last executing test programs: 17.581479433s ago: executing program 2 (id=555): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000003780)=@newtaction={0x14, 0x30, 0x200, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_MASK={0x8}]}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.887012893s ago: executing program 2 (id=561): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a006da800000000000000001c00"], 0x24}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0xffdf}], 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x1, 0x7, 0x32315559, 0x8, 0x200, 0x5, 0x8, 0xc562, 0x1, 0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x5, 0x2, 0x2}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 12.99969796s ago: executing program 0 (id=571): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 12.941571091s ago: executing program 2 (id=572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988cafbe863cac5058031c97d70ccd0f76db9", 0x280}, {&(0x7f0000000100)="e3f4e01bb64d88aff4c99218e5450df5392e79789c3968b1c72fc30961", 0x1d}], 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/118, 0x76, 0x1, &(0x7f0000000100)=""/131, 0x83}, &(0x7f0000000200)=0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0x1) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') read$FUSE(r11, &(0x7f0000002400)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) 12.875486435s ago: executing program 0 (id=574): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) unshare(0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) kexec_load(0x0, 0x0, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001d296c56cef89b93c99d8975844410ba0abc0bcc02a58f10f6a91fb2d3d8de1e276828a77bffeca41e6ca4456f4f2086f02ea487dae2b1e688a99e5ad8149ee26c3546fdba94e3c3c122164e3660aaaf393d556ba19c57c3e64c365b29d62518e8f3d45db16700f121ddcfc5288678712e7f59bbdfd084cd9949f218dd1b284dfd57bfac751b4ca06fa0300b1b1345d2d64e75686ede7bd0e5b9ecf66b3c3ee9dcd3351601592392a8a75da6e20425d4790397b04ad83d138c985c70f4d7870f0fc727a2d94a149fc6a80409fe7ab24e4b7549b0df10e25e", @ANYRES16=r6, @ANYBLOB, @ANYRES32, @ANYBLOB="08000500020000"], 0x24}}, 0x0) 11.217252754s ago: executing program 1 (id=575): r0 = syz_usb_connect$printer(0xc4f131a3c282abcb, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x20, 0x9, [{{0x9, 0x4, 0x0, 0x22, 0x2, 0x7, 0x1, 0x2, 0x10, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x9, 0x42, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x1, 0x9}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x7, 0x0, 0x6, 0x20}, 0x50, &(0x7f0000000240)={0x5, 0xf, 0x50, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x7, 0xf000, 0x3, [0x0, 0x0, 0xff00c0, 0x30, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "11be4d2f871044927a2ced6d56813a15"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x6, 0x7fff}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x9, 0xf, 0x1f9, [0x30]}]}, 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x614a3475b80944f7}}, {0xe5, &(0x7f0000000480)=@string={0xe5, 0x3, "430fab4a654358a75b6bfdc59e319c98c3995aaf0a878d042e045dd03f727ea901648bbdc5cd184c6d480599bc8b6c7150747fb6e0bcdf8fc0dbc98e2ec6e6ea6f7c921b687d26ac2e76c445532724aa37f4c714bb86a763da1f3e52f3f597038f5c9d4d6a495c6d5ba659c574de86d47aacfe5ee17e374ffbd89fe2566ff74696a30be30b565be067e792775a245f20c123ff0e7be4e8c7c2214116404b450f35aa2e630de8069d99675c7abb81a27f442ab912da5b22b1274b529c784813a74af1dd90ffa8869b794ee210daffd84bc97bb506e2f8499cb033ab63ef41a161692386"}}, {0x55, &(0x7f0000000580)=@string={0x55, 0x3, "8f101c57fd863acc54494e02b872a53b6e1ff2d82adb36aeed83e258513bc9b530ca34f874a617d00d853f4716829efbab8b5de4209318b3d8b8ac0c65cf3a53f292176034ee9f8d965f02c49f4ebbfcd4ac30"}}, {0xc9, &(0x7f0000000600)=@string={0xc9, 0x3, "9f7d154874a73de9500bfe99a57c8059ff59e5e15d58ebcb4cd8cfd8681c447f46879d367fb86d70a3bdf0007877118dde6c632007f817fcaa9cc9671a9db3f7c11746082f6472a466012a5336e0edc485b55518dc1bdcb5ee723e7d5fb1e9ac8462e60758c4279fad6ab847e222de8a55c5c3aa270493d971b6cfeaf4058073b9f4176abe715a881a9190cc22efe9be1e797c4f687ebde1e3bfd2c4470230cd6736592333d19ccbb73657bc213d712872adb601b1cf69f2104b319eb1ecb93a6f5d679ce3d74f"}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="200f25000000d1543041caea756aa20a7b2109aa1d0ba19354688306348671fd1ad59c77f9a7ec90fd3aa3"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000061006600000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c9400009078000042e7b4b876ae133e039e347089a254c1c55cc28b9e826fb79e5b04e9daf9b8e970c4462a7547971bbb1ab5ebee4718209227c2ae6b9366790c"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000840)={'syztnl0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x4, 0x7ff, {{0x8, 0x4, 0x0, 0x6, 0x20, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0xb, 0x6, [@multicast1, @local]}, @noop]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xbc, 0x0, 0x420, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbf}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7fffffff}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x18}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x4000004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) 11.216758592s ago: executing program 3 (id=576): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000001980)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 10.994462063s ago: executing program 0 (id=578): pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d7463fbe785e9229145f001ec3cfc7da9f7f375aba6ef639262b6dbd935173", @ANYRESHEX=r0], 0x38}}, 0x8000) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000000000000000210000000000010000000000000200"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 10.850710321s ago: executing program 0 (id=579): r0 = socket(0x11, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r2, 0x0, 0x1, 0x4}}, 0x20) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB='/\x00\x00\x00\b'], 0x20) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r6}}, 0x48) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x4, &(0x7f0000000580)=[{@fixed}, {@fixed}, {@none}, {}]}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r2}}, 0x48) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000003c0)={'vlan0\x00', {0x2, 0xffff, @empty}}) 10.738372465s ago: executing program 3 (id=580): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"0e080000000000000000000004000001"}}}}, 0x118) syz_open_dev$vim2m(&(0x7f0000000180), 0x5, 0x2) socket$packet(0x11, 0x2, 0x300) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x600, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES32=r4], 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x1a, 0x3, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 10.473768042s ago: executing program 1 (id=581): r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x17, 0x0, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab787c179fd1f8a0e91ddaaca7bd6447a4b4e00d9683f6a1af1ea09de2b7fb0a01000000000b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c9b40f45f819e01177d3d458dd4992861ac000000000000000000000000000000002b16", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) (async) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x8000000000000000) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f0000000180)={0xa, 0x4e24, 0xc386, @ipv4={'\x00', '\xff\xff', @local}, 0xd}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r2, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x3, 0xfffffff9]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x658}, {@empty, 0x3}, {@multicast1, 0xffd200}, {@private=0xa010104, 0x7}]}, @noop, @noop, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}]}}}}}) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) (async, rerun: 64) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) (async) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$nfc(&(0x7f00000007c0), r9) sendmsg$NFC_CMD_LLC_SET_PARAMS(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002cbd7000fedbdf251000000005000f00071000000800010034"], 0x24}, 0x1, 0x0, 0x0, 0x4004880}, 0x8882) (async) sendmsg$NFC_CMD_ACTIVATE_TARGET(r8, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x64, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x20048000) (async) ioctl$KVM_NMI(r7, 0xae9a) sendmmsg$alg(r5, &(0x7f0000001fc0)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000008c0)="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", 0x1000}, {&(0x7f0000000480)="5c915356d278adbb273847da9a0e950a2a26d16aaf970f70752fa9889b90444169e7392bae166582cbdfadecddb2813f290cfd3576fb8ab1dac8dfccb1bacc6d8fe6e20ba6f350474394b5e2a604e9ae67ff030a8829d61dacfb1fe685b2", 0x5e}, {&(0x7f0000000500)="2bc187385adaac9dbbb76aca4c38a78f3dbf1fd462453a8ebb80159fd26184c3c39cfd35ff0ddcdee6b9b5c5b9d3481e6d83e689b8986c44f1722eb2bf53bd67d6791059479c4f135c5b36eb1b5236bb39eb1317c2aab148b6b54c37dbb4a2dfd83518ca0857039bd00ddd1ae3a456292389cce931ed4d110889d55f8901f7655e67bdcbcc059664494011a8304e5d782b42d06019523bc3f2abbdc41d68", 0x9e}, {&(0x7f0000000280)="ca72593f8b8a2ce12e0725ee2d61a2b3dd706ce67c57d7bbd10ef898482257845672fe6f1040021264bace7577a1443a", 0x30}, {&(0x7f00000005c0)="dd6fd44ad5e8519d9082a75a66f9fd3ba622ef5f624f00cecddf51554a901bed57c04f468a6699e1940331e64803e585b93e7360273d9c2cc0ae91f952aed28fe1cd9fc7d3cf8018bcf64268876c6dd52ca8aa28f90ffb5f1500c690e01536113b0255ec0c56011d933d8dc180ee0946a52054f2caae0eff1f841d86141bd5ab4b3a3e73b064cc584019176e7e3764af3af06c3ba805bbd453e22d847cd29a83971355d3fbde8eed3dc188ca779bc4941131a040fbf24be46e79ba5f697b7fea66a86ed6485fc3d8db28c6e00ed51fe449d04a35fda298", 0xd7}], 0x5, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000740)="0d8e3cb68d071d27235d06ae78bbd1f110d7434c45ab46eea18397aca9326136d48ae92d38e236eb2652be669f44895a37eaf1fe2ac5ddbf4a4b852fce577227ea8f68476c322b3be2a9a063949a12e8878d6501a8779e2e57b8b2b37c9429b3a30aafd82c70021779337d", 0x6b}, {&(0x7f00000018c0)="63987f74c0ac329afb1f4f66bce36860dd837308c5c1b52b8390ad72ecbc29618346e9a2eefd050742a58dc48b76331cc3cc4f11b033c092852249489c533085f7d7fa2b1a2f1991e7a9542e9e0cc7f4757f27bcbda58d36d7a6f0217a079a9174f13b8cb0a447c185e0f64d5d257c2c7e7691b229a40a382be191d879d5c786b6bccb317e4adf2b11e3ffcc21ece28ffa1900eb4ad97328c2ee161574d919c15f793b1b6c569a315e464aad29efe06608e2f99aaca3d546a3ac4d09406278afc8c580149c915e8740af1768231e80f27f4d4de2a8b61c922631ef15bddf6e5ae19e0819968e369a93ceefc01a0c4911f1eaa4599b", 0xf5}, {&(0x7f00000019c0)="99f6b2ad2bb0228dd42cc607c47d4ea3114652221d553a58c9ae6d67c65e3db54256864864f8898b4f3ce5c308948e957cd9da3e8ed913eab1c9d0503cd091093828ee91a91030719023f48caddcf46f247e75f81a2b34fd24bfaac9ab33ec0fd45030c19b73396f9f9e7837b71dba8efd678706578c439ce660fe928ece37854f4661e557a3ca9c8070403fc028c48f55b2f6acae242001c5296c30fed78af94380613731d127d3fb36c206a61f2d5655476be9b0f8702d1632741aa959945bba29bde671be01120648deebe591114f000315c8882bc9211e9f0edfd7746c864d21bdec880768513cb54aef7b1bd62bd1", 0xf1}, {&(0x7f0000001ac0)="25273b4cc5ef2d45cf239553c1b72bf56e92c81b0302c1e7a6e009e0df3b7a4a59d4e384c3a8b7af34fc60848f37981089bd99c4b300985f66f1231b748da10b78324ffcb23acb4d0a75c6bad05f827ba1237426d239573551e4472f378fe1a14426a45a25332da364da4df6879eb2f35503209895a4346b76decee72f23b6eda504d416f212a63ef96c483e1faada73c281edc6e2d003ec8f94d5792bdc0aec5c8bc08e69d081f17380bb49b29ffa9200deaa18d8bf54875f176872a298aeff44f8c59c5223f280ab345504fc4668e5f14a89e41e52bf25bef11a193cb0761b0bedeb7f8997fa0790f0c93d3092dc8f9d50b27fdde9d18c29b7a07e694d", 0xfe}, {&(0x7f0000001bc0)="6a97636a3ca094c9ee44991ae81c02d83ee89bc5000a999b6a54f49a0c6455e54ff9d0fdfc9c6e8b7b27ac8c2c44bbadd284ab4a44bd53419283a034a6a0bb2f09af191100e340168283494c64a25feae68d319bbb5362db410f5a88bf1f9c88eb3466117692f292ebd5e026ea3c0c5167b37986ec3af221b37d5e3cd9c1cf49905cea47030cfac9b493103db56c1ae52e8f2453d8d5afd38701c517f9e8694dd66b9e90b2213fbc209d0da21a6eb3fd8cfd50b15e5c2fce67f0dfc8289714be35dcced7838900bb4b273cc2d3594a737d67653bcb5aa99d", 0xd8}, {&(0x7f0000001cc0)="6c834cc07134e770451de54df3f677695f9d95cebfd68a6befcad6ba30557f1fef263f8ab4be5178a94a19cf63b4b0e3fecb841eb0ff3e929a2c4346b3f6459ae085d1ccfa496bffce3a1bb4f330c50f1d58f3", 0x53}, {&(0x7f0000001d40)="62ff19dce881ff9ccb28afa1f5cde777f3a24b582395c8ad18d1c1f19228c3985aecce5cef5e5cedae5550da62c78726335221c80023857195d112b4b58e2f50063768d25e38d39ccbb51ca03596e135ec77223d9c6eee81370d96d5ea4a8de2540feae06372ebeccf079ddfc0e44d352b415e1f25e0259a42d22499758a8cc1fd3dd8e7e772240450d59c83bbb3d9a1e62283df01c1091b5d777d7a1bec17dfce71720ceeffde8933565f79c0ff4e47945a77e1095416e5a4e2fe46f70f415ffbc940490974e1c870a2466a89f15a7f65f43c71bb4a3beb9f32bee9b940695ed72a37fed179", 