffffff00000000000001, cluster identity 4711 [ 1021.970321][T21330] tipc: Enabling of bearer rejected, failed to enable media [ 1022.027395][T21340] fuse: Bad value for 'fd' [ 1022.043459][T21330] fuse: Bad value for 'group_id' [ 1022.055746][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1022.055946][T20408] udevd[20408]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1022.322462][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1022.333517][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1022.384472][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4419'. [ 1022.408134][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4420'. [ 1022.414584][T21347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4419'. [ 1022.471969][T17586] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1022.517837][T21347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4419'. [ 1022.717468][T17586] usb 2-1: Using ep0 maxpacket: 16 [ 1022.729444][T17586] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1022.749378][T17586] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1022.789611][T17586] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1022.817515][T17586] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1022.838961][T17586] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 1022.848343][T17586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 1022.856386][T17586] usb 2-1: SerialNumber: syz [ 1022.880076][T17586] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1022.903730][T17586] usb-storage 2-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 1022.929362][T17586] scsi host1: usb-storage 2-1:1.0 [ 1023.147951][T17586] usb 2-1: USB disconnect, device number 54 [ 1023.495175][T21369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4426'. [ 1023.736457][T21354] loop2: detected capacity change from 0 to 32768 [ 1023.801363][T21376] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4429'. [ 1023.814691][T21376] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1023.987032][T21354] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 1024.052239][T21354] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 1024.150083][T21354] bcachefs (loop2): alloc_read... done [ 1024.156899][T21389] fuse: Bad value for 'fd' [ 1024.168526][T21354] bcachefs (loop2): stripes_read... done [ 1024.184261][T21354] bcachefs (loop2): snapshots_read... done [ 1024.237193][T21354] bcachefs (loop2): journal_replay... done [ 1024.293299][T21354] bcachefs (loop2): resume_logged_ops... done [ 1024.344230][T21354] bcachefs (loop2): going read-write [ 1024.389300][T21354] bcachefs (loop2): done starting filesystem [ 1024.420842][T21394] netlink: 'syz.3.4431': attribute type 3 has an invalid length. [ 1024.445942][T21394] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4431'. [ 1024.467371][T21397] 9pnet_fd: Insufficient options for proto=fd [ 1024.698620][T21021] bcachefs (loop2): shutting down [ 1024.735102][T21021] bcachefs (loop2): going read-only [ 1024.787684][T21021] bcachefs (loop2): finished waiting for writes to stop [ 1024.822064][T21021] bcachefs (loop2): flushing journal and stopping allocators, journal seq 13 [ 1024.884731][T21021] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 15 [ 1024.941968][T21021] bcachefs (loop2): shutdown complete, journal seq 16 [ 1024.952284][T21021] bcachefs (loop2): marking filesystem clean [ 1025.081621][T21021] bcachefs (loop2): shutdown complete [ 1025.635183][T21414] loop3: detected capacity change from 0 to 1024 [ 1026.379803][T21414] hfsplus: invalid attributes max_key_len 768 [ 1026.386436][T21414] hfsplus: failed to load attributes file [ 1026.467903][T20303] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1027.228572][T21404] loop4: detected capacity change from 0 to 40427 [ 1027.369781][T21404] F2FS-fs (loop4): invalid crc value [ 1027.435845][T21404] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1027.622884][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4444'. [ 1027.667880][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4444'. [ 1027.685399][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4443'. [ 1027.844303][T21432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4444'. [ 1027.868861][T21435] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1027.996361][T21435] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1028.128610][T21447] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.4447'. [ 1028.167600][T21447] net_ratelimit: 128 callbacks suppressed [ 1028.167625][T21447] netlink: zone id is out of range [ 1028.181586][T21449] netlink: 'syz.3.4448': attribute type 3 has an invalid length. [ 1028.208618][T21447] netlink: zone id is out of range [ 1028.213820][T21447] netlink: zone id is out of range [ 1028.227665][T21449] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4448'. [ 1028.261749][T21450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4447'. [ 1028.287707][T21447] netlink: zone id is out of range [ 1028.292911][T21447] netlink: zone id is out of range [ 1028.353049][T21447] netlink: zone id is out of range [ 1028.373541][T21447] netlink: zone id is out of range [ 1028.391198][T21447] netlink: zone id is out of range [ 1028.408240][T21453] netlink: 'syz.2.4449': attribute type 10 has an invalid length. [ 1028.408428][T21456] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1028.436177][T21447] netlink: zone id is out of range [ 1028.446118][T21447] netlink: zone id is out of range [ 1028.452418][T21453] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.460290][T21453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.500866][T21458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1028.566948][T21453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.574327][T21453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.581998][T21453] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.589339][T21453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.640722][T21453] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1028.697006][T21460] rdma_rxe: rxe_newlink: failed to add lo [ 1028.814859][T21462] vlan4: entered promiscuous mode [ 1028.857782][T21462] bond0: entered promiscuous mode [ 1028.878015][T21462] bond_slave_0: entered promiscuous mode [ 1028.899747][T21462] bond_slave_1: entered promiscuous mode [ 1028.926406][T21462] bond2: entered promiscuous mode [ 1028.955632][T21462] bond3: entered promiscuous mode [ 1028.994171][T21462] bond0: left promiscuous mode [ 1029.007736][T21462] bond_slave_0: left promiscuous mode [ 1029.029103][T21462] bond_slave_1: left promiscuous mode [ 1029.046508][T21462] bond2: left promiscuous mode [ 1029.066740][T21462] bond3: left promiscuous mode [ 1029.134441][ T783] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1029.335264][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 1029.367162][ T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1029.412318][ T783] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1029.457535][ T783] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1029.487877][ T783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.503667][ T783] usb 4-1: config 0 descriptor?? [ 1029.521112][T21464] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1029.966519][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1029.990506][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.007662][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.026206][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.059765][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.087818][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.106202][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.143456][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.159029][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.183631][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.197946][T21506] netlink: 'syz.0.4464': attribute type 29 has an invalid length. [ 1030.207558][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.240802][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.266929][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.287778][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.306216][ T783] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 1030.322197][ T783] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 1030.361879][ T783] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1030.408646][ T783] usb 4-1: USB disconnect, device number 49 [ 1030.421861][T21478] loop2: detected capacity change from 0 to 40427 [ 1030.463448][T21478] F2FS-fs (loop2): invalid crc value [ 1030.530178][T21478] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1030.692861][T21478] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1030.708291][T21489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1031.415254][T21528] loop1: detected capacity change from 0 to 2048 [ 1031.648197][T21528] loop1: p1 < > p4 [ 1031.665693][ T29] audit: type=1800 audit(1719288860.078:98): pid=21529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4465" name="bus" dev="sda1" ino=1941 res=0 errno=0 [ 1031.932556][T21528] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1032.186019][T21534] loop4: detected capacity change from 0 to 512 [ 1032.253083][T21535] syz0: rxe_newlink: already configured on lo [ 1032.269382][T21534] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1032.296775][T21534] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz.4.4472: corrupted in-inode xattr: bad e_name length [ 1032.376242][T21538] loop1: detected capacity change from 0 to 2048 [ 1032.400486][T21538] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1032.415805][T21538] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 1032.446474][T21534] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.4472: couldn't read orphan inode 15 (err -117) [ 1032.539090][T21534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1032.645429][T21538] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1032.659663][T21534] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.734892][T21538] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1032.800483][T21538] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 1032.825050][T21538] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 1033.047760][T16352] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1033.068434][T21538] loop1: detected capacity change from 0 to 164 [ 1033.401370][T16352] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.507318][T21561] netlink: 'syz.2.4479': attribute type 29 has an invalid length. [ 1033.517967][T16352] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1033.565185][T16352] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1033.575734][T16352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.657021][T16352] usb 4-1: Product: syz [ 1033.692551][T16352] usb 4-1: Manufacturer: syz [ 1033.758417][T16352] usb 4-1: SerialNumber: syz [ 1034.103833][T21546] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1034.401488][T21546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.418177][T21546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.454475][T21548] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1034.828920][T21579] loop2: detected capacity change from 0 to 1024 [ 1034.839814][T21546] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1034.868541][T21314] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1034.937586][T21579] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 1034.987649][T21579] System zones: 0-1, 3-12 [ 1035.035102][T21579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.065956][T16352] cdc_ncm 4-1:1.0: failed to get mac address [ 1035.077068][T16352] cdc_ncm 4-1:1.0: bind() failure [ 1035.092261][T16352] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1035.101971][T16352] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1035.122420][T16352] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 1035.143673][T16352] usb 4-1: USB disconnect, device number 50 [ 1035.175981][T21584] __nla_validate_parse: 2 callbacks suppressed [ 1035.176007][T21584] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4483'. [ 1035.229992][T21584] net_ratelimit: 242 callbacks suppressed [ 1035.230019][T21584] netlink: zone id is out of range [ 1035.318488][T21588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4483'. [ 1035.372880][T21584] netlink: zone id is out of range [ 1035.448223][T21584] netlink: zone id is out of range [ 1035.481210][T21584] netlink: zone id is out of range [ 1035.498522][T21584] netlink: zone id is out of range [ 1036.021669][T21584] netlink: zone id is out of range [ 1036.242812][T21584] netlink: zone id is out of range [ 1036.292627][T21584] netlink: zone id is out of range [ 1036.301131][T21584] netlink: zone id is out of range [ 1036.377938][T21584] netlink: zone id is out of range [ 1036.490861][T21021] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.607136][T21598] loop0: detected capacity change from 0 to 1024 [ 1036.723869][T17797] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1036.743011][T21602] binder: 21600:21602 ioctl c0306201 0 returned -14 [ 1036.886619][T21605] xt_hashlimit: overflow, try lower: 0/0 [ 1036.901854][T21605] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4487'. [ 1037.075237][T21609] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4490'. [ 1037.101151][T21609] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1037.276453][T21611] loop1: detected capacity change from 0 to 2048 [ 1037.469643][T21611] loop1: p1 < > p4 [ 1037.475031][T21611] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1037.512019][ T29] audit: type=1800 audit(1719288865.988:99): pid=21587 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.4482" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 1037.524139][T21615] netlink: 'syz.3.4491': attribute type 29 has an invalid length. [ 1037.574432][ T4533] loop1: p1 < > p4 [ 1037.588635][ T4533] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1037.748046][T21618] loop2: detected capacity change from 0 to 2048 [ 1037.841921][T21618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.378149][T21639] lo speed is unknown, defaulting to 1000 [ 1039.404632][ T29] audit: type=1804 audit(1719288867.868:100): pid=21640 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.4495" name="/root/syzkaller.7RqE4F/30/bus" dev="sda1" ino=1961 res=1 errno=0 [ 1039.583913][T18141] hfsplus: b-tree write err: -5, ino 4 [ 1040.174070][T21653] loop1: detected capacity change from 0 to 1024 [ 1040.232567][T21653] hfsplus: invalid attributes max_key_len 768 [ 1040.240033][T21653] hfsplus: failed to load attributes file [ 1041.020664][T21021] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.321632][T21665] netlink: 'syz.1.4502': attribute type 10 has an invalid length. [ 1041.355753][T21665] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.363853][T21665] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.415062][T21665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.422409][T21665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.430044][T21665] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.437288][T21665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.459438][T21671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4500'. [ 1041.502698][T21665] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1041.536057][T21670] lo speed is unknown, defaulting to 1000 [ 1041.627553][ T5081] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1041.839747][ T5081] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.861734][ T5081] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1041.890196][ T5081] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1041.918026][ T5081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.927529][ T5081] usb 4-1: Product: syz [ 1041.931763][ T5081] usb 4-1: Manufacturer: syz [ 1041.936401][ T5081] usb 4-1: SerialNumber: syz [ 1042.215162][T21668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1042.379848][T21674] loop4: detected capacity change from 0 to 32768 [ 1042.533736][T21674] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 1042.546381][T21676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1042.551247][T21674] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 1042.627928][T21674] bcachefs (loop4): alloc_read... done [ 1042.652017][T21674] bcachefs (loop4): stripes_read... done [ 1042.663518][T21674] bcachefs (loop4): snapshots_read... done [ 1042.675723][T21674] bcachefs (loop4): journal_replay... done [ 1042.685036][T21674] bcachefs (loop4): resume_logged_ops... done [ 1042.702277][T21674] bcachefs (loop4): going read-write [ 1042.733801][T21674] bcachefs (loop4): done starting filesystem [ 1042.848879][T21668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1042.923164][T21706] loop1: detected capacity change from 0 to 1024 [ 1043.015959][T20839] bcachefs (loop4): shutting down [ 1043.032332][T20839] bcachefs (loop4): going read-only [ 1043.039715][T20839] bcachefs (loop4): finished waiting for writes to stop [ 1043.062192][ T5081] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1043.078425][ T5081] cdc_ncm 4-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 1043.108554][T20839] bcachefs (loop4): flushing journal and stopping allocators, journal seq 13 [ 1043.142109][ T5081] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1043.147787][T20839] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 16 [ 1043.149685][T20839] bcachefs (loop4): shutdown complete, journal seq 17 [ 1043.150675][T20839] bcachefs (loop4): marking filesystem clean [ 1043.226324][T20839] bcachefs (loop4): shutdown complete [ 1043.262213][ T5081] cdc_ncm 4-1:1.0: setting tx_max = 28 [ 1043.300333][ T5081] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1043.334788][ T5081] usb 4-1: USB disconnect, device number 51 [ 1043.337668][T15575] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1043.354178][ T5081] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 1043.517845][T21709] loop2: detected capacity change from 0 to 2048 [ 1043.549822][T15575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1043.580030][T15575] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 1043.596927][T21709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.617662][T15575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.646508][T15575] usb 2-1: config 0 descriptor?? [ 1043.908076][T15575] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1045.493543][T20300] udevd[20300]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1046.180175][T21725] lo speed is unknown, defaulting to 1000 [ 1046.213044][T21734] loop0: detected capacity change from 0 to 2048 [ 1046.304485][ T29] audit: type=1804 audit(1719288874.778:101): pid=21727 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.4513" name="/root/syzkaller.7RqE4F/34/bus" dev="sda1" ino=1965 res=1 errno=0 [ 1046.332182][T21734] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1046.352428][T21734] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 1046.394529][T21734] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1046.491372][T21734] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1046.530636][T21734] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 1046.542288][T21734] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 1046.696286][T21734] loop0: detected capacity change from 0 to 164 [ 1047.799679][T21021] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.835737][T14099] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1049.210938][T14099] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.484228][T14099] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1049.579770][T14099] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1049.627149][T14099] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.689513][T14099] usb 3-1: Product: syz [ 1049.709122][T14099] usb 3-1: Manufacturer: syz [ 1049.722045][T14099] usb 3-1: SerialNumber: syz [ 1049.989719][T21747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1050.033954][T21762] lo speed is unknown, defaulting to 1000 [ 1050.060082][T18141] hfsplus: b-tree write err: -5, ino 4 [ 1050.066539][T14064] usb 2-1: USB disconnect, device number 55 [ 1050.249221][T21747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.291077][T21747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.397010][T21775] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4522'. [ 1050.432933][T21775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1050.627708][T21754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1050.756027][T21747] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1050.997481][T14099] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1051.017086][T14099] cdc_ncm 3-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 1051.085193][T14099] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1051.108175][T21790] loop1: detected capacity change from 0 to 2048 [ 1051.265520][T14099] cdc_ncm 3-1:1.0: setting tx_max = 28 [ 1051.281436][T21790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.305780][T14099] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1051.325070][T14099] usb 3-1: USB disconnect, device number 63 [ 1051.346695][T14099] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1052.780984][ T5136] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1053.161536][ T5136] usb 4-1: config 253 has an invalid interface number: 174 but max is 1 [ 1053.230302][ T5136] usb 4-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.355015][ T5136] usb 4-1: config 253 has 1 interface, different from the descriptor's value: 2 [ 1053.460986][ T5136] usb 4-1: config 253 has no interface number 0 [ 1053.514594][ T5136] usb 4-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1053.609437][ T5136] usb 4-1: config 253 interface 174 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1053.712036][ T5136] usb 4-1: config 253 interface 174 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1053.818892][ T5136] usb 4-1: config 253 interface 174 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 1053.882500][ T5136] usb 4-1: config 253 interface 174 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 1053.950336][ T5136] usb 4-1: config 253 interface 174 has no altsetting 0 [ 1053.961770][T21822] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4531'. [ 1053.970660][ T5136] usb 4-1: New USB device found, idVendor=0a5c, idProduct=7b01, bcdDevice=1f.5e [ 1053.995581][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.996433][T21815] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1054.296934][T20465] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1054.687163][T21827] loop4: detected capacity change from 0 to 2048 [ 1054.721509][T21837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4535'. [ 1054.739327][T21827] loop4: p1 < > p4 [ 1054.745375][T21827] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1054.772550][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.786225][ T5136] usb 4-1: string descriptor 0 read error: -71 [ 1054.796299][T21829] lo speed is unknown, defaulting to 1000 [ 1054.798717][ T5136] usb 4-1: USB disconnect, device number 52 [ 1055.357798][ T25] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1055.414343][ T5136] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1055.564794][ T25] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 1055.620874][ T25] usb 2-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 1055.645931][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 1055.647945][ T5136] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.670328][ T25] usb 2-1: Product: syz [ 1055.675110][ T25] usb 2-1: Manufacturer: syz [ 1055.687538][ T25] usb 2-1: SerialNumber: syz [ 1055.702559][ T5136] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1055.724518][ T25] usb 2-1: config 0 descriptor?? [ 1055.742741][ T5136] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1055.785088][ T5136] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1055.796889][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.823912][ T5136] usb 4-1: Product: syz [ 1055.824969][T21856] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.4539'. [ 1055.828551][ T5136] usb 4-1: Manufacturer: syz [ 1055.828584][ T5136] usb 4-1: SerialNumber: syz [ 1055.860834][T21856] net_ratelimit: 116 callbacks suppressed [ 1055.860856][T21856] netlink: zone id is out of range [ 1055.872230][T21856] netlink: zone id is out of range [ 1055.878044][T21856] netlink: zone id is out of range [ 1055.883558][T21856] netlink: zone id is out of range [ 1055.889262][T21856] netlink: zone id is out of range [ 1055.894712][T21856] netlink: zone id is out of range [ 1055.900136][T21856] netlink: zone id is out of range [ 1055.905812][T21856] netlink: zone id is out of range [ 1055.911554][T21856] netlink: zone id is out of range [ 1055.925628][T21857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4539'. [ 1055.937622][T21856] netlink: zone id is out of range [ 1055.953905][ T784] usb 2-1: USB disconnect, device number 56 [ 1056.202369][T21859] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1056.268998][T21859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1056.515827][ T5136] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1056.539383][ T5136] cdc_ncm 4-1:1.0: bind() failure [ 1056.570289][ T5136] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1056.595573][ T5136] cdc_ncm 4-1:1.1: bind() failure [ 1056.634070][ T5136] usb 4-1: USB disconnect, device number 53 [ 1056.732117][T21871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4544'. [ 1057.030226][T21880] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4546'. [ 1057.060688][T21875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1057.212768][T21881] loop2: detected capacity change from 0 to 2048 [ 1057.275058][T21881] loop2: p1 < > p4 [ 1057.282712][T21881] loop2: p4 size 8388608 extends beyond EOD, truncated [ 1057.519953][T21888] netlink: 'syz.1.4549': attribute type 4 has an invalid length. [ 1057.771251][T21893] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4553'. [ 1057.803130][T21884] loop1: detected capacity change from 0 to 8192 [ 1057.977829][T21884] loop1: p1 p2 p3 p4 [ 1058.018017][T21893] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1058.082872][T21884] loop1: p1 size 108922248 extends beyond EOD, truncated [ 1058.374819][T21884] loop1: p2 start 861536256 is beyond EOD, truncated [ 1058.457817][T21884] loop1: p3 start 851968 is beyond EOD, truncated [ 1058.484692][T21884] loop1: p4 size 65536 extends beyond EOD, truncated [ 1058.535083][T21900] syzkaller0: entered promiscuous mode [ 1058.568824][T21900] syzkaller0: entered allmulticast mode [ 1058.728516][T20465] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 1058.730841][T20300] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1058.745198][T20303] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1058.783162][T20300] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1058.798336][T20303] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1058.815412][T20300] Buffer I/O error on dev loop1p4, logical block 1008, async page read [ 1058.835982][T20303] Buffer I/O error on dev loop1p1, logical block 1008, async page read [ 1058.989479][T21918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4558'. [ 1060.201331][T21931] netlink: 'syz.2.4562': attribute type 10 has an invalid length. [ 1060.315588][T21933] loop0: detected capacity change from 0 to 1024 [ 1060.323333][T21931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.331017][T21931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.448551][T21933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 1060.479930][T21933] System zones: 0-1, 3-12 [ 1060.618382][T21933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1060.916599][T19977] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1060.940235][T19977] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1060.952961][T19977] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1061.080000][T19977] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1061.092488][T19977] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1061.101353][T19977] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1061.568677][T21948] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4567'. [ 1061.733522][T21960] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1061.788467][T13694] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.956576][T18140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.158456][ T5136] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1062.213759][T18140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.260931][T21950] lo speed is unknown, defaulting to 1000 [ 1062.364257][ T5136] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.419236][ T5136] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1062.442503][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4571'. [ 1062.464451][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1062.478897][T18140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.515957][ T5136] usb 2-1: SerialNumber: syz [ 1062.559831][ T5136] cdc_ether 2-1:1.0: skipping garbage [ 1062.559880][T21970] syzkaller0: entered promiscuous mode [ 1062.582206][ T5136] usb 2-1: bad CDC descriptors [ 1062.587605][T21970] syzkaller0: entered allmulticast mode [ 1062.725923][T18140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.782828][ T5081] usb 2-1: USB disconnect, device number 57 [ 1063.383439][T18140] bridge_slave_1: left allmulticast mode [ 1063.397856][T18140] bridge_slave_1: left promiscuous mode [ 1063.413342][T21985] loop2: detected capacity change from 0 to 1024 [ 1063.427937][T18140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.444332][T18140] bridge_slave_0: left allmulticast mode [ 1063.460179][T18140] bridge_slave_0: left promiscuous mode [ 1063.489232][T18140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.516181][T21985] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 1063.538992][T21985] System zones: 0-1, 3-12 [ 1063.555238][T21985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1063.712127][T21992] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1064.459300][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4575'. [ 1064.731500][T21021] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.179297][T22022] loop1: detected capacity change from 0 to 256 [ 1065.207039][T22026] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4580'. [ 1065.229804][T22022] FAT-fs (loop1): bogus logical sector size 0 [ 1065.235951][T22022] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1065.346484][T22028] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1065.972159][T18140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.995777][T18140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.012476][T18140] bond0 (unregistering): Released all slaves [ 1066.211394][T21950] chnl_net:caif_netlink_parms(): no params data found [ 1066.404507][T22046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1066.517831][T22043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4582'. [ 1066.548710][T22051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1066.612720][T22053] net_ratelimit: 116 callbacks suppressed [ 1066.612748][T22053] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 1066.650557][T22046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1066.663256][T22053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1066.709711][T22053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4585'. [ 1067.072886][T22069] lo speed is unknown, defaulting to 1000 [ 1067.137204][T21950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.152037][T21950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.170371][T21950] bridge_slave_0: entered allmulticast mode [ 1067.191173][T21950] bridge_slave_0: entered promiscuous mode [ 1067.228922][T21950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.256760][T21950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.281855][T21950] bridge_slave_1: entered allmulticast mode [ 1067.290424][T21950] bridge_slave_1: entered promiscuous mode [ 1067.518641][T21950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.566713][T22079] vlan2: entered promiscuous mode [ 1067.587698][T22079] bond0: entered promiscuous mode [ 1067.593010][T22079] bond_slave_0: entered promiscuous mode [ 1067.621485][T22079] bond_slave_1: entered promiscuous mode [ 1067.637700][T22079] bridge0: entered promiscuous mode [ 1067.650827][T22079] bond0: left promiscuous mode [ 1067.661524][T22079] bond_slave_0: left promiscuous mode [ 1067.674168][T22079] bond_slave_1: left promiscuous mode [ 1067.686551][T22079] bridge0: left promiscuous mode [ 1067.845907][T22067] loop1: detected capacity change from 0 to 32768 [ 1067.854051][T21950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.874290][T22067] XFS: ikeep mount option is deprecated. [ 1067.952223][T22067] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1068.091089][T18140] hsr_slave_0: left promiscuous mode [ 1068.105984][T22067] XFS (loop1): Ending clean mount [ 1068.118581][T18140] hsr_slave_1: left promiscuous mode [ 1068.119855][T22067] XFS (loop1): Quotacheck needed: Please wait. [ 1068.141181][T18140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.150616][T18140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.174027][T18140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.182253][T18140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.255125][T22067] XFS (loop1): Quotacheck: Done. [ 1068.264982][T18140] veth1_macvtap: left promiscuous mode [ 1068.270939][T18140] veth0_macvtap: left promiscuous mode [ 1068.279113][T18140] veth1_vlan: left promiscuous mode [ 1068.284507][T18140] veth0_vlan: left promiscuous mode [ 1068.484699][T20465] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1069.341621][T22097] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4592'. [ 1069.416340][T22098] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1069.436287][T18140] team0 (unregistering): Port device team_slave_1 removed [ 1069.517873][T18140] team0 (unregistering): Port device team_slave_0 removed [ 1070.432614][T21950] team0: Port device team_slave_0 added [ 1070.445460][T21950] team0: Port device team_slave_1 added [ 1070.659244][T22103] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4593'. [ 1070.740041][T21950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.767261][T21950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.849271][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4596'. [ 1070.870692][T21950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.910483][T21950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.927717][T21950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.965817][T21950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.992477][T22117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4596'. [ 1071.169337][T22111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4596'. [ 1071.242636][T22121] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4598'. [ 