last executing test programs: 24.484390597s ago: executing program 1 (id=71): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) syz_open_procfs(0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e22, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa3}, {@in6=@local, 0x0, 0x33}, @in6=@local, {0x100000000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, {}, 0x0, 0x3501, 0x2, 0x1}}, 0x14b}}, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) mknod(0x0, 0x1000, 0x1) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) shutdown(r7, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000001040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0xffffff51, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)="43210098") ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x6, "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"}) 18.910873652s ago: executing program 1 (id=81): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000004000), 0x5, 0x300, 0x0, &(0x7f0000004000), 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r5, &(0x7f0000000140)={0x2020}, 0x2020) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) 17.75354433s ago: executing program 1 (id=84): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r2, 0x1) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.637310704s ago: executing program 3 (id=85): socket$inet_tcp(0x2, 0x1, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r3, 0x0, 0x0) sendto$inet(r2, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) 17.567663205s ago: executing program 4 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) 17.42086734s ago: executing program 4 (id=87): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280002001c00210000000000000000000700000005000000000000e20900020077a9e20000000000"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) mount(0x0, 0x0, &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af"}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='hfs\x00', 0x2000010, 0x0) 15.737086927s ago: executing program 4 (id=89): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x4, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x3, 0x1, 0x1, 0x1001, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x4, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xeffffffffffffffe, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0x20000d13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, 0xfffffffffffffffd) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchmodat(r4, &(0x7f0000000180)='./file0\x00', 0x22) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xdc}}, 0x0) prctl$PR_GET_TSC(0x43, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0xb, 0x80000, 0x40, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x6b}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 14.227913594s ago: executing program 1 (id=91): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) syz_open_procfs(0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e22, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa3}, {@in6=@local, 0x0, 0x33}, @in6=@local, {0x100000000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, {}, 0x0, 0x3501, 0x2, 0x1}}, 0x14b}}, 0x0) write$UHID_INPUT(r6, 0x0, 0x0) mknod(0x0, 0x1000, 0x1) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) shutdown(r7, 0x0) r9 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000001040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0xffffff51, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)="43210098") ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x6, "ca77f2089159a3bf476a7d1d2417cb2c31db31fe005d49c005987a6f8620d9b3de2f96f4bd48d37568ff1e6c9dc521b351e1ca13c830ebdc50af9bf58ca4f11fec8aad5194c0ad1ecaff060ab2f75ff688b87d473c8c97f7151843e91777e0f2e0c8d275a5e0a10943182a240034b6722aaaf4831faf84f907e8e2caabf748298f2748ca044681b0d1e2a856512afddcb4e040bb0a589656e9349be52c18d8ebe37cc62385feec76532b069901887652f31b1d535369afb5a6b5b2cd91d91a15e1ae2463903563514147763e9ee7a048939f496fa1f10fdfb15fe59efcda704204534b56ce0c80b4e7eda976fa35bad67a6826915895b75a2422e84c9a8b6a6c181ea8755216e58ebc7f896f2312c56592454636a6958be786cce206d873384713eb2cc341906330941e1290a11289936152b916aac5fb1df33007935e640d01a5e5f686555ef638dc18757c696c4a1b4a28385b86e7b59611f822fe4112be40a72849b02cb4d5594b2272e7ad6556e2523bf594fb1682b08c92fc95240851c59b517302aa9db09db70ea0ed79ec4b84aeef957cf34f0eb3e32ce040eead24292fcb3b8e2c65e66577b0f8c0c05025849c05c867ec62debe288297de27bd36d071583d68ffe6e3c8a794e0432a4efebbfcf5aba09395deac0f850e10a8c30682531ac068bba863ef3f4e01191012cc5c0bec44df959b39d05771308ebbbc1ec8"}) 14.180768095s ago: executing program 3 (id=93): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x50) 13.752217523s ago: executing program 4 (id=94): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) futex(&(0x7f0000004000), 0x5, 0x300, 0x0, &(0x7f0000004000), 0x1) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r5, &(0x7f0000000140)={0x2020}, 0x2020) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @empty=0xe0000002}, 0x10) 13.439149039s ago: executing program 3 (id=95): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000000)=""/149, &(0x7f00000000c0)=0x210) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r2, 0x0, 0x4003) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000a40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000001240)={0x69c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0x1dc, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc2}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x94, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x17b}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r8}, {0x140, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x69c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) sendmmsg$inet(r6, 0x0, 0x0, 0x4000811) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0) 12.175732937s ago: executing program 3 (id=97): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c25c904b13780666090e"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x5c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0x4}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336be", 0x95}, {0x0}, {&(0x7f00000005c0)="f2b3", 0x2}], 0x3}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78", 0x69}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x5}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.424146501s ago: executing program 2 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x4, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x3, 0x1, 0x1, 0x1001, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x4, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xeffffffffffffffe, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0x20000d13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, 