0xe6}], 0x7, &(0x7f0000001ec0)=[@assoc={0x18, 0x117, 0x4, 0x8beb}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x16, "832d8a528d5fdaa60d4901bf9473ffc4ff65eb9613e3"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x48, 0x117, 0x2, 0x31, "931e99f7d18c1ce54d4c682b821eafd06b935bfbc5296ff1b94da086c83d6cdc3a0670c1f8532c629c8dda652fde76099a"}], 0xd8, 0x811}], 0x2, 0x4008055) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 10.19085087s ago: executing program 1 (id=582): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a006da800000000000000001c00"], 0x24}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0xffdf}], 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x1, 0x7, 0x32315559, 0x8, 0x200, 0x5, 0x8, 0xc562, 0x1, 0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x5, 0x2, 0x2}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 9.975858256s ago: executing program 4 (id=583): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffd, 0x2002}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000", @ANYBLOB="0000000000000000b70500000000000085000000a500000018010000202064050000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = fsmount(0xffffffffffffffff, 0x1, 0x9) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x4a7c) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x98, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xbe, 0x5a}}}}, [@NL80211_ATTR_TX_RATES={0x68, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x7, 0xc5, 0x7, 0x1f, 0x9d, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x401, 0xfff8, 0x0, 0x72, 0x1, 0x33, 0x80]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff00, 0x61f, 0x74b3, 0x7f, 0x7, 0x0, 0x3, 0x401]}}]}]}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x40004) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f00000097c0)={&(0x7f0000008b00), 0xc, &(0x7f0000009780)={&(0x7f0000000c80)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20004884}, 0x90) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000c00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0}, 0x8) openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000500"/28], 0x48) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x400) ioctl$IOMMU_HWPT_ALLOC$NONE(r7, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0xffffffef, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x84, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @private0}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x84}}, 0x4000080) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) 9.84443893s ago: executing program 4 (id=584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x0, 0x0, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) 8.872370123s ago: executing program 4 (id=585): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) rseq(&(0x7f00000003c0), 0x20, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000640)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000000000000000000000000009500000000000200"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) syz_emit_ethernet(0xca, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) io_uring_enter(r1, 0x0, 0x3, 0x7, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = semget$private(0x0, 0x4000000009, 0x0) semtimedop(r4, &(0x7f0000000080)=[{0x1, 0xfffe}], 0x1, &(0x7f00000000c0)) 8.054699748s ago: executing program 0 (id=586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x63f8, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 7.693627276s ago: executing program 0 (id=587): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup3(r2, r1, 0x0) r4 = syz_open_dev$radio(&(0x7f0000000d80), 0x1, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='rcu_utilization\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') lseek(r9, 0xae7e, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) io_setup(0x7, &(0x7f0000000280)=0x0) r11 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x0) io_submit(r10, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r11, &(0x7f0000000000), 0xfffffc98}]) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x400) r12 = userfaultfd(0x80001) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r12, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) accept(r3, &(0x7f00000003c0)=@in={0x2, 0x0, @dev}, 0x0) ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f00000002c0)={&(0x7f0000c3d000/0x1000)=nil, &(0x7f0000bd6000/0x4000)=nil, 0x1000, 0x3}) 7.692482116s ago: executing program 1 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x952, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xce}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002f00)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000009157a270", 0x89}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001c00032300"/20, @ANYRES32=0x0, @ANYBLOB="1fee347c040010"], 0x20}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) msgget(0x1, 0x400) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0xf0b, 0xffffffff, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0x0, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4801}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="832a69e83d000701000000000000000000267800040000000c000a9e5a41b6bc17bfa7a298e9754499cc07d16467be6ab6d4b07834796f0fc7a52e735dce32869db47a4bbeff3b8cc95e90804d70d958f7ac2950b6f1f2a86e74ffd059b673f2375378fcecbf996fa8de34bd"], 0x528}}, 0xc000) 7.691962224s ago: executing program 2 (id=589): syz_io_uring_setup(0x24fa, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000000c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x200, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ifreq(r7, 0x8923, &(0x7f0000000040)={'lo\x00', @ifru_hwaddr=@multicast}) 7.621381156s ago: executing program 4 (id=590): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000001980)={@empty, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "9a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 6.950703938s ago: executing program 3 (id=591): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)}], 0x1}}], 0x1, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000005c0)={'syz0\x00', {}, 0x32, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x61965b7e, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x4, 0x759c, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x199, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x10000, 0x9000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xa000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r5, 0x0, 0x4041) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0\x00') ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 6.16400603s ago: executing program 1 (id=592): socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00C\x00'], 0x20}}, 0x44850) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) 4.890000606s ago: executing program 4 (id=593): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000140)='./file0\x00') r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x23d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) r7 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r7, 0x10e, 0x7, 0x0, &(0x7f0000001080)) setresuid(0x0, r6, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$FS_IOC_RESVSP(r4, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x80000d}) 2.790654312s ago: executing program 1 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$igmp(0x2, 0x3, 0x2) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000280)=[{0x200000000006, 0xc2, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00') preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000380)=""/106, 0xbe}], 0x1, 0x40fb, 0x9) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r6 = gettid() timer_create(0x2, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r6}, &(0x7f00000000c0)) timer_settime(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000500)={r0}) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x217, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xec, 0x0, 0x2, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0xb8, {0x9, 0x21, 0x400, 0xff, 0x1, {0x22, 0x8d9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xcc, 0x9, 0xa}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x81, 0xd, 0x4, 0x8, 0x4}, 0xf, &(0x7f00000002c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x9, 0x1, 0x201}]}, 0x3, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x4c0a}}]}) readv(r7, &(0x7f0000000000)=[{&(0x7f0000002480)=""/231, 0xe7}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="60010000100013070000000000000000ac1e000100000000001414aa000000000000000000000000000000000000000002000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000fe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000070001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002001000040"], 0x160}}, 0x0) 2.680726587s ago: executing program 3 (id=595): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x29, 0x0, 0xee00}, {0x0, 0x9}, {0x2b3c, 0x6}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r7, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x6df) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) fspick(r6, &(0x7f0000000240)='./file0\x00', 0x1) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) fsmount(r0, 0x0, 0x1) 2.623247186s ago: executing program 2 (id=596): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = syz_io_uring_complete(0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x100) write$binfmt_script(r1, &(0x7f0000000540)={'#! ', './file0', [], 0xa, "38319eb0"}, 0xf) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000200), &(0x7f0000000340), 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000300000000000000ff7f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x64, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008854}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x2, 0xf000000) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) 857.434363ms ago: executing program 3 (id=597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000001c0)={0x0, 0x3, 0x0, &(0x7f00000002c0)=[{}, {}, {0x80000000}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000e80)={{r2}, {0x80000000, 0x0, 0x0, [0x3, 0x80]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r3) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0xff80, 0x0, 0x4, 0x31ad, {{0x24, 0x4, 0x0, 0x5, 0x90, 0x66, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010100, @remote, {[@end, @cipso={0x86, 0x51, 0x2, [{0x5, 0x4, "d03d"}, {0x6, 0x8, "a8be333ec792"}, {0x2, 0x10, "5871b6b259fe6dac4a850d545e72"}, {0x0, 0xf, "86901347b681870eec8128de5d"}, {0x1, 0xa, "67f89007dc5d95ee"}, {0x5, 0xf, "e2851489fb0560e9cdb920b1c9"}, {0x2, 0x7, "8ab74f0ba2"}]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x70, [@empty, @loopback, @private=0xa010102, @multicast1]}, @noop, @lsrr={0x83, 0xb, 0x60, [@empty, @local]}, @end, @noop]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}}, 0x8800) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl0\x00', 0x0, 0x23, 0x2, 0x2, 0x7fff, 0x0, @mcast2, @private1, 0x40, 0x20, 0x2a0e1fdc, 0xfffffff9}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000740)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r3, &(0x7f0000000880)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xbc, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x20, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) r11 = openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) read$watch_queue(r11, &(0x7f0000000180)=""/12, 0xc) r12 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r13, 0x4138ae84, 0x0) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x16, 0x20000002, r14) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r15}, 0x10) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r16, &(0x7f0000000000)={0x0, 0x31, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r17, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x9, 0x13, @l2={'ib', 0x3a, 'team0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x200c48a4) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x9, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/38, 0x26}, {&(0x7f0000000080)=""/128, 0x80}, {&(0x7f00000001c0)=""/171, 0xab}], &(0x7f0000000280)=[0xc8, 0xfffffffd, 0x1000000003, 0xd4], 0x3}, 0x20) 499.953104ms ago: executing program 2 (id=598): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a006da800000000000000001c00"], 