last executing test programs: 32m10.806164293s ago: executing program 32 (id=360): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x1c) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) memfd_secret(0x0) 31m51.947269757s ago: executing program 33 (id=390): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x8, 0x2}, {0x2, 0x2}]}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000000)={'veth1\x00', 0x4}) 30m34.558432461s ago: executing program 34 (id=488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) 30m28.341995815s ago: executing program 35 (id=494): r0 = syz_open_dev$dri(0x0, 0x100000000, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) syz_open_procfs(0x0, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgctl$IPC_RMID(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40014) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 27m46.909324119s ago: executing program 36 (id=584): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) 25m45.925338486s ago: executing program 37 (id=699): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = dup(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x78, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/5, 0x5, 0x33e, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008085) 23m48.163683241s ago: executing program 38 (id=796): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x2862, &(0x7f0000000000)={0x0, 0x761, 0x10, 0x1, 0x11cb}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x2, 0x2, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000080)={0x0, 0x670, 0x598, 0x0, 0x2}) socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(0xffffffffffffffff, &(0x7f0000001640), 0x0, 0x45833af92e4b39ff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x43, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) clock_settime(0x0, &(0x7f00000001c0)) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) write$proc_mixer(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="524144494f0a434420274d6963204374707475726520537769746368272030303030303030303030303030303030303030300a494741494e0a545245424c45202743442043617074757265205377697463682720303030b0303030103030303030303030303030300a524144494f0a535045414b455220274d696320436170747531dbd6c7587265"], 0xd3) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 17m40.058100424s ago: executing program 39 (id=1070): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) 15m56.209948924s ago: executing program 40 (id=1175): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15m43.958463132s ago: executing program 41 (id=1187): r0 = socket$kcm(0x10, 0x100000000002, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$kcm(r0, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab3000000", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0xa419, 0x80, 0x4, 0xfffffffe}, &(0x7f0000000300), &(0x7f0000000280)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550e, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x8004) getpid() 15m38.081178615s ago: executing program 42 (id=1198): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net\x00') r1 = fanotify_init(0x40, 0x0) fanotify_mark(r1, 0x409, 0x40001012, r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSRS485(r5, 0x542f, 0x0) 13m31.247012481s ago: executing program 43 (id=1258): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x40, 0x0, 0x0, 0x7, 0x4000002, 0x4, 0x9, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 13m11.895948533s ago: executing program 44 (id=1278): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 12m29.04512904s ago: executing program 1 (id=1326): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$can_j1939(0x1d, 0x2, 0x7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c00000000f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d1fb37fe6d63850bc21786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd418745226db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x0, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3966, 0x40000006, 0xc000, 0x9, r3, r4, 0xe, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) 12m21.866222719s ago: executing program 1 (id=1330): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x1, 0x0, [{0x0, 0x5f, &(0x7f00000001c0)=""/95}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 12m20.010335337s ago: executing program 1 (id=1334): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x34d) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 12m17.003820724s ago: executing program 1 (id=1337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0x34, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x80) 12m16.109195601s ago: executing program 1 (id=1339): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setfsuid(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a30000000000900020073797a3200000000140000"], 0x78}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) 12m12.72647607s ago: executing program 1 (id=1343): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) fadvise64(0xffffffffffffffff, 0x18, 0x8800, 0x4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) landlock_create_ruleset(&(0x7f0000000040)={0x8127, 0x2}, 0x18, 0x0) semctl$GETALL(0x0, 0x0, 0x6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x58, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}, @FRA_FLOW={0x8, 0xb, 0x2480}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_FLOW={0x8, 0xb, 0x4}, @FRA_DST={0x8, 0x1, @empty}, @FRA_DST={0x8, 0x1, @empty}]}, 0x58}}, 0x0) 11m56.384464263s ago: executing program 45 (id=1343): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) fadvise64(0xffffffffffffffff, 0x18, 0x8800, 0x4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r5, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) landlock_create_ruleset(&(0x7f0000000040)={0x8127, 0x2}, 0x18, 0x0) semctl$GETALL(0x0, 0x0, 0x6, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x58, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}, @FRA_FLOW={0x8, 0xb, 0x2480}, @FRA_DST={0x8, 0x1, @broadcast}, @FRA_FLOW={0x8, 0xb, 0x4}, @FRA_DST={0x8, 0x1, @empty}, @FRA_DST={0x8, 0x1, @empty}]}, 0x58}}, 0x0) 10m46.107454002s ago: executing program 5 (id=1416): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) 10m44.303305691s ago: executing program 5 (id=1417): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'veth0_to_hsr\x00', &(0x7f0000000140)=@ethtool_ringparam={0x10, 0x5, 0x80000000, 0x1c, 0xe5bb, 0x10, 0x1, 0x1, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m42.58623939s ago: executing program 5 (id=1419): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x3, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) close_range(r0, 0xffffffffffffffff, 0x0) 10m41.773335566s ago: executing program 5 (id=1420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r1, 0x30d, 0x70bd2b}, 0x14}}, 0x0) 10m41.0229154s ago: executing program 5 (id=1422): mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x40401c0) syz_emit_vhci(0x0, 0x17) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x62040200) 10m35.117673795s ago: executing program 5 (id=1426): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20000004) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="090000000100", 0x6) 10m19.233970835s ago: executing program 46 (id=1426): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x20000004) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="090000000100", 0x6) 7m30.079875032s ago: executing program 7 (id=1643): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) shmat(0x0, &(0x7f0000ff8000/0x5000)=nil, 0x7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r5, 0x400455c8, 0x1) ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) 7m27.445822408s ago: executing program 7 (id=1649): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xbb2, r0}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x10001, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r2, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}}, 0x802) 7m26.971994878s ago: executing program 8 (id=1651): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 7m26.821067073s ago: executing program 7 (id=1652): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x164) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x80, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 7m26.267933651s ago: executing program 8 (id=1654): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff"]) 7m26.083344665s ago: executing program 7 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000003440)=[{0x0}, {0x0}, {&(0x7f0000004540)=""/240, 0xf0}], 0x3}}], 0x1, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB]) sendmsg$NFT_BATCH(r3, 0x0, 0x40) 7m24.139959827s ago: executing program 8 (id=1661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x0) 7m22.85512208s ago: executing program 8 (id=1663): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m17.826233876s ago: executing program 8 (id=1667): socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x10}, 0x1}}, 0x24) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r4, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x1000000, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000140)={0x80, 0xc, 0x103, 0x0, 0x0, 0x0, 0x0}) 7m14.034384745s ago: executing program 8 (id=1670): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd038786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500031681905db88235f8a5447dd2a2fd6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd500800000000000000e4a62fb73c33424b437bb192c9b06ea6ed04983fe5c5ca033dfce0a82577ef14eee5e6be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b394de70400d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca147df97db"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)) 7m13.115966438s ago: executing program 7 (id=1671): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000010000001811", @ANYRES32, @ANYBLOB="02000100000000000000000714000000b703000000f200008500000083000002190f00bf0900000000000055090100000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000014000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) 7m11.812355206s ago: executing program 7 (id=1674): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x1) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) 6m58.395643473s ago: executing program 47 (id=1670): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000180)) 6m56.215281374s ago: executing program 48 (id=1674): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000600)) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x1) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) 6m42.529266065s ago: executing program 0 (id=1725): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00') lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) 6m40.95797224s ago: executing program 0 (id=1728): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="1c005e800800020001000000070001"], 0x38}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r6, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000200)='./file0\x00', 0x3) socket$key(0xf, 0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 6m39.192730933s ago: executing program 0 (id=1730): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x11, "0070ba5d83000644ec00"}) r1 = syz_open_pts(r0, 0x20800) r2 = dup3(r1, r0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x44) 6m37.481143938s ago: executing program 0 (id=1732): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r0}, 0x38) 6m36.19605278s ago: executing program 0 (id=1735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x0) 6m35.087358658s ago: executing program 0 (id=1738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x191a, &(0x7f0000000140)={0x0, 0x331d, 0x10, 0x1, 0x325}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m19.245418322s ago: executing program 49 (id=1738): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x191a, &(0x7f0000000140)={0x0, 0x331d, 0x10, 0x1, 0x325}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 8.880499644s ago: executing program 2 (id=2761): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xbf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.463602174s ago: executing program 4 (id=2763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 7.290913762s ago: executing program 2 (id=2767): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x1e, 0x56a0, 0x28}, 0x2c) 7.260107584s ago: executing program 4 (id=2768): r0 = epoll_create1(0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x2002}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r1, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 6.504043437s ago: executing program 6 (id=2772): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x20040080) 5.939266132s ago: executing program 9 (id=2774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="00000000aaaaaaaaaa30aaaaaaaaaabb08004500001e0001e0000001"], 0x8a) 5.85254805s ago: executing program 6 (id=2775): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491", 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r2, &(0x7f00000002c0), 0x2) sendmsg$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xd}], 0x30, 0x800}, 0x4000010) splice(0xffffffffffffffff, &(0x7f0000000040)=0x1000, r2, &(0x7f0000000100)=0x2, 0x0, 0xa) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, 0x0, &(0x7f0000000200)) recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/227, 0xe3}, {&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f00000005c0)=""/181, 0xb5}], 0x3}, 0x38, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 5.746964219s ago: executing program 4 (id=2776): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@dev, 0x0, r1}) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3}) 5.597644296s ago: executing program 3 (id=2777): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xbf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.008348372s ago: executing program 9 (id=2778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 4.692306465s ago: executing program 4 (id=2779): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r3}, 0x18) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r1, 0x4, r1}, 0x10) 4.017059839s ago: executing program 3 (id=2780): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "94691c40f2"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4024}, 0x4040814) 3.938865626s ago: executing program 6 (id=2781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) 3.908931494s ago: executing program 9 (id=2782): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000400)=0x10001, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0x101, 0x80000000}, 0x1c) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 3.830567478s ago: executing program 2 (id=2783): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 3.496138701s ago: executing program 4 (id=2784): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0) 3.410716566s ago: executing program 3 (id=2785): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x174, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x24}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xb, 0xfff2}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0xd8, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0xbc, 0x6, [@m_mirred={0x8c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x5d, 0x6, "323ee0011e9773588356460465246c286b0c19c8696a6e30c2eaac25a8e17e586969fbc4736a59c344d6a75c8c47311b872b949e0150f026ddbbfaec36f19c3fcb311be2bfa7868fc17bd7119df75573e017e0a43314c559c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_bpf={0x2c, 0x4, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x174}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.384513222s ago: executing program 9 (id=2786): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x10, 0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.174599246s ago: executing program 6 (id=2787): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0xc080) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba6e0d60508dbbb", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0xfffffffffffffefc, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) 2.826466073s ago: executing program 4 (id=2788): mlockall(0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) 2.733576172s ago: executing program 2 (id=2789): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value}, 