last executing test programs: 34m39.666542407s ago: executing program 0 (id=427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x38}}, 0x0) 34m39.25718418s ago: executing program 0 (id=432): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c8d6a340ac050a038c65000000010902240001000000000904000002039d0200090509ffe700000000090503"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 34m36.969984565s ago: executing program 0 (id=457): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x10001, 0x12) 34m36.469578342s ago: executing program 0 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f0000001200)='./file0/file0\x00', 0x0, 0x84000, 0x0) 34m35.501257146s ago: executing program 0 (id=461): openat$kvm(0xffffffffffffff9c, 0x0, 0x101, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006b", 0x7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04de220c"], 0x7) 34m35.124851257s ago: executing program 0 (id=465): unshare(0x24060400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x144, 0xa, 0x148, 0x144, 0x10, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xdc, 0x0, {0x20000000}}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x101, 0x64f, 0xb, 0x1, 0x0, "8b229da6bbacebb1fff2ee304664a6cef1f885772ddf2c22fa4f34c4c3bb2b4095ea3ab42693c9d35d7d0b1531ce667dcae762cd266f79dcfafa926e15258444"}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2a4) r0 = socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x5b5, @mcast1, 0x9, 0x3}, 0x20) 34m34.098828984s ago: executing program 32 (id=465): unshare(0x24060400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x144, 0xa, 0x148, 0x144, 0x10, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xdc, 0x0, {0x20000000}}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x101, 0x64f, 0xb, 0x1, 0x0, "8b229da6bbacebb1fff2ee304664a6cef1f885772ddf2c22fa4f34c4c3bb2b4095ea3ab42693c9d35d7d0b1531ce667dcae762cd266f79dcfafa926e15258444"}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2a4) r0 = socket$l2tp6(0xa, 0x2, 0x73) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x5b5, @mcast1, 0x9, 0x3}, 0x20) 29m48.272015808s ago: executing program 3 (id=1236): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r3 = dup2(r2, r2) read$msr(r3, &(0x7f00000002c0)=""/215, 0xd7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x68, &(0x7f0000003a80)=0x2, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x4) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r5}}, 0x18) 29m45.978200314s ago: executing program 3 (id=1240): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) faccessat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xe0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x3678, &(0x7f000000a9c0)={0x0, 0xfffffffd, 0x100, 0x0, 0xffffffff}, &(0x7f000000aa40), &(0x7f000000aa80)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) 29m43.609482977s ago: executing program 3 (id=1244): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0], 0x6c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$msr(r2, &(0x7f00000002c0)=""/215, 0xd7) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x68, &(0x7f0000003a80)=0x2, 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000200)=0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3f}}, r5}}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, r4}}, 0x18) 29m42.245187715s ago: executing program 3 (id=1249): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = syz_open_procfs(r1, &(0x7f00000001c0)='syscall\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4) sendto$inet6(r5, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r5, &(0x7f0000001300)=[{{&(0x7f00000003c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000440)=""/228, 0xe4}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000000580)=""/169, 0xa9}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f0000000640)=""/187, 0xbb}, {&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f0000000300)=""/9, 0x9}], 0x8, &(0x7f0000000880)=""/64, 0x40}}, {{&(0x7f00000008c0)=@generic, 0x80, &(0x7f0000000980), 0x0, &(0x7f00000009c0)=""/164, 