last executing test programs: 13m23.340982335s ago: executing program 32 (id=10): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x22000) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x8}, 0x0, &(0x7f0000000680)={0x7fc, 0x7f, 0x800000, 0x3, 0x7, 0xc3ad, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x5, 0x0, 0x100000000000000, 0x100000000000003c, 0x200, 0xd, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x10000d, 0x7, 0x7, 0x0, 0x5, 0x9}, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r6}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}, @TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xffffff6e, 0xa}}}]}]}, 0x8c}}, 0x0) 13m22.961427271s ago: executing program 33 (id=5): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e28}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)='\x00\x00', 0x2, r5) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffb07, @loopback}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x80, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7811e592b60f914e, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x34424752, 0x2, 0xfffffffe}}) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000240)=0x1) 11m7.621555966s ago: executing program 34 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000001000008500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000baa8b4c80aa416a1b6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r2, 0x0, 0x7}, 0x38) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x11, r3, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) write$uinput_user_dev(r5, 0x0, 0x0) ioctl$UI_DEV_CREATE(r5, 0x5501) write$uinput_user_dev(r5, &(0x7f00000005c0)={'syz0\x00', {0x8000, 0xdf3, 0x6, 0x4}, 0x54, [0x9, 0x2, 0x3, 0xa15b, 0x4, 0xa0, 0x3, 0xc, 0x0, 0x3, 0x7, 0x6, 0x8, 0xfa, 0x400, 0x4, 0x3a0, 0x7, 0x9, 0x0, 0x0, 0x5, 0x5b, 0x3, 0x70, 0x5, 0xf2, 0x10001, 0x2cbc, 0x6, 0x0, 0x3, 0x6, 0x6, 0x5, 0x1, 0x9, 0x7, 0x2, 0xc, 0x70, 0x4, 0x6, 0x3, 0xffffab8b, 0x80, 0x8, 0x3ff, 0x7, 0x8, 0x9, 0x7, 0x9, 0x39, 0x7, 0x1000, 0x59, 0x0, 0x9, 0x10, 0x9, 0x6, 0x1ff, 0xd6], [0x2, 0x3, 0x40000, 0x8, 0xe, 0x3c95, 0x4c, 0x80000000, 0xd, 0x8, 0x0, 0x8, 0x9, 0x400, 0x70, 0x7, 0x0, 0xa86, 0x2, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x4, 0xc, 0x8, 0x3, 0x2, 0x6a63, 0x0, 0x1, 0x1, 0x6, 0xd70, 0x3, 0x3, 0x0, 0x9, 0x6, 0x2b, 0x40, 0x10000, 0xfffffff7, 0x8, 0x1, 0xfffff3df, 0x4, 0x2, 0x9, 0x58, 0x2, 0xc72, 0x7, 0xa9d, 0x4, 0xd, 0x1, 0x8, 0x80000000, 0xd, 0x7, 0x5], [0xffffffff, 0xffff, 0x7, 0x8000, 0x9, 0xfff, 0x1, 0x6, 0x400, 0x0, 0x9, 0xb9, 0xfffffff9, 0x8, 0x4, 0x3, 0x1, 0xfffffffe, 0x5, 0x1, 0x8, 0xe, 0xfffffffb, 0x4, 0x6, 0x6, 0xf5, 0x0, 0x1ff, 0x4, 0x81, 0x190, 0x3, 0x7fffffff, 0xe, 0x0, 0x3ff, 0x3, 0x3, 0x3, 0x7fffffff, 0x8, 0xfff, 0x400, 0x7, 0xffff, 0x7, 0x31, 0x271, 0x83c, 0x13f, 0xfba, 0x1, 0x1, 0x7, 0x401, 0x3, 0xda6, 0xc1, 0x4a2, 0x1, 0x5, 0x8, 0x101], [0x200, 0x4, 0x8, 0x4, 0x6, 0xf07f, 0xa1c, 0x0, 0x7, 0x5, 0x0, 0x3, 0x4, 0x5, 0x3, 0x5, 0xf, 0x8000, 0x401, 0xff, 0x7ff, 0x54, 0x1, 0xe6f8, 0x8, 0x80000000, 0x400, 0x1d1, 0x80, 0x576c925, 0x8799, 0x4, 0xd1, 0xdc, 0x2d2, 0x6, 0x9, 0x4, 0x7fff, 0x32, 0x40, 0x0, 0xf, 0x1e, 0x2, 0x9ad7, 0x0, 0x3, 0x0, 0x0, 0x2, 0x7c1, 0x1, 0xe, 0xc9f, 0x1, 0xc, 0x3, 0xffff2f8d, 0x401, 0x1ff, 0x7ff, 0xbfb2, 0x9]}, 0x45c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) syz_emit_ethernet(0x124, &(0x7f0000000140)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xab, "2db1", "001000", 0x883e, "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"}}}}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) userfaultfd(0x1) 10m49.261854775s ago: executing program 35 (id=285): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = syz_io_uring_setup(0x893, &(0x7f00000003c0)={0x0, 0xaee1, 0x0, 0x0, 0x1a3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r2, 0x0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0, 0x40000000, 0x1}) io_uring_enter(r3, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) 10m16.920622869s ago: executing program 3 (id=356): socket$can_raw(0x1d, 0x3, 0x1) socket$pptp(0x18, 0x1, 0x2) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2942, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={0x0}) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r1}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)}) 10m16.23472382s ago: executing program 3 (id=358): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80000041, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10m15.156646844s ago: executing program 3 (id=361): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x8}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40041}, 0x0) 10m14.194897906s ago: executing program 3 (id=363): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) 10m13.366918694s ago: executing program 3 (id=365): mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x83d2, 0x9, 0x1, {0xb, @sliced={0x7, [0x1, 0xfffe, 0x4, 0x3, 0x101, 0xfff, 0x4, 0x6, 0x71, 0x5, 0x6, 0xdd, 0x4, 0x84a, 0x7, 0x3ff, 0x8, 0x101, 0x7, 0x3, 0x7f, 0x7, 0x3, 0x0, 0x6, 0x5, 0x1000, 0x1, 0x7, 0x101, 0x304, 0x4, 0x71, 0x6, 0x9, 0xfff6, 0x9b, 0xff92, 0x53, 0xae, 0x7, 0xc0, 0x8, 0x9, 0x8, 0xb, 0x3, 0x8], 0x9}}, 0x3}) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 10m12.584904901s ago: executing program 3 (id=366): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) 9m56.928872135s ago: executing program 36 (id=366): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c) 8m11.282876242s ago: executing program 0 (id=559): socket$can_raw(0x1d, 0x3, 0x1) socket$pptp(0x18, 0x1, 0x2) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2942, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x2ac}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x20) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], 0x0, &(0x7f0000000200), &(0x7f00000001c0)}) 8m10.510990289s ago: executing program 0 (id=561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000906010200000000000000000200ffff08000940000000390900020073797a3100000000050001000700000014000880100007800c00018008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 8m9.816628286s ago: executing program 0 (id=564): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x1000, 0x3010, 0x2, 0x2000}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044, 0x1}) io_uring_enter(r1, 0x47b9, 0x3e80, 0xc, 0x0, 0x0) 8m8.866257191s ago: executing program 0 (id=567): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x6, 0xfffa}, 0x1d, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x403, 0x7f, 0x6, 0x49, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xfffffefd, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x4, 0x3c5b, 0x1, 0x24, 0x5, 0x1, 0x1f461e2c, 0x12, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x80000001, 0x71, 0x7, 0xb, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0xd4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2ff, 0x3, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x8, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x4, 0x8000, 0x2009, 0x0, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x3ff, 0x8000, 0x1, 0xfe000000, 0xffff, 0x5, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x101, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x6, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0xffff, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x100, 0x6, 0x1c, 0x120010, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x2, 0x5, 0xce7, 0x80000000, 0x2, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0xae1, 0xaf5, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x204, 0xffff3441, 0xfff]}, 0x45c) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000001a40)={0x1f, 0xffff, 0x4}, 0x2) lseek(0xffffffffffffffff, 0xa, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b) 8m3.320192175s ago: executing program 0 (id=575): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32], 0x3}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 8m2.00628934s ago: executing program 0 (id=579): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7m46.017530062s ago: executing program 37 (id=579): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB], 0x9) socket(0x2000000000000021, 0x2, 0x10000000000002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 7m4.451613377s ago: executing program 8 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, 0x0, 0x0) pwrite64(r0, &(0x7f0000000100)="4d0979a6edd455ba7421fca08b7a9ccd8a41bc66db02a241cce6608b1ea2ffe04af0666931049a0cfa38", 0x2a, 0x0) 7m3.874818534s ago: executing program 8 (id=689): syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x275a, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7m0.20986692s ago: executing program 8 (id=695): r0 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc2}, &(0x7f0000000500)={0x0, "8c5c5ac62e62728fdd3ca426de5578a896c2f15ac4ac6319f3209ba85ac5562ee03a8874bebf26c4d039aa750d23c006e23c9c0a3a5072204b1f95ed265eda4c", 0x13}, 0x48, 0xfffffffffffffffe) add_key(&(0x7f0000000340)='pkcs7_test\x00', 0x0, 0x0, 0x0, r0) 6m59.430858667s ago: executing program 8 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)={0x2c, r1, 0x309, 0x70bd22, 0x25dfdc01, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}}, 0x24040804) 6m58.722883561s ago: executing program 8 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x90}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x48, 0x10, 0x401, 0x0, 0xfffffffc, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x5}]}]}, 0x48}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) fsetxattr(r4, &(0x7f0000000080)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000080)={@private, @initdev, 0x0}, &(0x7f00000000c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private0, @in=@rand_addr=0x64010101, 0x4e21, 0x1, 0x4e24, 0x1, 0xa, 0xa0, 0x0, 0x2b, r5}, {0x1, 0x4, 0x101, 0xa9f, 0xf, 0x100000001, 0xe7, 0x321}, {0x3, 0x8, 0x8, 0x80000000}, 0x8, 0x6e6bb5, 0x1, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d3, 0x2b}, 0x2, @in=@local, 0x3502, 0x4, 0x3, 0xe, 0xfffffffd, 0x81, 0x3c}}, 0xe8) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 6m56.765897953s ago: executing program 8 (id=706): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xa, 0x0) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r5, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r4, 0x0, 0x0) 6m38.399491741s ago: executing program 38 (id=706): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e25}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0xa, 0x0) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={0x0}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r5, 0x6) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r4, 0x0, 0x0) 6m36.717565912s ago: executing program 2 (id=729): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x30, 0x0, &(0x7f0000000900)) 6m34.719134897s ago: executing program 2 (id=732): syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x1000, 0x1, 0x2dd}, &(0x7f00000029c0), &(0x7f0000002a00)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x105000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x1e) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum={0x0, 0x0, 0x0, 0x10}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x4, [{0x0, 0x2}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) unlink(&(0x7f0000000180)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, &(0x7f0000000340)='./file1\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r2) 6m28.056374252s ago: executing program 2 (id=736): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000007000000000000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70200000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x206000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 6m23.514152404s ago: executing program 2 (id=737): r0 = socket$inet6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001ac0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_EXIT_PERIODIC_INQ={{}, 0x81}}}, 0x7) syz_emit_ethernet(0x26, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x4, 0x19}]}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6m21.382982865s ago: executing program 2 (id=743): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYBLOB="2a130200fbffffff"], 0x34}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m19.635152787s ago: executing program 2 (id=747): syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x275a, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 6m4.04323797s ago: executing program 39 (id=747): syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.swap.events\x00', 0x275a, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r6 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m49.205619139s ago: executing program 5 (id=1568): epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000180)="af4fd73a", 0xffffffffffffff19, 0x840, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000340)=0x20000000, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m47.765823658s ago: executing program 5 (id=1572): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000003ac0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xfffffffd, 'ip6_vti0\x00'}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1m46.292352588s ago: executing program 5 (id=1579): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201000000"], 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x20, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @ldst={0x1, 0x3, 0x4, 0x6, 0x5, 0xfffffffffffffffc, 0xfffffffffffffff7}, @ldst={0x3, 0x2, 0x6, 0x0, 0x9, 0xfffffffffffffffc, 0x10}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query, @map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x7ff, 0x95, &(0x7f0000000240)=""/149, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x4, @void, @value}, 0x94) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000540), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2, 0x0, 0x0, 0x40}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8004}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) 1m45.626962303s ago: executing program 5 (id=1581): socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f, 0x0, 0x0, @void, @value}, 0x20) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1m44.634707731s ago: executing program 5 (id=1586): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xa000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0], 0x8, 0x3, 0x4, 0x2}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x0, r1, 0x4, 0x2, 0x1c}) close(r0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={r4, r3, r2, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r5}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)={0x3, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000680)={0x2, r6}) syz_open_dev$media(&(0x7f0000000940), 0x8001, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000009c0)) 1m43.718890937s ago: executing program 5 (id=1590): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) syz_emit_ethernet(0x22, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 1m28.387498597s ago: executing program 40 (id=1590): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) syz_emit_ethernet(0x22, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}}) 21.612950835s ago: executing program 9 (id=1845): syz_init_net_socket$netrom(0x6, 0x5, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) 12.250043841s ago: executing program 4 (id=1867): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af8295", 0x13c}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="14010000220001002100000000000000020100800c0000000000000000000000140002"], 0x114}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 10.208810176s ago: executing program 4 (id=1872): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x20, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.275769279s ago: executing program 7 (id=1875): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x84, r1, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x66, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0xf, 0x1, 0x3, 0x0, 0x0, 0x1}}, 0x0, @random=0x80, 0x188, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @val={0x6, 0x2, 0xfffe}, @val={0x5, 0x3, {0x7, 0xda, 0x2}}, @val={0x25, 0x3, {0x0, 0x6c, 0x7}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x1, 0x5, 0xa9, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0xda, 0xffffffffffffffff, 0x8d, 0x41}}, @val={0x76, 0x6, {0xe, 0x39, 0x3, 0x2}}, [{0xdd, 0x6, "a10528ee2771"}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8890}, 0x20040000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) shutdown(r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x0, 0x6}, 0x1d, [0x8000, 0x78, 0xf, 0x9, 0x80, 0x2, 0x203, 0x7e, 0x6, 0x4b, 0x39cc1919, 0x40, 0x9, 0x5, 0xffff2d37, 0xffffffff, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0x5, 0x3c5b, 0x1, 0x4, 0x9, 0x3, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0x407, 0x5, 0x1, 0x5, 0x9, 0x3a, 0x7, 0x6, 0x6, 0xfffbffff, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x4, 0x9, 0x8, 0x7, 0x21, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x200c7, 0xf9, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffc, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x78, 0xea4, 0x0, 0x4, 0x24, 0x8000, 0x40009, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x6, 0x2007, 0xd, 0x1, 0xfe000000, 0xffff, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0xffff], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0x8d2, 0x9, 0x800003, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x0, 0x3e7, 0xa, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x800003, 0x200, 0x80, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x10000, 0xffff, 0x2b98, 0x6, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0x3, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x14c, 0x60a6, 0x6, 0x6, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x1, 0x0, 0x8, 0x8, 0x30b1d693, 0xa1f, 0xc, 0x800007, 0xfffffffe, 0x3, 0x0, 0x4, 0x8000007, 0x2bf, 0x3, 0x200, 0xffff3441, 0x2]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) 8.659631298s ago: executing program 4 (id=1878): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x800}]}}]}, 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000ec0)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESOCT, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRESHEX], 0xff, 0xc2d, &(0x7f00000001c0)="$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") r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0xfc, 0x0, 0x1, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) 7.946876295s ago: executing program 7 (id=1880): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000001440)={@local, @empty, 0x0, "513cd4cc40ac7f23c0709a177674ed0af53959b350f13ba74439c35a52e4b81c", 0x4, 0x3, 0x100, 0x5}, 0x3c) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, 0x0, 0x0, 0xadc) 7.065261399s ago: executing program 9 (id=1882): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)={0x64, 0x0, 0x4d1b20c6161d1adb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @broadcast}]}, 0x64}}, 