0x24}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='!', 0xffdf}], 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x1, 0x7, 0x32315559, 0x8, 0x200, 0x5, 0x8, 0xc562, 0x1, 0x3}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000240)={0x5, 0x2, 0x2}) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) 212.19759ms ago: executing program 3 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988cafbe863cac5058031c97d70ccd0f76db9", 0x280}, {&(0x7f0000000100)="e3f4e01bb64d88aff4c99218e5450df5392e79789c3968b1c72fc30961", 0x1d}], 0x2) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/118, 0x76, 0x1, &(0x7f0000000100)=""/131, 0x83}, &(0x7f0000000200)=0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r10 = dup(r9) write$6lowpan_enable(r10, &(0x7f0000000000)='0', 0x1) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') read$FUSE(r11, &(0x7f0000002400)={0x2020}, 0x2020) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) 0s ago: executing program 4 (id=600): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x3, &(0x7f0000006680)) rseq(&(0x7f00000003c0), 0x20, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600), 0x80, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000640)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="080000000000000000000000000000009500000000000200"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x6, 0x0, 0x0, 0x0, &(0x7f0000001400)={0x0, 0x3938700}}) syz_emit_ethernet(0xca, &(0x7f00000008c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp={0x44, 0xc, 0x8, 0x0, 0x0, [0x0, 0x0]}]}}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6fdfa0d2001efbb3e29a4ac275ca11b984ff5def6ed2e4ea9bc0eabdd34c732b", "df23520b57e4c98679c7795a27c7bf3e7d776b600ba8d82d6ba417e219edd86fb708441efcf75fe803412dae374281c2", "5df814aa2e34e4f8a759805b993e2d69a8f476de686861a9850edbe3", {"2cfee9b9d5b0b2b171b51f9174963b0c", "e40ca7e0a7b4bbc4bc9720c876a57954"}}}}}}}, 0x0) io_uring_enter(r2, 0x0, 0x3, 0x7, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = semget$private(0x0, 0x4000000009, 0x0) semtimedop(r5, &(0x7f0000000080)=[{0x1, 0xfffe}], 0x1, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.92' (ED25519) to the list of known hosts. syzkaller login: [ 53.346218][ T5802] cgroup: Unknown subsys name 'net' [ 53.480087][ T5802] cgroup: Unknown subsys name 'cpuset' [ 53.488690][ T5802] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.861708][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.969373][ T5816] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.983989][ T5816] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.992285][ T5816] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.027002][ T5816] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.035415][ T5816] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.042812][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.096094][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.107436][ T5132] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.116696][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.132988][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.177766][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.185716][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.194208][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.203727][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.213057][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.220991][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.228914][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.236111][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.244698][ T5825] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.252090][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.278791][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.288172][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.297645][ T5825] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.304247][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.307221][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.319379][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.323277][ T5833] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.326755][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.336257][ T5833] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.348607][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.591801][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 57.797745][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.805804][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.813644][ T5815] bridge_slave_0: entered allmulticast mode [ 57.821111][ T5815] bridge_slave_0: entered promiscuous mode [ 57.871661][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 57.883544][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.891017][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.898278][ T5815] bridge_slave_1: entered allmulticast mode [ 57.904838][ T5815] bridge_slave_1: entered promiscuous mode [ 57.950787][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 57.975117][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.992490][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 58.008394][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.017681][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 58.145276][ T5815] team0: Port device team_slave_0 added [ 58.182697][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.191838][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.199553][ T5829] bridge_slave_0: entered allmulticast mode [ 58.206157][ T5829] bridge_slave_0: entered promiscuous mode [ 58.214815][ T5815] team0: Port device team_slave_1 added [ 58.229714][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.237064][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.244244][ T5822] bridge_slave_0: entered allmulticast mode [ 58.251138][ T5822] bridge_slave_0: entered promiscuous mode [ 58.272442][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.279794][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.287032][ T5819] bridge_slave_0: entered allmulticast mode [ 58.293641][ T5819] bridge_slave_0: entered promiscuous mode [ 58.301259][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.308516][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.315669][ T5829] bridge_slave_1: entered allmulticast mode [ 58.322838][ T5829] bridge_slave_1: entered promiscuous mode [ 58.335911][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.343125][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.350378][ T5822] bridge_slave_1: entered allmulticast mode [ 58.357212][ T5822] bridge_slave_1: entered promiscuous mode [ 58.385863][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.393032][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.400293][ T5819] bridge_slave_1: entered allmulticast mode [ 58.407153][ T5819] bridge_slave_1: entered promiscuous mode [ 58.441896][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.449118][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.456244][ T5826] bridge_slave_0: entered allmulticast mode [ 58.463098][ T5826] bridge_slave_0: entered promiscuous mode [ 58.485151][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.492173][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.519116][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.540860][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.548365][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.555569][ T5826] bridge_slave_1: entered allmulticast mode [ 58.562920][ T5826] bridge_slave_1: entered promiscuous mode [ 58.577876][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.591835][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.598858][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.624901][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.638349][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.661698][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.672631][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.691162][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.709513][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.723032][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.750857][ T5829] team0: Port device team_slave_0 added [ 58.773098][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.795190][ T5829] team0: Port device team_slave_1 added [ 58.852009][ T5815] hsr_slave_0: entered promiscuous mode [ 58.859124][ T5815] hsr_slave_1: entered promiscuous mode [ 58.869132][ T5822] team0: Port device team_slave_0 added [ 58.878582][ T5826] team0: Port device team_slave_0 added [ 58.886864][ T5819] team0: Port device team_slave_0 added [ 58.893200][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.900320][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.926773][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.938810][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.945840][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.972098][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.994009][ T5822] team0: Port device team_slave_1 added [ 59.009145][ T5826] team0: Port device team_slave_1 added [ 59.025662][ T5819] team0: Port device team_slave_1 added [ 59.064085][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.071199][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.097308][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.110398][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.118086][ T5836] Bluetooth: hci0: command tx timeout [ 59.118322][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.149754][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.183396][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.190551][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.216966][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.233177][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.240426][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.267605][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.282506][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.289771][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.315737][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.358413][ T5829] hsr_slave_0: entered promiscuous mode [ 59.364579][ T5829] hsr_slave_1: entered promiscuous mode [ 59.373814][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.381736][ T5829] Cannot create hsr debugfs directory [ 59.388784][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.395759][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.422306][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.427451][ T5836] Bluetooth: hci4: command tx timeout [ 59.433030][ T5833] Bluetooth: hci3: command tx timeout [ 59.438455][ T5132] Bluetooth: hci2: command tx timeout [ 59.448591][ T54] Bluetooth: hci1: command tx timeout [ 59.488835][ T5822] hsr_slave_0: entered promiscuous mode [ 59.495006][ T5822] hsr_slave_1: entered promiscuous mode [ 59.501574][ T5822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.509439][ T5822] Cannot create hsr debugfs directory [ 59.522946][ T5826] hsr_slave_0: entered promiscuous mode [ 59.529466][ T5826] hsr_slave_1: entered promiscuous mode [ 59.535963][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.543857][ T5826] Cannot create hsr debugfs directory [ 59.612772][ T5819] hsr_slave_0: entered promiscuous mode [ 59.619624][ T5819] hsr_slave_1: entered promiscuous mode [ 59.625637][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.633829][ T5819] Cannot create hsr debugfs directory [ 