0xa4}, 0x1492975c}, {{&(0x7f0000000a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/188, 0xbc}, {&(0x7f0000000bc0)=""/208, 0xd0}], 0x2}, 0x9}, {{&(0x7f0000000e00)=@isdn, 0x80, &(0x7f0000002740)=[{&(0x7f0000000e80)=""/253, 0xfd}, {&(0x7f0000000f80)=""/148, 0x94}, {&(0x7f0000001140)=""/210, 0xd2}, {&(0x7f0000002500)=""/155, 0x9b}, {&(0x7f0000001080)=""/62, 0x3e}, {&(0x7f00000010c0)=""/47, 0x2f}, {&(0x7f0000001040)=""/56, 0x38}, {&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/218, 0xda}, {&(0x7f00000026c0)=""/24, 0x18}, {&(0x7f0000002700)=""/36, 0x24}], 0xb}, 0x1}], 0x4, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000001480)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x3, 0x2a7345, 0x213174}) 29m38.138876626s ago: executing program 3 (id=1255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000000000f8ffffff000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000f00c0000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000000000000008006966623000000000000000000000000064756d6d79300000000000000000000069705f76746930000000000000000000697036746e6c30000000000000000000aaaaaaaaaabb0000000000000182c20000000000000000000000b8000000b8000000e80000006970000000000000000000000000000000000000000000a823c565625b8d720020000000000000007f0000e1ab14140000000000000000000084300400000000000000000000000041554449540000bcb92dfff07fca000000466ef58f5dc8438b000000000000000800"/374]}, 0x1ee) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) 29m35.709171607s ago: executing program 3 (id=1258): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/de\x86\n\x0e\a\x0fM\x1f\x82dq?w\xaf\x8fE/\x8baudio'}, {0x20, '$\\^'}], 0xa, "b7ef1c3e000056655c186e000000005394a5e5b7d866178878c05fa87a33827f49f06be514c801ff3d10e24e53081d79d1952b90e4d3ffc96260d4a36a0468ee214843233ce829494aa707b13b6cab38f20af5dc90d6ab61d9289e8be432a6cd672f28a8000000000000"}, 0x93) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000300080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9d16fa41c857a80f, 0xfff4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$smackfs_access(r7, &(0x7f00000000c0)={'/dev/audio\x00', 0x20, '/dev/audio\x00', 0x20, 'rwxab'}, 0x1e) 29m19.519559669s ago: executing program 33 (id=1258): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x100) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '/de\x86\n\x0e\a\x0fM\x1f\x82dq?w\xaf\x8fE/\x8baudio'}, {0x20, '$\\^'}], 0xa, "b7ef1c3e000056655c186e000000005394a5e5b7d866178878c05fa87a33827f49f06be514c801ff3d10e24e53081d79d1952b90e4d3ffc96260d4a36a0468ee214843233ce829494aa707b13b6cab38f20af5dc90d6ab61d9289e8be432a6cd672f28a8000000000000"}, 0x93) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000300080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9d16fa41c857a80f, 0xfff4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x38}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$smackfs_access(r7, &(0x7f00000000c0)={'/dev/audio\x00', 0x20, '/dev/audio\x00', 0x20, 'rwxab'}, 0x1e) 24m59.986505174s ago: executing program 2 (id=1681): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x4000, {}, {0xee00}, 0x400000000002}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000a40)=""/39, 0x27) getdents64(r4, 0xfffffffffffffffe, 0x29) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(r5, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) 24m58.200751609s ago: executing program 2 (id=1685): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() lremovexattr(0x0, &(0x7f00000000c0)=@known='security.apparmor\x00') ioprio_set$pid(0x2, r3, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000140)={0x0, 0x400000000000257, 0x7, 0xfffbffff, &(0x7f0000001600)}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r5, 0xffffffffffffffff, 0x2c, 0x0, 0x0, @void, @value}, 0x20) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r6, 0xc0481273, 0x0) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) r9 = dup(r8) write$binfmt_script(r9, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "acc7b90ee966abebf8082f6b0835037eaaafe8ee6b40dc7f861ead0e7ddcced015c9c18e60bad7be532821fa6714543d979f78c184c3a31c7e73fb46b630863457b0"}, 