0x10) 2.596814873s ago: executing program 3 (id=2790): socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x10}}}}}}}, 0x0) 2.580284752s ago: executing program 9 (id=2791): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000020301020000000000000000000000000800034000000000090002000000000002"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240)="02e19d2dfa8f6e35b50f080d91ef49d3", 0x0, 0x10}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.744533785s ago: executing program 2 (id=2792): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) 1.464768225s ago: executing program 3 (id=2793): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x1e, 0x56a0, 0x28}, 0x2c) 1.348815959s ago: executing program 6 (id=2794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c2000000000095000012000000000e09b9445761db3ed82f7be4b9f1628b9a5c40384cb45e62e827e611f21a01a76f66f616553959b478ad3c46bb20e558783b21dd5307760617deec8b1b75c00853ee69e33ba2c01c28950365dd46fcc9f2ac6d20197fd68292e8445824f49b6fba41a316e13e462e31ca00d2622d56318d78e271d364329e7ae732bf8dade587bb30d67e23f78662621b74aabfd8eaf399893bab50fed33101f5a1085f991877907bd6117db675155932860499977f7384a8d94e810492c284fc7cc784ed942bf11d72897a7896f5f8c957984312e9d39eaa478a3065afd52404cb058b"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r3}, 0x18) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r1, 0x4, r1}, 0x10) 378.46834ms ago: executing program 2 (id=2795): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "94691c40f2"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4024}, 0x4040814) 313.951809ms ago: executing program 3 (id=2796): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f00000013c0)=0x2, 0x4) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x14, &(0x7f0000000100)={&(0x7f0000000080)="d682f39c86fed22b0fb1e398412d7958da07dc0f18de72bf6fdbd1101712924188cf6067c1a40f6f56bd41d5", 0x2c}}, 0x0) 53.398213ms ago: executing program 9 (id=2797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) 0s ago: executing program 6 (id=2798): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0) kernel console output (not intermixed with test programs): 64809][T10522] usb 1-1: USB disconnect, device number 37 [ 1825.073058][T13929] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1825.182025][T13929] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1825.236026][T13991] hsr_slave_0: entered promiscuous mode [ 1825.248469][T13991] hsr_slave_1: entered promiscuous mode [ 1825.297544][T14076] netlink: 'syz.7.1481': attribute type 4 has an invalid length. [ 1825.528667][T14076] netlink: 'syz.7.1481': attribute type 4 has an invalid length. [ 1825.643355][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1482'. [ 1826.948476][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1826.957401][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1827.089817][ T1126] Bluetooth: Error in BCSP hdr checksum [ 1827.624534][T13929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.632778][T13991] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1827.822208][T13929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.883103][T13506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.891357][T13506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1828.025638][T13506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.033552][T13506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1828.464932][T13991] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1828.574072][T13991] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1828.678950][T13991] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1829.143659][ T5792] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1830.055763][T14105] fuse: Bad value for 'group_id' [ 1830.061303][T14105] fuse: Bad value for 'group_id' [ 1830.122531][T14106] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1489'. [ 1830.678090][T13991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1830.965491][T13991] 8021q: adding VLAN 0 to HW filter on device team0 [ 1831.068418][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.076319][T13511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1831.152516][ T5860] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1831.202567][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.210396][T13511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1831.239602][T14112] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1492'. [ 1831.258435][T13929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1831.362490][ T5860] usb 7-1: Using ep0 maxpacket: 16 [ 1831.376927][ T5860] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1831.452457][ T5860] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1831.465566][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.475078][ T5860] usb 7-1: Product: syz [ 1831.479523][ T5860] usb 7-1: Manufacturer: syz [ 1831.485776][ T5860] usb 7-1: SerialNumber: syz [ 1831.627561][ T5860] usb 7-1: config 0 descriptor?? [ 1832.247026][T14119] netlink: 'syz.7.1494': attribute type 4 has an invalid length. [ 1832.402759][T14123] netlink: 'syz.7.1494': attribute type 4 has an invalid length. [ 1833.837997][T13991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1834.362775][ T45] usb 7-1: USB disconnect, device number 54 [ 1834.566273][T13929] veth0_vlan: entered promiscuous mode [ 1834.602227][T13991] veth0_vlan: entered promiscuous mode [ 1834.788499][T13991] veth1_vlan: entered promiscuous mode [ 1834.862269][T13929] veth1_vlan: entered promiscuous mode [ 1835.122355][T14139] fuse: Bad value for 'group_id' [ 1835.129284][T14139] fuse: Bad value for 'group_id' [ 1835.526181][T13991] veth0_macvtap: entered promiscuous mode [ 1835.586826][T13506] Bluetooth: Error in BCSP hdr checksum [ 1835.636997][T13929] veth0_macvtap: entered promiscuous mode [ 1835.674197][T13991] veth1_macvtap: entered promiscuous mode [ 1835.722204][T13929] veth1_macvtap: entered promiscuous mode [ 1835.902087][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1835.913391][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.923725][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1835.934518][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.944847][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1835.956878][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.971771][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1835.982776][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1835.994927][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1836.006351][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.022682][T13991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1836.165523][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1836.179890][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.191276][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1836.202414][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.213800][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1836.225140][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.235782][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1836.246743][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.258092][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1836.274544][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.287270][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1836.299358][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.315670][T13929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1836.375455][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.386228][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.396447][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.407993][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.418358][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.429615][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.441762][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.452546][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.463551][T13991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.477547][T13991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.492355][T13991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1836.573379][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.588466][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.600017][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.611808][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.622294][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.633204][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.643475][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.654298][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.666422][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.678317][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.692234][T13929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1836.703044][T13929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.718087][T13929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1837.074024][T13991] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.083331][T13991] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.094951][T13991] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.104735][T13991] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.188207][T13929] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.201197][T13929] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.210475][T13929] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.222263][T13929] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1837.566374][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1501'. [ 1837.576825][T14148] IPVS: Error joining to the multicast group [ 1837.623440][ T5792] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1837.742038][T14148] netlink: 'syz.7.1501': attribute type 4 has an invalid length. [ 1838.065794][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1502'. [ 1838.900106][T14166] netlink: 'syz.7.1504': attribute type 4 has an invalid length. [ 1838.987861][T14166] netlink: 'syz.7.1504': attribute type 4 has an invalid length. [ 1840.201928][T10522] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1840.412829][T10522] usb 8-1: Using ep0 maxpacket: 16 [ 1840.446736][T10522] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1840.549893][T10522] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1840.561733][T10522] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.574205][T10522] usb 8-1: Product: syz [ 1840.578663][T10522] usb 8-1: Manufacturer: syz [ 1840.584572][T10522] usb 8-1: SerialNumber: syz [ 1840.723580][T10522] usb 8-1: config 0 descriptor?? [ 1844.332819][ T3974] Bluetooth: Error in BCSP hdr checksum [ 1844.754639][ T45] usb 8-1: USB disconnect, device number 20 [ 1845.228836][T14213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1513'. [ 1845.916404][T14226] netlink: 'syz.6.1515': attribute type 4 has an invalid length. [ 1846.033795][T14226] netlink: 'syz.6.1515': attribute type 4 has an invalid length. [ 1846.351694][ T8499] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1848.597705][ T9566] libceph: connect (1)[c::]:6789 error -101 [ 1848.604669][ T9566] libceph: mon0 (1)[c::]:6789 connect error [ 1848.801492][T13305] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1849.051461][T13305] usb 7-1: Using ep0 maxpacket: 16 [ 1849.087455][T10522] libceph: connect (1)[c::]:6789 error -101 [ 1849.094900][T10522] libceph: mon0 (1)[c::]:6789 connect error [ 1849.165543][T13305] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1849.245399][T14255] ceph: No mds server is up or the cluster is laggy [ 1849.380268][T13305] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1849.389972][T13305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1849.398720][T13305] usb 7-1: Product: syz [ 1849.403418][T13305] usb 7-1: Manufacturer: syz [ 1849.409276][T13305] usb 7-1: SerialNumber: syz [ 1849.588571][T13305] usb 7-1: config 0 descriptor?? [ 1850.675464][ T3608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1850.683752][ T3608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1850.940035][ T3608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1850.949533][ T3608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1851.193262][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1524'. [ 1851.373045][T13502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1851.381485][T13502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1851.594018][ T45] usb 7-1: USB disconnect, device number 55 [ 1851.792725][ T3974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1851.801084][ T3974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1852.096751][T14277] netlink: 'syz.6.1526': attribute type 4 has an invalid length. [ 1852.263687][T14286] netlink: 'syz.6.1526': attribute type 4 has an invalid length. [ 1855.381338][ T8499] Bluetooth: hci1: command 0x1003 tx timeout [ 1855.381864][ T5792] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1857.212152][ T9566] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1857.391119][ T9566] usb 8-1: Using ep0 maxpacket: 16 [ 1857.691276][ T9566] usb 8-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1857.701863][ T9566] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.710165][ T9566] usb 8-1: Product: syz [ 1857.715195][ T9566] usb 8-1: Manufacturer: syz [ 1857.720263][ T9566] usb 8-1: SerialNumber: syz [ 1858.455827][ T9566] usb 8-1: config 0 descriptor?? [ 1858.472023][ T9566] visor 8-1:0.0: Sony Clie 3.5 converter detected [ 1859.022151][ T9566] usb 8-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1859.190140][ T9566] usb 8-1: USB disconnect, device number 21 [ 1859.297655][ T9566] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1859.317756][ T9566] visor 8-1:0.0: device disconnected [ 1861.526515][ T3583] Bluetooth: Error in BCSP hdr checksum [ 1863.541963][ T5792] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1867.482742][ T45] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1867.756957][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 1868.412093][ T45] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1868.422706][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.433805][ T45] usb 3-1: Product: syz [ 1868.438252][ T45] usb 3-1: Manufacturer: syz [ 1868.444185][ T45] usb 3-1: SerialNumber: syz [ 1869.408501][ T45] usb 3-1: config 0 descriptor?? [ 1869.424401][ T45] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 1870.406065][ T45] usb 3-1: clie_3_5_startup: get config number failed: -32 [ 1870.414594][ T45] visor 3-1:0.0: probe with driver visor failed with error -32 [ 1871.461832][ T9566] usb 3-1: USB disconnect, device number 12 [ 1880.955423][T14472] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1578'. [ 1881.847055][T14476] ceph: No mds server is up or the cluster is laggy [ 1881.855799][T13305] libceph: connect (1)[c::]:6789 error -101 [ 1881.862726][T13305] libceph: mon0 (1)[c::]:6789 connect error [ 1882.699400][T14491] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1585'. [ 1882.830347][ T5792] Bluetooth: hci1: command 0x1003 tx timeout [ 1882.837231][ T8499] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1885.871695][ T8499] Bluetooth: hci3: command 0x0406 tx timeout [ 1887.064478][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1887.071681][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1887.353869][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1887.360462][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1888.046485][ T45] libceph: connect (1)[c::]:6789 error -101 [ 1888.053911][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 1888.721480][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1888.729832][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1890.242658][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 1890.249127][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1890.284021][T14516] ucma_write: process 30 (syz.2.1588) changed security contexts after opening file descriptor, this is not allowed. [ 1890.668426][T14503] ceph: No mds server is up or the cluster is laggy [ 1890.845909][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 1890.856315][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1893.348071][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1593'. [ 