0xfffffffffffffffd) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchmodat(r4, &(0x7f0000000180)='./file0\x00', 0x22) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_GET_TSC(0x43, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0xb, 0x80000, 0x40, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x6b}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 9.706436842s ago: executing program 0 (id=100): socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000100)={0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, 0x0, 0x4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1/file4\x00', &(0x7f0000000280), 0x804010, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@aname={'aname', 0x3d, '/dev/snd/midiC#D#\x00'}}]}}) close_range(r0, 0xffffffffffffffff, 0x0) 8.765578732s ago: executing program 2 (id=101): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x25, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x240408c1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x98) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000005c0)={0x2, [[0x9ef8, 0xf1, 0x0, 0x1, 0xfffffffc, 0x0, 0x3, 0x10], [0x0, 0x8, 0x0, 0x10000007, 0x20000000, 0x4, 0xffffffff], [0x0, 0x1000000, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000, 0xfffffffd]], '\x00', [{0xfffffffc, 0xf8}, {0x0, 0xfffffffd}, {0xe4}, {0x4, 0x5, 0x0, 0x1}, {0x3, 0xfffffffe}, {}, {0xffffffff, 0x400}, {}, {0x0, 0xffff}, {0x2, 0x10000000}, {0x9, 0xd78}, {0xfffffff8, 0x2}], '\x00', 0x0, 0x0, 0x0, 0xf8}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0xfffffffd, 0x7eac0, 0x3d3b4e}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02", 0x17}], 0x1}, 0x0) 8.763279352s ago: executing program 3 (id=102): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(0xffffffffffffffff, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="043e0d05"], 0x10) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0xc, 0xc9}}}, 0x6) 7.734049595s ago: executing program 4 (id=103): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r3 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1a}, 0x48, 0xfffffffffffffffa) keyctl$instantiate(0xc, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f6164205f235a66756c742074727573747175656e636572320020303030edb11a5f324d303030300500"], 0x43, r3) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x804) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d5809"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) sendto$packet(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0x11, 0x18, r7, 0x1, 0x0, 0x6, @link_local}, 0x14) 6.872579705s ago: executing program 3 (id=104): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) writev(r3, 0x0, 0x0) sendto$inet(r2, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}}, 0x0) 6.40618054s ago: executing program 2 (id=105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x50) 6.244677795s ago: executing program 2 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) mount$9p_fd(0x0, 0x0, 0x0, 0x40, &(0x7f0000000180)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000400)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x1, @local, 0xc46}], 0x58) shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002040)=""/102400, 0x19000) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x200000001003, 0x2) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @start={0x3ff, 0x1}}) capset(&(0x7f0000000000)={0x20080522}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x503, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6=r5}]}}}]}, 0x38}}, 0x0) 6.241485586s ago: executing program 0 (id=107): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x24, 0x40, 0x107, 0xfffffffc, 0x10000, {0x1, 0x7c}, [@nested={0x4, 0x140}, @nested={0x4, 0x1}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.592519146s ago: executing program 0 (id=108): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@loopback, 0x4e22, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa3}, {@in6=@local, 0x0, 0x33}, @in6=@local, {0x100000000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, {}, 0x0, 0x3501, 0x2, 0x1}}, 0x14b}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040081}, 0x0) mknod(0x0, 0x1000, 0x1) r7 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) shutdown(r6, 0x0) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000001040)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x1, 0x3, 0x2, {0xa, 0x4e24, 0xffffff51, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540)="43210098") ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000000c0)={0x6, "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"}) 4.251077159s ago: executing program 0 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x4000300) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x4) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r3, &(0x7f00000002c0)=""/130, 0x45) syz_open_procfs(r0, &(0x7f0000000180)='net/arp\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e1e, 0x2, @mcast1, 0xfffffffd}, 0x1c) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000000)={0x0, 0x50424752}) 4.249818055s ago: executing program 2 (id=110): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x42082) syz_emit_vhci(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) socket(0x2, 0x80805, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r3, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r5, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 4.248548628s ago: executing program 1 (id=111): accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r1, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) 4.248158241s ago: executing program 4 (id=112): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000580)='highspeed', 0x9) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$nl_netfilter(0x10, 0x3, 0xc) 2.668136062s ago: executing program 0 (id=113): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280002001c00210000000000000000000700000005000000000000e20900020077a9e20000000000"], 0x28}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x8d8, 0x5, 0x58565559, 0x6, 0x8000002, 0xb, 0xb, 0xfffffffd, 0x0, 0x6, 0x0, 0x4}}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioprio_set$pid(0x1, r1, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)=[{}]}) 1.889311616s ago: executing program 2 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1400208bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) close(r2) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x0) 693.743806ms ago: executing program 1 (id=115): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1400208bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) close(r2) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x0) 0s ago: executing program 0 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="190000000400000008000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.116' (ED25519) to the list of known hosts. [ 78.256422][ T5829] cgroup: Unknown subsys name 'net' [ 78.364909][ T5829] cgroup: Unknown subsys name 'cpuset' [ 78.374391][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.101404][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.576214][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.585691][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.601412][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.609316][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.618047][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.627201][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.636304][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.636331][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.650132][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.653772][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.664869][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.669334][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.673557][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.684540][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.693332][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.702828][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.710368][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.718604][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.727187][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.730036][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 82.741477][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.749977][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.759355][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.762815][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.777903][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.504546][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 83.576798][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 83.723740][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 83.778005][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 83.799158][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 83.870734][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.878976][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.886538][ T5843] bridge_slave_0: entered allmulticast mode [ 83.894544][ T5843] bridge_slave_0: entered promiscuous mode [ 83.965736][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.973357][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.981215][ T5843] bridge_slave_1: entered allmulticast mode [ 83.989043][ T5843] bridge_slave_1: entered promiscuous mode [ 84.144843][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.155117][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.163182][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.170467][ T5848] bridge_slave_0: entered allmulticast mode [ 84.179284][ T5848] bridge_slave_0: entered promiscuous mode [ 84.209803][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.217464][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.225280][ T5844] bridge_slave_0: entered allmulticast mode [ 84.233397][ T5844] bridge_slave_0: entered promiscuous mode [ 84.245794][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.256252][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.264414][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.272013][ T5848] bridge_slave_1: entered allmulticast mode [ 84.279732][ T5848] bridge_slave_1: entered promiscuous mode [ 84.313303][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.320605][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.328784][ T5844] bridge_slave_1: entered allmulticast mode [ 84.336965][ T5844] bridge_slave_1: entered promiscuous mode [ 84.384874][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.392330][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.399573][ T5841] bridge_slave_0: entered allmulticast mode [ 84.407620][ T5841] bridge_slave_0: entered promiscuous mode [ 84.463376][ T5843] team0: Port device team_slave_0 added [ 84.482336][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.489692][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.497184][ T5841] bridge_slave_1: entered allmulticast mode [ 84.505154][ T5841] bridge_slave_1: entered promiscuous mode [ 84.513480][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.520734][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.528374][ T5842] bridge_slave_0: entered allmulticast mode [ 84.536418][ T5842] bridge_slave_0: entered promiscuous mode [ 84.549622][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.562814][ T5843] team0: Port device team_slave_1 added [ 84.573389][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.596412][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.605299][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.612950][ T5842] bridge_slave_1: entered allmulticast mode [ 84.621089][ T5842] bridge_slave_1: entered promiscuous mode [ 84.632948][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.660321][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.757374][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.784542][ T5844] team0: Port device team_slave_0 added [ 84.792715][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.799764][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.825988][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.842674][ T5846] Bluetooth: hci2: command tx timeout [ 84.848873][ T5855] Bluetooth: hci3: command tx timeout [ 84.848914][ T5859] Bluetooth: hci4: command tx timeout [ 84.854857][ T5851] Bluetooth: hci1: command tx timeout [ 84.861208][ T5850] Bluetooth: hci0: command tx timeout [ 84.885849][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.901609][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.914736][ T5844] team0: Port device team_slave_1 added [ 84.922484][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.929444][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.955742][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.970337][ T5848] team0: Port device team_slave_0 added [ 84.994302][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.029154][ T5848] team0: Port device team_slave_1 added [ 85.078077][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.085288][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.111662][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.141538][ T5841] team0: Port device team_slave_0 added [ 85.166300][ T5842] team0: Port device team_slave_0 added [ 85.174105][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.181356][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.208070][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.235765][ T5841] team0: Port device team_slave_1 added [ 85.258577][ T5842] team0: Port device team_slave_1 added [ 85.274011][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.281057][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.307026][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.362180][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.369234][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.395310][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.426533][ T5843] hsr_slave_0: entered promiscuous mode [ 85.433996][ T5843] hsr_slave_1: entered promiscuous mode [ 85.460564][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.467696][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.494347][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.516326][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.523714][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.549993][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.584023][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.591034][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.617183][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.631379][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.638335][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.664292][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.751838][ T5844] hsr_slave_0: entered promiscuous mode [ 85.758901][ T5844] hsr_slave_1: entered promiscuous mode [ 85.765885][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 85.771801][ T5844] Cannot create hsr debugfs directory [ 85.846269][ T5848] hsr_slave_0: entered promiscuous mode [ 85.853368][ T5848] hsr_slave_1: entered promiscuous mode [ 85.860119][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 85.865958][ T5848] Cannot create hsr debugfs directory [ 86.028700][ T5842] hsr_slave_0: entered promiscuous mode [ 86.035871][ T5842] hsr_slave_1: entered promiscuous mode [ 86.043637][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 86.049417][ T5842] Cannot create hsr debugfs directory [ 86.069780][ T5841] hsr_slave_0: entered promiscuous mode [ 86.076891][ T5841] hsr_slave_1: entered promiscuous mode [ 86.084124][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 86.089874][ T5841] Cannot create hsr debugfs directory [ 86.699061][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.714124][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.734330][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.759806][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.857822][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 86.901707][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 86.923103][ T5859] Bluetooth: hci3: command tx timeout [ 86.928869][ T5850] Bluetooth: hci1: command tx timeout [ 86.929333][ T5855] Bluetooth: hci2: command tx timeout [ 86.934417][ T5859] Bluetooth: hci4: command tx timeout [ 86.940095][ T5851] Bluetooth: hci0: command tx timeout [ 86.960593][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.001148][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.129361][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.157264][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.175006][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.198111][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.324265][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.336678][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.364908][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.396656][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.474084][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.513491][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.527714][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.559485][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.576233][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.656200][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.725684][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.733541][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.754297][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.792366][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.799667][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.860598][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.906968][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.914242][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.955359][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.962605][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.986223][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.087146][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.145932][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.153230][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.179537][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.218838][ T168] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.226123][ T168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.323030][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.363633][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.432994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.440229][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.498625][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.506173][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.524831][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.583501][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.591462][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.623192][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.650598][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.657936][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.917332][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.004245][ T5851] Bluetooth: hci0: command tx timeout [ 89.010650][ T5855] Bluetooth: hci2: command tx timeout [ 89.016787][ T5846] Bluetooth: hci4: command tx timeout [ 89.016884][ T5850] Bluetooth: hci3: command tx timeout [ 89.028628][ T5859] Bluetooth: hci1: command tx timeout [ 89.070534][ T5843] veth0_vlan: entered promiscuous mode [ 89.148724][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.189260][ T5843] veth1_vlan: entered promiscuous mode [ 89.485649][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.517481][ T5848] veth0_vlan: entered promiscuous mode [ 