59.895913][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.918801][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.930528][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.958723][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.004349][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.019880][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.035033][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.053906][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.091550][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.101919][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.123983][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.135232][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.219310][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.257522][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.270400][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.293776][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.324092][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.349452][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.359816][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.369725][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.409631][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.437659][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.481037][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.503014][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.524173][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.541828][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.549111][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.562489][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.569654][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.600093][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.607223][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.620675][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.627850][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.669221][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.714872][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.722038][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.749711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.756863][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.820583][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.834145][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.916508][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.928184][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.949677][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.956830][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.979164][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.986317][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.061962][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.095601][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.103412][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.125579][ T5822] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.138462][ T5822] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.162075][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.169261][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.186865][ T54] Bluetooth: hci0: command tx timeout [ 61.240292][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.334923][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.403773][ T5815] veth0_vlan: entered promiscuous mode [ 61.412703][ T5826] veth0_vlan: entered promiscuous mode [ 61.448774][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.462922][ T5826] veth1_vlan: entered promiscuous mode [ 61.473672][ T5815] veth1_vlan: entered promiscuous mode [ 61.506930][ T54] Bluetooth: hci1: command tx timeout [ 61.506984][ T5833] Bluetooth: hci4: command tx timeout [ 61.512450][ T54] Bluetooth: hci2: command tx timeout [ 61.518781][ T5833] Bluetooth: hci3: command tx timeout [ 61.528271][ T5829] veth0_vlan: entered promiscuous mode [ 61.542455][ T5829] veth1_vlan: entered promiscuous mode [ 61.589091][ T5815] veth0_macvtap: entered promiscuous mode [ 61.616203][ T5815] veth1_macvtap: entered promiscuous mode [ 61.639070][ T5826] veth0_macvtap: entered promiscuous mode [ 61.659888][ T5822] veth0_vlan: entered promiscuous mode [ 61.688913][ T5829] veth0_macvtap: entered promiscuous mode [ 61.697810][ T5826] veth1_macvtap: entered promiscuous mode [ 61.705704][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.722435][ T5829] veth1_macvtap: entered promiscuous mode [ 61.737588][ T5822] veth1_vlan: entered promiscuous mode [ 61.750352][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.765594][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.785862][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.796037][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.813318][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.823399][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.853780][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.872152][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.884761][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.896717][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.909315][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.919295][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.930053][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.941677][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.955776][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.966891][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.978075][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.998485][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.013039][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.023403][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.034998][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.045818][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.064468][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.074951][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.083984][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.092887][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.110057][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.119174][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.128229][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.137305][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.188145][ T5822] veth0_macvtap: entered promiscuous mode [ 62.237332][ T5822] veth1_macvtap: entered promiscuous mode [ 62.268853][ T5819] veth0_vlan: entered promiscuous mode [ 62.285770][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.297529][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.309639][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.320723][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.330776][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.341570][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.354084][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.381778][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.392537][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.404321][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.415120][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.425093][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.435756][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.447848][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.464976][ T5819] veth1_vlan: entered promiscuous mode [ 62.475507][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.477721][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.484450][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.499497][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.501087][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.517338][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.569725][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.581640][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.590555][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.598531][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.691573][ T5819] veth0_macvtap: entered promiscuous mode [ 62.703918][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.713103][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.728759][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.751965][ T5819] veth1_macvtap: entered promiscuous mode [ 62.761060][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.772700][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.814632][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.826998][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.938929][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.954183][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.964423][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.980643][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.992475][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.003743][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.014034][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.024578][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.045983][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.069840][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.071133][ T5903] batman_adv: batadv0: Adding interface: dummy0 [ 63.084322][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.086174][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.118542][ T5903] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.134261][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.156136][ T5903] batman_adv: batadv0: Interface activated: dummy0 [ 63.176170][ T5906] batadv0: mtu less than device minimum [ 63.183951][ T5906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.195825][ T5906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.207566][ T5906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.219083][ T5906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.230742][ T5906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.242242][ T5906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.253978][ T5906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.265591][ T5906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.267831][ T5833] Bluetooth: hci0: command tx timeout [ 63.277979][ T5906] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 63.337684][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.356488][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.366693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.376840][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.387337][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.397214][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.407723][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.417650][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.428304][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.442338][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.518550][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.546651][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.555494][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.590395][ T5833] Bluetooth: hci3: command tx timeout [ 63.595861][ T5833] Bluetooth: hci2: command tx timeout [ 63.607378][ T54] Bluetooth: hci4: command tx timeout [ 63.607812][ T5132] Bluetooth: hci1: command tx timeout [ 63.612941][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.674268][ T5914] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.984568][ T5929] tipc: Started in network mode [ 64.001927][ T5929] tipc: Node identity 6e4dace8404c, cluster identity 4711 [ 64.027103][ T5929] tipc: Enabled bearer , priority 0 [ 64.267237][ T5900] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.311858][ T5929] syzkaller0: entered promiscuous mode [ 64.357086][ T5929] syzkaller0: entered allmulticast mode [ 64.364556][ T5929] tipc: Resetting bearer [ 64.404725][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.417352][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.427522][ T5900] usb 1-1: Using ep0 maxpacket: 16 [ 64.437297][ T5900] usb 1-1: config 0 has an invalid interface number: 206 but max is 0 [ 65.033986][ T5900] usb 1-1: config 0 has no interface number 0 [ 65.092282][ T25] tipc: Node number set to 771861736 [ 65.197028][ T5900] usb 1-1: config 0 interface 206 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 65.227300][ T5900] usb 1-1: New USB device found, idVendor=0471, idProduct=1237, bcdDevice=9b.77 [ 65.236441][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.260324][ T5900] usb 1-1: Product: syz [ 65.264581][ T5900] usb 1-1: Manufacturer: syz [ 65.276825][ T5900] usb 1-1: SerialNumber: syz [ 65.328210][ T5900] usb 1-1: config 0 descriptor?? [ 65.347284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 65.371671][ T5833] Bluetooth: hci0: command tx timeout [ 65.666876][ T5833] Bluetooth: hci2: command tx timeout [ 65.672364][ T5833] Bluetooth: hci1: command tx timeout [ 65.678023][ T5132] Bluetooth: hci4: command tx timeout [ 65.683458][ T5836] Bluetooth: hci3: command tx timeout [ 