0x0) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 6.865205119s ago: executing program 4 (id=1883): mmap(&(0x7f000069c000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x7ae2c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) ftruncate(0xffffffffffffffff, 0x200004) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1f00, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x7, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.547259221s ago: executing program 1 (id=1884): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{}, &(0x7f0000000d00), &(0x7f0000000d40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 6.044411463s ago: executing program 6 (id=1886): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(0xffffffffffffffff, 0x2, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 5.939756763s ago: executing program 7 (id=1887): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x2}, 0x2c, [0x0, 0x101, 0x0, 0xfffffffd, 0x6, 0x2, 0xfffffffc, 0x3, 0x0, 0x7fffffff, 0xfffffffe, 0xc0, 0x0, 0x0, 0x8, 0x0, 0x4000, 0x10, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x84fd, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5f1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x4, 0x0, 0x7ff, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xe, 0x0, 0x2, 0x20, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x400, 0x40000000, 0x80000, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2, 0x3, 0x7, 0x0, 0x0, 0x80000000, 0xffff], [0x4, 0x20e4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x8, 0x80, 0x100, 0x0, 0x0, 0x0, 0x2, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0x0, 0x0, 0xffffffff, 0x20, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r6, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r5}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0xc0189436, &(0x7f0000000140)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) close(r0) 5.594722649s ago: executing program 1 (id=1888): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x20, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.376552285s ago: executing program 4 (id=1889): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) 5.326911869s ago: executing program 9 (id=1890): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_io_uring_setup(0xec6, &(0x7f0000000c00)={0x0, 0x31f0, 0x2, 0xfffffffe, 0xfffffffd}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x140d, 0x10a5, 0x47, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002a00)=@getchain={0x64, 0x66, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0x9}, {0xd, 0xf}, {0x6, 0x7}}, [{0x8}, {0x8, 0xb, 0x40d}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0xfffa}]}, 0x64}}, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x60) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000002000)={'#! ', './file0', [{0x20, ',\xeaZu\xad\x8b\x1bo\xb5\xaa\t\x8d\x8f6j\\\xb0i\xd0{\xe8\xbd\x94\xe6\xd4[\xa3\x111\xb3\x93\xc9\x16eRuA{\f\xd4qf\a\xc4,V\x04U\x83hspb\xd5\xfa\xe2\xc9e\xc1\xbd:|\x15\xf4\x91\x13\xb6\x06\xc9\xb5D\a6\x11\xc9\x06\xc7\xcc\xfa\xf8\vBp9DCxf7\xcf\x14\xf9\xafFD\xbaz\xdd\x06(c\xb2\xa4.K.fxd\x1b]\xff\x9e'}, {0x20, '\t\x1b\x1c\x1e\xc3h$\xb0^\xc1\xab/\xb9\xf0\x13\xed\xd2\x05\xdfn{q\xac\xca\'\xef\xb0*\x11j=\xfb\x06$pY\x1cD\xd4\xf3\x98\xc6\xa1\x88\x9c\xe4\r9\xd3\x06L\xbf\x1a\xf1}M79?L\x98e\f\xb5\x0f\xfb\bH\xa8V\xc9ty\xdaJ9E-\xd0Z\xf4\x9b\xa0\xf5\x92\x06\x1b\x81\x03\xb7\xb0\xe3\x88\x85}G\xd9\x05\x85Jn\xf7\xf0\xae\xf7\xe22\x80[\xc62\'\x8e\xafC!b\x12\x9e\xd6\x0fW\x03\xf2c\xa5\x98h\xf9H\xa2\xa8\x83\xcb\x1c\xdd\xdc\xd2}\xfezZ\xc5\xd0ua\xd7\x06\x00\xa8\xf27\x8cU\xc4\x11\x1e\"`\x06Y\xafZ\xefK\xb1\xf0\x99\xd6\x1b\xed\xf5\xb7@/\x9d\x11\x9b\xe5\x9dP\xff\x99w\x81\xca,\x9a\xfc\a\x99\f\b%\x90\xd5\xd8\xb7\xc07#\xb7\xb5\xfc!i/\x05\x865\xeawWV+\xcc\x8c\xd3\xb5\x03\xff\xe0\x00'/233}, {0x20, '\x00{aU<7*g\xa0W\x110\xba\'\xd8\xad\xe4\x87\x0f\xbd\x0f\x1d\xfd\xbf]8\x0e\x1d\t\x12\xa2L\xb6i\x03\r\bYK8\xc9c\x99\x03\x00\x00\x00\x01\xc8r\n\x80\x04!\x80j\x9f\xb6s\xed1\x96\xc5\x16\x0f|h\xa8\xc9]\xfc\x1c\x97\aQMP\xf8\f\x91\xcf\x90\xad\xbf\xc1:\x96\xe8n\xb7)m\x9e\xc81\x85qL\x06\x81\xa0\x1d\xd2\xc7\xe9\xe8V\xc4\x88I\xdb\xdd\xb1\x98yC\v\x9d\x1e\xad\xcbQ\x02\x00\x00\x00\x00\x00\x00\x00\x86\x01;+\xea,a\x94\xce\xb0h\xaf!^\xe9I\xf2\xd5u\x9c\xab^\n\xe1{B#uTb\xdb\xdc<\x00\x8d\xc6\xdc{)\xa5\xa9D5\xe9\x8a\xc3\xcc\xad\xa5\xd1\xef\xb3\xe7\x8cZ\xdb(\xbb\tV\xda\x05Iz\x04\xbe\xf1^\xe7%\x0e\xf1[|2r\\\x03\xea0\x03\x93@\xae\xba \"\xa5\'Q\x98!+\xb6\xa8\x8d\xd0\x7f\x12\xfay\xa7\xa0\x13f\x0f&\'\xe2\x15\xa7\n\x1a\xf7\x00\xea\x994*.a\n\xf7[~\xe8\x81\xd53}\xc4\x86V[O\xe0\xa2\xd7\xdc\xc5\x0e\xc7\xf2\xec\x13\x8e\xcen\xd8\x00mqc\x9e\x83x\xe6#\x99TJ\xa6\b$\x9c\x97\xac+\x90|\xc5\x1d\x03m\xc5\xd9\x91\xd5\xde\xe2\xa8^\xfeIju.w\xa9\xb1\x8b\xe5JM\xca\xa3\t)\xa8\xbb\xb6\x12lJ\xfb\"\xba\x8b\xe7V\x0eZRc\xe0\xe6\x13\x06\x8c\x1f\xe93q\xfe\xd6tTW\x13\r\xcd\x9c\x92\xf2\xa6\xd8=|\xb7\xe8\xd0\xe1\xbc\xa2\xf5\xdf\xbd\xdb\xb8n\xad{s\x85OU!\x94\xdf\xc9j\x8d\xe1=\xa5d\x81\xeb\xc0\x01N\x04\x84\xe1\xb4\x84\xdd#\xe22\xd99Uc\xeex\xaa`\xe3\xf5\xd5X\xa0\x1d\"\x94J6\x96\xb6OM$\xf6>t\xd0S\x81\xb4\xc9l[\xa4D\xe6/Q\x8d\x16\x00\xf6o*w\xd6\xe2\xac\x15\xfd\vl=\xd9\xfb$\x86@\x7f\xdb\xc1\xe7b\x96OY\xf2\xeceC\x89\x93$C\xcc\xc1\x80I%\xe6\xe0\x14\x0f\x92@y\xc6'}, {0x20, '\xa4\xdfy\xf5Y\xbf\xd9i@8\\\x87h\xa6\xa0\xa43\x84\xe7\xd5\x98\xe8\x01\xd3\xf0\xc72\xdf\xfb\x00\xfd\xcd\xf2q\x84\xcb-\xf3\x92\x12\xef^~v\x10/X\x1e\xc3\xb1T\xf4\xd0m|\xabr\xc7L\x9b3\xbeCJ\xad!\xb2\xb5g\x7f\xe9W\a\x00\x03=q\x8a\x83|\\w\xe1\xf3\xf1\xe8\x83\xef\xe2\x8bU\xebG4<\x1b\a57<;\xefm:?\x8e\x16\tu\xd5=\xc6P5\xd7\xeci\xcaI\x15\x00]\xc6%\x94&9\xac\xa9\xe9k\x99qc2\xc6V6\x1e\x1c\xeb\x9e\xc78\xb4y+\x85\xc4\xfa.\x15\xe4\x11\xa2\x92\t\xde\xa9\xdc\xe1\xfd\x98\xd2Ja\'r4\xe3sFv\x02\xa6\x8exO\xd0D\x8ea\xc3g\xe5V|@1\x15H4(\xb8E\xa4\xa9\x8bp:\x82k/.:\xf6\x003G(\xd4\xfc\xa0\x01\xe3Q\x805?\br\xc2\x96(y\x8c\x95\xf2Rx\xca\x06\xea\xf43\xf2/8L\xd3u\x87m\x96\xfc\x9cU]\xffiN\x14\xe7-{\xea\x9f\'D\xc0\xeeqA\x1a\xed\x8d\xc8\xad\xcdZS\x1b\xb6{\xfa\xa8\x84\nd=\x0e\x8fc9\xf0\x7fK\xd7\b\x86r\xac\xaf\xd0\xb6^y\xc5\x03c\xc22\xa9R\x90\x9e\xfc\xce\x957O\x06]\xdcZ\x17\xb3\x1bb\xc9Dm\xa2\xd3\x91'}]}, 0x49f) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x18, 0x0, 0xf9a) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000029c0)={0x20, 0x3e, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0xc, 0x11a, 0x0, 0x1, [@nested={0x8, 0xa, 0x0, 0x1, [@generic="ef0771c3"]}]}]}, 0x20}}, 0x0) 5.05589983s ago: executing program 6 (id=1891): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) gettid() sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000340001002dbd7000fedbdb250100000008000700020000008addc2256efd2ef75038d1ccfb276aecdf01d997cf4eef603fd3dc2383545eb85f6c25e83d4385920ea3c749174ea269871897654a158b4a1377eff776fb032a6742ab33012a627fe89072ab3486773cb90672a2d4fcef1d0eeeff4c4db36374c40f87f6a6bbb0e007a2d0686a71721607facc7e6f13668087bbf5a0e9bc3d9293dd8d5d13058cb70e80f4a56c019585cf216ca3d2404e6bdf4ac8e235945f1520252d14572b92"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000026000000000000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) openat$procfs(0xffffff9c, &(0x7f0000002d00)='/proc/meminfo\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x122, &(0x7f0000000800)={0xa, 0x4e22, 0xfff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000003580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000fc0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x80, 0x0, 0x0, &(0x7f0000001140)}}], 0x3, 0x40) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000005c0)={0x2, {0x2, 0x5, 0x7, 0xffff, 0x5}}) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000180)={0x9, 0x0, 0x3, 0x8}) 4.894097032s ago: executing program 7 (id=1892): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000ac0)=@deltfilter={0x24, 0x2d, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x8}, {0x6, 0xf}, {0xc, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x5000}, 0x40) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x24040840) 3.937600297s ago: executing program 7 (id=1893): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r0 = openat$rtc(0xffffff9c, 0x0, 0x1, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) madvise(&(0x7f00009f2000/0x4000)=nil, 0x4000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000661000/0x1000)=nil, 0x1000) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x1, 0x0, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000002540)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet6(0xa, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020b404a1bc4000010203010902240001010930060904007e010301030c09210a000340000192078c00000000000000"], 0x0) 3.694198193s ago: executing program 1 (id=1894): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000380)={@val={0x1c, 0xf5}, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x0, @mcast2, @local, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xf, 0x8, 0x3, 0x9}}}}}, 0x46) 3.559180549s ago: executing program 6 (id=1895): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000780)={[{@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x1}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@fat=@quiet}, {@nodots}, {@fat=@flush}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@nfs}, {@dots}, {@fat=@tz_utc}, {@dots}, {@dots}, {@fat=@showexec}, {@fat=@sys_immutable}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000300)="$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") open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="0000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 3.40558193s ago: executing program 9 (id=1896): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getpeername$packet(r1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000340)={0x6, &(0x7f0000000300)=[{0xc542, 0x6, 0xae, 0xa8}, {0xbf, 0xe5, 0x7, 0x89}, {0x9, 0xc, 0x3, 0xfffff520}, {0xd, 0xc5, 0xf6, 0x2}, {0x9, 0x5, 0x1, 0x29bac28e}, {0x6, 0x0, 0x4, 0x8001}]}) r2 = syz_clone(0x100, &(0x7f0000000400)="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", 0x1000, &(0x7f0000001400), &(0x7f0000001440), &(0x7f0000001480)="f579c7f50ea280ed6b6ff4a1e246d4392745e1eaec00ca8ae6213f0c9872a9644048edd125a025afc05b0d9a07") setpriority(0x2, r2, 0x5) r3 = syz_io_uring_setup(0x69a5, &(0x7f00000014c0)={0x0, 0x9d44, 0x400, 0x1, 0x151, 0x0, r1}, &(0x7f0000001540)=0x0, &(0x7f0000001580)) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x300000c, 0x11, r0, 0x10000000) r6 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001600)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0xbc, &(0x7f00000015c0)=[r6], 0x1, 0x0, 0x0, {0x0, r7}}) r8 = syz_usb_connect$cdc_ecm(0x6, 0x7b, &(0x7f0000001640)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x4, 0x10, 0x6b, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x9, {{0x7, 0x24, 0x6, 0x0, 0x0, "b2f0"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x40, 0xdc}, [@obex={0x5, 0x24, 0x15, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x51}, @acm={0x4, 0x24, 0x2, 0x9}, @country_functional={0x10, 0x24, 0x7, 0x5, 0x6, [0x40, 0x8, 0x4, 0x8, 0xd44]}, @obex={0x5, 0x24, 0x15, 0x100}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x1, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x9, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xff, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f00000016c0)={0xa, 0x6, 0x310, 0x8, 0x81, 0xff, 0x20, 0x3}, 0xa1, &(0x7f0000001700)={0x5, 0xf, 0xa1, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xf, 0x7, 0x7, 0xd59}, @generic={0x3a, 0x10, 0x3, "bd722ed01a53f926a803ae1ebdd48fd38e28d4918888a58eb50c617cc77c4f65ba6fa7b5aa108c13a1c938a1ae4ef1f9d4b57e549e340c"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9a05c558beba96088d4759633fd4c509"}, @generic={0x47, 0x10, 0x2, "ae98299863c444e12484ae0f9604992fffd79130030896cc054cda146c671b6e68d0a8d6976a5f6187e0128b6b34f148a367715403080d6ac0db7bbd1908b444c425df74"}]}, 0x5, [{0x55, &(0x7f00000017c0)=@string={0x55, 0x3, "d65f4cb1b3e434bbaca6fdac9b109dd5b27491900345906e08286ebff09e5bbc7476dadbf1a037985b1d7f7fd62b2b174b714970cc47adb728b770eea685d6d8176ba2fb9efece59bf45f977556921f45db8e5"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x424}}, {0xdd, &(0x7f0000001880)=@string={0xdd, 0x3, "01d49af44bd62d78bcf73ceb04ec74e122d3fa2e22ed74a40c14f089728d3ab0fe5c18fad9a8e0dfb6e19258f7d5b5cbb8f561783907c3f9a8b9290a31c5f8e1d4ba4579852cd2cf16a2f550baf2a60cd216da15d7749c5696a0bef2398a0b54529a71a5c2d58cd430f635feb261c31f3a63094228b86bb4b3249915f1a40558af20809583d6ee6257f4ecd8f35649f3e71794013e7a1d6117b49e9a384bf9997079c61014d39d55f5161d4b9c01544af46c05afaf6c524279d41d11bd21d7c6326f8e0bcb6408e0825adc756e150f7071998c3f9954b0405cd631"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x408}}]}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000001b40)={0x14, &(0x7f0000001a80)={0x0, 0xb, 0x64, {0x64, 0x21, "2adceb1d5c676081c4f0799dd9c8c3fa444e38b901d4b893ea28c124011c7c1385d0f9e7b49d67ad89a2b3c49b511b5b74ddf44d95d2daf4a0ecd8c734d1063ca0766eb62130eda1b9136c836787a91d6c92beb00cfe82b8ee951313d205ffde9788"}}, &(0x7f0000001b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001d00)={0x1c, &(0x7f0000001b80)={0x20, 0x28, 0xe9, "b3a7a019554b022b8d9764c0c9daf1854f5181b29ac69639d8f71f41e6f39b8ace5f7a1a9ab33d70f905f6c5b5743565198fd690895ebf0357dca8d3f5a2ee24e05cfe75dae6dfd16ffbf1c3ad1e44ac7acfd3216d5225bfe532a47a98ceaaeef4fac8de4b0f7f31c3466f8f08f788092c3ff7932296196d4dc70201889d5e6ba528b3ac6e9f6e7b20a1f8cf89ec5e398d7723806eba2914aba20c51ee07a741fa2c48945ff71969b4fc4b1fd64113a26b2027f472df7ff0ec93a033b3e5e54f1d9df3fb99595c07db7893c4359fc8e2843b229e6842bf376c043b6ebdda0af536a6ff2d0184fcaa50"}, &(0x7f0000001c80)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001cc0)={0x0, 0x8, 0x1, 0x8}}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001d40)={r1, r1}) syz_io_uring_setup(0x59bc, &(0x7f0000001d80)={0x0, 0xb421, 0x10, 0x1, 0x283, 0x0, r3}, &(0x7f0000001e00), &(0x7f0000001e40)) setrlimit(0x4, &(0x7f0000001e80)={0xfffffffffffffffe, 0x9587}) openat(r0, &(0x7f0000001ec0)='./file0\x00', 0x100, 0x1dc) r9 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001f00), 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(r9, 0x5000940b, &(0x7f0000001f40)={{r10}, "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"}) 2.542147818s ago: executing program 6 (id=1897): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYBLOB="9a"], 0x20}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000200)={'wlan1\x00', @broadcast}) 2.18733248s ago: executing program 1 (id=1898): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="032304000000fcffffff0c000000", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) 1.882499249s ago: executing program 6 (id=1899): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r1}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mknodat(r0, 0x0, 0x8460, 0x24b1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}, {@version_u}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2000, 0xa3) 1.571380679s ago: executing program 1 (id=1900): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000300)={0x64, 0x0, 0x4d1b20c6161d1adb, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:inetd_child_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @broadcast}]}, 0x64}}, 0x0) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.527125089s ago: executing program 9 (id=1901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x6d8a, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r2}, &(0x7f0000000180), &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 651.327927ms ago: executing program 6 (id=1902): mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='ncpfs\x00', 0x2000000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10}]) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfffffffffffffddf, &(0x7f0000000200)=ANY=[]) syz_usb_control_io(r2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x800000000000001) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x81) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800006, &(0x7f0000000440)=ANY=[@ANYBLOB='force,force,uid=', @ANYRESHEX=0x0, @ANYRES64, @ANYRESHEX=0xee01, @ANYBLOB=',nobarrier,decompose,nls=macgreek,nobarrier,\x00'], 0x3, 0x6b4, &(0x7f0000001f80)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+3Y+eN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm012x2Tiv3v+oaL//Ya9eajdT1b611XobjGzZTw6sLOxLMlUX/7ONDluj+6umqp9Lq/09omIl7jJhxweJg3Fb3qC/Wjnq0Fhr+8ctsGfdrq+bG0wmB1NfXcvPAWnODg8/M4zfluem/u7FAQAAAE/LyO/yw555kAe5lUO7Ew4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8OhT1MwOLZmoNylMpBs//7ww9U78z5nAf03tXqtl3nxl3IAAAAAAAAADwWI49yIPcyqHB8nJR/eb/UrVwuHr9XN7OzcxlMSdzK7NZylIWM5Nkcqijzq3ZpaXFmY1r/jLlmsvLy7ebNU+PXPP02rj66wMd9T8NNjQCAAAAAAAAgM+sH+X86u//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwFxTJvnpWTYcH5cm02kkOJOkUUyvNO2MNdnsObFX5592LAwAAAMal28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a8dxVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudTJch16q2l3dGi0P3aSdSPeKbNTvNbYZo4uN/Nyi37RzPeGyWrL969kZLrJfZmNZ4fzPnpfeYyRZtJauQd1eHWUcnH9SI+U84PNvMz1T59uznd4K21tJvo/L5cGe9+Rh+X8y//4y8WrrRvXrl65eWLv7EaPaP0+0RvKxIvbysRCmYn+Y2Riy1uMu6fTZKM+i+7sbPlSte6hzOc7eTOXM5czmc5MzmY6X8vp9HJ6KK8vbJ3X6lhr7exYO/6lplBek342dG3aNRObVZR5fXYor8Nnusmqbvid1Sw9t40sFZ2MztI/R4bS/kJTKMf48dAVZ/zWZ2JmKBPPb52JX/93OcnNhRvXFq/OvrXN8V5u5uVh+97ac/NvnsgG7VyzueX+8lz5j5X6sjG8d5R1zw/q1uWr0/zi0m46W1PXSXU813UPO1LLno7cGdVTXffiyFF6Vd3Robo1n3LyZhZWPoU0dv0gBWAbDr5ysNO93/1b94PuT7pXuxcOfHPi7MQXO9n/1/af9v2u9dvW14tX8kF+mEPjjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rXZhYW5xT1YSOsJd3hnZNUgFfU7nRFtjmUPZOOTUZjYao/6ferHNW2yemccMXezaTy7W0h7F8aayIiqCyvvdJPWSjxJru2RB9wBT8Oppetvnbr5zrtfmb8++8bcG3M3Tp8989qZ3ldnbp+6Mr8wN12/No3bYw4WeKJWPwaMOxIAAAAAAAAAAABgu3bjzxtGDFv0x7CtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwCfT+dezv58iM9Mnp8vle3d7C+U0KK+2bCdpJSl+kBQfJ+dST5kc6q7YbJxX73/0q5ff/7C32ld70L61br0//Ht5eYdb0W+mTCXZ18wfbmJb/V0a6q+/w8BqxcoWlgk7PkgcjNv/AwAA///KMwVg") open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 640.529488ms ago: executing program 1 (id=1903): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)) 415.783872ms ago: executing program 4 (id=1904): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x20, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x20000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 111.128707ms ago: executing program 9 (id=1905): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='netfs_sreq\x00', r1}, 0x18) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mknodat(r0, 0x0, 0x8460, 0x24b1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}, {@version_u}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2000, 0xa3) 0s ago: executing program 7 (id=1906): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0xa000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000180)={0x0, 0x0, 0x4, 0x2, 0x1c}) close(r0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000380)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000600)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000640)={0x3, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f0000000680)={0x2, r1}) syz_open_dev$media(&(0x7f0000000940), 0x8001, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000009c0)) kernel