0x4d) 24m48.584093027s ago: executing program 2 (id=1697): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, &(0x7f00000000c0)=0x8e, 0x180000504) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x80000034) fcntl$setsig(r5, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0) creat(&(0x7f0000000180)='./file1\x00', 0x80) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_delroute={0x34, 0x19, 0x800, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x4, 0xc8, 0xa, 0x3100}, [@RTA_PREF={0x5, 0x14, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0x5}, @RTA_PREF={0x5, 0x14, 0xb}]}, 0x34}}, 0x0) 24m47.124207065s ago: executing program 2 (id=1701): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r5, 0xc1004111, &(0x7f00000011c0)={0xff, [0x4, 0x3, 0x80000000], [{0x0, 0x3, 0x0, 0x1, 0x1}, {0xe58f, 0x8, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}, {0xc0d, 0x5, 0x1, 0x0, 0x0, 0x1}, {0xfffffffa, 0x2, 0x1, 0x0, 0x1, 0x1}, {0x400, 0x4, 0x1}, {0xa, 0x7, 0x1, 0x0, 0x1}, {0x8, 0x14, 0x1}, {0x0, 0x9, 0x0, 0x1}, {0x1000, 0xf9, 0x1, 0x1, 0x0, 0x1}, {0xb, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x1, 0x0, 0x1}], 0x201}) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f000000d980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/141, 0x8d}, 0x9}], 0x1, 0x2031, 0x0) 24m43.350802411s ago: executing program 2 (id=1707): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x4000, {}, {0xee00}, 0x400000000002}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000a40)=""/39, 0x27) getdents64(r4, 0xfffffffffffffffe, 0x29) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0x9) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(r5, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) 24m40.783239686s ago: executing program 2 (id=1711): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x4000, {}, {0xee00}, 0x400000000002}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000a40)=""/39, 0x27) getdents64(r4, 0xfffffffffffffffe, 0x29) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(r5, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) 24m24.974233527s ago: executing program 34 (id=1711): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000000080)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x4000, {}, {0xee00}, 0x400000000002}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000a40)=""/39, 0x27) getdents64(r4, 0xfffffffffffffffe, 0x29) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='westwood\x00', 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) shutdown(r5, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) 16m26.476154044s ago: executing program 4 (id=2872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000190c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r2, 0x0, r1) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) sendfile(r3, r5, 0x0, 0x7ffff004) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 16m25.17107057s ago: executing program 4 (id=2875): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000bc0)=""/95, 0x5f}], 0x2, 0x3, 0xfffffffc) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000180)="a2", 0x1}], 0x1, 0x0) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) epoll_create(0xb5d) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) pselect6(0x40, &(0x7f0000000600)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x20000}, 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0) (rerun: 64) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) splice(r1, 0x0, r4, 0x0, 0x2000000002ffff, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 32) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000140)={0x10, 0x6, 0xa, {0xa, 0x10, "87912ea0f89e8297"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 16m22.472674477s ago: executing program 4 (id=2880): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x1ff, @remote, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000e40)="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", 