1893.486702][T14537] ceph: No mds server is up or the cluster is laggy [ 1893.497233][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 1893.503877][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 1895.424983][T14556] vlan0: entered promiscuous mode [ 1895.471502][T14556] team0: Port device vlan0 added [ 1899.792990][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 1900.671389][ T8499] Bluetooth: hci2: command 0x0406 tx timeout [ 1900.746822][T13504] Bluetooth: Error in BCSP hdr checksum [ 1901.008986][T13504] Bluetooth: Error in BCSP hdr checksum [ 1902.502243][ T8499] Bluetooth: hci1: command 0x1003 tx timeout [ 1902.514279][ T5792] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1908.862330][T14634] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1621'. [ 1915.702432][ T5792] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1921.086732][ T8499] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1922.324003][T14717] 9pnet_fd: Insufficient options for proto=fd [ 1931.391240][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 1931.646119][T14752] 9pnet_fd: Insufficient options for proto=fd [ 1935.967176][T14773] usb usb8: usbfs: process 14773 (syz.8.1670) did not claim interface 0 before use [ 1936.661565][ T8499] Bluetooth: hci5: command 0x0406 tx timeout [ 1938.629827][T14794] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1678'. [ 1938.760921][T13508] Bluetooth: Error in BCSP hdr checksum [ 1939.499794][T14799] 9pnet_fd: Insufficient options for proto=fd [ 1940.501308][ T5792] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1940.501836][ T8499] Bluetooth: hci1: command 0x1003 tx timeout [ 1945.563312][T14834] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1692'. [ 1949.824179][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 1949.836489][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 1949.989305][T14854] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1701'. [ 1950.018093][T14854] vlan2: entered promiscuous mode [ 1950.025769][T14854] bridge0: entered promiscuous mode [ 1950.805812][T14857] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1703'. [ 1951.438495][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1704'. [ 1951.447958][T14861] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1704'. [ 1951.460082][T14861] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1704'. [ 1951.787555][T14866] 9pnet_fd: Insufficient options for proto=fd [ 1951.865279][ T8499] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1951.890433][ T8499] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1951.913100][ T8499] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1951.963952][ T8499] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1952.007548][ T8499] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1952.017823][ T8499] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1954.264614][ T5792] Bluetooth: hci1: command tx timeout [ 1954.318067][ T8499] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1954.331655][ T8499] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1954.423948][ T8499] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1957.096173][ T8499] Bluetooth: hci1: command tx timeout [ 1957.109927][ T5792] Bluetooth: hci6: Opcode 0x1009 failed: -110 [ 1957.226149][T11712] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1957.252754][T11712] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1957.279527][T11712] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1957.318117][T11712] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1957.348918][T11712] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1957.367049][T11712] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1959.014773][T14867] chnl_net:caif_netlink_parms(): no params data found [ 1959.130512][T14895] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1715'. [ 1959.182044][T11712] Bluetooth: hci1: command tx timeout [ 1959.464646][T11712] Bluetooth: hci6: command tx timeout [ 1960.180393][T14881] chnl_net:caif_netlink_parms(): no params data found [ 1961.029638][T14909] 9pnet_fd: Insufficient options for proto=fd [ 1961.228414][T11712] Bluetooth: hci1: command tx timeout [ 1962.079839][T11712] Bluetooth: hci6: command tx timeout [ 1962.439829][T14867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.448122][T14867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1962.458012][T14867] bridge_slave_0: entered allmulticast mode [ 1962.467996][T14867] bridge_slave_0: entered promiscuous mode [ 1963.474121][T14867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1963.474688][T14867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1963.475581][T14867] bridge_slave_1: entered allmulticast mode [ 1963.482762][T14867] bridge_slave_1: entered promiscuous mode [ 1964.505657][T11712] Bluetooth: hci6: command tx timeout [ 1965.546157][T14867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1965.665137][T14867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1966.282521][T14867] team0: Port device team_slave_0 added [ 1966.313660][T14867] team0: Port device team_slave_1 added [ 1966.612369][T11712] Bluetooth: hci6: command tx timeout [ 1966.861681][T14881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1966.869492][T14881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1966.879185][T14881] bridge_slave_0: entered allmulticast mode [ 1966.889161][T14881] bridge_slave_0: entered promiscuous mode [ 1966.940891][T14867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1966.948090][T14867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1966.975363][T14867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1967.299816][T14867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1967.307998][T14867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1967.336091][T14867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1968.025755][T14881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.033927][T14881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.043591][T14881] bridge_slave_1: entered allmulticast mode [ 1968.052363][T14881] bridge_slave_1: entered promiscuous mode [ 1968.721861][T14867] hsr_slave_0: entered promiscuous mode [ 1968.731246][T14867] hsr_slave_1: entered promiscuous mode [ 1968.739220][T14867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1968.747707][T14867] Cannot create hsr debugfs directory [ 1968.814255][T14881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1968.903762][T14881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1969.424765][T14881] team0: Port device team_slave_0 added [ 1969.628565][T14881] team0: Port device team_slave_1 added [ 1969.858101][T14881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1969.867488][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1969.895489][T14881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1970.113405][T13508] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1970.373809][T14881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1970.381382][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1970.408661][T14881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1970.508728][T13508] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1970.967516][T13508] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1970.997554][T14945] 9pnet_fd: Insufficient options for proto=fd [ 1971.248009][T13508] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1971.844097][T14881] hsr_slave_0: entered promiscuous mode [ 1971.865069][T14881] hsr_slave_1: entered promiscuous mode [ 1971.873982][T14881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1971.882737][T14881] Cannot create hsr debugfs directory [ 1972.370234][T13508] bridge_slave_1: left allmulticast mode [ 1972.376427][T13508] bridge_slave_1: left promiscuous mode [ 1972.383034][T13508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.452849][T13508] bridge_slave_0: left allmulticast mode [ 1972.458811][T13508] bridge_slave_0: left promiscuous mode [ 1972.476461][T13508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1973.156256][T13508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1973.200102][T13508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1973.237875][T13508] bond0 (unregistering): Released all slaves [ 1974.235935][T14867] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1974.710884][T14867] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1975.572573][T14867] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1975.658643][T14867] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1975.830279][T13508] hsr_slave_0: left promiscuous mode [ 1975.904416][T13508] hsr_slave_1: left promiscuous mode [ 1975.913733][T13508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1975.921796][T13508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1976.076686][T13508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1976.084641][T13508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1976.319026][T13508] veth1_macvtap: left promiscuous mode [ 1976.326976][T13508] veth0_macvtap: left promiscuous mode [ 1976.333296][T13508] veth1_vlan: left promiscuous mode [ 1976.339634][T13508] veth0_vlan: left promiscuous mode [ 1977.673985][T13508] team0 (unregistering): Port device team_slave_1 removed [ 1977.895315][T13508] team0 (unregistering): Port device team_slave_0 removed [ 1978.377889][T14981] 9pnet_fd: Insufficient options for proto=fd [ 1980.399242][T14867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1980.635665][T14867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1980.660388][T14881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1980.867926][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.875821][T13511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1980.901869][T14881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1981.008671][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.016382][T13511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1981.082615][T14881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1981.265059][T14881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1987.103214][T13504] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.231614][T14881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.306531][T13504] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.444041][T13504] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.648107][T13504] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.783390][T14881] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.926408][T13536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1987.934398][T13536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1988.068676][T13536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1988.076670][T13536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1988.401479][T13504] bridge_slave_1: left allmulticast mode [ 1988.407451][T13504] bridge_slave_1: left promiscuous mode [ 1988.414644][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1988.542567][T13504] bridge_slave_0: left allmulticast mode [ 1988.551147][T13504] bridge_slave_0: left promiscuous mode [ 1988.557930][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1989.492114][T13504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1989.576226][T13504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1989.619835][T13504] bond0 (unregistering): Released all slaves [ 1989.903898][T14867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1990.153647][T15029] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1757'. [ 1990.164455][T15029] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1757'. [ 1991.146799][T13504] hsr_slave_0: left promiscuous mode [ 1991.158276][T13504] hsr_slave_1: left promiscuous mode [ 1991.173873][T13504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1991.184221][T13504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1991.863472][T13504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1991.871619][T13504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1991.897661][T13504] veth1_macvtap: left promiscuous mode [ 1991.904816][T13504] veth0_macvtap: left promiscuous mode [ 1991.911711][T13504] veth1_vlan: left promiscuous mode [ 1991.920027][T13504] veth0_vlan: left promiscuous mode [ 1993.031646][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1993.083750][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1993.100290][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1993.167582][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1993.241733][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1993.261835][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1995.489798][T11712] Bluetooth: hci0: command tx timeout [ 1995.938482][T13504] team0 (unregistering): Port device team_slave_1 removed [ 1995.973369][T13504] team0 (unregistering): Port device team_slave_0 removed [ 1997.626568][T11712] Bluetooth: hci0: command tx timeout [ 1998.093325][T14881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1999.866836][T15039] chnl_net:caif_netlink_parms(): no params data found [ 1999.914662][T11712] Bluetooth: hci0: command tx timeout [ 2001.959109][T11712] Bluetooth: hci0: command tx timeout [ 2004.720615][T14867] veth0_vlan: entered promiscuous mode [ 2005.004619][T14867] veth1_vlan: entered promiscuous mode [ 2008.180799][T14867] veth0_macvtap: entered promiscuous mode [ 2010.642141][T14867] veth1_macvtap: entered promiscuous mode [ 2010.820120][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2010.831289][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.841746][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2010.853903][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.868911][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2010.881198][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.893176][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2010.904445][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.914689][T14867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2010.925754][T14867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2010.941514][T14867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2011.277507][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2011.284528][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2011.984097][T15039] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.998084][T15039] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.006554][T15039] bridge_slave_0: entered allmulticast mode [ 2012.018420][T15039] bridge_slave_0: entered promiscuous mode [ 2012.372671][T15039] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.382800][T15039] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.392012][T15039] bridge_slave_1: entered allmulticast mode [ 2012.409571][T15039] bridge_slave_1: entered promiscuous mode [ 2012.617596][ T3608] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.158548][ T3608] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.179784][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2013.193963][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2013.250249][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2013.262745][T15039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2013.307849][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2013.338704][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2013.350002][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2013.473858][ T3608] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.618795][T15039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2013.719985][ T3608] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2014.204374][T15039] team0: Port device team_slave_0 added [ 2014.442478][T15039] team0: Port device team_slave_1 added [ 2015.004540][ T3608] bridge_slave_1: left allmulticast mode [ 2015.010497][ T3608] bridge_slave_1: left promiscuous mode [ 2015.017624][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 2015.118045][T11712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2015.139538][ T3608] bridge_slave_0: left allmulticast mode [ 2015.142060][T11712] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2015.147976][ T3608] bridge_slave_0: left promiscuous mode [ 2015.159418][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 