console output (not intermixed with test programs): nr_sectors = 1 limit=0 [ 689.438222][ T8824] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 689.450817][ T8824] syz.7.708: attempt to access beyond end of device [ 689.450817][ T8824] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 689.468705][ T8824] syz.7.708: attempt to access beyond end of device [ 689.468705][ T8824] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 689.481856][ T8824] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 689.491775][ T8824] syz.7.708: attempt to access beyond end of device [ 689.491775][ T8824] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 689.504997][ T8824] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 689.516280][ T8824] syz.7.708: attempt to access beyond end of device [ 689.516280][ T8824] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 689.530169][ T8824] syz.7.708: attempt to access beyond end of device [ 689.530169][ T8824] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 689.543395][ T8824] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 689.553315][ T8824] syz.7.708: attempt to access beyond end of device [ 689.553315][ T8824] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 689.571040][ T8824] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 689.581859][ T8824] syz.7.708: attempt to access beyond end of device [ 689.581859][ T8824] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 689.595170][ T8824] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 689.605109][ T8824] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 689.614824][ T8824] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 694.982262][ T30] audit: type=1326 audit(1746045706.827:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8851 comm="syz.5.718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6cd38e969 code=0x0 [ 695.084131][ T11] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 695.274939][ T11] usb 3-1: device descriptor read/64, error -71 [ 696.357374][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 697.238793][ T11] usb 3-1: device descriptor read/64, error -71 [ 697.375108][ T11] usb usb3-port1: attempt power cycle [ 697.695157][ T5796] Bluetooth: hci0: command 0x0406 tx timeout [ 697.794147][ T1650] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 697.817852][ T11] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 698.014120][ T1650] usb 10-1: Using ep0 maxpacket: 32 [ 699.050417][ T1650] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 699.074383][ T11] usb 3-1: device descriptor read/8, error -71 [ 699.287866][ T1650] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 699.301852][ T1650] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 699.312518][ T1650] usb 10-1: Product: syz [ 699.317236][ T1650] usb 10-1: Manufacturer: syz [ 699.322251][ T1650] usb 10-1: SerialNumber: syz [ 700.293366][ T1650] usb 10-1: config 0 descriptor?? [ 700.326620][ T8863] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 706.225474][ T1650] usb 10-1: can't set config #0, error -110 [ 706.655195][ T7311] usb 10-1: USB disconnect, device number 6 [ 707.397321][ T8885] 9pnet_fd: Insufficient options for proto=fd [ 707.677858][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f17cc00: rx timeout, send abort [ 708.178801][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f17c000: rx timeout, send abort [ 708.687513][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f17c000: abort rx timeout. Force session deactivation [ 710.297680][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 710.337133][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 710.373007][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 710.405067][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 710.427683][ T5797] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 713.355111][ T5796] Bluetooth: hci3: command tx timeout [ 716.164844][ T5796] Bluetooth: hci3: command tx timeout [ 716.257070][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 716.263994][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 717.074292][ T1650] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 717.194735][ T8896] chnl_net:caif_netlink_parms(): no params data found [ 717.286248][ T1650] usb 10-1: device descriptor read/64, error -71 [ 717.709792][ T1650] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 717.964939][ T1650] usb 10-1: device descriptor read/64, error -71 [ 718.113432][ T1650] usb usb10-port1: attempt power cycle [ 719.081004][ T5796] Bluetooth: hci3: command tx timeout [ 721.168038][ T5796] Bluetooth: hci3: command tx timeout [ 721.434446][ T1650] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 722.277336][ T1650] usb 10-1: device descriptor read/8, error -71 [ 723.324944][ T8896] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.332757][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.340973][ T8896] bridge_slave_0: entered allmulticast mode [ 723.351203][ T8896] bridge_slave_0: entered promiscuous mode [ 723.524560][ T8896] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.532350][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.540600][ T8896] bridge_slave_1: entered allmulticast mode [ 723.644636][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880509ec800: rx timeout, send abort [ 723.732907][ T8896] bridge_slave_1: entered promiscuous mode [ 724.153225][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880509ec800: abort rx timeout. Force session deactivation [ 724.318152][ T8896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.608381][ T8896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 725.806682][ T8896] team0: Port device team_slave_0 added [ 725.966193][ T8896] team0: Port device team_slave_1 added [ 726.285660][ T5797] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 726.294579][ T5797] Bluetooth: hci5: Injecting HCI hardware error event [ 726.302527][ T5797] Bluetooth: hci5: hardware error 0x00 [ 728.715852][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.723240][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.750195][ T8896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.314644][ T5797] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 730.703222][ T8896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.710690][ T8896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.743335][ T8896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.095626][ T8896] hsr_slave_0: entered promiscuous mode [ 734.113976][ T8896] hsr_slave_1: entered promiscuous mode [ 734.123239][ T8896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 734.131235][ T8896] Cannot create hsr debugfs directory [ 734.647630][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050a00a00: rx timeout, send abort [ 735.156339][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050a00a00: abort rx timeout. Force session deactivation [ 738.280355][ T9002] syz.9.759 (9002): drop_caches: 2 [ 739.162870][ T30] audit: type=1326 audit(1746045750.977:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9003 comm="syz.5.761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6cd38e969 code=0xffff0000 [ 740.451381][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f186e00: rx timeout, send abort [ 740.563425][ T8896] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 740.635466][ T8896] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 740.723495][ T8896] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 740.810814][ T8896] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 740.952281][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805080b600: rx timeout, send abort [ 740.961648][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f186e00: abort rx timeout. Force session deactivation [ 741.461096][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805080b600: abort rx timeout. Force session deactivation [ 741.637191][ T3831] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.911291][ T3831] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.139007][ T3831] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.408978][ T3831] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 742.676145][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 742.694735][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 742.714106][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 742.732871][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 742.755023][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 743.341057][ T3831] bridge_slave_1: left allmulticast mode [ 743.347548][ T3831] bridge_slave_1: left promiscuous mode [ 743.354832][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.485120][ T3831] bridge_slave_0: left allmulticast mode [ 743.491317][ T3831] bridge_slave_0: left promiscuous mode [ 743.498449][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.019008][ T9028] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 744.215806][ T5883] IPVS: starting estimator thread 0... [ 744.312501][ T9030] IPVS: using max 192 ests per chain, 9600 per kthread [ 744.896695][ T9033] 9pnet_fd: Insufficient options for proto=fd [ 744.921991][ T5796] Bluetooth: hci4: command tx timeout [ 745.087955][ T3831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.700620][ T3831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 745.762633][ T3831] bond0 (unregistering): Released all slaves [ 746.457265][ T8896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.000241][ T5796] Bluetooth: hci4: command tx timeout [ 747.127844][ T8896] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.681680][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.689519][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.915854][ T3831] hsr_slave_0: left promiscuous mode [ 747.962387][ T3831] hsr_slave_1: left promiscuous mode [ 747.971439][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.979834][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.057598][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.066794][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.287709][ T3831] veth1_macvtap: left promiscuous mode [ 748.294019][ T3831] veth0_macvtap: left promiscuous mode [ 748.300261][ T3831] veth1_vlan: left promiscuous mode [ 748.306511][ T3831] veth0_vlan: left promiscuous mode [ 748.402519][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ffd0600: rx timeout, send abort [ 748.911283][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ffd0600: abort rx timeout. Force session deactivation [ 749.094365][ T5796] Bluetooth: hci4: command tx timeout [ 750.757202][ T9052] netlink: 'syz.9.776': attribute type 10 has an invalid length. [ 751.121792][ T3831] team0 (unregistering): Port device team_slave_1 removed [ 751.158628][ T5796] Bluetooth: hci4: command tx timeout [ 751.775972][ T3831] team0 (unregistering): Port device team_slave_0 removed [ 752.775721][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.783401][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 753.551934][ T8896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 753.567506][ T8896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 755.941872][ T9018] chnl_net:caif_netlink_parms(): no params data found [ 756.856094][ T8896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.588104][ T9018] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.596000][ T9018] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.610378][ T9018] bridge_slave_0: entered allmulticast mode [ 759.623140][ T9018] bridge_slave_0: entered promiscuous mode [ 759.821976][ T9018] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.829915][ T9018] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.838075][ T9018] bridge_slave_1: entered allmulticast mode [ 759.848219][ T9018] bridge_slave_1: entered promiscuous mode [ 760.445789][ T9018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.533155][ T9084] netlink: 24 bytes leftover after parsing attributes in process `syz.9.781'. [ 760.574911][ T9018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.784321][ T9086] netlink: 'syz.9.781': attribute type 4 has an invalid length. [ 761.076833][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880509c6a00: rx timeout, send abort [ 761.177897][ T9018] team0: Port device team_slave_0 added [ 761.289207][ T9018] team0: Port device team_slave_1 added [ 761.510261][ T9079] syz.7.782 (9079): drop_caches: 2 [ 761.577735][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880509c7c00: rx timeout, send abort [ 761.586921][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880509c6a00: abort rx timeout. Force session deactivation [ 761.949718][ T8896] veth0_vlan: entered promiscuous mode [ 762.000377][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.008837][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.035448][ T9018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.086627][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880509c7c00: abort rx timeout. Force session deactivation [ 762.154655][ T8896] veth1_vlan: entered promiscuous mode [ 762.283275][ T9018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.290849][ T9018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.317535][ T9018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.231849][ T9100] netlink: 'syz.9.789': attribute type 309 has an invalid length. [ 763.261349][ T9018] hsr_slave_0: entered promiscuous mode [ 763.272314][ T9018] hsr_slave_1: entered promiscuous mode [ 763.281942][ T9018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.295174][ T9018] Cannot create hsr debugfs directory [ 763.389504][ T8896] veth0_macvtap: entered promiscuous mode [ 763.446665][ T3831] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.760732][ T3831] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.857799][ T8896] veth1_macvtap: entered promiscuous mode [ 764.020317][ T3831] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.243267][ T9109] syz.7.791 uses obsolete (PF_INET,SOCK_PACKET) [ 764.328490][ T3831] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.379102][ T9110] Bluetooth: MGMT ver 1.23 [ 764.593282][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.605309][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.615623][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.630931][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.642413][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.654178][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.665431][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.676242][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.692089][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.206792][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.217938][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.228345][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.245315][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.255709][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.266710][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.277093][ T8896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.288039][ T8896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.304511][ T8896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.531946][ T3831] bridge_slave_1: left allmulticast mode [ 765.538295][ T3831] bridge_slave_1: left promiscuous mode [ 765.550892][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.642078][ T3831] bridge_slave_0: left allmulticast mode [ 765.653332][ T3831] bridge_slave_0: left promiscuous mode [ 765.660414][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.062165][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880509e1600: rx timeout, send abort [ 766.456624][ T3831] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.480621][ T3831] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.538892][ T3831] bond0 (unregistering): Released all slaves [ 766.560168][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880509e0000: rx timeout, send abort [ 766.574678][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880509e1600: abort rx timeout. Force session deactivation [ 766.767497][ T8896] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.782730][ T8896] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.793462][ T8896] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.802792][ T8896] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.068964][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880509e0000: abort rx timeout. Force session deactivation [ 768.874001][ T3831] hsr_slave_0: left promiscuous mode [ 768.937072][ T3831] hsr_slave_1: left promiscuous mode [ 768.945931][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.953933][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.107830][ T3831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.116224][ T3831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.302793][ T5797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 769.348137][ T5797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 769.358703][ T5797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 769.375776][ T5797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 769.388861][ T5797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 769.526180][ T3831] veth1_macvtap: left promiscuous mode [ 769.532031][ T3831] veth0_macvtap: left promiscuous mode [ 769.544180][ T3831] veth1_vlan: left promiscuous mode [ 769.549839][ T3831] veth0_vlan: left promiscuous mode [ 771.714517][ T5797] Bluetooth: hci5: command tx timeout [ 772.946076][ T3831] team0 (unregistering): Port device team_slave_1 removed [ 773.036844][ T3831] team0 (unregistering): Port device team_slave_0 removed [ 773.769856][ T5797] Bluetooth: hci5: command tx timeout [ 774.589738][ T9018] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 774.699107][ T9018] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 774.969383][ T9018] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 775.207080][ T9018] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 775.734062][ T9179] 9pnet_fd: Insufficient options for proto=fd [ 775.880759][ T5797] Bluetooth: hci5: command tx timeout [ 777.100348][ T5046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.203354][ T9138] chnl_net:caif_netlink_parms(): no params data found [ 777.326793][ T5046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.493136][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.500123][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.570007][ T5046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.780627][ T5046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.924909][ T5797] Bluetooth: hci5: command tx timeout [ 778.422353][ T9018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.495156][ T9018] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.568647][ T1650] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 778.758384][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.766169][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.820357][ T1650] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 