0x1000}, {&(0x7f0000000ac0)="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", 0x143}, {&(0x7f0000000080)="0bc11243a70bb0aa677ffe6f82d36983d3ea28e350aa37a0311d0d5ec8d168025c887e7e1d060e3640f12ec7472103c0729e339c84c19e6d5c1000", 0x3b}, {&(0x7f0000000240)="2dd03295a7d985c7455c6e344fc1f12932b8f69d42279220ff63f62395d4897b0702cd16cd729a4b1b84748621145bba1802672a5faab8ae59f337f7dfb044b28b94460b59933a8a97f26f1e46d74c15d95cc0c05edaf7817d4ac0591040615897128b78c4afbf4d5319c37e565ab42f1712cd6caec1156d09", 0x79}, {&(0x7f00000002c0)="3f07952b01b2d29dc132c71c52ed7e3a02f1fc06dd801b3d9b2e67a692ebd6d0af84b8e5e283247ef33444b3acfc68e4a6bdb49c7d0c08453c15a439a4ab5e19a391a1a484c250766223c2afe2497a89fadbb67649ecbb196f3dc93b85a9e6ae4a5c7cec5810c95eed34dab1c15caa8ae36964e20f31f9c3f4c4d1b760914a37ec3b17e60e0cb9b3f50916b840b46999e275070e08652d94bbfcb34bfd47abea3f9c3a66e23eceaa40cbc5882262b6032d0e75eac8d639de951235d18a8cadf63a", 0x87}, {&(0x7f0000000680)="b6e902dfe7eddc66d70ea4c1521fdf84d54d0f7b763282f431d8a54f4d9581c8556db0bfc292c2e2226fd451fcb603084e603ba9c62c38ebf63f0f5aeb37c80a4dbc7b971e6f9c3df48f02405da4e02d214f2eb5548df379a84d426e8b6074bd6a36b7d7ae22ab99d27eec0198113cc90dc8e4c8f1deadd7ea71976c0c09bd80c4beae87bf19669f8ad3b8eea7ec30ed793e81ab9ba6d8cd477de8d44cdbc320acd7066921afb9bdafdd5fc967d508b01ec3ba2eb2874c4d2818f465d315c9d93658", 0xc2}, {&(0x7f00000004c0)="2a0f39540fa6d737398377ffb03a2be08998b3e9172a31caaee2aa4913273fd8620863f564c6aa59c170a4eab629f68e9176fc285480c461f6dfddec255eb7e36a194307cb7edcbe82a0b7832888367b6caf7bd3331ea4f5ad990d5508e3b754fbf9c751a00cf5103fbfb4814b0bf2e654b2c24518936a2585320a0a1c77081b6178546f6ac6316f47f2e00cb4e6da42d61df5302b86e1f1a1576cc2675b88498e188b6c176b8946d8754e192bf7", 0xae}], 0x7, &(0x7f0000000600)=[@hopopts={{0x38, 0x29, 0x36, {0x73, 0x3, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim, @pad1, @enc_lim={0x4, 0x1, 0x4}, @pad1, @ra={0x5, 0x2, 0xa}]}}}], 0x38}}], 0x1, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) fsopen(&(0x7f0000000040)='gfs2meta\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40840) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r4, r5, 0x28, 0x28, 0x0, @void, @void, @void, @value}, 0x20) epoll_create(0x207ffd) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) recvmmsg(r3, &(0x7f0000000440), 0x6f5, 0x2, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f00000000c0)=0x80000004, 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x88901) move_mount(r4, &(0x7f00000000c0)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x145) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmsg(r4, &(0x7f0000000400)={&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000001480)=""/88, 0x58}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002800)=""/226, 0xe2}, {&(0x7f0000003140)=""/4096, 0x1000}, {&(0x7f0000002900)=""/237, 0xed}], 0x8, &(0x7f0000004140)=""/4096, 0x1000}, 0x2000) recvmmsg$unix(r5, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001500)=""/230, 0xe6}], 0x1}, 0x8}], 0x1, 0x2, 0x0) close(r6) 16m18.182776525s ago: executing program 4 (id=2890): socketpair(0x9, 0x800, 0x26, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000180)=0x9) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000000040301, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x8, 0x8000, 0x0, 0x1, 0x1, 0xfffffffffffffffa, 0x1, 0xfffffff9, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x40}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[], 0x40}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="58019a3f210000", @ANYRES16=r5, @ANYBLOB="010027bd7000000000003b00000008000300", @ANYRES32=r0, @ANYBLOB="29003300e0800000ffffffffffffffffffffffff08021100000000001250c880030107000000000000000000080026006c0900000800270007000000"], 0x58}}, 0x40054) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x12b381) (async) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x12b381) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000001ac0)=ANY=[@ANYBLOB="2900000005000000000000000000000040000000000000000000000000001000"/41], 