67.130040][ T5900] usb 1-1: USB disconnect, device number 2 [ 67.197053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.587381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 67.929040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.941606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.950669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 68.763264][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.032377][ T51] IPVS: starting estimator thread 0... [ 69.137027][ T5979] IPVS: using max 21 ests per chain, 50400 per kthread [ 69.222688][ T5913] tipc: Resetting bearer [ 69.258528][ T5913] tipc: Disabling bearer [ 69.282449][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 69.341873][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.376984][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.396966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.746951][ T5868] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.885203][ T29] audit: type=1804 audit(1734578487.277:2): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.5" name="/newroot/0/bus/file1" dev="overlay" ino=25 res=1 errno=0 [ 69.965354][ T29] audit: type=1804 audit(1734578487.357:3): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.23" name="/newroot/9/bus/file1" dev="overlay" ino=74 res=1 errno=0 [ 70.047441][ T5868] usb 2-1: Using ep0 maxpacket: 16 [ 70.058180][ T5868] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 70.069085][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.078234][ T5868] usb 2-1: Product: syz [ 70.082548][ T5868] usb 2-1: Manufacturer: syz [ 70.088827][ T5868] usb 2-1: SerialNumber: syz [ 70.159377][ T5917] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 70.490651][ T6001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 70.669520][ T5868] usb 2-1: config 0 descriptor?? [ 70.881344][ T5868] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 71.160911][ T5868] gp8psk: usb in 128 operation failed. [ 71.167314][ T5868] gp8psk: usb in 137 operation failed. [ 71.172848][ T5868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 71.183970][ T5868] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 71.193563][ T5868] usb 2-1: media controller created [ 71.199623][ T6008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 71.213499][ T5868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 71.237710][ T5868] gp8psk_fe: Frontend revision 1 attached [ 71.243828][ T5868] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 71.254191][ T5868] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 71.266019][ T5917] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 71.275712][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.283949][ T5917] usb 3-1: Product: syz [ 71.298632][ T5917] usb 3-1: Manufacturer: syz [ 71.303286][ T5917] usb 3-1: SerialNumber: syz [ 71.337342][ T5917] usb 3-1: config 0 descriptor?? [ 71.421201][ C1] net_ratelimit: 10 callbacks suppressed [ 71.421224][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 71.585523][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.611898][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.778037][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.781603][ T5868] gp8psk: usb in 137 operation failed. [ 71.785167][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.791225][ T5868] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 71.806679][ T5868] gp8psk: found Genpix USB device pID = 201 (hex) [ 71.848756][ T5868] usb 2-1: USB disconnect, device number 2 [ 72.150836][ T5868] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 72.860797][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 73.014427][ T6033] tipc: Started in network mode [ 73.019640][ T6033] tipc: Node identity 4e4c6e868812, cluster identity 4711 [ 73.063319][ T6033] tipc: Enabled bearer , priority 0 [ 73.071331][ T5917] mos7840 3-1:0.0: required endpoints missing [ 73.082090][ T5917] usb 3-1: USB disconnect, device number 2 [ 73.244430][ T6035] syzkaller0: entered promiscuous mode [ 73.254513][ T6035] syzkaller0: entered allmulticast mode [ 73.281842][ T6035] tipc: Resetting bearer [ 73.469945][ T6044] capability: warning: `syz.0.35' uses 32-bit capabilities (legacy support in use) [ 73.576157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.156963][ T976] tipc: Node number set to 3328077446 [ 78.152244][ T6027] tipc: Resetting bearer [ 78.236554][ T6027] tipc: Disabling bearer [ 78.246993][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 80.082910][ T6141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 81.156790][ T5132] Bluetooth: hci4: command tx timeout [ 81.326716][ T6150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 81.449934][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.527632][ T6160] batman_adv: batadv0: Adding interface: dummy0 [ 81.534028][ T6160] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.621812][ T6160] batman_adv: batadv0: Interface activated: dummy0 [ 81.673395][ T6164] batadv0: mtu less than device minimum [ 81.721453][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.734157][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.746552][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.759036][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.771635][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.784072][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.796494][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.808930][ T6164] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 81.927245][ T6162] netlink: 'syz.3.60': attribute type 12 has an invalid length. [ 82.057966][ T9] cfg80211: failed to load regulatory.db [ 82.279089][ T6167] syzkaller0: entered promiscuous mode [ 82.312517][ T6167] syzkaller0: entered allmulticast mode [ 84.716778][ T5132] Bluetooth: hci1: command tx timeout [ 86.919982][ T6209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.70'. [ 88.610335][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.72'. [ 89.855991][ T6232] net_ratelimit: 11 callbacks suppressed [ 89.856012][ T6232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.117656][ T6241] bridge0: port 3(erspan0) entered blocking state [ 90.129484][ T6241] bridge0: port 3(erspan0) entered disabled state [ 90.136983][ T6241] erspan0: entered allmulticast mode [ 90.167282][ T6241] erspan0: entered promiscuous mode [ 90.182194][ T6241] bridge0: port 3(erspan0) entered blocking state [ 90.189593][ T6241] bridge0: port 3(erspan0) entered forwarding state [ 90.626180][ T6233] sctp: failed to load transform for md5: -2 [ 90.925063][ T6258] capability: warning: `syz.2.80' uses deprecated v2 capabilities in a way that may be insecure [ 91.016700][ T5917] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 91.187593][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 91.301756][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.333298][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.181193][ T5917] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 92.190381][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.294540][ T5917] usb 5-1: config 0 descriptor?? [ 92.604389][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 93.804546][ T5917] ft260 0003:0403:6030.0001: item fetching failed at offset 0/2 [ 93.813423][ T5917] ft260 0003:0403:6030.0001: failed to parse HID [ 93.819960][ T5917] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -22 [ 94.688364][ T6250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.728799][ T6250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.246951][ T25] usb 5-1: USB disconnect, device number 2 [ 96.687413][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.790003][ T6340] tipc: Started in network mode [ 96.794936][ T6340] tipc: Node identity 569b6ea82e5e, cluster identity 4711 [ 96.804383][ T6340] tipc: Enabled bearer , priority 0 [ 96.872951][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.920933][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 96.980569][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 1024 [ 97.002742][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 97.015502][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.080554][ T6340] syzkaller0: entered promiscuous mode [ 97.131485][ T25] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 97.161641][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.189080][ T6340] syzkaller0: entered allmulticast mode [ 97.196078][ T6340] tipc: Resetting bearer [ 97.221065][ T25] usb 5-1: Product: syz [ 97.315370][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.97'. [ 97.393895][ T25] usb 5-1: Manufacturer: syz [ 97.399726][ T25] usb 5-1: SerialNumber: syz [ 98.212252][ T51] tipc: Node number set to 2026204840 [ 98.221429][ T25] usb 5-1: config 0 descriptor?? [ 98.227722][ T6326] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.965407][ T25] option 5-1:0.0: GSM modem (1-port) converter detected [ 98.987987][ T25] usb 5-1: USB disconnect, device number 3 [ 98.997383][ T25] option 5-1:0.0: device disconnected [ 99.741376][ T12] tipc: Resetting bearer [ 99.825857][ T9] IPVS: starting estimator thread 0... [ 99.859421][ T6362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 99.946716][ T6370] IPVS: using max 25 ests per chain, 60000 per kthread [ 101.350323][ T6332] tipc: Resetting bearer [ 101.491248][ T6389] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 104.850380][ T51] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.116801][ T51] usb 5-1: Using ep0 maxpacket: 32 [ 105.129299][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.270978][ T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.281736][ T51] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 105.291121][ T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.337341][ T51] usb 5-1: config 0 descriptor?? [ 106.209224][ T51] ft260 0003:0403:6030.0002: item fetching failed at offset 0/2 [ 106.218643][ T51] ft260 0003:0403:6030.0002: failed to parse HID [ 106.225033][ T51] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -22 [ 106.943766][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.038772][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.086146][ T6332] tipc: Disabling bearer [ 109.095011][ T6389] batman_adv: batadv0: Interface deactivated: dummy0 [ 109.103230][ T6389] batman_adv: batadv0: Removing interface: dummy0 [ 109.132836][ T5132] Bluetooth: hci4: link tx timeout [ 109.139085][ T5132] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.186083][ T5132] Bluetooth: hci4: link tx timeout [ 109.194155][ T5132] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.203266][ T5132] Bluetooth: hci4: link tx timeout [ 109.210509][ T6430] tipc: Enabling of bearer rejected, failed to enable media [ 109.219783][ T5132] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.034770][ T5132] Bluetooth: hci4: link tx timeout [ 111.041076][ T5132] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 111.186728][ T5132] Bluetooth: hci4: command 0x0406 tx timeout [ 112.416142][ T5917] usb 5-1: USB disconnect, device number 4 [ 112.543526][ T6483] vivid-000: kernel_thread() failed [ 115.040124][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 115.571049][ T5917] IPVS: starting estimator thread 0... [ 115.776906][ T6526] IPVS: using max 19 ests per chain, 45600 per kthread [ 116.585438][ T6523] tipc: Started in network mode [ 116.597142][ T6523] tipc: Node identity c27fb28eaeeb, cluster identity 4711 [ 116.605188][ T6523] tipc: Enabled bearer , priority 0 [ 116.880720][ T6523] syzkaller0: entered promiscuous mode [ 116.897022][ T6523] syzkaller0: entered allmulticast mode [ 116.913451][ T6523] tipc: Resetting bearer [ 117.971666][ T5917] tipc: Node number set to 1821684366 [ 119.214116][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 123.082558][ T6547] tipc: Resetting bearer [ 125.397548][ T6619] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:40:00:00 [ 126.541422][ T6547] tipc: Disabling bearer [ 127.356263][ T6640] overlayfs: failed to resolve './file0': -2 [ 130.506894][ T6685] tipc: Enabling of bearer rejected, failed to enable media [ 131.726983][ T5132] Bluetooth: hci0: command tx timeout [ 132.835626][ T5900] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 133.859150][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.867760][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.072114][ T5900] usb 3-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 