2015.178464][T11712] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2015.385293][T11712] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2015.409121][T11712] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2015.425603][T11712] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2015.462015][T11712] Bluetooth: hci2: command tx timeout [ 2015.851035][ T3608] bond1 (unregistering): (slave ip6tnl1): Releasing backup interface [ 2016.202500][ T3608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2016.307656][ T3608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2016.331420][ T3608] bond0 (unregistering): Released all slaves [ 2016.357217][ T3608] bond1 (unregistering): Released all slaves [ 2016.574629][T15039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2016.584341][T15039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2016.616672][T15039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2017.169096][T15039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2017.177346][T15039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2017.205594][T15039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2017.410513][T15115] syz.2.1776 (15115): drop_caches: 2 [ 2017.462257][T11712] Bluetooth: hci4: command tx timeout [ 2017.471812][ T3608] tipc: Left network mode [ 2017.541088][T11712] Bluetooth: hci2: command tx timeout [ 2018.247623][T15124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1779'. [ 2018.437362][T15039] hsr_slave_0: entered promiscuous mode [ 2018.452919][T15039] hsr_slave_1: entered promiscuous mode [ 2018.462313][T15039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2018.471463][T15039] Cannot create hsr debugfs directory [ 2019.470385][ T3608] hsr_slave_0: left promiscuous mode [ 2019.479340][ T3608] hsr_slave_1: left promiscuous mode [ 2019.493442][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2019.501458][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2019.519344][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2019.528328][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2019.561342][T11712] Bluetooth: hci4: command tx timeout [ 2019.574103][ T3608] veth1_macvtap: left promiscuous mode [ 2019.579923][ T3608] veth0_macvtap: left promiscuous mode [ 2019.586259][ T3608] veth1_vlan: left promiscuous mode [ 2019.591960][ T3608] veth0_vlan: left promiscuous mode [ 2019.663441][T11712] Bluetooth: hci2: command tx timeout [ 2020.237673][ T3608] team0 (unregistering): Port device team_slave_1 removed [ 2020.310671][ T3608] team0 (unregistering): Port device team_slave_0 removed [ 2021.468677][ T45] libceph: connect (1)[c::]:6789 error -101 [ 2021.476266][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 2021.537697][T15143] ceph: No mds server is up or the cluster is laggy [ 2021.623692][T11712] Bluetooth: hci4: command tx timeout [ 2021.623977][T15098] chnl_net:caif_netlink_parms(): no params data found [ 2021.706568][T11712] Bluetooth: hci2: command tx timeout [ 2021.758119][T15112] chnl_net:caif_netlink_parms(): no params data found [ 2023.244056][T15098] bridge0: port 1(bridge_slave_0) entered blocking state [ 2023.258815][T15098] bridge0: port 1(bridge_slave_0) entered disabled state [ 2023.269357][T15098] bridge_slave_0: entered allmulticast mode [ 2023.281874][T15098] bridge_slave_0: entered promiscuous mode [ 2023.384332][T15098] bridge0: port 2(bridge_slave_1) entered blocking state [ 2023.392514][T15098] bridge0: port 2(bridge_slave_1) entered disabled state [ 2023.400526][T15098] bridge_slave_1: entered allmulticast mode [ 2023.410652][T15098] bridge_slave_1: entered promiscuous mode [ 2023.703246][T11712] Bluetooth: hci4: command tx timeout [ 2024.036211][T15098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2024.256569][T15098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2024.269675][T15039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2024.387081][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.398021][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 2024.407660][T15112] bridge_slave_0: entered allmulticast mode [ 2024.417851][T15112] bridge_slave_0: entered promiscuous mode [ 2024.546692][T15039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2024.592239][T15112] bridge0: port 2(bridge_slave_1) entered blocking state [ 2024.600057][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 2024.608320][T15112] bridge_slave_1: entered allmulticast mode [ 2024.619739][T15112] bridge_slave_1: entered promiscuous mode [ 2024.727013][T15039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2024.858962][T15098] team0: Port device team_slave_0 added [ 2024.930267][T15039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2024.970913][T15098] team0: Port device team_slave_1 added [ 2025.044710][T15112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2025.163021][T15112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2025.297288][T15098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2025.308900][T15098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2025.336678][T15098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2025.537672][T15112] team0: Port device team_slave_0 added [ 2025.571432][ T3608] bridge_slave_1: left allmulticast mode [ 2025.577405][ T3608] bridge_slave_1: left promiscuous mode [ 2025.584366][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.611047][ T3608] bridge_slave_0: left allmulticast mode [ 2025.617005][ T3608] bridge_slave_0: left promiscuous mode [ 2025.624012][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.653351][ T3608] bridge_slave_1: left allmulticast mode [ 2025.660079][ T3608] bridge_slave_1: left promiscuous mode [ 2025.669216][ T3608] bridge0: port 2(bridge_slave_1) entered disabled state [ 2025.728981][ T3608] bridge_slave_0: left allmulticast mode [ 2025.735059][ T3608] bridge_slave_0: left promiscuous mode [ 2025.743463][ T3608] bridge0: port 1(bridge_slave_0) entered disabled state [ 2025.789198][T10522] libceph: connect (1)[c::]:6789 error -101 [ 2025.798973][T10522] libceph: mon0 (1)[c::]:6789 connect error [ 2025.858933][T15181] ceph: No mds server is up or the cluster is laggy [ 2026.758644][ T3608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2026.843183][ T3608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2026.867939][ T3608] bond0 (unregistering): Released all slaves [ 2026.933176][ T3608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2027.066783][ T3608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2027.091821][ T3608] bond0 (unregistering): Released all slaves [ 2027.122989][T15098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2027.131575][T15098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2027.160059][T15098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2027.181836][ T9860] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2027.453654][ T9860] usb 3-1: Using ep0 maxpacket: 8 [ 2027.499242][T15112] team0: Port device team_slave_1 added [ 2027.555816][ T9860] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 2027.564816][ T9860] usb 3-1: config 179 has no interface number 0 [ 2027.573041][ T9860] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2027.585706][ T9860] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2027.597943][ T9860] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2027.612219][ T9860] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2027.622859][ T9860] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2027.636597][ T9860] usb 3-1: config 179 interface 65 has no altsetting 0 [ 2027.644940][ T9860] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2027.655575][ T9860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.875704][ T9860] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input16 [ 2028.763059][T15112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2028.771779][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2028.799813][T15112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2028.863219][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2028.872141][ T9860] usb 3-1: USB disconnect, device number 13 [ 2028.881976][ T9860] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 2029.061919][T15112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2029.069269][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2029.098649][T15112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2029.240538][T15098] hsr_slave_0: entered promiscuous mode [ 2029.287042][T15098] hsr_slave_1: entered promiscuous mode [ 2029.315445][T15098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2029.327254][T15098] Cannot create hsr debugfs directory [ 2030.185500][ T3608] hsr_slave_0: left promiscuous mode [ 2030.289222][ T3608] hsr_slave_1: left promiscuous mode [ 2030.298097][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2030.320663][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2030.382382][ T3608] hsr_slave_0: left promiscuous mode [ 2030.397609][ T3608] hsr_slave_1: left promiscuous mode [ 2030.407799][ T3608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2030.415910][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2030.431631][ T3608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2030.498406][ T3608] veth1_macvtap: left promiscuous mode [ 2030.504612][ T3608] veth0_macvtap: left promiscuous mode [ 2030.512059][ T3608] veth1_vlan: left promiscuous mode [ 2030.517703][ T3608] veth0_vlan: left promiscuous mode [ 2031.507460][ T3608] team0 (unregistering): Port device team_slave_1 removed [ 2031.596454][ T3608] team0 (unregistering): Port device team_slave_0 removed [ 2031.895666][ T9860] libceph: connect (1)[c::]:6789 error -101 [ 2031.902527][ T9860] libceph: mon0 (1)[c::]:6789 connect error [ 2031.961658][T15212] ceph: No mds server is up or the cluster is laggy [ 2033.161177][ T3608] team0 (unregistering): Port device team_slave_1 removed [ 2033.261163][ T3608] team0 (unregistering): Port device team_slave_0 removed [ 2033.905708][T15224] xt_CT: No such helper "snmp_trap" [ 2034.585724][T15112] hsr_slave_0: entered promiscuous mode [ 2034.596760][T15112] hsr_slave_1: entered promiscuous mode [ 2034.607564][T15112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2034.615578][T15112] Cannot create hsr debugfs directory [ 2037.304984][T15233] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2037.657326][T15039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2037.901750][T15039] 8021q: adding VLAN 0 to HW filter on device team0 [ 2037.947565][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.955503][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2038.061447][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.069350][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2038.363629][T15098] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2038.485418][T15098] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2038.621476][T15098] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2038.647502][ T9860] libceph: connect (1)[c::]:6789 error -101 [ 2038.654255][ T9860] libceph: mon0 (1)[c::]:6789 connect error [ 2038.723002][T15243] ceph: No mds server is up or the cluster is laggy [ 2038.734474][T15098] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2039.298745][T15112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2039.392396][T15112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2039.504414][T15112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2039.616652][T15112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2040.637154][T15098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2040.924876][T15098] 8021q: adding VLAN 0 to HW filter on device team0 [ 2041.082744][T13549] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.090545][T13549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2041.246509][T13549] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.254402][T13549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2041.382638][T15039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2041.413177][T15268] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2041.523397][T15112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2041.883429][T15112] 8021q: adding VLAN 0 to HW filter on device team0 [ 2042.115518][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.123444][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2042.308554][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.316483][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2043.198594][T15112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2043.210985][T15112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2043.375080][T15039] veth0_vlan: entered promiscuous mode [ 2043.708759][T15039] veth1_vlan: entered promiscuous mode [ 2044.650055][T15039] veth0_macvtap: entered promiscuous mode [ 2044.797117][T15039] veth1_macvtap: entered promiscuous mode [ 2045.097983][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2045.110014][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.120540][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2045.131525][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.141867][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2045.154099][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.164741][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2045.176655][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.192880][T15039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2045.227988][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2045.238978][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.249363][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2045.261607][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.272229][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2045.284190][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.294934][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2045.306890][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2045.323466][T15039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2045.348145][T15039] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.359465][T15039] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.369268][T15039] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2045.379689][T15039] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2046.055770][ T45] libceph: connect (1)[c::]:6789 error -101 [ 2046.063910][ T45] libceph: mon0 (1)[c::]:6789 connect error [ 2046.117224][T15292] ceph: No mds server is up or the cluster is laggy [ 2046.349052][T15098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2046.806818][T15112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2048.356240][T15315] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2050.647317][T15098] veth0_vlan: entered promiscuous mode [ 2050.804179][T15112] veth0_vlan: entered promiscuous mode [ 2050.993600][T15112] veth1_vlan: entered promiscuous mode [ 2051.682464][T15098] veth1_vlan: entered promiscuous mode [ 2051.713454][T15112] veth0_macvtap: entered promiscuous mode [ 2051.873865][T15112] veth1_macvtap: entered promiscuous mode [ 2052.058525][T13305] libceph: connect (1)[c::]:6789 error -101 [ 2052.066052][T13305] libceph: mon0 (1)[c::]:6789 connect error [ 2052.143210][T15342] ceph: No mds server is up or the cluster is laggy [ 2052.388702][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.399824][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.410871][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.423041][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.433909][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.448360][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.459696][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.471851][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.482748][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2052.493611][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.509637][T15112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2052.601305][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.612272][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.623125][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.635632][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.649529][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.652205][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2052.662575][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.679715][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.691031][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.701436][T15112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2052.712312][T15112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2052.729911][T15112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2052.786557][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2052.817872][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2052.877248][T15112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.886551][T15112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.895896][T15112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.905187][T15112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2052.965236][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2052.984186][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2053.006803][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2053.172930][T15098] veth0_macvtap: entered promiscuous mode [ 2053.250202][T15098] veth1_macvtap: entered promiscuous mode [ 2053.665909][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.676849][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.687154][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.699204][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.709892][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.720883][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.731287][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.742128][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.753494][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.764685][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.776132][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2053.788016][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2053.805370][T15098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2055.156846][ T5792] Bluetooth: hci1: command tx timeout [ 2055.854674][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2055.854795][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2055.854881][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2055.854992][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2055.855081][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2055.855182][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2055.855271][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2055.855374][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2055.855465][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2055.855569][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2055.855666][T15098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2055.855769][T15098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2055.862901][T15098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2057.101887][T15098] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.111230][T15098] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.120312][T15098] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.131179][T15098] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2057.245762][ T5792] Bluetooth: hci1: command tx timeout [ 2057.829631][T15365] 9pnet_fd: Insufficient options for proto=fd [ 2059.047645][T13549] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.235616][T13549] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.297488][T15346] chnl_net:caif_netlink_parms(): no params data found [ 2059.302165][ T5792] Bluetooth: hci1: command tx timeout [ 2059.405347][T13549] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2059.555766][T13549] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2060.570544][T13549] bridge_slave_1: left allmulticast mode [ 2060.576730][T13549] bridge_slave_1: left promiscuous mode [ 2060.583778][T13549] bridge0: port 2(bridge_slave_1) entered disabled state [ 2060.607911][T13549] bridge_slave_0: left allmulticast mode [ 2060.615318][T13549] bridge_slave_0: left promiscuous mode [ 2060.622338][T13549] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.653199][T15383] ceph: No mds server is up or the cluster is laggy [ 2061.409226][ T5792] Bluetooth: hci1: command tx timeout [ 2061.525443][T13549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2061.611120][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 2061.617599][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 2061.647451][T13549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2061.797525][T13549] bond0 (unregistering): Released all slaves [ 2063.038850][T13549] hsr_slave_0: left promiscuous mode [ 2063.169512][T13549] hsr_slave_1: left promiscuous mode [ 2063.179594][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2063.191293][T13549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2063.278755][T13549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2063.287220][T13549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2063.361944][T13549] veth1_macvtap: left promiscuous mode [ 2063.362106][T13549] veth0_macvtap: left promiscuous mode [ 2063.362441][T13549] veth1_vlan: left promiscuous mode [ 2063.380468][T13549] veth0_vlan: left promiscuous mode [ 2064.384917][T13549] team0 (unregistering): Port device team_slave_1 removed [ 2064.586903][T13549] team0 (unregistering): Port device team_slave_0 removed [ 2065.888261][T15346] bridge0: port 1(bridge_slave_0) entered blocking state [ 2065.896626][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 2065.908097][T15346] bridge_slave_0: entered allmulticast mode [ 2065.918000][T15346] bridge_slave_0: entered promiscuous mode [ 2066.028786][T10522] libceph: connect (1)[c::]:6789 error -101 [ 2066.035509][T10522] libceph: mon0 (1)[c::]:6789 connect error [ 2066.082089][T15421] ceph: No mds server is up or the cluster is laggy [ 2066.115207][T15346] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.126888][T15346] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.135085][T15346] bridge_slave_1: entered allmulticast mode [ 2066.146360][T15346] bridge_slave_1: entered promiscuous mode [ 2066.321577][T15346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2066.396285][T15346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2066.720509][T15346] team0: Port device team_slave_0 added [ 2066.789203][T15346] team0: Port device team_slave_1 added [ 2067.193340][T15346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2067.200598][T15346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2067.229114][T15346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2067.263069][T15346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2067.271657][T15346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2067.299845][T15346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2067.803791][T15346] hsr_slave_0: entered promiscuous mode [ 2067.814785][T15346] hsr_slave_1: entered promiscuous mode [ 2067.825605][T15346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2067.833917][T15346] Cannot create hsr debugfs directory [ 2069.551367][T13558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2069.560324][T13558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2069.627748][T10522] libceph: connect (1)[c::]:6789 error -101 [ 2069.636176][T10522] libceph: mon0 (1)[c::]:6789 connect error [ 2069.709342][T15462] ceph: No mds server is up or the cluster is laggy [ 2069.726739][T13558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2069.736667][T13558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2070.089051][T15346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2070.206188][T15346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2070.327518][T15346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2070.416976][T15346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2070.491783][T15472] overlayfs: failed to resolve './file1': -2 [ 2070.669083][T13549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2070.677578][T13549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2070.991892][T13558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2071.001115][T13558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2071.989936][T15346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2072.414407][T15346] 8021q: adding VLAN 0 to HW filter on device team0 [ 2072.639663][T13549] bridge0: port 1(bridge_slave_0) entered blocking state [ 2072.649417][T13549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2072.707752][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2072.717053][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2072.961207][T13549] bridge0: port 2(bridge_slave_1) entered blocking state [ 2072.969009][T13549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.874890][T11712] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2073.889719][T11712] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2073.924724][T11712] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2073.964740][T11712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2073.984554][T11712] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2073.996027][T11712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2076.101844][T11712] Bluetooth: hci0: command tx timeout [ 2076.325807][ T5860] libceph: connect (1)[c::]:6789 error -101 [ 2076.332415][ T5860] libceph: mon0 (1)[c::]:6789 connect error [ 2076.352826][T15502] ceph: No mds server is up or the cluster is laggy [ 2077.733844][T15491] chnl_net:caif_netlink_parms(): no params data found [ 2078.090435][T15346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2078.181895][T11712] Bluetooth: hci0: command tx timeout [ 2078.703335][T15346] veth0_vlan: entered promiscuous mode [ 2078.886152][T15346] veth1_vlan: entered promiscuous mode [ 2079.339839][T15346] veth0_macvtap: entered promiscuous mode [ 2079.418671][T15346] veth1_macvtap: entered promiscuous mode [ 2079.968520][T15491] bridge0: port 1(bridge_slave_0) entered blocking state [ 2079.978463][T15491] bridge0: port 1(bridge_slave_0) entered disabled state [ 2079.993453][T15491] bridge_slave_0: entered allmulticast mode [ 2080.003434][T15491] bridge_slave_0: entered promiscuous mode [ 2080.061793][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.074076][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.088134][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.100921][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.111256][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.123248][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.134009][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.145106][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.155657][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.166571][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.178004][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2080.192699][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.209576][T15346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2080.277642][T15491] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.285732][T15491] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.301748][T15491] bridge_slave_1: entered allmulticast mode [ 2080.311590][T15491] bridge_slave_1: entered promiscuous mode [ 2080.322991][T11712] Bluetooth: hci0: command tx timeout [ 2080.425617][T13502] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.525560][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 2080.530396][T13305] libceph: connect (1)[c::]:6789 error -101 [ 2080.541590][T13305] libceph: mon0 (1)[c::]:6789 connect error [ 2080.569811][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.582923][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.594324][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.611749][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.624721][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.637808][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.649812][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.651440][T15540] ceph: No mds server is up or the cluster is laggy [ 2080.660526][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.660655][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.690003][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.706066][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2080.718663][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2080.735808][T15346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2080.778201][T13502] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2080.807124][T10522] libceph: connect (1)[c::]:6789 error -101 [ 2080.813797][T10522] libceph: mon0 (1)[c::]:6789 connect error [ 2080.968934][T13502] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.043367][T15346] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.052796][T15346] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.062166][T15346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.071501][T15346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2081.105451][T15491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2081.223584][T13502] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2081.302160][T15491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2081.652944][T15491] team0: Port device team_slave_0 added [ 2081.751759][T15491] team0: Port device team_slave_1 added [ 2082.042694][T13502] bridge_slave_1: left allmulticast mode [ 2082.048656][T13502] bridge_slave_1: left promiscuous mode [ 2082.055930][T13502] bridge0: port 2(bridge_slave_1) entered disabled state [ 2082.151792][T13502] bridge_slave_0: left allmulticast mode [ 2082.157761][T13502] bridge_slave_0: left promiscuous mode [ 2082.167341][T13502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.401721][T11712] Bluetooth: hci0: command tx timeout [ 2083.543392][T13502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2083.619053][T13502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2083.637892][T13502] bond0 (unregistering): Released all slaves [ 2085.114038][T15491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2085.121766][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2085.149515][T15491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2085.429266][T13502] hsr_slave_0: left promiscuous mode [ 2085.480887][T13502] hsr_slave_1: left promiscuous mode [ 2085.489478][T13502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2085.498956][T13502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2085.633561][T13502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2085.643006][T13502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2085.872697][T13502] veth1_macvtap: left promiscuous mode [ 2085.878796][T13502] veth0_macvtap: left promiscuous mode [ 2085.887194][T13502] veth1_vlan: left promiscuous mode [ 2085.893099][T13502] veth0_vlan: left promiscuous mode [ 2086.635082][T15574] ceph: No mds server is up or the cluster is laggy [ 2086.647585][ T9860] libceph: connect (1)[c::]:6789 error -101 [ 2086.654258][ T9860] libceph: mon0 (1)[c::]:6789 connect error [ 2086.927636][T13502] team0 (unregistering): Port device team_slave_1 removed [ 2087.035067][T13502] team0 (unregistering): Port device team_slave_0 removed [ 2087.443734][T15491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2087.451881][T15491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2087.481572][T15491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2088.006479][T15491] hsr_slave_0: entered promiscuous mode [ 2088.018872][T15491] hsr_slave_1: entered promiscuous mode [ 2088.035747][T15491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2088.043886][T15491] Cannot create hsr debugfs directory [ 2089.760390][T15491] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2089.846557][T15491] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2089.925757][T15491] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2089.992009][T10522] libceph: connect (1)[c::]:6789 error -101 [ 2089.998635][T10522] libceph: mon0 (1)[c::]:6789 connect error [ 2090.015103][T15491] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2090.019768][T15613] ceph: No mds server is up or the cluster is laggy [ 2091.107338][T15491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2091.333689][T15491] 8021q: adding VLAN 0 to HW filter on device team0 [ 2091.461382][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.469167][ T3583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2091.595586][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.603558][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2092.009571][T15491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2093.064002][ T9860] libceph: connect (1)[c::]:6789 error -101 [ 2093.070555][ T9860] libceph: mon0 (1)[c::]:6789 connect error [ 2093.181295][T15653] ceph: No mds server is up or the cluster is laggy [ 2093.971238][T13536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2093.979369][T13536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2094.135687][T15491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2094.265613][ T3583] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2094.274038][ T3583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2098.163868][T10522] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 2098.284247][T15491] veth0_vlan: entered promiscuous mode [ 2098.438583][T10522] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2098.449786][T10522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2098.497715][T15491] veth1_vlan: entered promiscuous mode [ 2098.563401][T10522] usb 4-1: config 0 descriptor?? [ 2098.970591][T10522] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 2098.979647][T10522] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2099.199424][T10522] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 2099.207486][T10522] [drm] Initialized udl on minor 2 [ 2099.263691][T15491] veth0_macvtap: entered promiscuous mode [ 2099.311359][T10522] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 2099.322364][T10522] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2099.351515][T15491] veth1_macvtap: entered promiscuous mode [ 2099.460496][ T9566] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2099.503437][T10522] usb 4-1: USB disconnect, device number 34 [ 2099.512590][ T9566] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2099.521426][ T9566] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 2099.575566][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.586698][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.598322][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.609323][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.619958][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.632864][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.649135][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.661704][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.673262][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.684568][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.694866][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2099.705898][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.721691][T15491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2099.922641][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.936750][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.955477][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.969256][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2099.982332][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2099.994803][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2100.006424][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2100.018536][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2100.030069][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2100.042506][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2100.058906][T15491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2100.075181][T15491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2100.095901][T15491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2100.133498][T15491] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.144044][T15491] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.159618][T15491] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2100.170898][T15491] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2102.371310][ T45] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 2102.591158][ T45] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2102.601779][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2102.660487][ T45] usb 3-1: config 0 descriptor?? [ 2102.984035][ T45] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 2102.993642][ T45] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2103.084836][ T45] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 2103.092037][ T45] [drm] Initialized udl on minor 2 [ 2103.218797][ T45] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2103.237127][ T45] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2103.251840][ T5860] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2103.269320][ T5860] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2103.278475][ T5860] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2103.336897][ T45] usb 3-1: USB disconnect, device number 14 [ 2106.840658][T15764] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1941'. [ 2109.522523][T13558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2109.532287][T13558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2109.657098][T13549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2109.667508][T13549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2109.714959][T10522] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 2110.067786][T10522] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2110.079025][T10522] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2110.157958][T10522] usb 3-1: config 0 descriptor?? [ 2110.505663][T10522] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 2110.514789][T10522] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2110.668019][T10522] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 2110.675952][T10522] [drm] Initialized udl on minor 2 [ 2110.851305][T10522] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2110.861102][T10522] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2110.874599][ T9566] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2110.943948][ T9566] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2110.953058][ T9566] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 2111.091993][T10522] usb 3-1: USB disconnect, device number 15 [ 2111.625914][ C1] ------------[ cut here ]------------ [ 2111.631904][ C1] WARNING: CPU: 1 PID: 0 at net/mac80211/tx.c:5040 __ieee80211_beacon_get+0x1b66/0x3e40 [ 2111.642319][ C1] Modules linked in: [ 2111.646569][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.14.0-syzkaller #0 [ 2111.655257][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2111.665777][ C1] RIP: 0010:__ieee80211_beacon_get+0x1b66/0x3e40 [ 2111.672663][ C1] Code: 89 d5 44 89 e7 e8 3a ec ef f2 41 89 45 00 e9 88 ee ff ff 44 89 e7 e8 69 f0 ef f2 45 84 ff 0f 85 b1 ee ff ff e8 bb 8f 53 f2 90 <0f> 0b 90 e9 a8 ee ff ff 8b 7d c4 e8 4a f0 ef f2 e9 28 ef ff ff 8b [ 2111.692841][ C1] RSP: 0018:ffff88813fd05970 EFLAGS: 00010246 [ 2111.699263][ C1] RAX: ffffffff8f8a18a5 RBX: 0000000000000000 RCX: ffff888100700000 [ 2111.707669][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2111.716053][ C1] RBP: ffff88813fd05ae0 R08: ffffffff8f8a0739 R09: ffffffff8f89ff45 [ 2111.724436][ C1] R10: 0000000000000003 R11: ffff888100700000 R12: 0000000000000000 [ 2111.732818][ C1] R13: ffff88813fda1c80 R14: ffff88811a915c24 R15: 0000000000000000 [ 2111.741367][ C1] FS: 0000000000000000(0000) GS:ffff88813fd00000(0000) knlGS:0000000000000000 [ 2111.750940][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2111.757820][ C1] CR2: 000000110c4519a7 CR3: 0000000028734000 CR4: 00000000003526f0 [ 2111.766198][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2111.774564][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2111.782976][ C1] Call Trace: [ 2111.786586][ C1] [ 2111.789687][ C1] ? show_trace_log_lvl+0x268/0x3d0 [ 2111.795402][ C1] ? ieee80211_beacon_get_tim+0x84/0x350 [ 2111.801565][ C1] ? show_regs+0xb4/0xe0 [ 2111.806176][ C1] ? __warn+0x2c7/0x780 [ 2111.810913][ C1] ? __ieee80211_beacon_get+0x1b66/0x3e40 [ 2111.817038][ C1] ? report_bug+0x929/0xbd0 [ 2111.822010][ C1] ? __ieee80211_beacon_get+0x1b66/0x3e40 [ 2111.828157][ C1] ? handle_bug+0x6d/0x90 [ 2111.832955][ C1] ? exc_invalid_op+0x1f/0x50 [ 2111.838005][ C1] ? asm_exc_invalid_op+0x1f/0x30 [ 2111.843519][ C1] ? __ieee80211_beacon_get+0x205/0x3e40 [ 2111.849549][ C1] ? __ieee80211_beacon_get+0x9f9/0x3e40 [ 2111.855686][ C1] ? __ieee80211_beacon_get+0x1b65/0x3e40 [ 2111.861901][ C1] ? __ieee80211_beacon_get+0x1b66/0x3e40 [ 2111.868025][ C1] ? filter_irq_stacks+0x60/0x1a0 [ 2111.873521][ C1] ? kmsan_get_metadata+0x13e/0x1c0 [ 2111.879137][ C1] ieee80211_beacon_get_tim+0x84/0x350 [ 2111.885124][ C1] mac80211_hwsim_beacon_tx+0x694/0xc40 [ 2111.891141][ C1] __iterate_interfaces+0x4d6/0x730 [ 2111.896718][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2111.903252][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 2111.909688][ C1] ieee80211_iterate_active_interfaces_atomic+0x3c/0x50 [ 2111.917147][ C1] mac80211_hwsim_beacon+0x11c/0x300 [ 2111.922889][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 2111.929120][ C1] __hrtimer_run_queues+0x564/0xe30 [ 2111.934772][ C1] hrtimer_run_softirq+0x18f/0x750 [ 2111.940230][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2111.946530][ C1] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2111.952798][ C1] ? __pfx_hrtimer_run_softirq+0x10/0x10 [ 2111.958879][ C1] handle_softirqs+0x1a0/0x7c0 [ 2111.964083][ C1] __irq_exit_rcu+0x68/0x180 [ 2111.969038][ C1] irq_exit_rcu+0x12/0x20 [ 2111.973792][ C1] sysvec_apic_timer_interrupt+0x83/0x90 [ 2111.979783][ C1] [ 2111.983039][ C1] [ 2111.986194][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 2111.992664][ C1] RIP: 0010:acpi_safe_halt+0x25/0x30 [ 2111.998432][ C1] Code: 90 90 90 90 90 55 48 89 e5 65 48 8b 04 25 40 60 0a 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 1b 9d 36 00 f3 0f 1e fa fb f4 5d c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 [ 2112.018523][ C1] RSP: 0018:ffff8881006f7db0 EFLAGS: 00000246 [ 2112.025013][ C1] RAX: ffff888100700000 RBX: 0000000000000001 RCX: 0000000000000001 [ 2112.033371][ C1] RDX: ffff888142229c64 RSI: ffffffff91f1ce30 RDI: ffff888142229c64 [ 2112.041737][ C1] RBP: ffff8881006f7db0 R08: ffffea000000000f R09: 00000000000000ff [ 2112.049996][ C1] R10: ffff8880bbb00002 R11: ffffffff90475e70 R12: ffff888104c89800 [ 2112.058378][ C1] R13: ffffffff91f1ceb0 R14: 0000000000000001 R15: 0000000000000001 [ 2112.066757][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 2112.072496][ C1] acpi_idle_do_entry+0x22/0x40 [ 2112.077722][ C1] acpi_idle_enter+0xa1/0xc0 [ 2112.082771][ C1] cpuidle_enter_state+0xbf/0x230 [ 2112.088163][ C1] cpuidle_enter+0x7f/0xf0 [ 2112.093048][ C1] do_idle+0x543/0x740 [ 2112.097471][ C1] cpu_startup_entry+0x65/0x80 [ 2112.103039][ C1] ? __pfx_setup_secondary_APIC_clock+0x10/0x10 [ 2112.109684][ C1] start_secondary+0xcd/0xd0 [ 2112.114743][ C1] common_startup_64+0x12c/0x137 [ 2112.120077][ C1] [ 2112.123418][ C1] ---[ end trace 0000000000000000 ]--- [ 2124.664353][T10522] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 2125.043797][T10522] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2125.053528][T10522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.098644][T10522] usb 5-1: config 0 descriptor?? [ 2125.357109][T10522] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 2125.366177][T10522] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2125.500304][T10522] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 2125.508038][T10522] [drm] Initialized udl on minor 2 [ 2125.589931][T10522] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2125.603131][T10522] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2125.619778][ T9566] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2125.631210][ T9566] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2125.641608][ T9566] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2125.676875][T10522] usb 5-1: USB disconnect, device number 25 [ 2129.165395][T15865] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1975'. [ 2129.179718][T15865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'. [ 2130.033353][T15865] team0 (unregistering): Port device team_slave_0 removed [ 2130.092514][T15865] team0 (unregistering): Port device team_slave_1 removed [ 2132.753210][T10522] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 2133.100049][T10522] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2133.112035][T10522] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.250386][T10522] usb 10-1: config 0 descriptor?? [ 2133.679790][T10522] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 2133.689058][T10522] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2133.866590][T10522] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 2133.876682][T10522] [drm] Initialized udl on minor 2 [ 2134.121055][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2134.127930][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2134.138810][T10522] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2134.148362][T10522] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 2134.264390][ T9566] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2134.672700][ T9566] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2134.681824][ T9566] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 2134.691934][T10522] usb 10-1: USB disconnect, device number 3 [ 2136.271605][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2136.644271][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2136.655862][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2136.905831][ T45] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 2136.920117][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.930155][ T45] usb 3-1: Product: syz [ 2136.934764][ T45] usb 3-1: Manufacturer: syz [ 2136.939637][ T45] usb 3-1: SerialNumber: syz [ 2136.971216][ T45] usb 3-1: config 0 descriptor?? [ 2136.999901][ T45] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 2137.213952][ T45] hid (null): unknown global tag 0x64 [ 2137.219941][ T45] hid (null): unknown global tag 0xe [ 2137.234351][ T45] hid (null): global environment stack underflow [ 2137.242858][ T45] hid (null): unknown global tag 0xc [ 2137.248457][ T45] hid (null): bogus close delimiter [ 2137.254988][ T45] hid (null): report_id 3964 is invalid [ 2137.287906][ T45] hid-generic 0100:0002:3774.0009: unknown main item tag 0x4 [ 2137.295876][ T45] hid-generic 0100:0002:3774.0009: unexpected long global item [ 2137.368392][ T45] hid-generic 0100:0002:3774.0009: probe with driver hid-generic failed with error -22 [ 2137.425955][ T45] usb 3-1: USB disconnect, device number 16 [ 2137.781086][ T5860] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2137.990942][ T5860] usb 7-1: Using ep0 maxpacket: 16 [ 2138.021075][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2138.033880][ T5860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2138.049072][ T5860] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2138.064049][ T5860] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2138.074806][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.262872][ T5860] usb 7-1: config 0 descriptor?? [ 2139.805409][ T5860] usbhid 7-1:0.0: can't add hid device: -71 [ 2139.813752][ T5860] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 2140.099302][ T5860] usb 7-1: USB disconnect, device number 56 [ 2140.720945][ T5860] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 2140.949003][ T5860] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 2140.958758][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2141.083865][ T5860] usb 5-1: config 0 descriptor?? [ 2141.381637][ T5792] Bluetooth: hci4: command 0x0406 tx timeout [ 2141.406542][ T5860] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 2141.415828][ T5860] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 2142.560287][ T5860] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 2142.567526][ T5860] [drm] Initialized udl on minor 2 [ 2142.579188][ T5860] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2142.589647][ T5860] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2142.602936][ T45] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2143.562284][ T45] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 2143.576391][ T45] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 2143.586372][ T5860] usb 5-1: USB disconnect, device number 26 [ 2144.760172][T15949] overlayfs: failed to resolve './file0': -2 [ 2145.731009][T15962] kvm: pic: non byte write [ 2145.861304][T10522] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2146.053237][T10522] usb 10-1: Using ep0 maxpacket: 16 [ 2146.094898][T10522] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2146.107817][T10522] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2146.119135][T10522] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2146.137622][T10522] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2146.149189][T10522] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2146.290007][T10522] usb 10-1: config 0 descriptor?? [ 2146.977746][T10522] usbhid 10-1:0.0: can't add hid device: -71 [ 2146.986329][T10522] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2147.045285][T10522] usb 10-1: USB disconnect, device number 4 [ 2148.736937][T15987] overlayfs: failed to resolve './file0': -2 [ 2149.638104][T15999] Bluetooth: MGMT ver 1.23 [ 2150.011118][T10522] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2150.186127][T10522] usb 5-1: Using ep0 maxpacket: 32 [ 2150.222789][T10522] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2150.238719][T10522] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2150.250623][T10522] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2150.261233][T10522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.379946][T10522] usb 5-1: config 0 descriptor?? [ 2151.417461][T10522] usbhid 5-1:0.0: can't add hid device: -71 [ 2151.424467][T10522] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2151.438187][T10522] usb 5-1: USB disconnect, device number 27 [ 2151.751507][T16023] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2034'. [ 2151.861097][ T9566] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2152.077414][ T9566] usb 4-1: Using ep0 maxpacket: 16 [ 2152.095214][ T9566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2152.107867][ T9566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2152.118457][ T9566] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2152.133491][ T9566] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2152.142979][ T9566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2152.345200][ T9566] usb 4-1: config 0 descriptor?? [ 2153.337734][ T9566] usbhid 4-1:0.0: can't add hid device: -71 [ 2153.344800][ T9566] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2153.533945][ T9566] usb 4-1: USB disconnect, device number 35 [ 2154.887403][T16047] netlink: 'syz.9.2041': attribute type 13 has an invalid length. [ 2155.308834][T16047] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.319025][T16047] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.619222][T16047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2155.662900][T16047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2156.134817][T16047] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.145301][T16047] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.156409][T16047] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.172135][T16047] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.902034][T16051] 9pnet_fd: Insufficient options for proto=fd [ 2157.872596][T16060] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2046'. [ 2158.763264][T16066] overlay: Unknown parameter 'pcr' [ 2161.768265][ T45] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2162.042492][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 2162.094666][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2162.113318][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2162.125229][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2162.139918][ T45] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2162.149834][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2162.337514][ T45] usb 5-1: config 0 descriptor?? [ 2162.977084][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 2162.984161][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2163.091627][ T45] usb 5-1: USB disconnect, device number 28 [ 2163.910959][T16102] sp0: Synchronizing with TNC [ 2164.064333][T16101] [U] è [ 2167.032360][T16127] can: request_module (can-proto-3) failed. [ 2168.418237][T16146] sp0: Synchronizing with TNC [ 2168.513263][T16145] [U] è [ 2172.782045][T16178] sctp: [Deprecated]: syz.4.2086 (pid 16178) Use of int in max_burst socket option deprecated. [ 2172.782045][T16178] Use struct sctp_assoc_value instead [ 2172.954072][T16178] pim6reg1: entered promiscuous mode [ 2172.964229][T16178] pim6reg1: entered allmulticast mode [ 2174.431692][T16199] 9pnet_fd: Insufficient options for proto=fd [ 2174.552766][ T9566] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 2174.778808][ T9566] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2174.840494][ T9566] usb 10-1: not running at top speed; connect to a high speed hub [ 2174.922058][ T9566] usb 10-1: config 4 has an invalid interface number: 147 but max is 0 [ 2174.930859][ T9566] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2174.944076][ T9566] usb 10-1: config 4 has no interface number 0 [ 2175.093376][ T9566] usb 10-1: string descriptor 0 read error: -22 [ 2175.101647][ T9566] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2175.114609][ T9566] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.606013][T13305] usb 10-1: USB disconnect, device number 5 [ 2176.292626][ C1] Unknown status report in ack skb [ 2177.084024][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2106'. [ 2177.144686][T16239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 2177.145717][T11712] Bluetooth: hci1: command 0x0406 tx timeout [ 2177.537283][T16232] dccp_close: ABORT with 36 bytes unread [ 2177.857355][T16245] 9pnet_fd: Insufficient options for proto=fd [ 2178.555836][T16251] netlink: 'syz.3.2110': attribute type 14 has an invalid length. [ 2178.564247][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2110'. [ 2178.573780][T16251] bond0: option xmit_hash_policy: invalid value (8) [ 2179.271252][ T5860] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 2179.488431][ T5860] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2179.508820][ T5860] usb 7-1: not running at top speed; connect to a high speed hub [ 2179.533116][ T5860] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 2179.543347][ T5860] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2179.554375][ T5860] usb 7-1: config 4 has no interface number 0 [ 2179.586455][ T5860] usb 7-1: string descriptor 0 read error: -22 [ 2179.593658][ T5860] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2179.604317][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.915793][T13305] usb 7-1: USB disconnect, device number 57 [ 2181.909416][T16282] dccp_close: ABORT with 36 bytes unread [ 2181.990436][T16285] 9pnet_fd: Insufficient options for proto=fd [ 2183.401263][ C1] Unknown status report in ack skb [ 2184.421177][T13305] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 2185.586726][T13305] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2185.810070][T13305] usb 7-1: not running at top speed; connect to a high speed hub [ 2185.845016][T13305] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 2185.854810][T13305] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2185.868284][T13305] usb 7-1: config 4 has no interface number 0 [ 2185.961857][T13305] usb 7-1: string descriptor 0 read error: -22 [ 2185.971861][T13305] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2185.982710][T13305] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2186.318863][T13305] usb 7-1: USB disconnect, device number 58 [ 2191.871255][ T5860] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 2192.099248][ T5860] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2192.151371][ T5860] usb 3-1: not running at top speed; connect to a high speed hub [ 2192.179693][ T5860] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 2192.188732][ T5860] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.200376][ T5860] usb 3-1: config 4 has no interface number 0 [ 2192.308050][ T5860] usb 3-1: string descriptor 0 read error: -22 [ 2192.320456][ T5860] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2192.331902][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.684757][ T5860] usb 3-1: USB disconnect, device number 17 [ 2195.589449][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2195.600242][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2197.421942][ T5860] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 2197.854150][ T5860] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2197.899212][ T5860] usb 7-1: not running at top speed; connect to a high speed hub [ 2197.962501][ T5860] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 2197.971235][ T5860] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2197.982821][ T5860] usb 7-1: config 4 has no interface number 0 [ 2198.483804][ T5860] usb 7-1: string descriptor 0 read error: -22 [ 2198.491906][ T5860] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2198.502185][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.901323][ T5860] usb 7-1: USB disconnect, device number 59 [ 2201.005317][T16437] 9pnet_fd: Insufficient options for proto=fd [ 2203.449285][T16469] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2193'. [ 2204.107285][T16473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2195'. [ 2204.411749][ T5860] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 2204.609374][ T5860] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2204.650926][T16478] 9pnet_fd: Insufficient options for proto=fd [ 2204.658656][ T5860] usb 7-1: not running at top speed; connect to a high speed hub [ 2204.698668][ T5860] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 2204.715134][ T5860] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2204.726939][ T5860] usb 7-1: config 4 has no interface number 0 [ 2204.939917][ T5860] usb 7-1: string descriptor 0 read error: -22 [ 2204.949018][ T5860] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2204.960480][ T5860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.280193][T13305] usb 7-1: USB disconnect, device number 60 [ 2207.348873][T16502] netlink: 120 bytes leftover after parsing attributes in process `syz.6.2206'. [ 2208.869718][T16512] 9pnet_fd: Insufficient options for proto=fd [ 2209.957932][T16531] netlink: 120 bytes leftover after parsing attributes in process `syz.9.2220'. [ 2210.070997][T13305] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 2210.289321][T13305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2210.322737][T13305] usb 4-1: not running at top speed; connect to a high speed hub [ 2210.376671][T13305] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 2210.385445][T13305] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2210.396084][T13305] usb 4-1: config 4 has no interface number 0 [ 2210.486486][T13305] usb 4-1: string descriptor 0 read error: -22 [ 2210.494426][T13305] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2210.504027][T13305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2210.826032][T13305] usb 4-1: USB disconnect, device number 36 [ 2212.726731][ T5792] Bluetooth: hci0: command tx timeout [ 2217.647220][T16577] Driver unsupported XDP return value 0 on prog (id 263) dev N/A, expect packet loss! [ 2217.792666][T16581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2237'. [ 2219.391409][T13305] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 2219.649545][T13305] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2219.681367][T13305] usb 5-1: not running at top speed; connect to a high speed hub [ 2219.745788][T13305] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 2219.754976][T13305] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2219.768752][T13305] usb 5-1: config 4 has no interface number 0 [ 2219.901313][T16590] xt_CT: No such helper "netbios-ns" [ 2219.979480][T13305] usb 5-1: string descriptor 0 read error: -22 [ 2219.987885][T13305] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2219.998648][T13305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2220.516886][T13305] usb 5-1: USB disconnect, device number 29 [ 2222.355869][T16616] dccp_v6_rcv: dropped packet with invalid checksum [ 2223.103795][T16620] kvm: kvm [16619]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 2223.228891][T16620] kvm: kvm [16619]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 2223.319800][T16620] kvm: kvm [16619]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2224.311084][ T5860] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 2224.580299][ T5860] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2224.651435][ T5860] usb 3-1: not running at top speed; connect to a high speed hub [ 2224.748646][ T5860] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 2224.759890][ T5860] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2224.772247][ T5860] usb 3-1: config 4 has no interface number 0 [ 2224.892614][ T5860] usb 3-1: string descriptor 0 read error: -22 [ 2224.899774][ T5860] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2224.910389][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.239961][ T5860] usb 3-1: USB disconnect, device number 18 [ 2225.376770][T16642] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2225.391753][T16642] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 2225.838102][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2225.850116][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2225.859803][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2225.869279][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2225.879257][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2225.889841][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2225.899604][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2225.913523][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2225.924221][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2225.934675][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2258'. [ 2227.162455][T11712] Bluetooth: hci0: command 0x0405 tx timeout [ 2228.418903][T16674] netlink: 'syz.9.2271': attribute type 1 has an invalid length. [ 2232.344214][T16725] netlink: 'syz.3.2288': attribute type 1 has an invalid length. [ 2234.887044][T16747] kvm: kvm [16745]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 2235.045528][T16747] kvm: kvm [16745]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 2235.124788][T16747] kvm: kvm [16745]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2236.398910][T16765] netlink: 'syz.2.2301': attribute type 1 has an invalid length. [ 2240.652655][T16807] netlink: 'syz.4.2318': attribute type 1 has an invalid length. [ 2243.696916][T16832] kvm: kvm [16831]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 2243.769398][T16832] kvm: kvm [16831]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 2243.857070][T16832] kvm: kvm [16831]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2244.506159][T16843] __nla_validate_parse: 41 callbacks suppressed [ 2244.506263][T16843] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2332'. [ 2249.317794][T16875] kvm: kvm [16873]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 2249.429070][T16875] kvm: kvm [16873]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 2249.519251][T16875] kvm: kvm [16873]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2254.142515][T16928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2364'. [ 2255.142559][T16939] overlayfs: missing 'lowerdir' [ 2257.107524][T16963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2378'. [ 2257.331963][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2257.341653][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2258.280081][T16971] overlayfs: missing 'lowerdir' [ 2259.009644][T16982] overlayfs: missing 'lowerdir' [ 2259.615829][T16986] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2388'. [ 2259.908159][ T5860] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 2260.138801][ T5860] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2260.164713][ T5860] usb 4-1: not running at top speed; connect to a high speed