0x29) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) 16m16.77121458s ago: executing program 4 (id=2894): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x40, 0x10, 0xc, 0x100, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x66, 0x0, 0x4, 0x29, 0x0, @broadcast, @loopback, {[@end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=@delchain={0x2bfc, 0x65, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0xffe0}, {0x7, 0x3}, {0x2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x1820, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x40}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_ACT={0x140, 0x7, [@m_mpls={0x13c, 0xa, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xf8}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffff6, 0x8, 0xffffffffffffffff, 0x4, 0x9}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd3214}]}, {0xcc, 0x6, "91c66e99847c782c4655868d752602154ec4845d2ffc4a37330d4d8d0175306e888cd0f4e56a45ea953170b6507ede8bc058945361f95f9b9c321e8f9175815554110921b7488437eb21d39bf75dd62f2f3dc7f801ba260ac31eddfd5c3ec39f15612bbcc2fc2d77729740fd16db052cd948c59ef4088c0a59ed1c327fa8afaf778459e4979405eea190a1b7d401eaafb25a820948b835533af144a6167039a92a7d5a8e7e66a4dfc90032252bbe97c722db21229fecab0c63131dc318e68df032f9e85cbccf4903"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_U32_ACT={0x10e0, 0x7, [@m_ctinfo={0x1080, 0x7, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8197}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3, 0x8, 0x1, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xc, 0x7, 0x8, 0x10000}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x5c, 0x3, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8771, 0x0, 0x6, 0xc123, 0x2}, @rand_addr=0x64010102, @broadcast, 0xffffff00, 0x1}}]}, {0x9, 0x6, "829e02ad3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_SEL={0x5d4, 0x5, {0x6, 0x3, 0x0, 0x1, 0x5, 0xd, 0xfffa, 0x41f, [{0x5, 0x1, 0x9, 0x6}, {0x1, 0x0, 0x68792aba, 0x2}, {0x8, 0x8, 0x81, 0x1}, {0x8001, 0x8000, 0x9, 0x1}, {0x7, 0x6, 0x6}, {0x6, 0x1250, 0x4, 0x9}, {0xd, 0xff, 0x7f, 0x6}, {0x2, 0x5d3, 0x9, 0x401}, {0x2, 0x3, 0xffffffff, 0x9}, {0xe, 0x3, 0xb6c, 0xdc1}, {0x80, 0x95c, 0xfffffff6, 0x80000000}, {0x8, 0x9, 0x80000000, 0x7}, {0x9, 0x7fffffff, 0x6, 0xfffffffe}, {0x200, 0x16000, 0x7b6, 0x2}, {0x1, 0x0, 0x0, 0x641}, {0x6, 0xe, 0x7f000000, 0x5}, {0x6, 0x7, 0x1, 0x100}, {0x3, 0x9, 0x2, 0x9}, {0x9, 0x9, 0x5, 0x3}, {0x0, 0x2, 0xb, 0xff}, {0x5, 0x7, 0x0, 0x6}, {0x3, 0x7ff, 0xfffffffa, 0x3}, {0x0, 0x7775026a, 0x200000, 0x9}, {0x5, 0x2, 0xfffffff8, 0xa5e3}, {0x8, 0xd4c5, 0x2, 0x1}, {0x1, 0x632, 0xff, 0x2}, {0xc, 0xa243, 0x8, 0x9}, {0x6, 0x8, 0x2, 0x6}, {0x2000000, 0x5, 0x4, 0x3}, {0x1, 0x7, 0x8}, {0x1, 0x1, 0x6, 0x6b}, {0x10000, 0x0, 0x1f, 0xd}, {0x2, 0xffff6db2, 0x4270, 0x6}, {0x9, 0x2, 0x87c, 0x6}, {0x5, 0x200, 0x5, 0x4}, {0x7, 0x2e7d, 0xfffffff8, 0x8001}, {0x9, 0x2, 0xa, 0x2}, {0xe42, 0x3, 0xfdd, 0x6}, {0xb, 0x1c, 0x3, 0x7}, {0x9, 0x9, 0xe, 0x1000}, {0xfffffff9, 0x10, 0x9, 0x9}, {0x9d, 0x6, 0x5, 0x9}, {0x80000001, 0x7, 0x8001, 0x38}, {0x59f4, 0x5, 0x49c3095a, 0x7f}, {0x800, 0x0, 0x1, 0x2}, {0x10000, 0xe1, 0x1, 0xbdff}, {0xffffff73, 0x2, 0x3, 0x1}, {0x2, 0x0, 0x7, 0x5e48}, {0x735, 0x4, 0x5c73, 0x9}, {0x7, 0xf, 0x0, 0x2}, {0x80000000, 0x30000, 0x5, 0x1ff}, {0x3, 0x188a1cce, 0x4, 0x5}, {0xfff, 0x10, 0x7ff, 0x1}, {0x2, 0x80, 0x5, 0x9}, {0x1, 0x101, 0x4, 0x9}, {0x0, 0x43, 0xd93e, 0x1}, {0x6, 0x6, 0x8af, 0x3}, {0xfff, 0x7, 0xfffffff8, 0x40}, {0x0, 0x80, 0xe, 0x66a}, {0x22c, 0x8, 0xffff3e65, 0xe}, {0x17, 0x3, 0x3, 0x6}, {0x18d405f4, 0xb, 0x7, 0x2}, {0x8, 0x7ff, 0x5, 0xdc}, {0x10001, 0x7, 0xfffff000, 0x4}, {0xf, 0x10000, 0x1, 0xf}, {0x5, 0x7, 0xac4, 0x4}, {0x1ff, 0x1, 0x2, 0xa}, {0xffffffff, 0x10, 0x1, 0xe2}, {0x7, 0x8, 0x42, 0x491}, {0xcf44, 0x6, 0x3}, {0x9, 0x8, 0x3, 0x9}, {0x9, 0x9, 0xb5, 0x5}, {0xfffc0000, 0x7fff, 0xfffff800, 0x100}, {0x3ff, 0x6, 0x8, 0x80000001}, {0x8f1, 0x100, 0x5, 0x9}, {0xe1, 0x3, 0x8001, 0x2}, {0x3, 0x2e0, 0x5, 0x6}, {0x3, 0x5ac2cb0e, 0x0, 0x1}, {0x5, 0x5, 0xa4e, 0xfffffff7}, {0x8, 