134.083871][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.105486][ T5900] usb 3-1: Product: syz [ 134.121731][ T5900] usb 3-1: Manufacturer: syz [ 134.145576][ T5900] usb 3-1: SerialNumber: syz [ 134.213119][ T5900] usb 3-1: config 0 descriptor?? [ 134.771254][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.969981][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.026844][ T5833] Bluetooth: hci0: command tx timeout [ 135.156954][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.518459][ T6756] overlayfs: failed to resolve './file0': -2 [ 136.096701][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 136.646696][ T9] usb 5-1: config 0 has an invalid interface number: 206 but max is 0 [ 136.719907][ T9] usb 5-1: config 0 has no interface number 0 [ 136.726164][ T9] usb 5-1: config 0 interface 206 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 136.896239][ T5900] mos7840 3-1:0.0: required endpoints missing [ 136.908734][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=1237, bcdDevice=9b.77 [ 136.918100][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.926107][ T9] usb 5-1: Product: syz [ 136.948560][ T5900] usb 3-1: USB disconnect, device number 3 [ 137.156743][ T9] usb 5-1: Manufacturer: syz [ 137.161386][ T9] usb 5-1: SerialNumber: syz [ 137.183242][ T9] usb 5-1: config 0 descriptor?? [ 137.242042][ T9] usb 5-1: can't set config #0, error -71 [ 137.286485][ T9] usb 5-1: USB disconnect, device number 5 [ 140.114113][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 140.584597][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.202'. [ 140.687066][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 144.948541][ T6890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.217'. [ 146.586661][ T5833] Bluetooth: hci1: command tx timeout [ 149.163637][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 149.714620][ T9] IPVS: starting estimator thread 0... [ 149.976781][ T6936] IPVS: using max 26 ests per chain, 62400 per kthread [ 150.906811][ T5833] Bluetooth: hci3: command tx timeout [ 151.222539][ T6966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.234'. [ 152.066709][ T5833] Bluetooth: hci2: command tx timeout [ 154.497870][ T6993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.241'. [ 157.020512][ T7019] netlink: 'syz.1.245': attribute type 12 has an invalid length. [ 157.035316][ T7023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.246'. [ 158.444021][ T7038] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.373472][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.251'. [ 159.491334][ T5833] Bluetooth: hci4: link tx timeout [ 159.497385][ T5833] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 162.192110][ T5132] Bluetooth: hci4: command 0x0406 tx timeout [ 164.246142][ T7060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 164.645091][ T7087] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 165.821159][ T7100] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.843549][ T7099] netlink: 'syz.3.266': attribute type 12 has an invalid length. [ 167.470499][ T7113] Zero length message leads to an empty skb [ 169.350126][ T7141] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.777190][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.277'. [ 170.576880][ T51] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 170.653892][ T7162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.747150][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 171.407997][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 172.948365][ T51] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 173.154488][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.164304][ T51] usb 3-1: Product: syz [ 173.168631][ T51] usb 3-1: Manufacturer: syz [ 173.173334][ T51] usb 3-1: SerialNumber: syz [ 173.928923][ T51] usb 3-1: config 0 descriptor?? [ 174.142340][ T51] usb 3-1: can't set config #0, error -71 [ 174.160193][ T51] usb 3-1: USB disconnect, device number 4 [ 176.740313][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.292'. [ 180.039323][ T7230] tipc: Enabled bearer , priority 0 [ 180.255386][ T7236] syzkaller0: entered promiscuous mode [ 180.288403][ T7236] syzkaller0: entered allmulticast mode [ 180.335212][ T7236] tipc: Resetting bearer [ 182.301216][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 182.307373][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 182.313476][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 182.321874][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 185.309746][ T7249] tipc: Enabling of bearer rejected, failed to enable media [ 185.346258][ T7212] tipc: Resetting bearer [ 185.373757][ T7212] tipc: Disabling bearer [ 185.400872][ T7289] bridge0: port 3(vxlan0) entered blocking state [ 185.407405][ T7289] bridge0: port 3(vxlan0) entered disabled state [ 185.414004][ T7289] vxlan0: entered allmulticast mode [ 185.425540][ T7289] vxlan0: entered promiscuous mode [ 186.788623][ T7316] erspan0: entered promiscuous mode [ 186.790162][ T7313] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.794657][ T7314] erspan0: left promiscuous mode [ 187.525803][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 187.686666][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 187.704048][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.718277][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.728151][ T9] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 187.737313][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.782471][ T9] usb 3-1: config 0 descriptor?? [ 189.131619][ T7337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.172262][ T7337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.221123][ T7344] bridge0: port 3(vxlan0) entered blocking state [ 189.256501][ T7344] bridge0: port 3(vxlan0) entered disabled state [ 189.290859][ T7344] vxlan0: entered allmulticast mode [ 189.314960][ T7344] vxlan0: entered promiscuous mode [ 189.615224][ T29] audit: type=1804 audit(1734578606.917:4): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.314" name="/newroot/53/file1" dev="fuse" ino=1 res=1 errno=0 [ 189.892601][ T29] audit: type=1800 audit(1734578607.247:5): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.314" name="/" dev="fuse" ino=1 res=0 errno=0 [ 190.281555][ T7361] tipc: Enabled bearer , priority 0 [ 190.384500][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 190.391933][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 190.446944][ T9] usb 3-1: USB disconnect, device number 5 [ 190.469556][ T7369] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 190.545116][ T7361] syzkaller0: entered promiscuous mode [ 190.554220][ T7361] syzkaller0: entered allmulticast mode [ 190.562396][ T7361] tipc: Resetting bearer [ 190.836279][ T7384] erspan0: entered promiscuous mode [ 190.849544][ T7354] tipc: Resetting bearer [ 192.458600][ T7411] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 193.525474][ T7424] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 194.632404][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.639326][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.774467][ T7354] tipc: Disabling bearer [ 196.782543][ T7383] erspan0: left promiscuous mode [ 196.809893][ T7422] bridge0: port 4(vxlan0) entered blocking state [ 196.817358][ T7422] bridge0: port 4(vxlan0) entered disabled state [ 196.830677][ T7422] vxlan0: entered allmulticast mode [ 196.831974][ T7454] overlayfs: failed to resolve './file1': -2 [ 196.840031][ T7422] vxlan0: entered promiscuous mode [ 197.029797][ T7460] netlink: 68 bytes leftover after parsing attributes in process `syz.4.335'. [ 198.783099][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 199.518270][ T7496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.530323][ T7511] tipc: Started in network mode [ 201.535332][ T7511] tipc: Node identity 1203ecd71568, cluster identity 4711 [ 201.543107][ T7511] tipc: Enabled bearer , priority 0 [ 201.659200][ T7511] syzkaller0: entered promiscuous mode [ 201.715969][ T7511] syzkaller0: entered allmulticast mode [ 202.024580][ T7511] tipc: Resetting bearer [ 202.444916][ T6933] tipc: Resetting bearer [ 202.491976][ T7508] tipc: Resetting bearer [ 202.658317][ T5917] tipc: Node number set to 124513495 [ 203.380502][ T7553] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 204.260871][ T7558] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.921723][ T7508] tipc: Disabling bearer [ 208.609282][ T7589] vivid-000: kernel_thread() failed [ 209.589251][ T7606] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.135937][ T7653] tipc: Enabled bearer , priority 0 [ 212.520261][ T7661] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 212.863094][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 214.186738][ T29] audit: type=1804 audit(1734578630.817:6): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.380" name="/newroot/67/file1" dev="fuse" ino=1 res=1 errno=0 [ 214.245965][ T7653] syzkaller0: entered promiscuous mode [ 214.251605][ T7653] syzkaller0: entered allmulticast mode [ 214.268364][ T7653] tipc: Resetting bearer [ 214.275054][ T29] audit: type=1800 audit(1734578631.517:7): pid=7666 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.380" name="/" dev="fuse" ino=1 res=0 errno=0 [ 214.843224][ T7683] overlayfs: conflicting lowerdir path [ 216.099837][ T7648] tipc: Resetting bearer [ 217.233834][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 218.833277][ T7648] tipc: Disabling bearer [ 218.857011][ T7754] erspan0: entered promiscuous mode [ 218.862772][ T7754] erspan0: left promiscuous mode [ 219.022468][ T7779] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 229.554208][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.406'. [ 230.766281][ T29] audit: type=1804 audit(1734578648.127:8): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.407" name="/newroot/72/file1" dev="fuse" ino=1 res=1 errno=0 [ 230.786110][ T29] audit: type=1800 audit(1734578648.127:9): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.407" name="/" dev="fuse" ino=1 res=0 errno=0 [ 230.805441][ T29] audit: type=1804 audit(1734578648.137:10): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.407" name="/newroot/72/file1" dev="fuse" ino=1 res=1 errno=0 [ 230.825711][ T29] audit: type=1804 audit(1734578648.137:11): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.407" name="/newroot/72/file1" dev="fuse" ino=1 res=1 errno=0 [ 230.872268][ T29] audit: type=1800 audit(1734578648.137:12): pid=7893 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.407" name="/" dev="fuse" ino=1 res=0 errno=0 [ 231.075682][ T7906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.428670][ T7912] erspan0: entered promiscuous mode [ 231.505267][ T7911] erspan0: left promiscuous mode [ 232.074973][ T7923] netlink: 'syz.4.418': attribute type 12 has an invalid length. [ 232.443682][ T7928] random: crng reseeded on system resumption [ 233.059129][ T7928] Unrecognized hibernate image header format! [ 233.095041][ T7928] PM: hibernation: Image mismatch: architecture specific data [ 235.237680][ T29] audit: type=1804 audit(1734578652.127:13): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.425" name="/newroot/79/file1" dev="fuse" ino=1 res=1 errno=0 [ 235.259737][ T29] audit: type=1800 audit(1734578652.127:14): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.425" name="/" dev="fuse" ino=1 res=0 errno=0 [ 235.279705][ T29] audit: type=1804 audit(1734578652.127:15): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.425" name="/newroot/79/file1" dev="fuse" ino=1 res=1 errno=0 [ 235.302293][ T29] audit: type=1804 audit(1734578652.127:16): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.425" name="/newroot/79/file1" dev="fuse" ino=1 res=1 errno=0 [ 235.323804][ T29] audit: type=1800 audit(1734578652.127:17): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.425" name="/" dev="fuse" ino=1 res=0 errno=0 [ 235.619843][ T7967] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 235.639194][ T7966] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 236.658926][ T29] audit: type=1326 audit(1734578654.057:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7996 comm="syz.3.435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff50785d29 code=0x0 [ 237.053282][ T8003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.434'. [ 238.302672][ T5870] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 