hub [ 2260.211649][ T5860] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 2260.221224][ T5860] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2260.232620][ T5860] usb 4-1: config 4 has no interface number 0 [ 2260.780186][ T5860] usb 4-1: string descriptor 0 read error: -22 [ 2260.787956][ T5860] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2260.797691][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2261.316814][ T5860] usb 4-1: USB disconnect, device number 37 [ 2261.568767][T17002] overlayfs: missing 'workdir' [ 2262.739724][T17013] overlayfs: missing 'lowerdir' [ 2264.664645][T13305] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 2264.971973][T13305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2264.998356][T17042] overlayfs: missing 'workdir' [ 2265.035457][T13305] usb 4-1: not running at top speed; connect to a high speed hub [ 2265.252975][T13305] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 2265.262028][T13305] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2265.272634][T13305] usb 4-1: config 4 has no interface number 0 [ 2265.434496][T13305] usb 4-1: string descriptor 0 read error: -22 [ 2265.441788][T13305] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2265.451444][T13305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2265.944652][T13305] usb 4-1: USB disconnect, device number 38 [ 2266.757158][T17051] overlayfs: missing 'lowerdir' [ 2268.224812][T17070] overlayfs: missing 'workdir' [ 2268.404022][T17069] kvm: kvm [17067]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 2268.467871][T17069] kvm: kvm [17067]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 2268.490328][T17069] kvm: kvm [17067]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2269.148619][T17084] overlayfs: missing 'lowerdir' [ 2269.963188][T13305] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 2270.175014][T13305] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2270.216745][T13305] usb 10-1: not running at top speed; connect to a high speed hub [ 2270.248054][T13305] usb 10-1: config 4 has an invalid interface number: 147 but max is 0 [ 2270.256927][T13305] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2270.267892][T13305] usb 10-1: config 4 has no interface number 0 [ 2270.334896][T13305] usb 10-1: string descriptor 0 read error: -22 [ 2270.343995][T13305] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2270.356371][T13305] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.612570][T13305] usb 10-1: USB disconnect, device number 6 [ 2270.857712][T17102] overlayfs: missing 'lowerdir' [ 2271.701624][T17115] overlayfs: missing 'lowerdir' [ 2271.991613][T17116] kvm: kvm [17111]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 2272.047829][T17116] kvm: kvm [17111]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 2272.134632][T17116] kvm: kvm [17111]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 2274.292777][ T5860] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 2274.315772][T17142] overlayfs: missing 'lowerdir' [ 2274.551352][ T5860] usb 10-1: unable to get BOS descriptor or descriptor too short [ 2274.626192][ T5860] usb 10-1: not running at top speed; connect to a high speed hub [ 2274.704047][ T5860] usb 10-1: config 4 has an invalid interface number: 147 but max is 0 [ 2274.713277][ T5860] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2274.731208][ T5860] usb 10-1: config 4 has no interface number 0 [ 2275.901578][ T5860] usb 10-1: string descriptor 0 read error: -22 [ 2275.908638][ T5860] usb 10-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2275.918735][ T5860] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2277.934249][ T5860] usb 10-1: can't set config #4, error -71 [ 2277.958623][ T5860] usb 10-1: USB disconnect, device number 7 [ 2279.506683][T17180] overlayfs: missing 'workdir' [ 2281.881869][T13305] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 2281.948841][T17188] io-wq is not configured for unbound workers [ 2282.061374][T13305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2282.161764][T13305] usb 4-1: not running at top speed; connect to a high speed hub [ 2282.211905][T13305] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 2282.223960][T13305] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2282.235402][T13305] usb 4-1: config 4 has no interface number 0 [ 2282.417993][T13305] usb 4-1: string descriptor 0 read error: -22 [ 2282.426277][T13305] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 2282.438458][T13305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.867483][T13305] usb 4-1: USB disconnect, device number 39 [ 2289.320026][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2489'. [ 2292.601360][T13305] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 2293.687754][T13305] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2294.514579][T13305] usb 7-1: not running at top speed; connect to a high speed hub [ 2296.223884][T13305] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 2296.232172][T13305] usb 7-1: can't read configurations, error -71 [ 2300.024732][ T5792] Bluetooth: hci0: command 0x0405 tx timeout [ 2309.126563][T17387] batman_adv: batadv0: Adding interface: dummy0 [ 2309.133486][T17387] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2309.164769][T17387] batman_adv: batadv0: Interface activated: dummy0 [ 2309.330068][T17387] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2541'. [ 2309.414150][T17394] batadv0: mtu less than device minimum [ 2309.421932][T17394] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2309.434423][T17394] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2309.446936][T17394] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2309.459612][T17394] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2309.472154][T17394] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2309.484666][T17394] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2309.497244][T17394] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2309.509886][T17394] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2309.522570][T17394] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 2318.485696][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 2318.492942][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 2321.272763][T17510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2590'. [ 2324.916466][T17556] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2608'. [ 2329.153961][T17591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2622'. [ 2329.220141][T17588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2621'. [ 2329.234987][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2621'. [ 2329.245801][T17588] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2621'. [ 2329.320143][ T5792] block nbd0: Receive control failed (result -107) [ 2331.780986][T13305] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2331.994734][T13305] usb 7-1: no configurations [ 2331.999651][T13305] usb 7-1: can't read configurations, error -22 [ 2332.178035][T13305] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2332.393512][T13305] usb 7-1: no configurations [ 2332.401261][T13305] usb 7-1: can't read configurations, error -22 [ 2332.415973][T17628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2637'. [ 2332.421747][T13305] usb usb7-port1: attempt power cycle [ 2332.426668][T17628] nbd: nbd0 already in use [ 2332.802297][T13305] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2332.870916][T13305] usb 7-1: no configurations [ 2332.875829][T13305] usb 7-1: can't read configurations, error -22 [ 2333.031887][T13305] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2333.112835][T13305] usb 7-1: no configurations [ 2333.119591][T13305] usb 7-1: can't read configurations, error -22 [ 2333.151995][T13305] usb usb7-port1: unable to enumerate USB device [ 2336.540986][T13305] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2336.777224][T13305] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2336.786385][T13305] usb 5-1: can't read configurations, error -61 [ 2336.971459][T13305] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2337.199777][T13305] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2337.207919][T13305] usb 5-1: can't read configurations, error -61 [ 2337.258821][T13305] usb usb5-port1: attempt power cycle [ 2337.446081][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2664'. [ 2337.641997][T13305] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2337.707342][T17692] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2664'. [ 2337.740037][T13305] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2337.748318][T13305] usb 5-1: can't read configurations, error -61 [ 2337.921159][T13305] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 2338.049936][T13305] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 2338.059187][T13305] usb 5-1: can't read configurations, error -61 [ 2338.111734][T13305] usb usb5-port1: unable to enumerate USB device [ 2339.039141][T17709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2340.381743][T13305] IPVS: starting estimator thread 0... [ 2340.388545][T17723] net_ratelimit: 10 callbacks suppressed [ 2340.388646][T17723] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2340.511438][T17725] IPVS: using max 192 ests per chain, 9600 per kthread [ 2340.831922][T17731] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2684'. [ 2341.221782][T17287] Bluetooth: hci0: command 0x0405 tx timeout [ 2342.595861][T17756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 2342.605541][T17756] nbd: nbd0 already in use [ 2342.995056][T17761] netlink: 120 bytes leftover after parsing attributes in process `syz.9.2697'. [ 2344.036579][ T1671] kworker/1:2 (1671) used greatest stack depth: 4152 bytes left [ 2345.359148][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2708'. [ 2345.368808][T17788] nbd: nbd0 already in use [ 2345.953454][T17794] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2711'. [ 2346.029550][T17796] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2712'. [ 2351.206225][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2737'. [ 2353.526908][T17882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2746'. [ 2358.259015][T17899] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2751'. [ 2361.509349][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2766'. [ 2367.874688][T18013] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 2368.830319][T18018] ===================================================== [ 2368.839476][T18018] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0xd66/0xe80 [ 2368.847912][T18018] ieee802154_hdr_push+0xd66/0xe80 [ 2368.855728][T18018] ieee802154_header_create+0x9bc/0xc70 [ 2368.862580][T18018] dgram_sendmsg+0xd91/0x15e0 [ 2368.867536][T18018] ieee802154_sock_sendmsg+0x96/0xd0 [ 2368.873283][T18018] __sock_sendmsg+0x30f/0x380 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2368.878236][T18018] ____sys_sendmsg+0x890/0xda0 [ 2368.884434][T18018] ___sys_sendmsg+0x28d/0x3c0 [ 2368.889360][T18018] __x64_sys_sendmsg+0x212/0x3c0 [ 2368.895164][T18018] x64_sys_call+0x2ed6/0x3c30 [ 2368.900082][T18018] do_syscall_64+0xcd/0x1e0 [ 2368.905021][T18018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2368.911357][T18018] [ 2368.913815][T18018] Local variable hdr created at: [ 2368.918898][T18018] ieee802154_header_create+0x4e/0xc70 [ 2368.924917][T18018] dgram_sendmsg+0xd91/0x15e0 [ 2368.929849][T18018] [ 2368.932544][T18018] CPU: 0 UID: 0 PID: 18018 Comm: syz.3.2796 Tainted: G W 6.14.0-syzkaller #0 [ 2368.944199][T18018] Tainted: [W]=WARN [ 2368.948160][T18018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2368.961366][T18018] ===================================================== [ 2368.968516][T18018] Disabling lock debugging due to kernel taint [ 2368.975524][T18018] Kernel panic - not syncing: kmsan.panic set ... [ 2368.982148][T18018] CPU: 0 UID: 0 PID: 18018 Comm: syz.3.2796 Tainted: G B W 6.14.0-syzkaller #0 [ 2368.992598][T18018] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2368.997828][T18018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 2369.008091][T18018] Call Trace: [ 2369.011514][T18018] [ 2369.014697][T18018] dump_stack_lvl+0x216/0x2d0 [ 2369.019577][T18018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2369.025668][T18018] dump_stack+0x1e/0x24 [ 2369.030009][T18018] panic+0x4e2/0xcf0 [ 2369.034161][T18018] ? kmsan_get_metadata+0xf1/0x1c0 [ 2369.039550][T18018] kmsan_report+0x2c7/0x2d0 [ 2369.044294][T18018] ? __msan_memcpy+0x108/0x1c0 [ 2369.049283][T18018] ? ___sys_sendmsg+0x28d/0x3c0 [ 2369.054352][T18018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.060687][T18018] ? __msan_warning+0x95/0x120 [ 2369.065704][T18018] ? ieee802154_hdr_push+0xd66/0xe80 [ 2369.071256][T18018] ? ieee802154_header_create+0x9bc/0xc70 [ 2369.077215][T18018] ? dgram_sendmsg+0xd91/0x15e0 [ 2369.082291][T18018] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 2369.088002][T18018] ? __sock_sendmsg+0x30f/0x380 [ 2369.093088][T18018] ? ____sys_sendmsg+0x890/0xda0 [ 2369.098234][T18018] ? ___sys_sendmsg+0x28d/0x3c0 [ 2369.103294][T18018] ? __x64_sys_sendmsg+0x212/0x3c0 [ 2369.108620][T18018] ? x64_sys_call+0x2ed6/0x3c30 [ 2369.113684][T18018] ? do_syscall_64+0xcd/0x1e0 [ 2369.118581][T18018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.124907][T18018] ? dgram_sendmsg+0xd91/0x15e0 [ 2369.129989][T18018] ? ieee802154_sock_sendmsg+0x96/0xd0 [ 2369.135698][T18018] ? __sock_sendmsg+0x30f/0x380 [ 2369.140778][T18018] ? ____sys_sendmsg+0x890/0xda0 [ 2369.145920][T18018] ? ___sys_sendmsg+0x28d/0x3c0 [ 2369.150980][T18018] ? __x64_sys_sendmsg+0x212/0x3c0 [ 2369.156310][T18018] ? kmsan_get_metadata+0x13e/0x1c0 [ 2369.161766][T18018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2369.167845][T18018] ? ieee802154_hdr_push+0x49/0xe80 [ 2369.173344][T18018] ? filter_irq_stacks+0x60/0x1a0 [ 2369.178627][T18018] ? kmsan_get_metadata+0x13e/0x1c0 [ 2369.184085][T18018] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 2369.190567][T18018] ? kmsan_get_metadata+0x13e/0x1c0 [ 2369.196023][T18018] ? kmsan_internal_memmove_metadata+0x17b/0x230 [ 2369.202595][T18018] ? kmsan_get_metadata+0x13e/0x1c0 [ 2369.208025][T18018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2369.214079][T18018] __msan_warning+0x95/0x120 [ 2369.218895][T18018] ieee802154_hdr_push+0xd66/0xe80 [ 2369.224318][T18018] ? __msan_memcpy+0x108/0x1c0 [ 2369.229311][T18018] ieee802154_header_create+0x9bc/0xc70 [ 2369.235125][T18018] ? __pfx_ieee802154_header_create+0x10/0x10 [ 2369.241464][T18018] dgram_sendmsg+0xd91/0x15e0 [ 2369.246410][T18018] ? __pfx_dgram_sendmsg+0x10/0x10 [ 2369.251783][T18018] ieee802154_sock_sendmsg+0x96/0xd0 [ 2369.257324][T18018] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 2369.263760][T18018] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 2369.270000][T18018] __sock_sendmsg+0x30f/0x380 [ 2369.274921][T18018] ____sys_sendmsg+0x890/0xda0 [ 2369.279920][T18018] ___sys_sendmsg+0x28d/0x3c0 [ 2369.284819][T18018] ? __rcu_read_unlock+0x7b/0xe0 [ 2369.290026][T18018] ? __fget_files+0x42b/0x500 [ 2369.295050][T18018] ? kmsan_get_metadata+0x13e/0x1c0 [ 2369.300586][T18018] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 2369.306663][T18018] __x64_sys_sendmsg+0x212/0x3c0 [ 2369.311839][T18018] ? kmsan_get_metadata+0x13e/0x1c0 [ 2369.317290][T18018] x64_sys_call+0x2ed6/0x3c30 [ 2369.322181][T18018] do_syscall_64+0xcd/0x1e0 [ 2369.326906][T18018] ? clear_bhb_loop+0x25/0x80 [ 2369.331818][T18018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2369.337949][T18018] RIP: 0033:0x7f227a78d169 [ 2369.342544][T18018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2369.362393][T18018] RSP: 002b:00007f227b563038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2369.371055][T18018] RAX: ffffffffffffffda RBX: 00007f227a9a5fa0 RCX: 00007f227a78d169 [ 2369.379210][T18018] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 2369.387350][T18018] RBP: 00007f227a80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 2369.395495][T18018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2369.403636][T18018] R13: 0000000000000000 R14: 00007f227a9a5fa0 R15: 00007ffe78e50ff8 [ 2369.411803][T18018] [ 2369.415255][T18018] Kernel Offset: disabled [ 2369.419686][T18018] Rebooting in 86400 seconds..