0x2, 0x7fffffff, 0x5}, {0x8000, 0x6, 0x10000, 0x40000000}, {0x8, 0x2, 0x6, 0x9}, {0xd4ff, 0x4, 0x3, 0x5}, {0xc0bf, 0xfff, 0x3, 0x800}, {0x5, 0x1, 0x1b2fa6f6, 0xb40}, {0x6871e64e, 0xc, 0x3, 0x9}, {0xcaf, 0x18000000, 0x5, 0x1}, {0x5, 0xcc3, 0xfffffffa, 0x2400}, {0x8, 0x6, 0x1, 0x10}, {0x4, 0x4, 0x10001, 0xddb}, {0x6, 0x1ff, 0x0, 0x9}, {0xe1b, 0x6, 0x1, 0x200}]}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_u32={{0x8}, {0x6b4, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x5, 0x3}}, @TCA_U32_POLICE={0x18, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5d90}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb0}]}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0xa}}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x7fff}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xfff1}}, @TCA_U32_SEL={0x634, 0x5, {0x9, 0xe, 0x8, 0x0, 0xc37, 0xd, 0x1, 0x0, [{0x5, 0x6, 0xf, 0x2}, {0xd8f, 0x7, 0x7}, {0x5, 0x7, 0x15, 0xc73}, {0x7, 0x62a, 0x6, 0x7fffffff}, {0x5, 0x707d, 0x5, 0x1}, {0xddc3, 0x9, 0x0, 0x1}, {0x0, 0xfffffff8, 0x1}, {0x80000000, 0x800, 0x12fa59f1}, {0x76, 0x1, 0x10001, 0x100}, {0x10000, 0x81, 0x8, 0x40}, {0x5, 0x3, 0xe, 0x1}, {0x1, 0x3ff, 0x917, 0x9}, {0x5, 0x1, 0x800, 0x5}, {0xbc34, 0x8, 0x80000001, 0x5}, {0xfffff000, 0x200, 0x8, 0x75}, {0x1, 0x3ff, 0x1, 0x8}, {0x1, 0xe9d5, 0x0, 0x3}, {0xbe, 0x8, 0x40, 0x9}, {0x4db1, 0x7ff, 0x1, 0x3}, {0x7f, 0x5, 0x4, 0x1}, {0x9, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x7, 0x4}, {0x4, 0x7, 0xa3e9e69, 0x4}, {0x5, 0x6e9b, 0x100, 0x5}, {0xfffff6fa, 0x4, 0x1, 0x7a0}, {0x6, 0xfffffffc, 0x1, 0xd}, {0x5, 0xfffffff9, 0x8, 0xf9d}, {0x7, 0x8, 0x8}, {0x1, 0x6, 0x400, 0x3}, {0x9, 0x2, 0x7fffffff}, {0x508, 0xfffffff8, 0x1, 0xf}, {0x9, 0x8, 0x0, 0x6}, {0x7fff, 0x4, 0x4}, {0xa, 0x2, 0x2, 0x1}, {0xf2a, 0x9, 0xa5c, 0x9}, {0x7, 0x7, 0x0, 0x7}, {0x1, 0x8, 0x971, 0x2}, {0x16874000, 0x4, 0x7, 0x5}, {0x5, 0x2, 0x8000, 0x7fffffff}, {0x5a6d, 0x2, 0x8}, {0xffffff80, 0x200, 0x10001, 0x8}, {0x6, 0x6, 0x6, 0x4}, {0x0, 0x7, 0x1, 0xc0000}, {0x79, 0x7, 0x40, 0x7}, {0x9c, 0x2, 0x2, 0x6}, {0x8, 0x6, 0xff, 0x6}, {0x80000001, 0x4f, 0x16000, 0x37400000}, {0x5, 0xc, 0x203d, 0x40}, {0xc5e4, 0x7ff, 0x101, 0x5}, {0x8000, 0x6, 0x4, 0xa}, {0x6, 0x8, 0x2, 0x5}, {0x5, 0x1, 0x5, 0x2}, {0x36a9, 0x3, 0x8, 0x4}, {0xb, 0x400, 0x401, 0x81}, {0xef8b, 0x93ef, 0x8000, 0x10001}, {0x3, 0x9e2, 0xff1b4afa, 0x9}, {0x4, 0x8, 0x7, 0xd5c}, {0xffffffff, 0xb, 0x81, 0x8}, {0x2ae, 0x8, 0x4, 0x1}, {0x6, 0x3, 0x1, 0x2}, {0x533, 0x9, 0x372007af, 0xe95}, {0x7, 0x3, 0x1}, {0x9, 0x8a4, 0x3, 0x4}, {0x8, 0xfe19, 0x8, 0x4}, {0x2, 0x8, 0x5, 0x10000}, {0x0, 0x5, 0x10000, 0xa}, {0x7fff, 0x31d, 0x2d}, {0x1000, 0x3, 0xfffffff9, 0x401}, {0xdefc, 0x581b, 0xdc2, 0x6}, {0x7, 0x10000, 0x3, 0x40}, {0x8, 0x8, 0xd, 0xf1d2}, {0x4, 0xe47, 0x7f}, {0x40, 0x51, 0x7, 0x1}, {0xec, 0x400, 0x2, 0x800}, {0x9, 0x3, 0x4, 0x1000}, {0x1ff, 0x254c00, 0xfffffffe, 0x18e}, {0x100, 0xffffffff, 0x1, 0x7fffffff}, {0x5, 0x3, 0x4, 0x3467}, {0x1, 0x6, 0x3, 0x9}, {0x6, 0x7, 0xab, 0x2}, {0x6ef, 0x4, 0x6}, {0x0, 0x6, 0x10, 0x6cf}, {0x5, 0x400, 0xb, 0x3}, {0x4, 0x4, 0xd, 0x9}, {0x7f, 0x3ff, 0x1000000, 0x7}, {0x0, 0xf, 0x0, 0x1}, {0x1, 0x8, 0x6}, {0x8, 0x5, 0x3, 0x1}, {0x9, 0x9, 0x8, 0x7}, {0xa236, 0x1, 0x84, 0x3f8000}, {0xf, 0x746ec4c0, 0x7ff, 0x4}, {0xa0f0, 0x3ff, 0x40ee99c0, 0x400}, {0x40, 0xfffffdec, 0xa3b0, 0x1}, {0xfff, 0x3, 0x2, 0x40}, {0x7ff, 0xa3a, 0xd, 0xfb06}, {0x90, 0x1000, 0x8, 0x9}, {0x3, 0x4, 0x7ab3, 0x81}, {0x1, 0xe, 0xe, 0x3ce}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xcc0, 0x2, [@TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfcf}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0xa}, {0x3, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0xf000, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xc}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}, @TCA_BASIC_ACT={0x3dc, 0x3, [@m_skbmod={0x108, 0x1d, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffffb, 0xffffffff, 0x8, 0x3e, 0x2}, 0x9}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x9e, 