238.528603][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.580852][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.907004][ T5870] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 239.192398][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.306310][ T5870] usb 4-1: config 0 descriptor?? [ 240.484106][ T29] audit: type=1804 audit(1734578657.707:19): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.439" name="/newroot/77/file1" dev="fuse" ino=1 res=1 errno=0 [ 240.613848][ T29] audit: type=1800 audit(1734578657.747:20): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.439" name="/" dev="fuse" ino=1 res=0 errno=0 [ 240.633189][ T29] audit: type=1804 audit(1734578657.777:21): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.439" name="/newroot/77/file1" dev="fuse" ino=1 res=1 errno=0 [ 240.652646][ T29] audit: type=1804 audit(1734578657.777:22): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.439" name="/newroot/77/file1" dev="fuse" ino=1 res=1 errno=0 [ 240.672172][ T29] audit: type=1800 audit(1734578657.777:23): pid=8036 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.439" name="/" dev="fuse" ino=1 res=0 errno=0 [ 240.707766][ T5870] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 241.586912][ T5871] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 241.715555][ T5870] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 241.736419][ T5870] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 241.766724][ T5871] usb 2-1: Using ep0 maxpacket: 8 [ 241.779886][ T5871] usb 2-1: config 7 has an invalid interface number: 131 but max is 0 [ 241.869332][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 242.396945][ T5870] pyra 0003:1E7D:2CF6.0003: probe with driver pyra failed with error -71 [ 242.406448][ T5871] usb 2-1: config 7 has no interface number 0 [ 242.415679][ T5871] usb 2-1: config 7 interface 131 has no altsetting 0 [ 242.428084][ T5870] usb 4-1: USB disconnect, device number 2 [ 242.442786][ T5871] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=86.d8 [ 242.452065][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.460191][ T5871] usb 2-1: Product: syz [ 242.464368][ T5871] usb 2-1: Manufacturer: syz [ 242.469069][ T5871] usb 2-1: SerialNumber: syz [ 242.785234][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.846283][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.435023][ T5871] ttusb_dec_send_command: command bulk message failed: error -22 [ 244.176227][ T5871] ttusb-dec 2-1:7.131: probe with driver ttusb-dec failed with error -22 [ 244.270396][ T5871] usb 2-1: USB disconnect, device number 3 [ 245.930629][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.456'. [ 247.641732][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.461'. [ 252.716766][ T5900] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 253.401976][ T5900] usb 3-1: Using ep0 maxpacket: 32 [ 253.612474][ T8191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 254.855713][ T5900] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 254.870174][ T5900] usb 3-1: config 0 has no interface number 0 [ 254.880661][ T5900] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 254.894449][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.829848][ T5900] usb 3-1: Product: syz [ 255.844778][ T5900] usb 3-1: Manufacturer: syz [ 255.850096][ T5900] usb 3-1: SerialNumber: syz [ 255.911112][ T5900] usb 3-1: config 0 descriptor?? [ 256.235981][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.243676][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.276262][ T5900] usb 3-1: can't set config #0, error -71 [ 257.030201][ T5900] usb 3-1: USB disconnect, device number 6 [ 259.029810][ T8258] netlink: 'syz.4.488': attribute type 12 has an invalid length. [ 261.127451][ T8274] netlink: 'syz.2.491': attribute type 12 has an invalid length. [ 268.090718][ T8352] overlayfs: conflicting lowerdir path [ 270.169518][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 270.348418][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.365544][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.400738][ T5917] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 270.652090][ T8430] tmpfs: Bad value for 'mpol' [ 271.278953][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.305565][ T5917] usb 1-1: config 0 descriptor?? [ 271.545849][ T5917] usbhid 1-1:0.0: can't add hid device: -71 [ 271.553231][ T5917] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 271.597033][ T5917] usb 1-1: USB disconnect, device number 3 [ 272.820095][ T8471] overlayfs: conflicting lowerdir path [ 273.027452][ T8475] netlink: 'syz.3.527': attribute type 6 has an invalid length. [ 273.127080][ T8475] netlink: 148 bytes leftover after parsing attributes in process `syz.3.527'. [ 273.245697][ T8475] syz.3.527 uses obsolete (PF_INET,SOCK_PACKET) [ 274.146963][ T8475] jfs: Bad value for 'gid' [ 274.151454][ T8475] jfs: Bad value for 'gid' [ 274.613013][ T8535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 274.638102][ T8535] macsec0: entered promiscuous mode [ 274.670883][ T5900] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 274.819851][ T8541] FAULT_INJECTION: forcing a failure. [ 274.819851][ T8541] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 274.856869][ T8541] CPU: 0 UID: 0 PID: 8541 Comm: syz.2.536 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 274.867525][ T8541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 274.877714][ T8541] Call Trace: [ 274.881026][ T8541] [ 274.883984][ T8541] dump_stack_lvl+0x241/0x360 [ 274.888726][ T8541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.893964][ T8541] ? __pfx__printk+0x10/0x10 [ 274.898590][ T8541] ? __pfx_lock_release+0x10/0x10 [ 274.903660][ T8541] should_fail_ex+0x3b0/0x4e0 [ 274.908377][ T8541] _copy_from_user+0x2f/0xc0 [ 274.913007][ T8541] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 274.918222][ T8541] map_delete_elem+0x1d3/0x5c0 [ 274.922992][ T8541] __sys_bpf+0x598/0x810 [ 274.927234][ T8541] ? __pfx___sys_bpf+0x10/0x10 [ 274.932007][ T8541] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 274.937987][ T8541] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.944310][ T8541] ? do_syscall_64+0x100/0x230 [ 274.949165][ T8541] __x64_sys_bpf+0x7c/0x90 [ 274.953593][ T8541] do_syscall_64+0xf3/0x230 [ 274.958100][ T8541] ? clear_bhb_loop+0x35/0x90 [ 274.962800][ T8541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.968708][ T8541] RIP: 0033:0x7f4b9f985d29 [ 274.973128][ T8541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.992832][ T8541] RSP: 002b:00007f4ba0731038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.001283][ T8541] RAX: ffffffffffffffda RBX: 00007f4b9fb75fa0 RCX: 00007f4b9f985d29 [ 275.009261][ T8541] RDX: 0000000000000020 RSI: 0000000020000080 RDI: 0000000000000003 [ 275.017240][ T8541] RBP: 00007f4ba0731090 R08: 0000000000000000 R09: 0000000000000000 [ 275.025209][ T8541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.033180][ T8541] R13: 0000000000000000 R14: 00007f4b9fb75fa0 R15: 00007ffcc8001178 [ 275.041168][ T8541] [ 275.087211][ T5900] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.107017][ T5900] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 275.131612][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.156913][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 275.187139][ T5917] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 275.255768][ T5900] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 275.545974][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 275.892217][ T5900] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.909362][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.953415][ T5900] usb 5-1: Product: syz [ 275.968813][ T5900] usb 5-1: Manufacturer: syz [ 275.983951][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.996347][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.076548][ T5900] cdc_wdm 5-1:1.0: skipping garbage [ 276.082110][ T5900] cdc_wdm 5-1:1.0: skipping garbage [ 276.094779][ T5917] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 276.120001][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.142809][ T5900] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 276.155807][ T5917] usb 1-1: config 0 descriptor?? [ 276.169860][ T5868] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 276.225293][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'. [ 276.258364][ T5900] cdc_wdm 5-1:1.0: Unknown control protocol [ 276.284521][ T8562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.539'. [ 276.540523][ T29] audit: type=1326 audit(1734578693.927:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8513 comm="syz.4.531" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea13185d29 code=0x0 [ 276.716133][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 276.735387][ T5868] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 276.756640][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.767633][ T5868] usb 3-1: Product: syz [ 276.772373][ T5868] usb 3-1: Manufacturer: syz [ 276.793707][ T5868] usb 3-1: SerialNumber: syz [ 276.811937][ T5868] usb 3-1: config 0 descriptor?? [ 277.034098][ T5868] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 277.060157][ T5917] ft260 0003:0403:6030.0004: item fetching failed at offset 0/2 [ 277.076467][ T5917] ft260 0003:0403:6030.0004: failed to parse HID [ 277.088466][ T5917] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -22 [ 277.299755][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.339758][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.196690][ T29] audit: type=1800 audit(1734578694.877:25): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.540" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 278.790049][ T5917] usb 5-1: USB disconnect, device number 6 [ 279.665938][ T5870] usb 1-1: USB disconnect, device number 4 [ 280.044537][ T5868] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 280.148950][ T8599] tipc: Enabled bearer , priority 0 [ 280.915085][ T9] usb 3-1: USB disconnect, device number 7 [ 281.007676][ T8614] FAULT_INJECTION: forcing a failure. [ 281.007676][ T8614] name failslab, interval 1, probability 0, space 0, times 1 [ 281.050795][ T8614] CPU: 0 UID: 0 PID: 8614 Comm: syz.3.546 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 281.061455][ T8614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 281.071538][ T8614] Call Trace: [ 281.074822][ T8614] [ 281.077763][ T8614] dump_stack_lvl+0x241/0x360 [ 281.082450][ T8614] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.087668][ T8614] ? __pfx__printk+0x10/0x10 [ 281.092288][ T8614] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 281.098298][ T8614] ? __pfx___might_resched+0x10/0x10 [ 281.103605][ T8614] should_fail_ex+0x3b0/0x4e0 [ 281.108289][ T8614] should_failslab+0xac/0x100 [ 281.112971][ T8614] kmem_cache_alloc_node_noprof+0x77/0x380 [ 281.118774][ T8614] ? __alloc_skb+0x1c3/0x440 [ 281.123368][ T8614] __alloc_skb+0x1c3/0x440 [ 281.127827][ T8614] ? __pfx___alloc_skb+0x10/0x10 [ 281.132794][ T8614] ? netlink_autobind+0xd6/0x2f0 [ 281.137743][ T8614] ? netlink_autobind+0x2b0/0x2f0 [ 281.142784][ T8614] netlink_sendmsg+0x638/0xcb0 [ 281.147565][ T8614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.152857][ T8614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.158144][ T8614] __sock_sendmsg+0x221/0x270 [ 281.162919][ T8614] ____sys_sendmsg+0x52a/0x7e0 [ 281.167694][ T8614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.172978][ T8614] ? __fget_files+0x2a/0x410 [ 281.177569][ T8614] ? __fget_files+0x2a/0x410 [ 281.182166][ T8614] __sys_sendmsg+0x269/0x350 [ 281.186760][ T8614] ? __pfx_lock_release+0x10/0x10 [ 281.191787][ T8614] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.196942][ T8614] ? __pfx_vfs_write+0x10/0x10 [ 281.201724][ T8614] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.208053][ T8614] ? do_syscall_64+0x100/0x230 [ 281.212820][ T8614] ? do_syscall_64+0xb6/0x230 [ 281.217499][ T8614] do_syscall_64+0xf3/0x230 [ 281.222005][ T8614] ? clear_bhb_loop+0x35/0x90 [ 281.226679][ T8614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.232578][ T8614] RIP: 0033:0x7eff50785d29 [ 281.237003][ T8614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.256625][ T8614] RSP: 002b:00007eff51527038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.265050][ T8614] RAX: ffffffffffffffda RBX: 00007eff50975fa0 