1071.349764][T22124] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1071.577050][T21950] hsr_slave_0: entered promiscuous mode [ 1071.609075][T21950] hsr_slave_1: entered promiscuous mode [ 1071.930546][T22106] loop2: detected capacity change from 0 to 32768 [ 1072.145406][T22106] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 1072.212890][T22106] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 1072.326334][T22106] bcachefs (loop2): alloc_read... done [ 1072.338577][T22106] bcachefs (loop2): stripes_read... done [ 1072.345941][T22106] bcachefs (loop2): snapshots_read... done [ 1072.357724][ T5136] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1072.359614][T22106] bcachefs (loop2): journal_replay... done [ 1072.372145][T22106] bcachefs (loop2): resume_logged_ops... done [ 1072.385626][T22106] bcachefs (loop2): going read-write [ 1072.404893][T22106] bcachefs (loop2): done starting filesystem [ 1072.557507][ T5136] usb 2-1: Using ep0 maxpacket: 8 [ 1072.569981][ T5136] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1072.583106][ T5136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.598761][ T5136] usb 2-1: config 0 has no interface number 0 [ 1072.604612][T21021] bcachefs (loop2): shutting down [ 1072.604988][ T5136] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1072.623076][ T5136] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1072.632295][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.646186][T21021] bcachefs (loop2): going read-only [ 1072.656932][ T5136] usb 2-1: config 0 descriptor?? [ 1072.665379][T21021] bcachefs (loop2): finished waiting for writes to stop [ 1072.682982][ T5136] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 1072.695661][T21021] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 1072.725767][T21021] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 1072.752698][T21021] bcachefs (loop2): shutdown complete, journal seq 14 [ 1072.760508][T21021] bcachefs (loop2): marking filesystem clean [ 1072.835937][T21021] bcachefs (loop2): shutdown complete [ 1072.897214][T16352] usb 2-1: USB disconnect, device number 58 [ 1073.155410][T21950] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1073.194970][T21950] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1073.235689][T21950] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1073.283761][T21950] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1073.558854][T21950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1073.662236][T21950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.725080][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.732398][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.784417][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1073.801202][T22178] loop1: detected capacity change from 0 to 1024 [ 1073.815428][T14099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.822686][T14099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1073.890806][T22179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1073.947835][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4608'. [ 1074.176948][T15575] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1074.252676][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4610'. [ 1074.379891][T15575] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1074.408305][T15575] usb 2-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 1074.454456][T15575] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.497197][T15575] usb 2-1: config 0 descriptor?? [ 1074.570009][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4604'. [ 1074.591271][T21950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.605954][T15575] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1074.771148][T20303] udevd[20303]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1075.089419][T22208] vlan2: entered promiscuous mode [ 1075.182218][T22208] bond0: entered promiscuous mode [ 1075.201261][T22208] bond_slave_0: entered promiscuous mode [ 1075.239856][T22208] bond_slave_1: entered promiscuous mode [ 1075.294072][T22208] bridge0: entered promiscuous mode [ 1075.340616][T22208] bond0: left promiscuous mode [ 1075.345471][T22208] bond_slave_0: left promiscuous mode [ 1075.399546][T22208] bond_slave_1: left promiscuous mode [ 1075.421101][T22208] bridge0: left promiscuous mode [ 1075.534062][T22222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4616'. [ 1075.982497][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4619'. [ 1076.005267][T21950] veth0_vlan: entered promiscuous mode [ 1076.050974][T21950] veth1_vlan: entered promiscuous mode [ 1076.077933][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4619'. [ 1076.314026][T22233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4619'. [ 1077.188808][T21950] veth0_macvtap: entered promiscuous mode [ 1077.255322][T21950] veth1_macvtap: entered promiscuous mode [ 1077.367540][ T5136] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1077.388548][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.426923][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.467294][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.481695][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.492430][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.504444][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.522837][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.534514][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.548138][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.560362][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.581925][T21950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.589172][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 1077.589218][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 1077.589250][ T5136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1077.589298][ T5136] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1077.589327][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.629643][ T5136] usb 4-1: config 0 descriptor?? [ 1077.641843][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.678119][T22243] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1077.724726][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.750834][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.772938][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.787252][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.835143][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.870028][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.899425][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.917155][T21950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.936244][T21950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.982362][T21950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.066556][T21950] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.081308][T21950] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.091333][T21950] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.101673][T21950] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.119088][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.138808][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.188411][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.196411][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.204375][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.212081][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.219656][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.227418][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.235035][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.283646][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.314925][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.360912][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.417560][ T5136] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 1078.438547][ T5136] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 1078.501268][ T8430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.513579][ T5136] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1078.533962][ T8430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.572431][ T5136] usb 4-1: USB disconnect, device number 54 [ 1078.666330][ T8430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.694852][ T8430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1080.051858][T22277] loop3: detected capacity change from 0 to 1024 [ 1080.107217][T16352] usb 2-1: USB disconnect, device number 59 [ 1080.127329][ T8436] hfsplus: b-tree write err: -5, ino 4 [ 1080.206441][T22277] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 1080.232759][T22277] System zones: 0-1, 3-12 [ 1080.269185][T22277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1080.522053][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4632'. [ 