0x6, "853c5fcaa59a5fbf54d836fc536642fb53332e7270a45b0c5b4c1e4ae5712645d2675d16949b056bb37b5d7bbd62493441014c2c5592a54479d88cd9e3f9e8eda0c96f51ba27a61fc66cac86a9cf4dc1d8cba016771faea0310e42fb28ee31693e57ecc7a218f63e6d0dc80222e20207b66e0e5f5759ce12dcbcdd83627c6f2ae14d3aca4cd0df651920afed7407420263e63b8ceb0ba4668638"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0xbc, 0x1a, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x1ff, 0x3, 0x2, 0x5}, 0x4}}]}, {0x53, 0x6, "c54506abf50ad670bf87ec45deeafaff26f29b557a590e5206e55ca17a0a966885af5c9486dde3a5fad3b90ae89215fe486525f7ac94942918996a40c7de889a19990a865573891f840f74eec9805b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x70, 0x1e, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0xfffffffb, 0x0, 0xfffffffa}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1ff, 0x7, 0x2, 0x3ff}, 0x1}}]}, {0x9, 0x6, "53b3f2e0b0"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x1a4, 0x1, 0x0, 0x0, {{0x7}, {0x154, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5e5c}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x59, 0x6, {0x0, 'nat\x00', 0x0, 0x1, "b6a0232056f8d42cf0d348745c45714130c3567cd33bf755339b18cd75533101e319791fa162ec923fcea5576eb084"}}, @TCA_IPT_TARG={0xbe, 0x6, {0xff44, 'security\x00', 0x80, 0x5, "068b18842b819fec40d83f276b37bebfe4931c043b55af4a2792e344025e2fee63426893835bd4386d279e920d120602c3f28e0c14430ffb98071ee24698f5e294481176346e9f8c54b4740aaf5bf654a06c7991f620bdb473c3a1138171ae41adc34e8cd55d27fec53f67b9c79011386e9638421a0ba9fcc6412984ecedb178e988fadcca53bd2caf9649c1577955dc19cb05d5"}}]}, {0x2c, 0x6, "b6516385a1fd2917ce3c984c9e297b35e9c975e5c8781179981763421ebd4b859c7f420402dec7e9"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_POLICE={0x458, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x24000, 0x6, 0xffffff5b, 0x6b, 0x1000, 0x10000, 0x6, 0x2, 0x4, 0x7, 0x9, 0xfffffffa, 0x7, 0x62, 0xc, 0x0, 0xcc, 0xa, 0x5, 0x2, 0x4, 0x9, 0x8a, 0xea3, 0x0, 0x4, 0x2, 0x200, 0x7ff, 0x0, 0x7, 0x8000, 0x4, 0x5, 0x0, 0x2, 0x7, 0x5, 0x40, 0x2, 0xfffffd9b, 0x3, 0x3, 0x5, 0x5, 0x3, 0x0, 0x4, 0x5, 0x6, 0x2, 0x7, 0x9, 0x8, 0x7, 0x6fdb8c88, 0x8000, 0x0, 0x1, 0x6bcc9a20, 0xff, 0x20, 0xfffffffd, 0x2, 0x55, 0x6, 0x7ff, 0x3, 0x6, 0x80000001, 0x5, 0x7fffffff, 0x2, 0x101, 0x1, 0x0, 0x401, 0x9, 0x0, 0x2, 0x6, 0x2, 0xd, 0xfffffff7, 0x7fffffff, 0x3, 0x9, 0x9, 0x77, 0x9, 0x8, 0x4, 0x1, 0xe, 0x7, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffffc843, 0x6, 0x6, 0x60, 0xef9, 0x2, 0x1, 0x8, 0x6, 0x8, 0x81e, 0x0, 0xffffffff, 0x7, 0x4, 0x9f35, 0xda6a, 0x639, 0x92aa171, 0x0, 0x2, 0x0, 0xa, 0x8001, 0x6, 0x9, 0x10001, 0x80000000, 0xc, 0xfffffff8, 0x7aa, 0x80000000, 0x200, 0x0, 0x7ea1, 0x2, 0x8000, 0x647, 0x7, 0x10000, 0x101, 0x2, 0xffff3310, 0x880, 0x3, 0x8b3, 0xffffffff, 0x10001, 0x7ff, 0x401, 0x2, 0x7, 0x40, 0xf, 0x8, 0x3, 0xbe, 0x82, 0x3, 0x7, 0x6, 0x8ad, 0x2, 0x8001, 0x400, 0x6, 0x10, 0xc0, 0x9, 0x2, 0xa32, 0x8, 0xf, 0x3, 0x10, 0x9, 0x6, 0xa5ba, 0x5, 0x10, 0x1, 0x3, 0x6, 0xffffffff, 0xff, 0x2, 0xe9, 0x6, 0x1, 0x5, 0x0, 0xffff0000, 0x5, 0x7fff, 0x6, 0x4, 0x10, 0x4, 0x8, 0x7fff, 0x100, 0x4, 0xe, 0x3, 0xb4b2, 0x3, 0x8000, 0x0, 0x5e, 0x80000000, 0x6, 0x4, 0x7, 0x101, 0x6, 0x4, 0x600577eb, 0x3, 0x3, 0x7f69f212, 0xfffffffd, 0x1, 0x1, 0x6, 0x401, 0x8, 0x4, 0x5e5, 0x4, 0x7ff, 0x5, 0x0, 0x0, 0x3, 0x70000, 0x4, 0xffffffff, 0xffffffff, 0x9051, 0x1, 0x217, 0x9, 0x8, 0x7, 0x8, 0x1, 0x6, 0x5, 0xfff, 0x4, 0x5, 0x1, 0x100, 0x4, 0x617b, 0xc7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe8, 0x2, 0x9, 0x2, 0x7, {0x5, 0x2, 0x59, 0x6, 0xeaf6, 0x3}, {0xb3, 0x1, 0x8, 0xff, 0x7}, 0xffffff1c, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}]}, @TCA_BASIC_POLICE={0x1c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffdf2}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe72, 0x9, 0x2, 0x40, 0x4, 0x40, 0xffffff81, 0x3, 0x1, 0x1, 0x2, 0x5, 0x10001, 0xfffffff7, 0x9, 0x3, 0x4, 0x3, 0x401, 0x8, 0x0, 0x7fffffff, 0x7, 0xd4d, 0x9, 0x6, 0x4, 0x4, 0x1ff, 0x6d23, 0x7, 0xfffffff8, 0x8, 0x9, 0x3, 0x8, 0x7, 0x8001, 0x7, 0x8, 0x401, 0x2, 0xf, 0x9, 0x2, 0xf5, 0x7, 0x3000000, 0x7, 0x40, 0x8, 0x1, 