89.537514][ T5843] veth0_macvtap: entered promiscuous mode [ 89.568828][ T5843] veth1_macvtap: entered promiscuous mode [ 89.596861][ T5848] veth1_vlan: entered promiscuous mode [ 89.675747][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.701537][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.724109][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.799040][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.813033][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.825414][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.846655][ T5844] veth0_vlan: entered promiscuous mode [ 89.863519][ T5848] veth0_macvtap: entered promiscuous mode [ 89.877112][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.918605][ T5848] veth1_macvtap: entered promiscuous mode [ 89.933911][ T5841] veth0_vlan: entered promiscuous mode [ 89.984595][ T5844] veth1_vlan: entered promiscuous mode [ 90.038771][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.063061][ T5841] veth1_vlan: entered promiscuous mode [ 90.118241][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.167973][ T5842] veth0_vlan: entered promiscuous mode [ 90.190324][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.199683][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.219289][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.228793][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.242744][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.252793][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.308351][ T5842] veth1_vlan: entered promiscuous mode [ 90.376503][ T5841] veth0_macvtap: entered promiscuous mode [ 90.387616][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.397403][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.421389][ T5844] veth0_macvtap: entered promiscuous mode [ 90.454907][ T5841] veth1_macvtap: entered promiscuous mode [ 90.481158][ T5844] veth1_macvtap: entered promiscuous mode [ 90.498516][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.525987][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.566772][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.628324][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.646950][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.673634][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.707348][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.735854][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.750669][ T5842] veth0_macvtap: entered promiscuous mode [ 90.773158][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.883325][ T5966] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.086085][ T5859] Bluetooth: hci0: command tx timeout [ 91.087858][ T5850] Bluetooth: hci1: command tx timeout [ 91.104406][ T5851] Bluetooth: hci2: command tx timeout [ 91.111474][ T5855] Bluetooth: hci3: command tx timeout [ 91.117063][ T5846] Bluetooth: hci4: command tx timeout [ 91.831486][ T5842] veth1_macvtap: entered promiscuous mode [ 92.075870][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.147641][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.226309][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.377123][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.512056][ T1233] cfg80211: failed to load regulatory.db [ 92.543644][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.552551][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.577848][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.592725][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.908832][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.602564][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.619489][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.665904][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.759454][ T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.792719][ T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.807097][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.907677][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.016872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.037042][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.057740][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 94.070411][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8'. [ 94.103683][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.144751][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.213692][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.223840][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.472251][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.480610][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.521233][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.691539][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 94.703174][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.731181][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.741512][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.783696][ T24] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 94.798731][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.826440][ T24] usb 1-1: Product: syz [ 94.845728][ T24] usb 1-1: Manufacturer: syz [ 94.868428][ T24] usb 1-1: SerialNumber: syz [ 94.945254][ T24] usb 1-1: config 0 descriptor?? [ 95.240259][ T5930] usb 1-1: USB disconnect, device number 2 [ 95.384235][ T5998] loop2: detected capacity change from 0 to 256 [ 95.438660][ T5998] ======================================================= [ 95.438660][ T5998] WARNING: The mand mount option has been deprecated and [ 95.438660][ T5998] and is ignored by this kernel. Remove the mand [ 95.438660][ T5998] option from the mount to silence this warning. [ 95.438660][ T5998] ======================================================= [ 95.555803][ T5998] exfat: Bad value for 'uid' [ 95.576341][ T5998] exfat: Bad value for 'uid' [ 96.346550][ T6009] netlink: 'syz.0.12': attribute type 1 has an invalid length. [ 97.048696][ T6009] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 97.250919][ T808] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.392830][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 97.420877][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.456270][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.485842][ T808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 97.508946][ T808] usb 1-1: can't read configurations, error -71 [ 97.604352][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 97.618173][ T10] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 97.636584][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.067237][ T10] usb 2-1: config 0 descriptor?? [ 98.115249][ T6021] syz.2.16 uses obsolete (PF_INET,SOCK_PACKET) [ 