1080.576572][T22295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4632'. [ 1080.703014][T22301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4632'. [ 1081.518365][T15575] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1081.547173][T20517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1081.735361][T15575] usb 2-1: too many configurations: 248, using maximum allowed: 8 [ 1081.769383][T15575] usb 2-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 1081.818926][T15575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 1081.854722][T15575] usb 2-1: Product: syz [ 1081.873413][T15575] usb 2-1: Manufacturer: syz [ 1081.891438][T15575] usb 2-1: SerialNumber: syz [ 1081.922003][T15575] usb 2-1: config 0 descriptor?? [ 1081.942527][T22323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4636'. [ 1082.160101][T15575] usb 2-1: USB disconnect, device number 60 [ 1082.380730][T22333] netlink: 143976 bytes leftover after parsing attributes in process `syz.3.4638'. [ 1082.429964][T22333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4638'. [ 1082.726196][T22314] loop4: detected capacity change from 0 to 32768 [ 1082.771410][T22314] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4635 (22314) [ 1082.944157][T22314] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1082.986844][T22314] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1083.006783][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4645'. [ 1083.022622][T22314] BTRFS info (device loop4): using free-space-tree [ 1083.043451][T22354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4645'. [ 1083.209449][T22369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4645'. [ 1083.229229][T15575] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1083.401111][T22335] loop2: detected capacity change from 0 to 32768 [ 1083.404979][T22314] BTRFS info (device loop4): rebuilding free space tree [ 1083.420044][T22335] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4639 (22335) [ 1083.471413][T15575] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.495295][T22335] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1083.519646][T15575] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1083.543603][T22335] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1083.589802][T15575] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1083.605853][T22335] BTRFS info (device loop2): using free-space-tree [ 1083.624707][T15575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.651126][T15575] usb 2-1: Product: syz [ 1083.655614][T15575] usb 2-1: Manufacturer: syz [ 1083.662916][T15575] usb 2-1: SerialNumber: syz [ 1083.917924][T22351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1084.082652][T21950] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1084.148130][T22402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4647'. [ 1084.228528][T22351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.250431][T22351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.333361][T21021] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1084.762275][T22351] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1085.014512][T15575] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1085.039502][T15575] cdc_ncm 2-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 1085.065643][T15575] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1085.117656][ T25] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1085.220236][T15575] cdc_ncm 2-1:1.0: setting tx_max = 28 [ 1085.268087][T15575] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1085.315438][T15575] usb 2-1: USB disconnect, device number 61 [ 1085.332638][ T25] usb 4-1: too many configurations: 248, using maximum allowed: 8 [ 1085.351420][T15575] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1085.403944][ T25] usb 4-1: New USB device found, idVendor=19d2, idProduct=75bc, bcdDevice=9b.81 [ 1085.445068][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=197 [ 1085.482596][ T25] usb 4-1: Product: syz [ 1085.489529][ T25] usb 4-1: Manufacturer: syz [ 1085.540919][ T25] usb 4-1: SerialNumber: syz [ 1085.568711][ T25] usb 4-1: config 0 descriptor?? [ 1085.832286][ T25] usb 4-1: USB disconnect, device number 55 [ 1085.857711][T22450] __nla_validate_parse: 1 callbacks suppressed [ 1085.857732][T22450] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4656'. [ 1086.349272][T22461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4661'. [ 1086.430089][T22466] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4662'. [ 1087.241000][T22490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'. [ 1087.577855][T17797] Bluetooth: hci1: command 0x0406 tx timeout [ 1087.690401][T22502] netlink: 'syz.4.4672': attribute type 3 has an invalid length. [ 1087.745222][T22502] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.4672'. [ 1088.790709][T22526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4679'. [ 1089.006702][T22534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4682'. [ 1089.313909][T22537] loop4: detected capacity change from 0 to 1764 [ 1090.403746][T22572] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1090.437884][T22544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1091.018027][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4694'. [ 1091.073978][T22583] loop1: detected capacity change from 0 to 2048 [ 1091.204553][T22583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1091.360274][T22585] loop2: detected capacity change from 0 to 8192 [ 1092.758421][T19977] Bluetooth: hci4: command 0x0406 tx timeout [ 1092.905147][ T4533] loop2: p1 p2 p3 p4 [ 1092.935793][ T4533] loop2: p1 size 108922248 extends beyond EOD, truncated [ 1093.026986][ T4533] loop2: p2 start 861536256 is beyond EOD, truncated [ 1093.087812][ T4533] loop2: p3 start 851968 is beyond EOD, truncated [ 1093.152504][ T4533] loop2: p4 size 65536 extends beyond EOD, truncated [ 1093.725824][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1093.737504][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 1093.779892][T22608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4701'. [ 1094.120803][T20465] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.181552][T22615] loop2: detected capacity change from 0 to 1764 [ 1094.373567][T22622] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1094.797668][T22631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4706'. [ 1095.146288][T22640] loop2: detected capacity change from 0 to 1024 [ 1095.221899][T22640] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 1095.236311][T22640] System zones: 0-1, 3-12 [ 1095.250046][T22640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.329058][T22638] loop3: detected capacity change from 0 to 8192 [ 1095.499110][T22638] loop3: p1 p2 p3 p4 [ 1095.504774][T22638] loop3: p1 size 108922248 extends beyond EOD, truncated [ 1096.177599][T22591] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 1096.196094][T22638] loop3: p2 start 861536256 is beyond EOD, truncated [ 1096.243216][T22638] loop3: p3 start 851968 is beyond EOD, truncated [ 1096.283213][T21021] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1096.313080][T22638] loop3: p4 size 65536 extends beyond EOD, truncated [ 1096.484474][T20303] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1096.484561][T20517] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 1096.525295][T20303] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1096.547685][T20300] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1096.548266][T20303] Buffer I/O error on dev loop3p1, logical block 1008, async page read [ 1096.573103][T20300] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1096.621148][T20300] Buffer I/O error on dev loop3p4, logical block 1008, async page read [ 1096.668611][T17797] Bluetooth: hci1: unexpected event 0x09 length: 8 > 3 [ 1096.753300][T22635] loop4: detected capacity change from 0 to 32768 [ 1097.075293][T22671] vxlan0: left promiscuous mode [ 1097.083102][T22671] vxlan0: left allmulticast mode [ 1097.093972][T22671] bond1: left promiscuous mode [ 1097.105015][T22671] bond1: left allmulticast mode [ 1097.450740][T22635] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 1097.539963][T22635] bcachefs (loop4): recovering from clean shutdown, journal seq 10 [ 1097.615268][T22635] bcachefs (loop4): alloc_read... done [ 1097.642968][T22635] bcachefs (loop4): stripes_read... done [ 1097.689170][T22635] bcachefs (loop4): snapshots_read... done [ 1097.729991][T22635] bcachefs (loop4): journal_replay... done [ 1097.735924][T22635] bcachefs (loop4): resume_logged_ops... done [ 1097.773506][T22681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4719'. [ 1097.831778][T22635] bcachefs (loop4): going read-write [ 1097.858837][T22635] bcachefs (loop4): bch2_rebalance_start(): error creating rebalance thread EINTR [ 1097.889342][T22635] bcachefs (loop4): error starting rebalance thread [ 1097.930342][T22635] bcachefs (loop4): going read-only [ 1097.968316][T22635] bcachefs (loop4): finished waiting for writes to stop [ 1097.989562][T22635] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10 [ 1098.008864][T22635] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10 [ 1098.066747][T22635] bcachefs (loop4): shutdown complete, journal seq 11 [ 1098.146104][T22635] bcachefs (loop4): marking filesystem clean [ 1098.187199][T22635] bcachefs (loop4): bch2_fs_start(): error starting filesystem EINTR [ 1098.198924][T22635] bcachefs (loop4): shutting down [ 1098.305814][T22635] bcachefs (loop4): shutdown complete [ 1098.570459][T22688] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4721'. [ 1098.605718][T22688] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1099.023128][T22695] loop2: detected capacity change from 0 to 2048 [ 1099.093522][T22695] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.4723: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 1099.139423][T22695] EXT4-fs (loop2): get root inode failed [ 1099.145154][T22695] EXT4-fs (loop2): mount failed [ 1100.004144][T22707] loop2: detected capacity change from 0 to 2048 [ 1100.051616][T22701] loop3: detected capacity change from 0 to 8192 [ 1100.719342][T22707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1100.753974][T22701] loop3: p1 p2 p3 p4 [ 1100.762446][T22701] loop3: p1 size 108922248 extends beyond EOD, truncated [ 1100.834133][T22701] loop3: p2 start 861536256 is beyond EOD, truncated [ 1100.863014][T22701] loop3: p3 start 851968 is beyond EOD, truncated [ 1100.889558][T22701] loop3: p4 size 65536 extends beyond EOD, truncated [ 1101.100760][ T8443] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1101.177971][ T8443] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 6 with error 28 [ 1101.181435][T22714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4728'. [ 1101.223021][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 1101.224353][ T8443] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1101.224353][ T8443] [ 1101.239298][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 1101.294464][ T8443] EXT4-fs (loop2): Total free blocks count 0 [ 1101.317709][ T8443] EXT4-fs (loop2): Free/Dirty block details [ 1101.323783][ T8443] EXT4-fs (loop2): free_blocks=2415919104 [ 1101.377529][ T8443] EXT4-fs (loop2): dirty_blocks=16 [ 1101.382727][ T8443] EXT4-fs (loop2): Block reservation details [ 1101.416840][ T8443] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 1101.440857][T21021] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1101.469567][T22721] loop4: detected capacity change from 0 to 1024 [ 1101.621041][T22721] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 1101.636411][T22721] System zones: 0-1, 3-12 [ 1101.643035][T22721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1101.952926][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4733'. [ 1103.054013][T21950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1103.411165][T22751] loop4: detected capacity change from 0 to 1024 [ 1103.498089][T22751] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040e01c, mo2=0002] [ 1103.552789][T22751] System zones: 0-1, 3-12 [ 1103.595269][T22751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1103.991172][T22755] loop1: detected capacity change from 0 to 8192 [ 1104.247477][T22755] loop1: p1 p2 p3 p4 [ 1104.479393][T22755] loop1: p1 size 108922248 extends beyond EOD, truncated [ 1104.543308][T22755] loop1: p2 start 861536256 is beyond EOD, truncated [ 1104.619433][T22755] loop1: p3 start 851968 is beyond EOD, truncated [ 1104.625978][T22755] loop1: p4 size 65536 extends beyond EOD, truncated [ 1104.803829][T22750] loop0: detected capacity change from 0 to 32768 [ 1104.817600][T22750] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.4738 (22750) [ 1104.831648][T21950] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1104.874920][T22750] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1104.907898][T20300] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1104.907943][T20465] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 1104.927325][T22750] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 1104.937821][T20300] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1104.940237][T20303] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1104.958643][T20300] Buffer I/O error on dev loop1p4, logical block 1008, async page read [ 1104.977515][T22750] BTRFS info (device loop0): using free-space-tree [ 1104.990322][T17583] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1105.007748][T20303] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1105.017306][T20303] Buffer I/O error on dev loop1p1, logical block 1008, async page read [ 1105.189678][T17583] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1105.212672][T22750] BTRFS info (device loop0): rebuilding free space tree [ 1105.224022][T22747] loop3: detected capacity change from 0 to 32768 [ 1105.246783][T20300] udevd[20300]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1105.260956][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1105.277465][T17583] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1105.316642][T17583] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1105.354093][T17583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.379820][T17583] usb 3-1: Product: syz [ 1105.398028][T17583] usb 3-1: Manufacturer: syz [ 1105.415569][T17583] usb 3-1: SerialNumber: syz [ 1105.492496][T13694] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1105.583207][T21707] udevd[21707]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1105.638759][T22747] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=zstd,nojournal_transaction_names [ 1105.638946][T20303] udevd[20303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1105.667077][T22747] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 1105.723677][T22767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1105.786846][T22747] bcachefs (loop3): alloc_read... done [ 1105.820833][T22747] bcachefs (loop3): stripes_read... done [ 1105.834201][T22747] bcachefs (loop3): snapshots_read... done [ 1105.859731][T22747] bcachefs (loop3): journal_replay... done [ 1105.876241][T22747] bcachefs (loop3): resume_logged_ops... done [ 1105.943399][T22747] bcachefs (loop3): going read-write [ 1106.029735][T22747] bcachefs (loop3): done starting filesystem [ 1106.056619][T22767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.107024][T22767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.155389][T22808] Driver unsupported XDP return value 0 on prog (id 653) dev N/A, expect packet loss! [ 1106.234750][T20517] bcachefs (loop3): shutting down [ 1106.273196][T20517] bcachefs (loop3): going read-only [ 1106.312199][T20517] bcachefs (loop3): finished waiting for writes to stop [ 1106.345120][T20517] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 1106.370962][T20517] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 1106.380257][T22810] loop1: detected capacity change from 0 to 2048 [ 1106.443922][T20517] bcachefs (loop3): shutdown complete, journal seq 11 [ 1106.461742][T20517] bcachefs (loop3): marking filesystem clean [ 1106.471818][T22814] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4751'. [ 1106.493656][T22810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1106.509615][T22814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1106.572251][T22767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1106.778770][T20517] bcachefs (loop3): shutdown complete [ 1106.799471][T17583] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1106.806027][T17583] cdc_ncm 3-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 1107.818321][T17583] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 1107.839208][T17583] cdc_ncm 3-1:1.0: setting tx_max = 28 [ 1108.080944][T17583] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1108.177753][T17583] usb 3-1: USB disconnect, device number 64 [ 1108.210931][T17583] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1108.259538][T22827] loop4: detected capacity change from 0 to 8192 [ 1108.312750][T22827] loop4: p1 p2 p3 p4 [ 1108.317551][T22827] loop4: p1 size 108922248 extends beyond EOD, truncated [ 1108.328397][T22827] loop4: p2 start 861536256 is beyond EOD, truncated [ 1108.335311][T22827] loop4: p3 start 851968 is beyond EOD, truncated [ 1108.342415][T22827] loop4: p4 size 65536 extends beyond EOD, truncated [ 1108.418533][T17583] ------------[ cut here ]------------ [ 1108.424047][T17583] ODEBUG: free active (active state 0) object: ffff88807e6d1180 object type: work_struct hint: usbnet_deferred_kevent+0x0/0xb90 [ 1108.468154][T17583] WARNING: CPU: 0 PID: 17583 at lib/debugobjects.c:517 debug_print_object+0x17a/0x1f0 [ 1108.479530][T17583] Modules linked in: [ 1108.483519][T17583] CPU: 0 PID: 17583 Comm: kworker/0:1 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 1108.495240][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1108.505411][T17583] Workqueue: usb_hub_wq hub_event [ 1108.510593][T17583] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 1108.516480][T17583] Code: e8 fb a5 4a fd 4c 8b 0b 48 c7 c7 80 21 1f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 6b 72 aa fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 1c 71 fe 0a 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 1108.537212][T17583] RSP: 0018:ffffc90004837258 EFLAGS: 00010282 [ 1108.544016][T17583] RAX: 790afce65d16e300 RBX: ffffffff8bc9e420 RCX: 0000000000040000 [ 1108.552160][T17583] RDX: ffffc90011f7d000 RSI: 0000000000029175 RDI: 0000000000029176 [ 1108.560227][T17583] RBP: ffffffff8c1f2300 R08: ffffffff81585742 R09: fffffbfff1c39994 [ 1108.568435][T17583] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000000 [ 1108.576454][T17583] R13: ffffffff8c1f2218 R14: dffffc0000000000 R15: ffff88807e6d1180 [ 1108.585986][T17583] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1108.596449][T17583] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.603322][T17583] CR2: 000000002003b000 CR3: 0000000023cf0000 CR4: 00000000003506f0 [ 1108.611442][T17583] Call Trace: [ 1108.614738][T17583] [ 1108.617758][T17583] ? __warn+0x163/0x4e0 [ 1108.621989][T17583] ? debug_print_object+0x17a/0x1f0 [ 1108.627256][T17583] ? report_bug+0x2b3/0x500 [ 1108.632020][T17583] ? debug_print_object+0x17a/0x1f0 [ 1108.637312][T17583] ? handle_bug+0x3e/0x70 [ 1108.641773][T17583] ? exc_invalid_op+0x1a/0x50 [ 1108.646513][T17583] ? asm_exc_invalid_op+0x1a/0x20 [ 1108.651891][T17583] ? __warn_printk+0x292/0x360 [ 1108.656879][T17583] ? debug_print_object+0x17a/0x1f0 [ 1108.662370][T17583] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 1108.668395][T17583] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 1108.674326][T17583] debug_check_no_obj_freed+0x45b/0x580 [ 1108.680089][T17583] ? lockdep_hardirqs_on+0x99/0x150 [ 1108.687070][T17583] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1108.694640][T17583] ? device_release+0x99/0x1c0 [ 1108.699576][T17583] kfree+0x10f/0x360 [ 1108.703542][T17583] ? __pfx_netdev_release+0x10/0x10 [ 1108.708856][T17583] device_release+0x99/0x1c0 [ 1108.713527][T17583] kobject_put+0x22f/0x480 [ 1108.718086][T17583] usb_unbind_interface+0x25e/0x940 [ 1108.723367][T17583] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 1108.729229][T17583] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1108.735049][T17583] device_release_driver_internal+0x503/0x7c0 [ 1108.741282][T17583] bus_remove_device+0x34f/0x420 [ 1108.746319][T17583] device_del+0x57a/0x9b0 [ 1108.750822][T17583] ? kfree+0x149/0x360 [ 1108.754969][T17583] ? __pfx_device_del+0x10/0x10 [ 1108.759940][T17583] ? kobject_put+0x44a/0x480 [ 1108.764609][T17583] usb_disable_device+0x3bf/0x850 [ 1108.769725][T17583] usb_disconnect+0x340/0x950 [ 1108.774447][T17583] hub_event+0x1eb9/0x5150 [ 1108.779053][T17583] ? debug_object_deactivate+0x2d5/0x390 [ 1108.786185][T17583] ? __pfx_hub_event+0x10/0x10 [ 1108.792509][T17583] ? __pfx_lock_acquire+0x10/0x10 [ 1108.797688][T17583] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1108.803843][T17583] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1108.810368][T17583] ? process_scheduled_works+0x945/0x1830 [ 1108.816153][T17583] process_scheduled_works+0xa2c/0x1830 [ 1108.821842][T17583] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.827991][T17583] ? assign_work+0x364/0x3d0 [ 1108.832652][T17583] worker_thread+0x86d/0xd70 [ 1108.837636][T17583] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1108.843742][T17583] ? __kthread_parkme+0x169/0x1d0 [ 1108.848898][T17583] ? __pfx_worker_thread+0x10/0x10 [ 1108.854075][T17583] kthread+0x2f0/0x390 [ 1108.858297][T17583] ? __pfx_worker_thread+0x10/0x10 [ 1108.863457][T17583] ? __pfx_kthread+0x10/0x10 [ 1108.868272][T17583] ret_from_fork+0x4b/0x80 [ 1108.872766][T17583] ? __pfx_kthread+0x10/0x10 [ 1108.877496][T17583] ret_from_fork_asm+0x1a/0x30 [ 1108.882350][T17583] [ 1108.887102][T17583] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1108.894416][T17583] CPU: 0 PID: 17583 Comm: kworker/0:1 Not tainted 6.10.0-rc5-syzkaller-00012-g626737a5791b #0 [ 1108.904689][T17583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1108.914806][T17583] Workqueue: usb_hub_wq hub_event [ 1108.919905][T17583] Call Trace: [ 1108.923221][T17583] [ 1108.926181][T17583] dump_stack_lvl+0x241/0x360 [ 1108.930902][T17583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.936169][T17583] ? __pfx__printk+0x10/0x10 [ 1108.940806][T17583] ? _printk+0xd5/0x120 [ 1108.945009][T17583] ? vscnprintf+0x5d/0x90 [ 1108.949385][T17583] panic+0x349/0x860 [ 1108.953305][T17583] ? __warn+0x172/0x4e0 [ 1108.957487][T17583] ? __pfx_panic+0x10/0x10 [ 1108.961923][T17583] ? show_trace_log_lvl+0x4e6/0x520 [ 1108.967156][T17583] ? ret_from_fork_asm+0x1a/0x30 [ 1108.972121][T17583] __warn+0x346/0x4e0 [ 1108.976143][T17583] ? debug_print_object+0x17a/0x1f0 [ 1108.981396][T17583] report_bug+0x2b3/0x500 [ 1108.985772][T17583] ? debug_print_object+0x17a/0x1f0 [ 1108.991018][T17583] handle_bug+0x3e/0x70 [ 1108.995203][T17583] exc_invalid_op+0x1a/0x50 [ 1108.999730][T17583] asm_exc_invalid_op+0x1a/0x20 [ 1109.004622][T17583] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 1109.010455][T17583] Code: e8 fb a5 4a fd 4c 8b 0b 48 c7 c7 80 21 1f 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 6b 72 aa fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 1c 71 fe 0a 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 1109.030074][T17583] RSP: 0018:ffffc90004837258 EFLAGS: 00010282 [ 1109.036157][T17583] RAX: 790afce65d16e300 RBX: ffffffff8bc9e420 RCX: 0000000000040000 [ 1109.044140][T17583] RDX: ffffc90011f7d000 RSI: 0000000000029175 RDI: 0000000000029176 [ 1109.052145][T17583] RBP: ffffffff8c1f2300 R08: ffffffff81585742 R09: fffffbfff1c39994 [ 1109.060130][T17583] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000000 [ 1109.068169][T17583] R13: ffffffff8c1f2218 R14: dffffc0000000000 R15: ffff88807e6d1180 [ 1109.076189][T17583] ? __warn_printk+0x292/0x360 [ 1109.080996][T17583] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 1109.086909][T17583] ? __pfx_usbnet_deferred_kevent+0x10/0x10 [ 1109.092827][T17583] debug_check_no_obj_freed+0x45b/0x580 [ 1109.098417][T17583] ? lockdep_hardirqs_on+0x99/0x150 [ 1109.103647][T17583] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1109.109784][T17583] ? device_release+0x99/0x1c0 [ 1109.114567][T17583] kfree+0x10f/0x360 [ 1109.118482][T17583] ? __pfx_netdev_release+0x10/0x10 [ 1109.123696][T17583] device_release+0x99/0x1c0 [ 1109.128307][T17583] kobject_put+0x22f/0x480 [ 1109.132750][T17583] usb_unbind_interface+0x25e/0x940 [ 1109.137974][T17583] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 1109.143715][T17583] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1109.149448][T17583] device_release_driver_internal+0x503/0x7c0 [ 1109.155564][T17583] bus_remove_device+0x34f/0x420 [ 1109.160526][T17583] device_del+0x57a/0x9b0 [ 1109.164873][T17583] ? kfree+0x149/0x360 [ 1109.168961][T17583] ? __pfx_device_del+0x10/0x10 [ 1109.173831][T17583] ? kobject_put+0x44a/0x480 [ 1109.178447][T17583] usb_disable_device+0x3bf/0x850 [ 1109.183488][T17583] usb_disconnect+0x340/0x950 [ 1109.188198][T17583] hub_event+0x1eb9/0x5150 [ 1109.192657][T17583] ? debug_object_deactivate+0x2d5/0x390 [ 1109.198368][T17583] ? __pfx_hub_event+0x10/0x10 [ 1109.203234][T17583] ? __pfx_lock_acquire+0x10/0x10 [ 1109.208359][T17583] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1109.214351][T17583] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1109.220720][T17583] ? process_scheduled_works+0x945/0x1830 [ 1109.226446][T17583] process_scheduled_works+0xa2c/0x1830 [ 1109.232052][T17583] ? __pfx_process_scheduled_works+0x10/0x10 [ 1109.238239][T17583] ? assign_work+0x364/0x3d0 [ 1109.242843][T17583] worker_thread+0x86d/0xd70 [ 1109.247456][T17583] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1109.253387][T17583] ? __kthread_parkme+0x169/0x1d0 [ 1109.258426][T17583] ? __pfx_worker_thread+0x10/0x10 [ 1109.263550][T17583] kthread+0x2f0/0x390 [ 1109.267637][T17583] ? __pfx_worker_thread+0x10/0x10 [ 1109.272760][T17583] ? __pfx_kthread+0x10/0x10 [ 1109.277362][T17583] ret_from_fork+0x4b/0x80 [ 1109.281827][T17583] ? __pfx_kthread+0x10/0x10 [ 1109.286447][T17583] ret_from_fork_asm+0x1a/0x30 [ 1109.291244][T17583] [ 1109.294509][T17583] Kernel Offset: disabled [ 1109.298969][T17583] Rebooting in 86400 seconds..