778.829413][ T1650] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 778.841226][ T1650] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 778.852942][ T1650] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 778.868177][ T1650] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 778.883059][ T1650] usb 10-1: config 0 interface 0 has no altsetting 0 [ 778.941299][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.949043][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.001497][ T5046] bridge_slave_1: left allmulticast mode [ 779.008297][ T5046] bridge_slave_1: left promiscuous mode [ 779.016035][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.043365][ T1650] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 779.053202][ T1650] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 779.065909][ T1650] usb 10-1: Product: syz [ 779.070454][ T1650] usb 10-1: Manufacturer: syz [ 779.076815][ T1650] usb 10-1: SerialNumber: syz [ 779.104306][ T1650] usb 10-1: config 0 descriptor?? [ 779.113020][ T9196] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 779.134704][ T1650] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 779.167373][ T5046] bridge_slave_0: left allmulticast mode [ 779.173352][ T5046] bridge_slave_0: left promiscuous mode [ 779.180307][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.219071][ T1650] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 779.862181][ T9209] 9pnet_fd: Insufficient options for proto=fd [ 780.074024][ T5046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.157368][ T5046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.204613][ T5046] bond0 (unregistering): Released all slaves [ 780.577999][ T9138] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.588368][ T9138] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.602056][ T9138] bridge_slave_0: entered allmulticast mode [ 780.619978][ T9138] bridge_slave_0: entered promiscuous mode [ 780.865823][ T5046] hsr_slave_0: left promiscuous mode [ 780.924868][ T5046] hsr_slave_1: left promiscuous mode [ 780.941158][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.950748][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 781.005591][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 781.017277][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.189107][ T5046] veth1_macvtap: left promiscuous mode [ 781.195531][ T5046] veth0_macvtap: left promiscuous mode [ 781.202427][ T5046] veth1_vlan: left promiscuous mode [ 781.211631][ T5046] veth0_vlan: left promiscuous mode [ 781.999159][ T11] usb 10-1: USB disconnect, device number 11 [ 782.065966][ T11] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 784.545165][ T5046] team0 (unregistering): Port device team_slave_1 removed [ 784.643534][ T5046] team0 (unregistering): Port device team_slave_0 removed [ 785.076020][ T9228] netlink: 24 bytes leftover after parsing attributes in process `syz.5.830'. [ 785.106405][ T9138] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.114513][ T9138] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.122978][ T9138] bridge_slave_1: entered allmulticast mode [ 785.133080][ T9138] bridge_slave_1: entered promiscuous mode [ 785.626558][ T9138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.651454][ T9229] netlink: 'syz.5.830': attribute type 10 has an invalid length. [ 785.740627][ T9138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.784854][ T9229] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 785.796222][ T9229] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 786.006603][ T9234] 9pnet_fd: Insufficient options for proto=fd [ 786.296076][ T9138] team0: Port device team_slave_0 added [ 786.363961][ T7311] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 786.535791][ T7311] usb 10-1: device descriptor read/64, error -71 [ 786.628174][ T9138] team0: Port device team_slave_1 added [ 786.824440][ T7311] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 786.977078][ T7311] usb 10-1: device descriptor read/64, error -71 [ 787.188739][ T7311] usb usb10-port1: attempt power cycle [ 787.336648][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.344312][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.372181][ T9138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.404530][ T9138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.411756][ T9138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.438470][ T9138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.615933][ T7311] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 787.709603][ T7311] usb 10-1: device descriptor read/8, error -71 [ 787.840219][ T9138] hsr_slave_0: entered promiscuous mode [ 787.851116][ T9138] hsr_slave_1: entered promiscuous mode [ 787.860740][ T9138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 787.869937][ T9138] Cannot create hsr debugfs directory [ 787.887865][ T9018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.042863][ T7311] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 788.088670][ T7311] usb 10-1: device descriptor read/8, error -71 [ 788.205651][ T7311] usb usb10-port1: unable to enumerate USB device [ 790.105471][ T9138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 790.163139][ T9138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 790.317517][ T9138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 790.433284][ T9018] veth0_vlan: entered promiscuous mode [ 790.486064][ T9138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 790.601833][ T9018] veth1_vlan: entered promiscuous mode [ 791.904551][ T9018] veth0_macvtap: entered promiscuous mode [ 792.911931][ T9018] veth1_macvtap: entered promiscuous mode [ 793.626490][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.637456][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.647870][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.658838][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.669206][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.680187][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.696048][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.722702][ T9138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.859481][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.870577][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.881569][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.892527][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.902734][ T9018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.914910][ T9018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.930964][ T9018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.067299][ T9284] team0 (unregistering): Port device team_slave_0 removed [ 794.105439][ T9284] team0 (unregistering): Port device team_slave_1 removed [ 794.446920][ T9018] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.456335][ T9018] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.465757][ T9018] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.475064][ T9018] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.580593][ T9138] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.852979][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.860809][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.009066][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.016845][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.699484][ T1650] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 795.927266][ T1650] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 795.936193][ T1650] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 795.947838][ T1650] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 795.963249][ T1650] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 795.976004][ T1650] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 795.990317][ T1650] usb 8-1: config 0 interface 0 has no altsetting 0 [ 796.100137][ T1650] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 796.110025][ T1650] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 796.120157][ T1650] usb 8-1: Product: syz [ 796.124901][ T1650] usb 8-1: Manufacturer: syz [ 796.129795][ T1650] usb 8-1: SerialNumber: syz [ 796.190307][ T1650] usb 8-1: config 0 descriptor?? [ 796.206660][ T9297] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 796.254050][ T1650] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 796.337744][ T1650] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 798.149955][ T9138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.963020][ T1650] usb 8-1: USB disconnect, device number 12 [ 799.101825][ T1650] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 804.012556][ T9138] veth0_vlan: entered promiscuous mode [ 804.192599][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 804.207582][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 804.221678][ T9138] veth1_vlan: entered promiscuous mode [ 804.235833][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 804.268903][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 804.289279][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 804.451711][ T9138] veth0_macvtap: entered promiscuous mode [ 804.767358][ T9138] veth1_macvtap: entered promiscuous mode [ 805.167864][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.181808][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.192692][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.203875][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.214200][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.225133][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.235411][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.246364][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.262403][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.476004][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.488369][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.499103][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.510117][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.520581][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.531547][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.541825][ T9138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.552756][ T9138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.568725][ T9138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.623078][ T1650] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 805.700522][ T9138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.712840][ T9138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.722293][ T9138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.731632][ T9138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.824932][ T1650] usb 8-1: device descriptor read/64, error -71 [ 806.149156][ T1650] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 806.286914][ T1650] usb 8-1: device descriptor read/64, error -71 [ 806.405739][ T5797] Bluetooth: hci3: command tx timeout [ 806.415490][ T1650] usb usb8-port1: attempt power cycle [ 806.571778][ T9361] chnl_net:caif_netlink_parms(): no params data found [ 806.629212][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.9.864'. [ 806.639429][ T9377] netlink: 56 bytes leftover after parsing attributes in process `syz.9.864'. [ 806.852603][ T1650] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 806.877588][ T1650] usb 8-1: device descriptor read/8, error -71 [ 807.136931][ T1650] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 807.191833][ T1650] usb 8-1: device descriptor read/8, error -71 [ 807.226352][ T8879] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.331077][ T1650] usb usb8-port1: unable to enumerate USB device [ 807.469830][ T8879] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.673030][ T8879] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.797890][ T8879] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.487270][ T5797] Bluetooth: hci3: command tx timeout [ 808.498491][ T8879] bridge_slave_1: left allmulticast mode [ 808.504814][ T8879] bridge_slave_1: left promiscuous mode [ 808.511599][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.659592][ T8879] bridge_slave_0: left allmulticast mode [ 808.666031][ T8879] bridge_slave_0: left promiscuous mode [ 808.672815][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.810762][ T8879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.870068][ T8879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.905629][ T8879] bond0 (unregistering): Released all slaves [ 810.490248][ T8879] hsr_slave_0: left promiscuous mode [ 810.517761][ T8879] hsr_slave_1: left promiscuous mode [ 810.526690][ T8879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.534683][ T8879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.576329][ T5797] Bluetooth: hci3: command tx timeout [ 810.580150][ T8879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.590111][ T8879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.640858][ T8879] veth1_macvtap: left promiscuous mode [ 810.647721][ T8879] veth0_macvtap: left promiscuous mode [ 810.656381][ T8879] veth1_vlan: left promiscuous mode [ 810.662057][ T8879] veth0_vlan: left promiscuous mode [ 811.608415][ T8879] team0 (unregistering): Port device team_slave_1 removed [ 811.684211][ T8879] team0 (unregistering): Port device team_slave_0 removed [ 812.054392][ T9361] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.062092][ T9361] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.070209][ T9361] bridge_slave_0: entered allmulticast mode [ 812.151607][ T9361] bridge_slave_0: entered promiscuous mode [ 812.271767][ T9361] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.280617][ T9361] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.288602][ T9361] bridge_slave_1: entered allmulticast mode [ 812.298548][ T9361] bridge_slave_1: entered promiscuous mode [ 812.647297][ T5797] Bluetooth: hci3: command tx timeout [ 812.714922][ T7311] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 812.818210][ T9361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.841669][ T9361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.941226][ T7311] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 812.950006][ T7311] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 812.962573][ T7311] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 812.974788][ T7311] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 812.986312][ T7311] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 813.000103][ T7311] usb 8-1: config 0 interface 0 has no altsetting 0 [ 813.167252][ T9420] netlink: 'syz.9.875': attribute type 1 has an invalid length. [ 813.177109][ T9420] netlink: 224 bytes leftover after parsing attributes in process `syz.9.875'. [ 813.223165][ T7311] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 813.233138][ T7311] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 813.242201][ T7311] usb 8-1: Product: syz [ 813.247076][ T7311] usb 8-1: Manufacturer: syz [ 813.251952][ T7311] usb 8-1: SerialNumber: syz [ 813.284312][ T9361] team0: Port device team_slave_0 added [ 813.368439][ T7311] usb 8-1: config 0 descriptor?? [ 813.382832][ T9416] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 813.439073][ T7311] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 813.506454][ T9361] team0: Port device team_slave_1 added [ 813.552057][ T7311] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 813.874184][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.885977][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.914225][ T9361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.215013][ T9361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.222397][ T9361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.249218][ T9361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.780761][ T9361] hsr_slave_0: entered promiscuous mode [ 814.791684][ T9361] hsr_slave_1: entered promiscuous mode [ 814.802565][ T9361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 814.811486][ T9361] Cannot create hsr debugfs directory [ 815.061608][ T1650] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 815.281498][ T1650] usb 10-1: device descriptor read/64, error -71 [ 815.323253][ T7592] usb 8-1: USB disconnect, device number 17 [ 815.337342][ T7592] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 815.504000][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.878'. [ 815.547848][ T1869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.556388][ T1869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.565278][ T1650] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 815.754183][ T9437] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 815.764527][ T9437] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 815.783256][ T1650] usb 10-1: device descriptor read/64, error -71 [ 815.897739][ T1650] usb usb10-port1: attempt power cycle [ 816.043026][ T1869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.051712][ T1869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.300020][ T1650] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 816.382657][ T1650] usb 10-1: device descriptor read/8, error -71 [ 816.634368][ T1650] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 816.728121][ T1650] usb 10-1: device descriptor read/8, error -71 [ 816.875542][ T1650] usb usb10-port1: unable to enumerate USB device [ 817.272893][ T9361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 817.385545][ T9361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 817.483583][ T9361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 817.572223][ T9361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 818.034650][ T7311] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 818.234552][ T7311] usb 5-1: Using ep0 maxpacket: 16 [ 818.248494][ T7311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.260526][ T7311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.271046][ T7311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 818.286452][ T7311] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 818.296644][ T7311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.541140][ T7311] usb 5-1: config 0 descriptor?? [ 818.910885][ T9361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.974027][ T1650] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 819.176542][ T1650] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 819.186213][ T1650] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 819.197946][ T1650] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 819.214813][ T1650] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 819.227896][ T1650] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 819.241633][ T1650] usb 10-1: config 0 interface 0 has no altsetting 0 [ 819.273893][ T9361] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.368681][ T7311] usbhid 5-1:0.0: can't add hid device: -71 [ 819.376368][ T7311] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 819.423005][ T7311] usb 5-1: USB disconnect, device number 2 [ 819.635857][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.646029][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.730990][ T1650] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 819.743077][ T1650] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 819.753942][ T1650] usb 10-1: Product: syz [ 819.758502][ T1650] usb 10-1: Manufacturer: syz [ 819.763477][ T1650] usb 10-1: SerialNumber: syz [ 819.957218][ T9467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 819.985891][ T9467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 820.153397][ T1650] usb 10-1: config 0 descriptor?? [ 820.183489][ T9465] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 820.255390][ T1650] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 820.294909][ T1650] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 820.331596][ T9467] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.341954][ T9467] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.351586][ T9467] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.361775][ T9467] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.388552][ T1831] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.396361][ T1831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.677973][ T1831] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.685739][ T1831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.829668][ T9479] Can't find ip_set type hash:ne¯}Ö•FÐ et [ 823.151565][ T7592] usb 10-1: USB disconnect, device number 20 [ 823.237762][ T7592] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 824.385214][ T7592] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 824.466405][ T9496] netlink: 'syz.5.897': attribute type 2 has an invalid length. [ 824.584357][ T7592] usb 8-1: device descriptor read/64, error -71 [ 824.622067][ T9361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.846010][ T7592] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 825.051791][ T7592] usb 8-1: device descriptor read/64, error -71 [ 825.165618][ T7592] usb usb8-port1: attempt power cycle [ 825.574448][ T7592] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 825.649582][ T7592] usb 8-1: device descriptor read/8, error -71 [ 825.704657][ T1650] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 825.894738][ T1650] usb 5-1: Using ep0 maxpacket: 16 [ 825.902608][ T7592] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 825.941703][ T1650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.953401][ T1650] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.967518][ T1650] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 825.982127][ T1650] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 825.991707][ T1650] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.008772][ T1650] usb 5-1: config 0 descriptor?? [ 826.039061][ T7592] usb 8-1: device descriptor read/8, error -71 [ 826.155299][ T7592] usb usb8-port1: unable to enumerate USB device [ 826.805076][ T1650] usbhid 5-1:0.0: can't add hid device: -71 [ 826.811929][ T1650] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 826.916176][ T1650] usb 5-1: USB disconnect, device number 3 [ 827.119434][ T9361] veth0_vlan: entered promiscuous mode [ 827.264937][ T9361] veth1_vlan: entered promiscuous mode [ 827.463394][ T9361] veth0_macvtap: entered promiscuous mode [ 827.514534][ T9361] veth1_macvtap: entered promiscuous mode [ 827.528401][ T7592] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 827.715486][ T7592] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 827.725299][ T7592] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 827.737102][ T7592] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 827.749007][ T7592] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 827.760529][ T7592] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 827.774906][ T7592] usb 10-1: config 0 interface 0 has no altsetting 0 [ 827.807164][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.818164][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.820590][ T7592] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 827.828762][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.838322][ T7592] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 827.848466][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.848582][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.857207][ T7592] usb 10-1: Product: syz [ 827.857323][ T7592] usb 10-1: Manufacturer: syz [ 827.867218][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.872564][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.878039][ T7592] usb 10-1: SerialNumber: syz [ 828.096999][ T7592] usb 10-1: config 0 descriptor?? [ 828.102294][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.102408][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.102509][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.123604][ T9521] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 828.125256][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.153011][ T9361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.164091][ T9361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.179672][ T9361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.276428][ T7592] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 828.282928][ T9361] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.297044][ T9361] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.306741][ T9361] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.317666][ T9361] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.367787][ T7592] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 829.516368][ T9542] batadv0: entered promiscuous mode [ 829.630120][ T9542] batadv0: left promiscuous mode [ 829.931889][ T9541] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 830.059747][ T9541] netlink: 64 bytes leftover after parsing attributes in process `syz.5.909'. [ 831.113116][ T5883] usb 10-1: USB disconnect, device number 21 [ 831.161078][ T5883] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 831.428132][ T9553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.912'. [ 831.746264][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.9.913'. [ 831.807147][ T9558] netlink: 24 bytes leftover after parsing attributes in process `syz.9.913'. [ 832.442018][ T5883] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 832.634149][ T5883] usb 8-1: device descriptor read/64, error -71 [ 833.714380][ T5883] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 833.904806][ T5883] usb 8-1: device descriptor read/64, error -71 [ 834.035363][ T5883] usb usb8-port1: attempt power cycle [ 834.446972][ T5883] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 834.480598][ T5883] usb 8-1: device descriptor read/8, error -71 [ 834.724114][ T5883] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 834.859414][ T5883] usb 8-1: device descriptor read/8, error -71 [ 834.978826][ T5883] usb usb8-port1: unable to enumerate USB device [ 836.731419][ T3831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.740092][ T3831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.937933][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 839.272802][ T3601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.281286][ T3601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.307506][ T9603] netlink: 'syz.4.925': attribute type 1 has an invalid length. [ 839.316567][ T9603] netlink: 224 bytes leftover after parsing attributes in process `syz.4.925'. [ 841.612550][ T9627] tipc: Enabling of bearer rejected, failed to enable media [ 842.364821][ T9639] netlink: 'syz.6.938': attribute type 1 has an invalid length. [ 842.372803][ T9639] netlink: 224 bytes leftover after parsing attributes in process `syz.6.938'. [ 843.454137][ T5883] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 843.634207][ T5883] usb 10-1: device descriptor read/64, error -71 [ 843.895508][ T5883] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 844.064112][ T5883] usb 10-1: device descriptor read/64, error -71 [ 844.094497][ T9661] netlink: 24 bytes leftover after parsing attributes in process `syz.6.949'. [ 844.180471][ T5883] usb usb10-port1: attempt power cycle [ 844.213923][ T9661] netlink: 'syz.6.949': attribute type 4 has an invalid length. [ 844.615494][ T5883] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 844.690095][ T5883] usb 10-1: device descriptor read/8, error -71 [ 844.840688][ T9669] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 844.969172][ T5883] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 845.027071][ T5883] usb 10-1: device descriptor read/8, error -71 [ 845.155933][ T5883] usb usb10-port1: unable to enumerate USB device [ 846.892484][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz.9.963'. [ 847.016797][ T9693] netlink: 'syz.9.963': attribute type 4 has an invalid length. [ 847.797435][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803a0ffa00: rx timeout, send abort [ 848.007755][ T9707] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 848.298354][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e6ab600: rx timeout, send abort [ 848.307242][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803a0ffa00: abort rx timeout. Force session deactivation [ 848.807050][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e6ab600: abort rx timeout. Force session deactivation [ 849.315128][ T5883] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 849.484129][ T5883] usb 7-1: device descriptor read/64, error -71 [ 849.745408][ T5883] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 849.922124][ T5883] usb 7-1: device descriptor read/64, error -71 [ 850.039185][ T5883] usb usb7-port1: attempt power cycle [ 850.159981][ T9727] netlink: 24 bytes leftover after parsing attributes in process `syz.5.979'. [ 850.439838][ T5883] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 850.476502][ T5883] usb 7-1: device descriptor read/8, error -71 [ 850.627097][ T9733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.981'. [ 850.745961][ T5883] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 850.788285][ T5883] usb 7-1: device descriptor read/8, error -71 [ 850.885538][ T9737] netlink: 156 bytes leftover after parsing attributes in process `syz.5.984'. [ 850.907385][ T5883] usb usb7-port1: unable to enumerate USB device [ 851.564140][ T30] audit: type=1804 audit(1746045863.407:13): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.988" name="memory.events" dev="tmpfs" ino=552 res=1 errno=0 [ 851.585654][ T30] audit: type=1800 audit(1746045863.407:14): pid=9745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.988" name="memory.events" dev="tmpfs" ino=552 res=0 errno=0 [ 852.916862][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.9.994'. [ 853.074897][ T9763] netlink: 'syz.9.994': attribute type 4 has an invalid length. [ 853.377554][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.7.995'. [ 853.959459][ T9773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 854.838360][ T9781] netlink: 'syz.7.1002': attribute type 1 has an invalid length. [ 854.860523][ T9781] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 854.889707][ T9781] xt_TPROXY: Can be used only with -p tcp or -p udp [ 855.764182][ T7592] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 855.852104][ T1650] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 855.934112][ T7592] usb 10-1: device descriptor read/64, error -71 [ 856.044679][ T1650] usb 7-1: Using ep0 maxpacket: 16 [ 856.106011][ T1650] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.117546][ T1650] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.127983][ T1650] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 856.141453][ T1650] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 856.151025][ T1650] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.244146][ T7592] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 856.327513][ T1650] usb 7-1: config 0 descriptor?? [ 856.414198][ T7592] usb 10-1: device descriptor read/64, error -71 [ 856.556069][ T7592] usb usb10-port1: attempt power cycle [ 856.924485][ T7592] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 856.959761][ T9794] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1007'. [ 856.991696][ T7592] usb 10-1: device descriptor read/8, error -71 [ 857.007736][ T1650] usbhid 7-1:0.0: can't add hid device: -71 [ 857.014841][ T1650] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 857.080134][ T1650] usb 7-1: USB disconnect, device number 6 [ 857.107457][ T9149] udevd[9149]: setting mode of /dev/bus/usb/007/006 to 020664 failed: No such file or directory [ 857.121442][ T9794] netlink: 'syz.4.1007': attribute type 4 has an invalid length. [ 857.155142][ T9149] udevd[9149]: setting owner of /dev/bus/usb/007/006 to uid=0, gid=0 failed: No such file or directory [ 857.274308][ T7592] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 857.331284][ T7592] usb 10-1: device descriptor read/8, error -71 [ 857.449043][ T7592] usb usb10-port1: unable to enumerate USB device [ 858.819734][ T9817] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1016'. [ 860.296974][ T9830] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1021'. [ 860.545093][ T5843] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 860.743895][ T5843] usb 7-1: Using ep0 maxpacket: 16 [ 860.767175][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.780707][ T5843] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.791657][ T5843] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 860.805129][ T5843] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 860.814860][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.049004][ T5843] usb 7-1: config 0 descriptor?? [ 861.745249][ T5843] usbhid 7-1:0.0: can't add hid device: -71 [ 861.752168][ T5843] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 861.822580][ T5843] usb 7-1: USB disconnect, device number 7 [ 861.844671][ T5883] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 861.994416][ T5883] usb 5-1: device descriptor read/64, error -71 [ 862.055491][ T9846] sock: sock_timestamping_bind_phc: sock not bind to device [ 862.244281][ T5883] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 862.453965][ T5883] usb 5-1: device descriptor read/64, error -71 [ 862.517769][ T9848] netlink: 'syz.7.1031': attribute type 39 has an invalid length. [ 862.569501][ T5883] usb usb5-port1: attempt power cycle [ 862.965581][ T5883] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 863.009889][ T9857] netlink: 'syz.9.1035': attribute type 1 has an invalid length. [ 863.018561][ T9857] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1035'. [ 863.071511][ T5883] usb 5-1: device descriptor read/8, error -71 [ 863.794510][ T5883] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 863.907058][ T5883] usb 5-1: device descriptor read/8, error -71 [ 864.003147][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1036'. [ 864.016176][ T5883] usb usb5-port1: unable to enumerate USB device [ 865.649280][ T9882] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 866.245265][ T9889] netlink: 'syz.7.1046': attribute type 39 has an invalid length. [ 869.086183][ T9911] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1052'. [ 869.154231][ T7592] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 869.359358][ T7592] usb 7-1: device descriptor read/64, error -71 [ 869.595912][ T9915] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1054'. [ 869.646456][ T7592] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 870.569626][ T7592] usb 7-1: device descriptor read/64, error -71 [ 870.701333][ T7592] usb usb7-port1: attempt power cycle [ 871.144100][ T7592] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 871.246714][ T7592] usb 7-1: device descriptor read/8, error -71 [ 871.513952][ T7592] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 871.576700][ T7592] usb 7-1: device descriptor read/8, error -71 [ 871.659664][ T9930] netlink: 'syz.5.1059': attribute type 39 has an invalid length. [ 871.689971][ T7592] usb usb7-port1: unable to enumerate USB device [ 873.696907][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1065'. [ 873.721547][ T9943] netlink: 'syz.7.1065': attribute type 4 has an invalid length. [ 874.616866][ T9954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 874.910402][ T9956] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 876.264319][ T7592] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 876.423923][ T7592] usb 5-1: device descriptor read/64, error -71 [ 876.674036][ T7592] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 876.823917][ T7592] usb 5-1: device descriptor read/64, error -71 [ 876.937126][ T7592] usb usb5-port1: attempt power cycle [ 877.344889][ T7592] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 877.437318][ T7592] usb 5-1: device descriptor read/8, error -71 [ 877.524568][ T9979] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1079'. [ 877.642024][ T9979] netlink: 'syz.9.1079': attribute type 4 has an invalid length. [ 877.719341][ T7592] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 877.782047][ T7592] usb 5-1: device descriptor read/8, error -71 [ 877.897749][ T7592] usb usb5-port1: unable to enumerate USB device [ 878.961841][ T9997] netlink: 'syz.6.1084': attribute type 39 has an invalid length. [ 880.396895][T10022] 9pnet_fd: Insufficient options for proto=fd [ 881.061990][T10025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1093'. [ 883.824491][T10056] xt_CT: No such helper "snmp" [ 884.707298][T10077] 9pnet_fd: Insufficient options for proto=fd [ 884.822147][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1108'. [ 885.139925][T10061] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1103'. [ 888.944724][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1121'. [ 889.003884][T10121] netlink: 'syz.7.1121': attribute type 4 has an invalid length. [ 889.072364][T10131] 9pnet_fd: Insufficient options for proto=fd [ 889.721756][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880611a9a00: rx timeout, send abort [ 890.230673][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880611a9a00: abort rx timeout. Force session deactivation [ 890.535576][T10149] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 890.820849][T10149] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 892.075401][T10164] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1136'. [ 892.165424][ T5797] Bluetooth: hci5: command 0x0406 tx timeout [ 892.263274][T10164] netlink: 'syz.6.1136': attribute type 4 has an invalid length. [ 892.305519][T10167] netlink: 'syz.7.1137': attribute type 2 has an invalid length. [ 892.424655][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050801800: rx timeout, send abort [ 892.933364][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050801800: abort rx timeout. Force session deactivation [ 895.108875][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ffbba00: rx timeout, send abort [ 895.617735][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ffbba00: abort rx timeout. Force session deactivation [ 895.848124][T10215] netlink: 'syz.9.1155': attribute type 2 has an invalid length. [ 898.963483][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1171'. [ 