98.167826][ T6019] syzkaller0: entered promiscuous mode [ 98.173643][ T6019] syzkaller0: entered allmulticast mode [ 98.199069][ T6019] Zero length message leads to an empty skb [ 99.018688][ T6037] openvswitch: netlink: Flow key attr not present in new flow. [ 99.448227][ T6040] hfs: can't find a HFS filesystem on dev nullb0 [ 101.054633][ T6049] loop0: detected capacity change from 0 to 256 [ 101.063623][ T6049] exfat: Bad value for 'uid' [ 101.068270][ T6049] exfat: Bad value for 'uid' [ 101.493522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 101.530793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 101.637546][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 101.660979][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 101.960796][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.808547][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 102.865514][ T10] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 102.889867][ T10] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 102.912919][ T5942] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.093180][ T5942] usb 3-1: Using ep0 maxpacket: 8 [ 103.119098][ T5942] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.157163][ T5942] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 103.177550][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.195453][ T6066] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 103.198661][ T5942] usb 3-1: Product: syz [ 103.230640][ T5942] usb 3-1: Manufacturer: syz [ 103.245683][ T5942] usb 3-1: SerialNumber: syz [ 103.275161][ T5942] usb 3-1: config 0 descriptor?? [ 103.302234][ T6066] bridge0: port 3(gretap1) entered blocking state [ 103.359407][ T6066] bridge0: port 3(gretap1) entered disabled state [ 103.381632][ T6066] gretap1: entered allmulticast mode [ 103.431856][ T6066] gretap1: entered promiscuous mode [ 103.502995][ T5942] usb 3-1: USB disconnect, device number 2 [ 104.440579][ T6087] loop2: detected capacity change from 0 to 256 [ 104.448064][ T6087] exfat: Bad value for 'uid' [ 104.452770][ T6087] exfat: Bad value for 'uid' [ 105.750234][ T6102] syzkaller0: entered promiscuous mode [ 105.758053][ T6102] syzkaller0: entered allmulticast mode [ 106.978642][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 106.992078][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 107.428296][ T5847] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.483718][ T6125] loop0: detected capacity change from 0 to 256 [ 107.491266][ T6125] exfat: Bad value for 'uid' [ 107.495942][ T6125] exfat: Bad value for 'uid' [ 107.613041][ T5847] usb 5-1: Using ep0 maxpacket: 8 [ 107.644137][ T5847] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 107.690754][ T5847] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 107.741270][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.179677][ T5847] usb 5-1: Product: syz [ 109.184028][ T5847] usb 5-1: Manufacturer: syz [ 109.190440][ T5847] usb 5-1: SerialNumber: syz [ 109.232993][ T5847] usb 5-1: config 0 descriptor?? [ 109.879292][ T5847] usb 5-1: USB disconnect, device number 2 [ 110.113492][ T6145] netlink: 'syz.0.54': attribute type 1 has an invalid length. [ 110.370888][ T809] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.565992][ T809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.598222][ T809] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 110.622291][ T809] usb 1-1: can't read configurations, error -71 [ 110.922965][ T6159] syzkaller0: entered promiscuous mode [ 110.930007][ T6159] syzkaller0: entered allmulticast mode [ 111.748784][ T6166] loop2: detected capacity change from 0 to 256 [ 111.756563][ T6166] exfat: Bad value for 'uid' [ 111.761389][ T6166] exfat: Bad value for 'uid' [ 112.048735][ T809] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.001050][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 113.499553][ T809] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.585832][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.013181][ T809] usb 1-1: config 0 descriptor?? [ 114.608979][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 114.632405][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'. [ 115.582283][ T6204] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 116.017159][ T808] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.052686][ T6208] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 116.250862][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 116.320931][ T808] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 116.340298][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.398254][ T808] usb 4-1: Product: syz [ 116.425383][ T808] usb 4-1: Manufacturer: syz [ 116.437895][ T808] usb 4-1: SerialNumber: syz [ 116.468717][ T808] usb 4-1: config 0 descriptor?? [ 116.539768][ T808] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 116.559574][ T808] pctv452e: pctv452e_power_ctrl: 1 [ 116.559574][ T808] [ 116.573840][ T1233] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.601837][ T808] usb 4-1: selecting invalid altsetting 3 [ 116.629509][ T808] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 116.629509][ T808] [ 116.664916][ T808] dvb-usb: bulk message failed: -22 (5/0) [ 116.755195][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.794239][ T1233] usb 5-1: unable to get BOS descriptor or descriptor too short [ 116.807865][ T808] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 116.824966][ T1233] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.856232][ T808] usb 4-1: media controller created [ 116.862641][ T1233] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 116.915329][ T808] dvb-usb: bulk message failed: -22 (8/0) [ 116.924444][ T1233] usb 5-1: config 1 interface 0 has no altsetting 0 [ 116.939755][ T808] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 116.958723][ T1233] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 116.980951][ T808] dvb-usb: MAC address reading failed. [ 116.991442][ T1233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.054142][ T1233] usb 5-1: Product: syz [ 117.078459][ T1233] usb 5-1: Manufacturer: syz [ 117.105884][ T1233] usb 5-1: SerialNumber: syz [ 117.128619][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.381236][ T1233] smsusb:smsusb_probe: board id=8, interface number 0 [ 117.399711][ T1233] smsusb:smsusb_probe: Device initialized with return code -19 [ 117.464119][ T808] DVB: Unable to find symbol stb0899_attach() [ 117.488292][ T808] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 117.567731][ T1233] usb 5-1: USB disconnect, device number 3 [ 117.741995][ T808] rc_core: IR keymap rc-tt-1500 not found [ 117.772165][ T808] Registered IR keymap