RCX: 00007eff50785d29 [ 281.273025][ T8614] RDX: 0000000000000100 RSI: 00000000200000c0 RDI: 0000000000000003 [ 281.281084][ T8614] RBP: 00007eff51527090 R08: 0000000000000000 R09: 0000000000000000 [ 281.289060][ T8614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.297027][ T8614] R13: 0000000000000000 R14: 00007eff50975fa0 R15: 00007ffd809884e8 [ 281.305009][ T8614] [ 281.350631][ T8599] syzkaller0: entered promiscuous mode [ 281.402295][ T8599] syzkaller0: entered allmulticast mode [ 281.453083][ T8599] tipc: Resetting bearer [ 281.616223][ T8521] tipc: Resetting bearer [ 281.625152][ T8602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 281.664077][ T8592] tipc: Resetting bearer [ 283.885267][ T8634] Falling back ldisc for ptm0. [ 285.642328][ T8592] tipc: Disabling bearer [ 285.654838][ T8632] netlink: 'syz.3.549': attribute type 12 has an invalid length. [ 286.104109][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 288.333218][ T8704] netlink: 'syz.0.563': attribute type 12 has an invalid length. [ 290.704196][ T8732] tipc: Enabled bearer , priority 0 [ 290.882245][ T8732] syzkaller0: entered promiscuous mode [ 290.889012][ T8732] syzkaller0: entered allmulticast mode [ 290.907846][ T8732] tipc: Resetting bearer [ 291.318527][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 291.497044][ T5870] usb 4-1: config 1 has an invalid descriptor of length 192, skipping remainder of the config [ 291.517425][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.575318][ T5870] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 291.599866][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.612280][ T5870] usb 4-1: SerialNumber: syz [ 293.577268][ T8712] tipc: Resetting bearer [ 293.610844][ T8712] tipc: Disabling bearer [ 293.621755][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.582'. [ 293.650707][ T5870] usb 4-1: 0:2 : does not exist [ 293.982956][ T5870] usb 4-1: USB disconnect, device number 3 [ 294.422168][ T8591] udevd[8591]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.867627][ T8789] lo speed is unknown, defaulting to 1000 [ 294.886149][ T8789] lo speed is unknown, defaulting to 1000 [ 294.898832][ T8789] lo speed is unknown, defaulting to 1000 [ 295.439699][ T8789] infiniband sz1: set down [ 295.444511][ T8789] infiniband sz1: added lo [ 295.465565][ T5870] lo speed is unknown, defaulting to 1000 [ 295.499353][ T8786] »»»»»»: renamed from lo [ 295.523707][ T8789] RDS/IB: sz1: added [ 295.529278][ T8789] smc: adding ib device sz1 with port count 1 [ 295.535720][ T8789] smc: ib device sz1 port 1 has pnetid [ 295.580591][ T8789] »»»»»» speed is unknown, defaulting to 1000 [ 295.632640][ T973] »»»»»» speed is unknown, defaulting to 1000 [ 296.202115][ T8789] »»»»»» speed is unknown, defaulting to 1000 [ 296.490172][ T8789] »»»»»» speed is unknown, defaulting to 1000 [ 296.781032][ T8789] »»»»»» speed is unknown, defaulting to 1000 [ 298.742889][ T8789] »»»»»» speed is unknown, defaulting to 1000 [ 298.850581][ T8790] »»»»»» speed is unknown, defaulting to 1000 [ 298.851153][ T8789] syz.2.589 (8789) used greatest stack depth: 17904 bytes left [ 298.858106][ T8790] »»»»»» speed is unknown, defaulting to 1000 [ 298.859180][ T8790] »»»»»» speed is unknown, defaulting to 1000 [ 298.884208][ T8790] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 298.900357][ T8790] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 298.925886][ T8790] »»»»»» speed is unknown, defaulting to 1000 [ 298.933541][ T8790] »»»»»» speed is unknown, defaulting to 1000 [ 298.941043][ T8790] »»»»»» speed is unknown, defaulting to 1000 [ 298.948264][ T8790] »»»»»» speed is unknown, defaulting to 1000 [ 298.954917][ T29] audit: type=1326 audit(1734578716.347:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 298.955349][ T8790] »»»»»» speed is unknown, defaulting to 1000 [ 299.154145][ T29] audit: type=1326 audit(1734578716.477:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 299.285657][ T29] audit: type=1326 audit(1734578716.477:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 299.345387][ T29] audit: type=1326 audit(1734578716.477:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 299.798796][ T8819] overlayfs: conflicting lowerdir path [ 299.964325][ T29] audit: type=1326 audit(1734578716.477:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 300.256720][ T29] audit: type=1326 audit(1734578716.477:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 300.415318][ T29] audit: type=1326 audit(1734578716.477:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 300.416981][ T8826] netlink: 'syz.2.596': attribute type 12 has an invalid length. [ 300.941155][ T29] audit: type=1326 audit(1734578716.477:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 301.060107][ T29] audit: type=1326 audit(1734578716.477:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 301.242939][ T29] audit: type=1326 audit(1734578716.477:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0ce785d29 code=0x7ffc0000 [ 301.646486][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.598'. [ 301.862801][ T8879] tipc: Enabled bearer , priority 0 [ 301.972472][ T8875] ------------[ cut here ]------------ [ 301.978430][ T8875] kernel BUG at net/core/skbuff.c:2849! [ 301.984015][ T8875] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 301.991037][ T8875] CPU: 1 UID: 0 PID: 8875 Comm: syz.3.599 Not tainted 6.13.0-rc3-syzkaller-00062-gc061cf420ded #0 [ 302.001807][ T8875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 302.012308][ T8875] RIP: 0010:__pskb_pull_tail+0x1568/0x1570 [ 302.018122][ T8875] Code: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 e2 96 7d f8 e9 25 f1 ff ff e8 58 c2 19 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 49 c2 19 f8 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 302.037729][ T8875] RSP: 0018:ffffc9000481ef30 EFLAGS: 00010287 [ 302.043804][ T8875] RAX: ffffffff8985b157 RBX: 00000000fffffff2 RCX: 0000000000080000 [ 302.051865][ T8875] RDX: ffffc9000c5e3000 RSI: 00000000000001bc RDI: 00000000000001bd [ 302.059835][ T8875] RBP: ffff888026f342c0 R08: ffffffff89859e94 R09: 1ffff11004de68dc [ 302.067810][ T8875] R10: dffffc0000000000 R11: ffffed1004de68dd R12: ffff88805a4a9710 [ 302.076040][ T8875] R13: ffff88805a4a9640 R14: ffff88805a4a96b4 R15: ffff88805a4a9640 [ 302.084094][ T8875] FS: 00007eff515276c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 302.093038][ T8875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.099638][ T8875] CR2: 00007fec3f7ff772 CR3: 00000000270cc000 CR4: 00000000003526f0 [ 302.107705][ T8875] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.115759][ T8875] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.123725][ T8875] Call Trace: [ 302.127016][ T8875] [ 302.129942][ T8875] ? __die_body+0x5f/0xb0 [ 302.134266][ T8875] ? die+0x9e/0xc0 [ 302.137997][ T8875] ? do_trap+0x15a/0x3a0 [ 302.142268][ T8875] ? __pskb_pull_tail+0x1568/0x1570 [ 302.147580][ T8875] ? do_error_trap+0x1dc/0x2c0 [ 302.152355][ T8875] ? __pskb_pull_tail+0x1568/0x1570 [ 302.157563][ T8875] ? __pfx_do_error_trap+0x10/0x10 [ 302.162883][ T8875] ? handle_invalid_op+0x34/0x40 [ 302.167851][ T8875] ? __pskb_pull_tail+0x1568/0x1570 [ 302.173080][ T8875] ? exc_invalid_op+0x38/0x50 [ 302.177771][ T8875] ? asm_exc_invalid_op+0x1a/0x20 [ 302.182916][ T8875] ? __pskb_pull_tail+0x2a4/0x1570 [ 302.188057][ T8875] ? __pskb_pull_tail+0x1567/0x1570 [ 302.193375][ T8875] ? __pskb_pull_tail+0x1568/0x1570 [ 302.198605][ T8875] skb_cow_data+0x2da/0xcb0 [ 302.203107][ T8875] tipc_crypto_rcv+0x402/0x24e0 [ 302.208079][ T8875] ? tipc_crypto_rcv+0x27f/0x24e0 [ 302.213110][ T8875] ? __pfx_tipc_crypto_rcv+0x10/0x10 [ 302.218400][ T8875] ? __pfx_tipc_node_find_by_id+0x10/0x10 [ 302.224138][ T8875] ? tipc_ehdr_validate+0x186/0x340 [ 302.229524][ T8875] tipc_rcv+0x57e/0x12a0 [ 302.233779][ T8875] ? __pfx_tipc_rcv+0x10/0x10 [ 302.238500][ T8875] ? tipc_l2_rcv_msg+0x28/0x450 [ 302.243469][ T8875] tipc_l2_rcv_msg+0x2bd/0x450 [ 302.248259][ T8875] ? __pfx_tipc_l2_rcv_msg+0x10/0x10 [ 302.253669][ T8875] __netif_receive_skb_list_core+0x8b7/0x980 [ 302.259656][ T8875] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 302.266246][ T8875] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 302.272760][ T8875] ? dev_gro_receive+0x1318/0x2510 [ 302.277895][ T8875] ? read_tsc+0x9/0x20 [ 302.281971][ T8875] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 302.288296][ T8875] netif_receive_skb_list_internal+0xa51/0xe30 [ 302.294454][ T8875] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 302.300790][ T8875] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 302.307550][ T8875] ? eth_type_trans+0x3ce/0x7b0 [ 302.312414][ T8875] napi_complete_done+0x2b5/0x870 [ 302.317458][ T8875] ? __pfx_napi_complete_done+0x10/0x10 [ 302.323020][ T8875] ? napi_gro_frags+0xa5f/0x1360 [ 302.327966][ T8875] ? tun_get_user+0x2bbe/0x4890 [ 302.332821][ T8875] tun_get_user+0x2ea0/0x4890 [ 302.337507][ T8875] ? finish_task_switch+0x1e5/0x870 [ 302.342732][ T8875] ? tun_get_user+0x2bbe/0x4890 [ 302.347613][ T8875] ? __pfx_tun_get_user+0x10/0x10 [ 302.352696][ T8875] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 302.358265][ T8875] ? tun_get+0x1e/0x2f0 [ 302.362442][ T8875] ? __pfx_lock_release+0x10/0x10 [ 302.367480][ T8875] ? tun_get+0x1e/0x2f0 [ 302.371632][ T8875] ? tun_get+0x27d/0x2f0 [ 302.375875][ T8875] tun_chr_write_iter+0x10d/0x1f0 [ 302.380901][ T8875] do_iter_readv_writev+0x600/0x880 [ 302.386155][ T8875] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 302.391876][ T8875] ? bpf_lsm_file_permission+0x9/0x10 [ 302.397255][ T8875] ? security_file_permission+0x74/0x280 [ 302.402885][ T8875] ? rw_verify_area+0x1c3/0x6f0 [ 302.407731][ T8875] vfs_writev+0x376/0xba0 [ 302.412060][ T8875] ? __pfx_lock_acquire+0x10/0x10 [ 302.417078][ T8875] ? __pfx_vfs_writev+0x10/0x10 [ 302.421942][ T8875] ? __fget_files+0x2a/0x410 [ 302.426527][ T8875] ? __fget_files+0x395/0x410 [ 302.431202][ T8875] ? __fget_files+0x2a/0x410 [ 302.435788][ T8875] do_writev+0x1b6/0x360 [ 302.440044][ T8875] ? __pfx_do_writev+0x10/0x10 [ 302.444826][ T8875] ? do_syscall_64+0x100/0x230 [ 302.449606][ T8875] ? do_syscall_64+0xb6/0x230 [ 302.454286][ T8875] do_syscall_64+0xf3/0x230 [ 302.458811][ T8875] ? clear_bhb_loop+0x35/0x90 [ 302.463541][ T8875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.469440][ T8875] RIP: 0033:0x7eff50785d29 [ 302.473855][ T8875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.493550][ T8875] RSP: 002b:00007eff51527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 302.501962][ T8875] RAX: ffffffffffffffda RBX: 00007eff50975fa0 RCX: 00007eff50785d29 [ 302.509958][ T8875] RDX: 0000000000000002 RSI: 00000000200001c0 RDI: 0000000000000008 [ 302.517942][ T8875] RBP: 00007eff50801a20 R08: 0000000000000000 R09: 0000000000000000 [ 302.525916][ T8875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.534165][ T8875] R13: 0000000000000000 R14: 00007eff50975fa0 R15: 00007ffd809884e8 [ 302.542147][ T8875] [ 302.545170][ T8875] Modules linked in: [ 302.549145][ T8875] ---[ end trace 0000000000000000 ]--- [ 302.554621][ T8875] RIP: 0010:__pskb_pull_tail+0x1568/0x1570 [ 302.560490][ T8875] Code: 38 c1 0f 8c 32 f1 ff ff 4c 89 f7 e8 e2 96 7d f8 e9 25 f1 ff ff e8 58 c2 19 f8 48 8b 5c 24 08 e9 eb fb ff ff e8 49 c2 19 f8 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 302.580129][ T8875] RSP: 0018:ffffc9000481ef30 EFLAGS: 00010287 [ 302.586286][ T8875] RAX: ffffffff8985b157 RBX: 00000000fffffff2 RCX: 0000000000080000 [ 302.594468][ T8875] RDX: ffffc9000c5e3000 RSI: 00000000000001bc RDI: 00000000000001bd [ 302.602519][ T8875] RBP: ffff888026f342c0 R08: ffffffff89859e94 R09: 1ffff11004de68dc [ 302.610573][ T8875] R10: dffffc0000000000 R11: ffffed1004de68dd R12: ffff88805a4a9710 [ 302.618663][ T8875] R13: ffff88805a4a9640 R14: ffff88805a4a96b4 R15: ffff88805a4a9640 [ 302.626866][ T8875] FS: 00007eff515276c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 302.635809][ T8875] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.642499][ T8875] CR2: 00007fec3f7ff772 CR3: 00000000270cc000 CR4: 00000000003526f0 [ 302.650513][ T8875] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 302.658510][ T8875] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 302.666962][ T8875] Kernel panic - not syncing: Fatal exception in interrupt [ 302.674604][ T8875] Kernel Offset: disabled [ 302.678955][ T8875] Rebooting in 86400 seconds..