899.122192][T10257] 9pnet_fd: Insufficient options for proto=fd [ 900.361275][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 902.050365][T10293] 9pnet_fd: Insufficient options for proto=fd [ 903.067148][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1193'. [ 903.112728][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050a8f800: rx timeout, send abort [ 903.483172][T10312] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1197'. [ 903.621626][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050a8f800: abort rx timeout. Force session deactivation [ 905.086296][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050a8f400: rx timeout, send abort [ 905.339739][T10341] 9pnet_fd: Insufficient options for proto=fd [ 905.595140][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050a8f400: abort rx timeout. Force session deactivation [ 906.560838][T10351] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1213'. [ 908.966495][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050a8f600: rx timeout, send abort [ 909.410183][T10378] 9pnet_fd: Insufficient options for proto=fd [ 909.475336][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050a8f600: abort rx timeout. Force session deactivation [ 912.364839][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805099e600: rx timeout, send abort [ 912.873429][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805099e600: abort rx timeout. Force session deactivation [ 913.296662][T10412] 9pnet_fd: Insufficient options for proto=fd [ 914.297303][T10423] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1244'. [ 915.733993][T10437] netlink: 'syz.6.1250': attribute type 4 has an invalid length. [ 915.742206][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1250'. [ 917.069496][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1259'. [ 918.790206][T10469] ieee802154 phy0 wpan0: encryption failed: -22 [ 919.036893][T10475] netlink: 'syz.4.1267': attribute type 4 has an invalid length. [ 919.046594][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'. [ 921.511496][T10507] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1281'. [ 921.650632][T10511] netlink: 'syz.4.1282': attribute type 4 has an invalid length. [ 921.658918][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1282'. [ 923.671523][T10538] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1296'. [ 924.565401][T10553] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 925.428763][T10559] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1306'. [ 926.027352][T10572] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1311'. [ 926.676238][T10581] netlink: 'syz.4.1313': attribute type 4 has an invalid length. [ 926.684526][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 928.012747][ T5797] Bluetooth: hci3: command 0x0406 tx timeout [ 928.224267][T10605] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1324'. [ 929.403409][T10623] netlink: 'syz.9.1328': attribute type 4 has an invalid length. [ 929.674861][T10625] netlink: 'syz.7.1330': attribute type 1 has an invalid length. [ 929.683125][T10625] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1330'. [ 931.166768][T10645] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1338'. [ 931.655183][T10648] netlink: 'syz.6.1339': attribute type 10 has an invalid length. [ 932.243098][T10657] netlink: 'syz.9.1343': attribute type 4 has an invalid length. [ 933.746683][T10683] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1354'. [ 934.594127][T10694] netlink: 'syz.4.1358': attribute type 4 has an invalid length. [ 934.702170][T10687] netlink: 'syz.7.1356': attribute type 10 has an invalid length. [ 935.637130][T10707] 9pnet_fd: Insufficient options for proto=fd [ 935.747672][T10707] overlayfs: failed to resolve './file1': -2 [ 935.915051][T10710] loop4: detected capacity change from 0 to 256 [ 936.288583][ T30] audit: type=1800 audit(1746045948.147:15): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1366" name="file1" dev="loop4" ino=114 res=0 errno=0 [ 936.378766][T10710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 936.389097][T10710] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 936.416958][T10710] syz_tun: entered promiscuous mode [ 936.440420][T10710] syz_tun: left promiscuous mode [ 937.855833][T10732] netlink: 'syz.5.1374': attribute type 10 has an invalid length. [ 939.379827][T10749] loop4: detected capacity change from 0 to 256 [ 939.534902][T10755] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 939.553036][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1383'. [ 939.556967][ T30] audit: type=1800 audit(1746045951.397:16): pid=10749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1383" name="file1" dev="loop4" ino=115 res=0 errno=0 [ 939.563133][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1383'. [ 939.610088][T10749] syz_tun: entered promiscuous mode [ 939.664053][T10749] syz_tun: left promiscuous mode [ 940.270254][T10762] xt_hashlimit: size too large, truncated to 1048576 [ 940.435924][T10763] netlink: 'syz.6.1389': attribute type 10 has an invalid length. [ 941.027901][ T5883] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 941.279014][ T5883] usb 10-1: Using ep0 maxpacket: 32 [ 941.384126][ T5883] usb 10-1: unable to get BOS descriptor or descriptor too short [ 941.424018][ T5883] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.435407][ T5883] usb 10-1: config 0 has no interfaces? [ 941.503362][ T5883] usb 10-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 941.513523][ T5883] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.522265][ T5883] usb 10-1: Product: syz [ 941.527008][ T5883] usb 10-1: Manufacturer: syz [ 941.531970][ T5883] usb 10-1: SerialNumber: syz [ 941.587910][ T5883] usb 10-1: config 0 descriptor?? [ 941.856410][ T5883] usb 10-1: USB disconnect, device number 30 [ 943.599583][T10794] fuse: Bad value for 'fd' [ 945.865233][T10793] netlink: 536 bytes leftover after parsing attributes in process `syz.5.1402'. [ 947.457941][T10818] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1411'. [ 948.763300][T10826] loop9: detected capacity change from 0 to 32768 [ 948.842184][T10826] XFS (loop9): alignment check failed: sunit/swidth vs. blocksize(4096) [ 948.955189][T10840] netlink: 536 bytes leftover after parsing attributes in process `syz.7.1417'. [ 950.382246][ T7592] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 950.654046][ T7592] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 950.662773][ T7592] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 950.674819][ T7592] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 950.692910][ T7592] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 950.705782][ T7592] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 950.719505][ T7592] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.896720][ T7592] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 950.906758][ T7592] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 950.916179][ T7592] usb 5-1: Product: syz [ 950.920647][ T7592] usb 5-1: Manufacturer: syz [ 950.925921][ T7592] usb 5-1: SerialNumber: syz [ 951.000246][ T7592] usb 5-1: config 0 descriptor?? [ 951.018221][T10849] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 951.071231][ T7592] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 951.122691][ T7592] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 953.058144][T10870] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1427'. [ 954.534745][T10872] loop9: detected capacity change from 0 to 32768 [ 954.869476][T10872] XFS (loop9): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 955.349328][ T7592] usb 5-1: USB disconnect, device number 12 [ 955.374116][ T7592] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 955.866763][T10872] XFS (loop9): Ending clean mount [ 955.875992][T10872] XFS (loop9): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2d0, xfs_finobt block 0x20 [ 955.889312][T10872] XFS (loop9): Unmount and run xfs_repair [ 955.895615][T10872] XFS (loop9): First 128 bytes of corrupted metadata buffer: [ 955.903296][T10872] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 955.914973][T10872] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 955.924350][T10872] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 955.933527][T10872] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 955.942930][T10872] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 955.952552][T10872] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 955.961982][T10872] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 955.971272][T10872] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 955.980677][T10872] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x20 len 8 error 74 [ 955.993207][T10872] XFS (loop9): Failed to initialize disk quotas, err -117. [ 956.075009][ T7970] XFS (loop9): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 956.157804][ T7970] XFS (loop9): Uncorrected metadata errors detected; please run xfs_repair. [ 956.434804][ T7592] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 956.634520][ T7592] usb 5-1: Using ep0 maxpacket: 32 [ 956.697085][ T7592] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 956.706266][ T7592] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 956.715618][ T7592] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 956.729943][ T7592] usb 5-1: config 1 has no interface number 0 [ 956.739019][ T7592] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 956.750538][ T7592] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 956.766402][ T7592] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 956.776254][ T7592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.911549][ T7592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 957.476491][ T7592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 957.702522][ T7592] usb 5-1: USB disconnect, device number 13 [ 957.711143][ T7592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 958.799907][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1441'. [ 961.802991][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.964006][ T5883] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 962.162837][ T5883] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 962.172460][ T5883] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 962.184464][ T5883] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 962.196120][ T5883] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 962.207848][ T5883] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 962.221532][ T5883] usb 7-1: config 0 interface 0 has no altsetting 0 [ 962.400254][ T5883] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 962.410480][ T5883] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 962.419531][ T5883] usb 7-1: Product: syz [ 962.424248][ T5883] usb 7-1: Manufacturer: syz [ 962.429129][ T5883] usb 7-1: SerialNumber: syz [ 962.467302][ T5883] usb 7-1: config 0 descriptor?? [ 962.477557][T10929] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 962.505596][ T5883] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 962.545959][ T5883] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 963.254231][ T7592] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 963.534234][ T7592] usb 5-1: Using ep0 maxpacket: 16 [ 963.569020][ T7592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.580746][ T7592] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 963.594807][ T7592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.859165][ T7592] usb 5-1: config 0 descriptor?? [ 964.552267][ T7592] kye 0003:0458:5016.0001: control desc unexpectedly large [ 964.750096][ T7592] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0001/input/input7 [ 964.955749][ T7592] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0001/input/input8 [ 965.142640][ T7592] kye 0003:0458:5016.0001: input,hiddev1,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 965.482026][ T7592] usb 5-1: USB disconnect, device number 14 [ 966.218347][ C1] ldusb 7-1:0.0: usb_submit_urb failed (-1) [ 966.232923][ T11] usb 7-1: USB disconnect, device number 12 [ 966.343170][ T11] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 966.415204][T10964] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1455'. [ 966.731087][T10972] loop7: detected capacity change from 0 to 1024 [ 967.001129][T10972] overlayfs: failed to resolve './file0': -2 [ 967.392512][T10978] loop7: detected capacity change from 0 to 256 [ 967.502788][T10978] exfat: Unknown parameter '@' [ 968.907699][T10984] netlink: 'syz.6.1463': attribute type 39 has an invalid length. [ 969.765519][ T5883] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 969.954421][ T5883] usb 8-1: Using ep0 maxpacket: 32 [ 970.004292][ T5883] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 970.012770][ T5883] usb 8-1: config 0 has no interface number 0 [ 970.110822][ T5883] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 970.122062][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.130925][ T5883] usb 8-1: Product: syz [ 970.135508][ T5883] usb 8-1: Manufacturer: syz [ 970.141387][ T5883] usb 8-1: SerialNumber: syz [ 970.174162][ T5883] usb 8-1: config 0 descriptor?? [ 970.244710][ T5883] smsc95xx v2.0.0 [ 970.474323][ T11] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 970.506653][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1471'. [ 970.655727][ T5883] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 970.667217][ T5883] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 970.709834][ T11] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 970.718797][ T11] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 970.730763][ T11] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 970.742472][ T11] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 970.758347][ T11] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 970.773399][ T11] usb 10-1: config 0 interface 0 has no altsetting 0 [ 970.811248][ T11] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 970.821277][ T11] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 970.830298][ T11] usb 10-1: Product: syz [ 970.834954][ T11] usb 10-1: Manufacturer: syz [ 970.840150][ T11] usb 10-1: SerialNumber: syz [ 970.871099][ T11] usb 10-1: config 0 descriptor?? [ 970.880207][T11003] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 970.896507][T10990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 970.907755][T10990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.000200][ T11] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 971.011553][ T5883] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 971.030719][ T5883] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 971.108007][ T5883] usb 8-1: USB disconnect, device number 26 [ 971.129806][ T11] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 972.659693][T11024] loop6: detected capacity change from 0 to 1024 [ 972.821838][T11024] overlayfs: failed to resolve './file0': -2 [ 973.196568][T11027] loop6: detected capacity change from 0 to 256 [ 973.291024][ T11] usb 10-1: USB disconnect, device number 31 [ 973.457022][ T11] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 973.615270][T11027] exfat: Unknown parameter '@' [ 974.134997][T11030] netlink: 'syz.7.1480': attribute type 39 has an invalid length. [ 975.282887][T11047] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1485'. [ 977.292688][T11065] loop6: detected capacity change from 0 to 1024 [ 977.452702][T11065] overlayfs: failed to resolve './file0': -2 [ 977.732116][T11071] loop6: detected capacity change from 0 to 256 [ 977.740192][ T5883] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 977.785135][T11071] exfat: Unknown parameter '@' [ 977.935071][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 977.986849][ T5883] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 977.997182][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.005848][ T5883] usb 5-1: Product: syz [ 978.010345][ T5883] usb 5-1: Manufacturer: syz [ 978.015415][ T5883] usb 5-1: SerialNumber: syz [ 978.178965][ T5883] usb 5-1: config 0 descriptor?? [ 978.813763][ T5883] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 978.925413][T11076] netlink: 'syz.5.1498': attribute type 39 has an invalid length. [ 978.937514][ T5883] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 979.006224][ T5883] usb 5-1: USB disconnect, device number 15 [ 979.735077][T11078] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1501'. [ 980.837328][T11092] netlink: 'syz.7.1507': attribute type 10 has an invalid length. [ 982.825191][T11106] netlink: 'syz.4.1512': attribute type 39 has an invalid length. [ 983.180006][ T11] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 983.405788][ T11] usb 7-1: Using ep0 maxpacket: 32 [ 983.472321][ T11] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 983.482256][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.491230][ T11] usb 7-1: Product: syz [ 983.495784][ T11] usb 7-1: Manufacturer: syz [ 983.500659][ T11] usb 7-1: SerialNumber: syz [ 983.631562][ T11] usb 7-1: config 0 descriptor?? [ 984.182980][T11118] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1517'. [ 984.305497][ T11] peak_usb 7-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 984.436321][ T11] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -71 [ 984.545297][ T11] usb 7-1: USB disconnect, device number 13 [ 985.402087][T11127] netlink: 'syz.7.1521': attribute type 10 has an invalid length. [ 986.091750][T11139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 986.262093][T11142] netlink: 'syz.4.1528': attribute type 39 has an invalid length. [ 986.985042][T11146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1531'. [ 988.396797][T11161] netlink: 'syz.4.1536': attribute type 10 has an invalid length. [ 988.962421][T11170] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 989.202671][T11173] netlink: 'syz.7.1541': attribute type 39 has an invalid length. [ 990.407576][T11185] loop4: detected capacity change from 0 to 1024 [ 990.845682][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1547'. [ 992.300955][T11204] netlink: 'syz.7.1555': attribute type 39 has an invalid length. [ 993.411592][T11218] loop4: detected capacity change from 0 to 1024 [ 994.059216][T11224] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1562'. [ 995.540045][T11232] loop4: detected capacity change from 0 to 40427 [ 995.605499][T11232] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 995.613790][T11232] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 995.645471][T11232] F2FS-fs (loop4): invalid crc value [ 995.734019][T11232] F2FS-fs (loop4): Mismatch valid blocks 5 vs. 14 [ 995.837990][T11232] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 995.855382][T11236] netlink: 'syz.9.1567': attribute type 39 has an invalid length. [ 996.484820][T11230] Bluetooth: hci3: command 0x0406 tx timeout [ 998.935282][T11269] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1577'. [ 999.626898][T11275] netlink: 'syz.5.1581': attribute type 39 has an invalid length. [ 999.814653][T11283] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1584'. [ 1001.466383][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1591'. [ 1001.611102][T11230] Bluetooth: hci3: command 0x0406 tx timeout [ 1002.809181][T11315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1594'. [ 1003.932006][T11322] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1597'. [ 1005.121478][T11334] loop7: detected capacity change from 0 to 128 [ 1005.187454][T11334] vxfs: Unknown parameter '5©"áM{?