rc-empty [ 117.811733][ T808] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 117.840585][ T809] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 118.406542][ T808] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 118.468750][ T808] dvb-usb: schedule remote query interval to 100 msecs. [ 118.500583][ T808] pctv452e: pctv452e_power_ctrl: 0 [ 118.500583][ T808] [ 118.562478][ T808] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 118.603468][ T1233] dvb-usb: bulk message failed: -22 (4/0) [ 118.635661][ T1233] dvb-usb: error -22 while querying for an remote control event. [ 118.663366][ T808] usb 4-1: USB disconnect, device number 2 [ 120.236307][ T808] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 120.702566][ T6239] syzkaller0: entered promiscuous mode [ 120.708265][ T6239] syzkaller0: entered allmulticast mode [ 120.791285][ T5931] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.214611][ T6244] loop3: detected capacity change from 0 to 256 [ 121.224827][ T6244] exfat: Bad value for 'uid' [ 121.229571][ T6244] exfat: Bad value for 'uid' [ 121.238609][ T5931] usb 3-1: Using ep0 maxpacket: 32 [ 121.254847][ T5931] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 121.282932][ T5931] usb 3-1: config 0 has no interface number 0 [ 121.295361][ T5931] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.307904][ T5931] usb 3-1: config 0 interface 85 has no altsetting 0 [ 121.335661][ T5931] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 121.357474][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.380094][ T5931] usb 3-1: Product: syz [ 121.392342][ T5931] usb 3-1: Manufacturer: syz [ 121.397919][ T5931] usb 3-1: SerialNumber: syz [ 121.410715][ T5931] usb 3-1: config 0 descriptor?? [ 122.250437][ T5931] appletouch 3-1:0.85: Geyser mode initialized. [ 122.289344][ T5931] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input6 [ 122.797270][ T6261] netlink: 'syz.0.83': attribute type 1 has an invalid length. [ 123.402698][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 123.411769][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 123.735584][ T6276] hfs: can't find a HFS filesystem on dev nullb0 [ 124.204786][ T6015] usb 3-1: USB disconnect, device number 3 [ 124.290217][ T6015] appletouch 3-1:0.85: input: appletouch disconnected [ 125.140605][ T6283] loop6: detected capacity change from 0 to 7 [ 125.221444][ T6284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.89'. [ 125.263172][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.272592][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.304143][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.313396][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.340864][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.350100][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.377088][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.386343][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.395766][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.405004][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.414314][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.423984][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.435000][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.444236][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.452398][ T6283] ldm_validate_partition_table(): Disk read failed. [ 125.480774][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.490031][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.510621][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.519881][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.532902][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 125.542127][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.556800][ T6283] Dev loop6: unable to read RDB block 0 [ 125.571962][ T6283] loop6: unable to read partition table [ 125.582805][ T6283] loop6: partition table beyond EOD, truncated [ 125.589195][ T6283] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 125.618447][ T6285] netlink: 68 bytes leftover after parsing attributes in process `syz.4.89'. [ 125.627634][ T6285] netlink: 68 bytes leftover after parsing attributes in process `syz.4.89'. [ 126.504933][ T6015] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.109216][ T6015] usb 3-1: Using ep0 maxpacket: 32 [ 127.124090][ T6015] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 127.134765][ T6015] usb 3-1: config 0 has no interface number 0 [ 127.174787][ T6015] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 127.213050][ T6015] usb 3-1: config 0 interface 85 has no altsetting 0 [ 127.242083][ T6015] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 127.254128][ T6015] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.416068][ T6015] usb 3-1: Product: syz [ 127.420763][ T6015] usb 3-1: Manufacturer: syz [ 127.425494][ T6015] usb 3-1: SerialNumber: syz [ 127.457433][ T6015] usb 3-1: config 0 descriptor?? [ 127.574703][ T6303] IPVS: length: 528 != 8 [ 127.582745][ T6303] process 'syz.3.95' launched '/dev/fd/4' with NULL argv: empty string added [ 128.230924][ T6015] appletouch 3-1:0.85: Failed to request geyser raw mode [ 128.241787][ T6015] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 128.261033][ T6015] usb 3-1: USB disconnect, device number 4 [ 129.628814][ T6320] loop6: detected capacity change from 0 to 7 [ 130.485517][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.99'. [ 130.504055][ C0] blk_print_req_error: 6 callbacks suppressed [ 130.504077][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.519471][ C0] buffer_io_error: 6 callbacks suppressed [ 130.519489][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.556286][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.565576][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.822264][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.831547][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.845219][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.854467][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.898987][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.908406][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.920471][ T6323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.99'. [ 130.929848][ T6323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.99'. [ 131.103324][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.112581][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.120897][ T6320] ldm_validate_partition_table(): Disk read failed. [ 131.130972][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.140207][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.166786][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.176051][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.235682][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.245031][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.271451][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 131.280876][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 131.288848][ T6320] Dev loop6: unable to read RDB block 0 [ 131.357079][ T6320] loop6: unable to read partition table [ 131.364562][ T6320] loop6: partition table beyond EOD, truncated [ 131.371718][ T6320] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 132.894003][ T6330] syz.3.102 (6330): attempted to duplicate a private mapping with mremap. This is not supported. [ 132.912852][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.920199][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.201603][ T6333] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 134.518599][ T6348] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.692504][ T5847] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 135.014677][ T5847] usb 5-1: unable to get BOS descriptor or descriptor too short [ 135.044395][ T5847] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 135.076186][ T5847] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 135.103130][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 135.114098][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 135.129744][ T5847] usb 5-1: config 1 interface 0 has no altsetting 0 [ 135.309947][ T5847] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 135.320216][ T5847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.330089][ T5847] usb 5-1: Product: syz [ 135.335569][ T5847] usb 5-1: Manufacturer: syz [ 135.340417][ T5847] usb 5-1: SerialNumber: syz [ 135.884124][ T5859] Bluetooth: hci3: command 0x201b tx timeout [ 136.268956][ T5847] smsusb:smsusb_probe: board id=8, interface number 0 [ 136.290905][ T5847] smsusb:smsusb_probe: Device initialized with return code -19 [ 136.523757][ T5847] usb 5-1: USB disconnect, device number 4 [ 138.001136][ T5846] Bluetooth: hci3: command 0x201b tx timeout [ 141.061920][ T6366] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 141.085304][ T6366] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 141.098292][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.4.112 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.109614][ T6366] Tainted: [L]=SOFTLOCKUP [ 141.114531][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 141.125808][ T6366] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 141.133654][ T6366] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 141.166107][ T6366] RSP: 0018:ffffc900076d79a0 EFLAGS: 00010006 [ 141.173187][ T6366] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 141.182755][ T6366] RDX: 1ffff92000edaf40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 141.191866][ T6366] RBP: ffffc900076d7aa0 R08: 0000000000000003 R09: 0000000000000004 [ 141.201021][ T6366] R10: dffffc0000000000 R11: fffff52000edaf50 R12: 0000000000000000 [ 141.210716][ T6366] R13: ffff88807e4e1bd0 R14: 0000000000000018 R15: ffffc900076d7c20 [ 141.221679][ T6366] FS: 0000555594342500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 141.232803][ T6366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.240235][ T6366] CR2: 00007f13d35e9e80 CR3: 000000001e7e2000 CR4: 00000000003526f0 [ 141.254239][ T6366] Call Trace: [ 141.260007][ T6366] [ 141.263949][ T6366] ? __lock_acquire+0x6b5/0x2cf0 [ 141.273422][ T6366] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 141.282244][ T6366] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.292082][ T6366] rwsem_del_wake_waiter+0x25d/0x2e0 [ 141.298826][ T6366] rwsem_down_write_slowpath+0xa6f/0x1080 [ 141.308136][ T6366] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 141.319044][ T6366] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 141.331914][ T6366] ? futex_wake+0x4ac/0x580 [ 141.340688][ T6366] ? __pfx_futex_wait+0x10/0x10 [ 141.346826][ T6366] ? vm_mmap_pgoff+0x234/0x4f0 [ 141.351993][ T6366] down_write_killable+0x1eb/0x240 [ 141.359646][ T6366] ? __pfx_down_write_killable+0x10/0x10 [ 141.366313][ T6366] ? apparmor_mmap_file+0x197/0x3e0 [ 141.372429][ T6366] ? security_mmap_file+0x4df/0xa20 [ 141.382342][ T6366] vm_mmap_pgoff+0x234/0x4f0 [ 141.388545][ T6366] ? __se_sys_futex+0x3a8/0x450 [ 141.393975][ T6366] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 141.399846][ T6366] ? __pfx___se_sys_futex+0x10/0x10 [ 141.406474][ T6366] ? rcu_is_watching+0x15/0xb0 [ 141.411990][ T6366] ? ksys_mmap_pgoff+0xf3/0x760 [ 141.417090][ T6366] ? __x64_sys_mmap+0x7f/0x140 [ 141.423387][ T6366] do_syscall_64+0x14d/0xf80 [ 141.429793][ T6366] ? trace_irq_disable+0x3b/0x150 [ 141.435552][ T6366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.442176][ T6366] ? clear_bhb_loop+0x40/0x90 [ 141.447987][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.456455][ T6366] RIP: 0033:0x7f219499c502 [ 141.461206][ T6366] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 141.487624][ T6366] RSP: 002b:00007fff7be49908 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 141.499909][ T6366] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f219499c502 [ 141.510268][ T6366] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 141.522549][ T6366] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 141.534194][ T6366] R10: 0000000000020022 R11: 0000000000000246 R12: 00007fff7be49a70 [ 141.546100][ T6366] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 141.558727][ T6366] [ 141.562231][ T6366] Modules linked in: [ 141.566191][ T6366] ---[ end trace 0000000000000000 ]--- [ 141.572301][ T6366] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 141.579043][ T6366] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 141.606462][ T6366] RSP: 0018:ffffc900076d79a0 EFLAGS: 00010006 [ 141.613208][ T6366] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 141.622257][ T6366] RDX: 1ffff92000edaf40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 141.632717][ T6366] RBP: ffffc900076d7aa0 R08: 0000000000000003 R09: 0000000000000004 [ 141.643345][ T6366] R10: dffffc0000000000 R11: fffff52000edaf50 R12: 0000000000000000 [ 141.653820][ T6366] R13: ffff88807e4e1bd0 R14: 0000000000000018 R15: ffffc900076d7c20 [ 141.662556][ T6366] FS: 0000555594342500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 141.674146][ T6366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.681569][ T6366] CR2: 00007f13d35e9e80 CR3: 000000001e7e2000 CR4: 00000000003526f0 [ 141.692984][ T6366] Kernel panic - not syncing: Fatal exception [ 141.704459][ T6366] Kernel Offset: disabled [ 141.711522][ T6366] Rebooting in 86400 seconds..