Œr—¸' [ 1006.157720][T11334] loop7: detected capacity change from 0 to 32768 [ 1006.215316][T11334] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1600 (11334) [ 1006.280597][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1603'. [ 1006.323035][T11334] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1006.334157][T11334] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1006.344796][T11334] BTRFS info (device loop7): using free-space-tree [ 1006.837587][ T7896] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 1007.695756][T11363] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1606'. [ 1008.627247][T11372] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1610'. [ 1009.506861][T11385] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1614'. [ 1009.996578][T11389] loop7: detected capacity change from 0 to 128 [ 1010.024837][T11389] vxfs: Unknown parameter '5©"áM{?Œr—¸' [ 1010.130456][T11389] Cannot find del_set index 0 as target [ 1011.102609][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1621'. [ 1011.915055][T11406] loop7: detected capacity change from 0 to 2048 [ 1012.116839][T11406] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1013.065015][T11425] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1628'. [ 1016.325543][ T7896] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1016.877529][T11442] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1635'. [ 1018.175417][ T5796] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1018.205011][ T5796] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1018.224785][ T5796] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1018.248502][ T5796] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1018.269267][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1020.398779][ T5796] Bluetooth: hci4: command tx timeout [ 1020.549630][T11450] chnl_net:caif_netlink_parms(): no params data found [ 1020.873970][T11475] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1647'. [ 1021.335161][ T51] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.626266][ T51] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.836812][ T51] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.019854][ T51] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.492282][ T5796] Bluetooth: hci4: command tx timeout [ 1022.671850][T11450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1022.680372][T11450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.689424][T11450] bridge_slave_0: entered allmulticast mode [ 1022.699836][T11450] bridge_slave_0: entered promiscuous mode [ 1022.897283][T11450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1022.905430][T11450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.913352][T11450] bridge_slave_1: entered allmulticast mode [ 1022.924038][T11450] bridge_slave_1: entered promiscuous mode [ 1023.037269][ T51] bridge_slave_1: left allmulticast mode [ 1023.043239][ T51] bridge_slave_1: left promiscuous mode [ 1023.050644][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.125190][ T51] bridge_slave_0: left allmulticast mode [ 1023.131280][ T51] bridge_slave_0: left promiscuous mode [ 1023.139856][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.237486][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.742884][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.762633][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.778488][ T51] bond0 (unregistering): Released all slaves [ 1024.113145][T11450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1024.170650][T11450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1024.463090][T11450] team0: Port device team_slave_0 added [ 1024.537802][T11450] team0: Port device team_slave_1 added [ 1024.587112][ T5796] Bluetooth: hci4: command tx timeout [ 1024.919107][ T51] hsr_slave_0: left promiscuous mode [ 1024.959439][ T51] hsr_slave_1: left promiscuous mode [ 1024.968649][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.976810][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.050147][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.058169][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.119476][ T51] veth1_macvtap: left promiscuous mode [ 1025.125627][ T51] veth0_macvtap: left promiscuous mode [ 1025.131754][ T51] veth1_vlan: left promiscuous mode [ 1025.138277][ T51] veth0_vlan: left promiscuous mode [ 1026.577482][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1026.644179][ T5796] Bluetooth: hci4: command tx timeout [ 1026.726551][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1027.472692][T11450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.480703][T11450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.507710][T11450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.822057][T11450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.830591][T11450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.860541][T11450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.164455][T11511] loop6: detected capacity change from 0 to 32768 [ 1028.630798][ T51] IPVS: stop unused estimator thread 0... [ 1028.748902][T11450] hsr_slave_0: entered promiscuous mode [ 1028.759853][T11450] hsr_slave_1: entered promiscuous mode [ 1031.926508][T11113] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1032.162880][T11113] usb 10-1: device descriptor read/64, error -71 [ 1032.263957][ T11] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1032.429076][T11450] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1032.444379][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 1032.454152][T11113] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1032.486667][ T11] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1032.495826][ T11] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1032.507177][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1032.511562][T11450] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1032.517079][ T11] usb 5-1: config 1 has no interface number 0 [ 1032.517222][ T11] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.541782][ T11] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1032.555439][ T11] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1032.565016][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.622136][T11113] usb 10-1: device descriptor read/64, error -71 [ 1032.644279][ T11] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1032.683145][T11450] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1032.762129][T11113] usb usb10-port1: attempt power cycle [ 1032.790819][T11450] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1033.147536][T11113] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1033.199316][T11113] usb 10-1: device descriptor read/8, error -71 [ 1033.206805][ T11] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1033.441029][ T7592] usb 5-1: USB disconnect, device number 16 [ 1033.451018][ T7592] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1033.460954][T11113] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1033.552465][T11113] usb 10-1: device descriptor read/8, error -71 [ 1033.671290][T11113] usb usb10-port1: unable to enumerate USB device [ 1033.959306][T11450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.363233][T11450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.396917][ T3747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.404761][ T3747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.448695][ T3747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.456473][ T3747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.130386][T11450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1035.141321][T11450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1037.305832][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1686'. [ 1038.388725][T11450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1039.325960][T11450] veth0_vlan: entered promiscuous mode [ 1039.490170][T11450] veth1_vlan: entered promiscuous mode [ 1039.841777][T11450] veth0_macvtap: entered promiscuous mode [ 1039.912009][T11450] veth1_macvtap: entered promiscuous mode [ 1040.117072][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.128631][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.139349][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.150148][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.160328][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1040.171411][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.189859][T11450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1040.451904][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.462857][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.473180][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.484349][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.497314][T11450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1040.508482][T11450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1040.524223][T11450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1040.641137][T11450] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.651858][T11450] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.662173][T11450] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1040.673202][T11450] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1041.351452][T11610] SET target dimension over the limit! [ 1042.132889][T11616] netlink: 79 bytes leftover after parsing attributes in process `syz.6.1698'. [ 1042.361910][T11622] overlayfs: failed to resolve './file1': -2 [ 1044.220958][T11644] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.477630][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1710'. [ 1046.261531][T11668] netlink: 27 bytes leftover after parsing attributes in process `syz.7.1712'. [ 1047.064317][T11677] netlink: 'syz.7.1716': attribute type 7 has an invalid length. [ 1047.405590][T11677] bio_check_eod: 2 callbacks suppressed [ 1047.405670][T11677] syz.7.1716: attempt to access beyond end of device [ 1047.405670][T11677] nbd7: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1047.425155][T11677] qnx6: unable to read the first superblock [ 1047.431829][T11677] syz.7.1716: attempt to access beyond end of device [ 1047.431829][T11677] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1047.445421][T11677] qnx6: unable to read the first superblock [ 1047.454046][T11677] qnx6: unable to read the first superblock [ 1048.061055][T11689] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1048.140201][ T1831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.149379][ T1831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.610055][ T3747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.619163][ T3747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.261026][T11113] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 1049.269896][T11113] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 1049.278192][T11113] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 1049.286386][T11113] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 1049.296683][T11113] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 1049.405532][T11113] hid-generic FFFC:0003:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1053.617220][T11731] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1735'. [ 1056.495033][T11773] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1750'. [ 1056.942359][T11775] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1751'. [ 1058.637048][T11795] loop4: detected capacity change from 0 to 524255232 [ 1060.047015][T11805] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1762'. [ 1061.136573][T11823] netlink: 'syz.7.1768': attribute type 7 has an invalid length. [ 1061.435562][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031341c00: rx timeout, send abort [ 1061.486816][T11823] syz.7.1768: attempt to access beyond end of device [ 1061.486816][T11823] nbd7: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1061.500928][T11823] qnx6: unable to read the first superblock [ 1061.507751][T11823] syz.7.1768: attempt to access beyond end of device [ 1061.507751][T11823] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1061.521276][T11823] qnx6: unable to read the first superblock [ 1061.527562][T11823] qnx6: unable to read the first superblock [ 1061.845066][T11230] Bluetooth: hci2: command 0x0406 tx timeout [ 1061.936447][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031341e00: rx timeout, send abort [ 1061.945787][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031341c00: abort rx timeout. Force session deactivation [ 1062.445338][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031341e00: abort rx timeout. Force session deactivation [ 1064.454189][T11864] netlink: 'syz.6.1782': attribute type 7 has an invalid length. [ 1064.838003][T11858] loop1: detected capacity change from 0 to 32768 [ 1064.996149][T11858] XFS (loop1): alignment check failed: sunit/swidth vs. blocksize(4096) [ 1065.530966][T11876] fuse: Bad value for 'fd' [ 1066.525355][T11889] lo: entered allmulticast mode [ 1067.089278][T11884] lo: left allmulticast mode [ 1068.074994][T11906] syz_tun: entered allmulticast mode [ 1068.661408][T11904] syz_tun: left allmulticast mode [ 1068.730396][T11913] netlink: 'syz.4.1797': attribute type 7 has an invalid length. [ 1068.907673][T11908] loop6: detected capacity change from 0 to 32768 [ 1069.063970][T11908] XFS (loop6): alignment check failed: sunit/swidth vs. blocksize(4096) [ 1069.401240][T11913] syz.4.1797: attempt to access beyond end of device [ 1069.401240][T11913] nbd4: rw=0, sector=16, nr_sectors = 1 limit=0 [ 1069.415288][T11913] qnx6: unable to read the first superblock [ 1069.421736][T11913] syz.4.1797: attempt to access beyond end of device [ 1069.421736][T11913] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1069.435437][T11913] qnx6: unable to read the first superblock [ 1069.441584][T11913] qnx6: unable to read the first superblock [ 1069.621743][T11924] fuse: Bad value for 'fd' [ 1071.220184][T11939] lo: entered allmulticast mode [ 1071.735289][T11935] lo: left allmulticast mode [ 1071.940490][T11938] loop1: detected capacity change from 0 to 32768 [ 1072.016853][T11938] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1072.528302][T11938] XFS (loop1): Ending clean mount [ 1072.536263][T11938] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2d0, xfs_finobt block 0x20 [ 1072.551698][T11938] XFS (loop1): Unmount and run xfs_repair [ 1072.557931][T11938] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 1072.565756][T11938] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 1072.575051][T11938] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 1072.584299][T11938] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 1072.593449][T11938] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 1072.603399][T11938] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 1072.612878][T11938] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 1072.622221][T11938] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1072.631654][T11938] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1072.643924][T11938] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x20 len 8 error 74 [ 1072.656955][T11938] XFS (loop1): Failed to initialize disk quotas, err -117. [ 1072.835909][ T11] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1072.836622][T11450] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1072.944407][T11450] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair. [ 1073.040256][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 1073.081960][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1073.093789][ T11] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1073.103180][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.228965][ T11] usb 5-1: config 0 descriptor?? [ 1073.945495][ T11] usbhid 5-1:0.0: can't add hid device: -71 [ 1073.953009][ T11] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1074.016618][ T11] usb 5-1: USB disconnect, device number 17 [ 1074.674048][ T11] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1074.891600][ T11] usb 10-1: Using ep0 maxpacket: 32 [ 1074.922923][ T11] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1074.931865][ T11] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1074.941100][ T11] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1074.950603][ T11] usb 10-1: config 1 has no interface number 0 [ 1074.957235][ T11] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1074.968728][ T11] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1074.982710][ T11] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1074.992376][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.126012][ T11] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1075.241318][T11979] bridge_slave_0: left allmulticast mode [ 1075.247900][T11979] bridge_slave_0: left promiscuous mode [ 1075.255860][T11979] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.353419][T11979] bridge_slave_1: left allmulticast mode [ 1075.359983][T11979] bridge_slave_1: left promiscuous mode [ 1075.369614][T11979] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.445807][T11979] bond0: (slave bond_slave_0): Releasing backup interface [ 1075.518974][T11979] bond0: (slave bond_slave_1): Releasing backup interface [ 1075.670355][T11979] team0: Port device team_slave_0 removed [ 1075.797301][ T11] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1075.825358][T11979] team0: Port device team_slave_1 removed [ 1075.833319][T11979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.040005][T11979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.100398][ T11] usb 10-1: USB disconnect, device number 36 [ 1076.108809][ T11] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1077.225216][T11992] af_packet: tpacket_rcv: packet too big, clamped from 3940 to 3696. macoff=96 [ 1077.440792][T12006] netlink: 'syz.7.1825': attribute type 27 has an invalid length. [ 1078.055484][T11113] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1078.234173][T11113] usb 10-1: Using ep0 maxpacket: 16 [ 1078.292789][T11113] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.304749][T11113] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1078.314497][T11113] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.408979][T11113] usb 10-1: config 0 descriptor?? [ 1079.092728][T11113] usbhid 10-1:0.0: can't add hid device: -71 [ 1079.100535][T11113] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1079.175666][T11113] usb 10-1: USB disconnect, device number 37 [ 1079.566666][T12028] bridge_slave_0: left allmulticast mode [ 1079.572662][T12028] bridge_slave_0: left promiscuous mode [ 1079.580029][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.720664][T12028] bridge_slave_1: left allmulticast mode [ 1079.727397][T12028] bridge_slave_1: left promiscuous mode [ 1079.734473][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.964103][T10968] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1080.061959][T12028] bond0: (slave bond_slave_0): Releasing backup interface [ 1080.184513][T10968] usb 8-1: Using ep0 maxpacket: 32 [ 1080.227402][T10968] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 1080.236588][T10968] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1080.245765][T10968] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1080.255317][T10968] usb 8-1: config 1 has no interface number 0 [ 1080.261704][T10968] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1080.273388][T10968] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1080.286957][T10968] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1080.296468][T10968] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.370414][T12028] bond0: (slave bond_slave_1): Releasing backup interface [ 1080.490778][T12028] team0: Port device team_slave_0 removed [ 1080.632315][T12028] team0: Port device team_slave_1 removed [ 1080.645604][T12028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.653428][T12028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.687613][T10968] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 1080.779579][T12028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.788071][T12028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.187748][T10968] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 1081.438400][ T7592] usb 8-1: USB disconnect, device number 27 [ 1081.449575][ T7592] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 1081.792783][T12044] loop4: detected capacity change from 0 to 128 [ 1081.811381][T12044] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1081.838827][T12044] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1081.856822][T12044] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1082.117224][T12053] loop1: detected capacity change from 0 to 1024 [ 1082.209425][T12053] EXT4-fs: Ignoring removed i_version option [ 1082.393151][T12053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.825168][T12044] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 1083.268493][T11450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.315131][ T9138] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1083.864482][T10968] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1083.896130][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1844'. [ 1084.095563][T10968] usb 8-1: Using ep0 maxpacket: 16 [ 1084.154204][T10968] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1084.166291][T10968] usb 8-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1084.175846][T10968] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.478265][T10968] usb 8-1: config 0 descriptor?? [ 1084.736856][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1085.294450][T10968] usbhid 8-1:0.0: can't add hid device: -71 [ 1085.309443][T10968] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1085.326146][T12086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1850'. [ 1085.394208][ T24] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1085.428169][T10968] usb 8-1: USB disconnect, device number 28 [ 1085.619069][ T24] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 1085.628222][ T24] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1085.640038][ T24] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1085.652827][ T24] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1085.664765][ T24] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1085.678447][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1085.784881][T12092] bridge_slave_0: left allmulticast mode [ 1085.790885][T12092] bridge_slave_0: left promiscuous mode [ 1085.797994][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.971913][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1085.981511][ T24] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1085.990650][ T24] usb 7-1: Product: syz [ 1085.995301][ T24] usb 7-1: Manufacturer: syz [ 1086.000186][ T24] usb 7-1: SerialNumber: syz [ 1086.029003][T12092] bridge_slave_1: left allmulticast mode [ 1086.035348][T12092] bridge_slave_1: left promiscuous mode [ 1086.042182][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 1086.225891][T12092] bond0: (slave bond_slave_0): Releasing backup interface [ 1086.407522][T12092] bond0: (slave bond_slave_1): Releasing backup interface [ 1086.504007][ T24] usb 7-1: config 0 descriptor?? [ 1086.512111][T12087] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1086.571020][ T24] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1086.641149][ T24] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1086.708444][T12092] team0: Port device team_slave_0 removed [ 1086.782649][T12092] team0: Port device team_slave_1 removed [ 1086.794908][T12092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.802736][T12092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.904626][T12092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.912531][T12092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.910086][T12107] loop1: detected capacity change from 0 to 1024 [ 1087.989361][T12107] EXT4-fs: Ignoring removed i_version option [ 1088.179264][T12107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.753192][T12114] loop7: detected capacity change from 0 to 128 [ 1088.796028][T12114] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1088.877348][T12114] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1088.902085][T12114] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1089.260061][T10968] usb 7-1: USB disconnect, device number 14 [ 1089.455781][T10968] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 1089.679132][T12112] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1090.381297][T11450] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.443295][ T7896] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1091.047102][T12124] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1860'. [ 1091.885734][T12133] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1862'. [ 1092.147707][T12140] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1092.169491][T11113] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1092.383403][T11113] usb 2-1: Using ep0 maxpacket: 16 [ 1092.420198][T11113] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.431901][T11113] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1092.441680][T11113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.899117][T12147] bridge_slave_0: left allmulticast mode [ 1092.905229][T12147] bridge_slave_0: left promiscuous mode [ 1092.912132][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.997928][T11113] usb 2-1: config 0 descriptor?? [ 1093.166918][ T5796] block nbd0: Receive control failed (result -107) [ 1093.204700][T12151] nbd0: detected capacity change from 0 to 32 [ 1093.240721][T11752] block nbd0: Dead connection, failed to find a fallback [ 1093.248537][T11752] block nbd0: shutting down sockets [ 1093.254491][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.264227][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.266134][T12147] bridge_slave_1: left allmulticast mode [ 1093.272678][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.278738][T12147] bridge_slave_1: left promiscuous mode [ 1093.289739][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.294589][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.302011][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.319268][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.329381][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.339525][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.348381][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.358201][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.367186][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.376895][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.385868][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.395588][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.404529][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.414358][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.422644][T11752] ldm_validate_partition_table(): Disk read failed. [ 1093.431137][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.441378][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.450148][T11752] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1093.459938][T11752] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1093.469092][T11752] Dev nbd0: unable to read RDB block 0 [ 1093.476162][T11752] nbd0: unable to read partition table [ 1093.508198][T11752] ldm_validate_partition_table(): Disk read failed. [ 1093.516709][T11752] Dev nbd0: unable to read RDB block 0 [ 1093.525389][T11752] nbd0: unable to read partition table [ 1093.596809][T12147] bond0: (slave bond_slave_0): Releasing backup interface [ 1093.750005][T12147] bond0: (slave bond_slave_1): Releasing backup interface [ 1093.895223][T11113] usbhid 2-1:0.0: can't add hid device: -71 [ 1093.902040][T11113] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1093.941194][T11113] usb 2-1: USB disconnect, device number 3 [ 1093.969116][T12147] team0: Port device team_slave_0 removed [ 1094.131087][T12147] team0: Port device team_slave_1 removed [ 1094.144599][T12147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.153085][T12147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.204007][T12147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.211840][T12147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.951772][T12157] loop7: detected capacity change from 0 to 128 [ 1094.968498][T12157] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1095.002758][T12157] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1095.018832][T12157] ext4 filesystem being mounted at /300/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.313295][T12165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1095.505809][T12165] input: syz1 as /devices/virtual/input/input9 [ 1095.627778][T12165] overlayfs: failed to resolve './file1': -2 [ 1095.668416][ T7896] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1097.248320][T12178] loop4: detected capacity change from 0 to 2048 [ 1097.352613][T12188] lo: entered allmulticast mode [ 1098.047682][T12182] lo: left allmulticast mode [ 1098.319339][T12195] bridge_slave_0: left allmulticast mode [ 1098.325588][T12195] bridge_slave_0: left promiscuous mode [ 1098.332441][T12195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.379268][T12195] bridge_slave_1: left allmulticast mode [ 1098.385510][T12195] bridge_slave_1: left promiscuous mode [ 1098.392488][T12195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.620496][T12195] bond0: (slave bond_slave_0): Releasing backup interface [ 1098.764984][T12195] bond0: (slave bond_slave_1): Releasing backup interface [ 1098.876774][T12195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.885287][T12195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.933212][T12195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.941952][T12195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.347134][T12208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1099.412147][T12208] input: syz1 as /devices/virtual/input/input10 [ 1099.496800][T12208] overlayfs: failed to resolve './file1': -2 [ 1100.223985][T12220] netlink: 'syz.6.1891': attribute type 7 has an invalid length. [ 1101.752169][T12230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1895'. [ 1101.761928][T12230] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1895'. [ 1105.044148][T12261] ===================================================== [ 1105.051595][T12261] BUG: KMSAN: uninit-value in sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1105.060271][T12261] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1105.065645][T12261] sctp_inq_push+0x2a3/0x350 [ 1105.070498][T12261] sctp_backlog_rcv+0x3c7/0xda0 [ 1105.075831][T12261] sk_backlog_rcv+0x13f/0x420 [ 1105.080777][T12261] __release_sock+0x1d3/0x330 [ 1105.085919][T12261] release_sock+0x6b/0x270 [ 1105.090591][T12261] sctp_wait_for_connect+0x458/0x820 [ 1105.096273][T12261] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1105.104463][T12261] sctp_sendmsg+0x3910/0x49f0 [ 1105.109395][T12261] inet_sendmsg+0x269/0x2a0 [ 1105.114727][T12261] __sock_sendmsg+0x278/0x3d0 [ 1105.119661][T12261] __sys_sendto+0x590/0x710 [ 1105.126411][T12261] __x64_sys_sendto+0x130/0x200 [ 1105.131549][T12261] x64_sys_call+0x3c0b/0x3db0 [ 1105.138260][T12261] do_syscall_64+0xd9/0x1b0 [ 1105.143020][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.149393][T12261] [ 1105.151857][T12261] Uninit was created at: [ 1105.156585][T12261] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1105.163652][T12261] kmalloc_reserve+0x22f/0x4b0 [ 1105.168694][T12261] __alloc_skb+0x347/0x7d0 [ 1105.173378][T12261] sctp_packet_transmit+0x189e/0x4560 [ 1105.179152][T12261] sctp_outq_flush+0x1c7d/0x67c0 [ 1105.184462][T12261] sctp_outq_uncork+0x9e/0xc0 [ 1105.189412][T12261] sctp_do_sm+0x8c8e/0x9720 [ 1105.194299][T12261] sctp_assoc_bh_rcv+0x88b/0xbc0 [ 1105.199518][T12261] sctp_inq_push+0x2a3/0x350 [ 1105.207271][T12261] sctp_backlog_rcv+0x3c7/0xda0 [ 1105.212385][T12261] sk_backlog_rcv+0x13f/0x420 [ 1105.217834][T12261] __release_sock+0x1d3/0x330 [ 1105.222744][T12261] release_sock+0x6b/0x270 [ 1105.227528][T12261] sctp_wait_for_connect+0x458/0x820 [ 1105.233076][T12261] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1105.238952][T12261] sctp_sendmsg+0x3910/0x49f0 [ 1105.244000][T12261] inet_sendmsg+0x269/0x2a0 [ 1105.248783][T12261] __sock_sendmsg+0x278/0x3d0 [ 1105.253849][T12261] __sys_sendto+0x590/0x710 [ 1105.258714][T12261] __x64_sys_sendto+0x130/0x200 [ 1105.263975][T12261] x64_sys_call+0x3c0b/0x3db0 [ 1105.268925][T12261] do_syscall_64+0xd9/0x1b0 [ 1105.273830][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.279968][T12261] [ 1105.282446][T12261] CPU: 0 UID: 0 PID: 12261 Comm: syz.4.1904 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1105.295980][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1105.308854][T12261] ===================================================== [ 1105.316489][T12261] Disabling lock debugging due to kernel taint [ 1105.322814][T12261] Kernel panic - not syncing: kmsan.panic set ... [ 1105.329431][T12261] CPU: 0 UID: 0 PID: 12261 Comm: syz.4.1904 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 1105.343434][T12261] Tainted: [B]=BAD_PAGE [ 1105.347747][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1105.357994][T12261] Call Trace: [ 1105.361423][T12261] [ 1105.364500][T12261] __dump_stack+0x26/0x30 [ 1105.369090][T12261] dump_stack_lvl+0x53/0x270 [ 1105.373933][T12261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1105.380014][T12261] dump_stack+0x1e/0x25 [ 1105.384410][T12261] panic+0x4bd/0xd50 [ 1105.388613][T12261] kmsan_report+0x29d/0x2a0 [ 1105.393372][T12261] ? __sock_sendmsg+0x278/0x3d0 [ 1105.398462][T12261] ? dump_stack_print_info+0x176/0x650 [ 1105.404186][T12261] ? do_syscall_64+0xd9/0x1b0 [ 1105.409111][T12261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.415422][T12261] ? __msan_warning+0x96/0x120 [ 1105.420438][T12261] ? sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1105.425798][T12261] ? sctp_inq_push+0x2a3/0x350 [ 1105.430803][T12261] ? sctp_backlog_rcv+0x3c7/0xda0 [ 1105.436069][T12261] ? sk_backlog_rcv+0x13f/0x420 [ 1105.441165][T12261] ? __release_sock+0x1d3/0x330 [ 1105.446235][T12261] ? release_sock+0x6b/0x270 [ 1105.451082][T12261] ? sctp_wait_for_connect+0x458/0x820 [ 1105.456785][T12261] ? sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1105.462564][T12261] ? sctp_sendmsg+0x3910/0x49f0 [ 1105.467899][T12261] ? inet_sendmsg+0x269/0x2a0 [ 1105.472843][T12261] ? __sock_sendmsg+0x278/0x3d0 [ 1105.477935][T12261] ? __sys_sendto+0x590/0x710 [ 1105.482868][T12261] ? __x64_sys_sendto+0x130/0x200 [ 1105.488159][T12261] ? x64_sys_call+0x3c0b/0x3db0 [ 1105.493271][T12261] ? do_syscall_64+0xd9/0x1b0 [ 1105.498191][T12261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.504504][T12261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1105.510670][T12261] ? kmsan_get_metadata+0x105/0x1b0 [ 1105.516253][T12261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1105.522366][T12261] ? kmsan_get_metadata+0x105/0x1b0 [ 1105.527850][T12261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1105.533948][T12261] ? sctp_inq_pop+0x15ea/0x19e0 [ 1105.539067][T12261] ? kmsan_get_metadata+0x105/0x1b0 [ 1105.544536][T12261] __msan_warning+0x96/0x120 [ 1105.549366][T12261] sctp_assoc_bh_rcv+0x34e/0xbc0 [ 1105.554700][T12261] ? __pfx_sctp_assoc_bh_rcv+0x10/0x10 [ 1105.560413][T12261] sctp_inq_push+0x2a3/0x350 [ 1105.565295][T12261] sctp_backlog_rcv+0x3c7/0xda0 [ 1105.570402][T12261] ? kmsan_get_metadata+0x105/0x1b0 [ 1105.575899][T12261] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 1105.581559][T12261] sk_backlog_rcv+0x13f/0x420 [ 1105.586552][T12261] __release_sock+0x1d3/0x330 [ 1105.591589][T12261] release_sock+0x6b/0x270 [ 1105.596280][T12261] sctp_wait_for_connect+0x458/0x820 [ 1105.601838][T12261] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1105.608180][T12261] sctp_sendmsg_to_asoc+0x223a/0x2260 [ 1105.613825][T12261] ? kmsan_get_metadata+0x105/0x1b0 [ 1105.619288][T12261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1105.625413][T12261] sctp_sendmsg+0x3910/0x49f0 [ 1105.630356][T12261] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1105.637047][T12261] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1105.642320][T12261] inet_sendmsg+0x269/0x2a0 [ 1105.647111][T12261] __sock_sendmsg+0x278/0x3d0 [ 1105.652048][T12261] __sys_sendto+0x590/0x710 [ 1105.656835][T12261] ? kmsan_get_metadata+0x105/0x1b0 [ 1105.662300][T12261] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1105.668393][T12261] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1105.674999][T12261] __x64_sys_sendto+0x130/0x200 [ 1105.680146][T12261] x64_sys_call+0x3c0b/0x3db0 [ 1105.685093][T12261] do_syscall_64+0xd9/0x1b0 [ 1105.689852][T12261] ? irqentry_exit+0x16/0x60 [ 1105.694683][T12261] ? clear_bhb_loop+0x25/0x80 [ 1105.699601][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.705737][T12261] RIP: 0033:0x7fcf4ad8e969 [ 1105.710336][T12261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.730204][T12261] RSP: 002b:00007fcf4bc03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1105.738860][T12261] RAX: ffffffffffffffda RBX: 00007fcf4afb5fa0 RCX: 00007fcf4ad8e969 [ 1105.747037][T12261] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000007 [ 1105.755198][T12261] RBP: 00007fcf4ae10ab1 R08: 000020000005ffe4 R09: 000000000000001c [ 1105.763393][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1105.771863][T12261] R13: 0000000000000000 R14: 00007fcf4afb5fa0 R15: 00007ffc908f70d8 [ 1105.780076][T12261] [ 1105.783540][T12261] Kernel Offset: disabled [ 1105.787962][T12261] Rebooting in 86400 seconds..