0x5, 0x7, 0x8, 0xc56f, 0xff, 0x9, 0x7, 0x1336, 0xff, 0x7, 0x5, 0xffffffff, 0x5, 0xb2, 0xbc3, 0x7, 0x1, 0x10000, 0x8417, 0x1ff, 0x8, 0x0, 0x9d, 0xd5c, 0x3, 0x0, 0x1, 0xe, 0x4, 0x51b8, 0x1, 0x3, 0x401, 0x46, 0x100000, 0x0, 0xc5, 0x2, 0x5, 0x7296, 0x6, 0x8000, 0x101, 0x2, 0x3d5, 0x6, 0x1, 0x2, 0x0, 0x6, 0x980f, 0x8, 0x8, 0x8, 0x0, 0x0, 0x8, 0x3, 0x59b2, 0x9, 0x7, 0xfffffffc, 0xb5, 0x1, 0x7, 0x8001, 0x6, 0x7fff, 0x2, 0x91, 0x4, 0x94, 0x2, 0xac, 0xc90, 0x8, 0x1, 0x0, 0x3, 0x9, 0x9, 0x48000, 0x3, 0x5, 0x9, 0xffffffff, 0x4, 0x1, 0x800, 0x0, 0x7, 0x401, 0x80000000, 0x3, 0x9, 0x0, 0x8530, 0xcf7, 0xfffffffc, 0x9, 0x7, 0x6, 0x8ac0, 0x5, 0x9, 0xd, 0x3, 0x1, 0x290, 0x893b, 0x9, 0x6, 0x24, 0x8, 0x1000, 0x200, 0x4, 0x21c2, 0x5aa, 0x2, 0x0, 0x6, 0x505a, 0x0, 0x2, 0x8001, 0x9, 0x194, 0x7, 0x4, 0xfffffffc, 0x6, 0x2, 0x100, 0x2, 0x8, 0xfff, 0x2, 0x7, 0xec6, 0x2, 0x402, 0x9, 0x4, 0x3, 0x5, 0x2, 0x3, 0x2c01, 0x4, 0x0, 0x7fff, 0x3, 0x7, 0x0, 0x81, 0x0, 0x9, 0x6, 0x7, 0x80000000, 0x5, 0x5, 0x9, 0x380, 0x9, 0x5, 0x6, 0x0, 0x5, 0x2, 0x2, 0x40, 0x400, 0x2, 0x0, 0x5ed1, 0x9, 0x3, 0x7, 0x80, 0x8273, 0x2a71, 0xad, 0x3, 0x2, 0x6, 0x8, 0x83, 0x5, 0x6f54, 0xd09a, 0x3, 0x8, 0x4, 0x6, 0x6, 0x80000001, 0x7ff, 0x1000, 0x9, 0xbf, 0x8, 0x1]}]}]}}]}, 0x2bfc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000fc0)=[{{0x0, 0x11, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x22d}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 16m15.902957454s ago: executing program 35 (id=2894): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x40, 0x10, 0xc, 0x100, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x66, 0x0, 0x4, 0x29, 0x0, @broadcast, @loopback, {[@end]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=@delchain={0x2bfc, 0x65, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xd, 0xffe0}, {0x7, 0x3}, {0x2, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x1820, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8}, @TCA_U32_DIVISOR={0x8, 0x4, 0x40}, @TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_ACT={0x140, 0x7, [@m_mpls={0x13c, 0xa, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0xf8}, @TCA_MPLS_TTL={0x5, 0x7, 0x5}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffff6, 0x8, 0xffffffffffffffff, 0x4, 0x9}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xd3214}]}, {0xcc, 0x6, "91c66e99847c782c4655868d752602154ec4845d2ffc4a37330d4d8d0175306e888cd0f4e56a45ea953170b6507ede8bc058945361f95f9b9c321e8f9175815554110921b7488437eb21d39bf75dd62f2f3dc7f801ba260ac31eddfd5c3ec39f15612bbcc2fc2d77729740fd16db052cd948c59ef4088c0a59ed1c327fa8afaf778459e4979405eea190a1b7d401eaafb25a820948b835533af144a6167039a92a7d5a8e7e66a4dfc90032252bbe97c722db21229fecab0c63131dc318e68df032f9e85cbccf4903"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xfff8}}, @TCA_U32_ACT={0x10e0, 0x7, [@m_ctinfo={0x1080, 0x7, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8197}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3, 0x8, 0x1, 0x2}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0xc, 0x7, 0x8, 0x10000}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x5c, 0x3, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x8771, 0x0, 0x6, 0xc123, 0x2}, @rand_addr=0x64010102, @broadcast, 0xffffff00, 0x1}}]}, {0x9, 0x6, "829e02ad3b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}]}, @TCA_U32_LINK={0x8, 0x3, 0x8}, @TCA_U32_SEL={0x5d4, 0x5, {0x6, 0x3, 0x0, 0x1, 0x5, 0xd, 0xfffa, 0x41f, [{0x5, 0x1, 0x9, 0x6}, {0x1, 0x0, 0x68792aba, 0x2}, {0x8, 0x8, 0x81, 0x1}, {0x8001, 0x8000, 0x9, 0x1}, {0x7, 0x6, 0x6}, {0x6, 0x1250, 0x4, 0x9}, {0xd, 0xff, 0x7f, 0x6}, {0x2, 0x5d3, 0x9, 0x401}, {0x2, 0x3, 0xffffffff, 0x9}, {0xe, 0x3, 0xb6c, 0xdc1}, {0x80, 0x95c, 0xfffffff6, 0x80000000}, {0x8, 0x9, 0x80000000, 0x7}, {0x9, 0x7fffffff, 0x6, 0xfffffffe}, {0x200, 0x16000, 0x7b6, 0x2}, {0x1, 0x0, 0x0, 0x641}, {0x6, 0xe, 0x7f000000, 0x5}, {0x6, 0x7, 0x1, 0x100}, {0x3, 0x9, 0x2, 0x9}, {0x9, 0x9, 0x5, 0x3}, {0x0, 0x2, 0xb, 0xff}, {0x5, 0x7, 0x0, 0x6}, {0x3, 0x7ff, 0xfffffffa, 0x3}, {0x0, 0x7775026a, 0x200000, 0x9}, {0x5, 0x2, 0xfffffff8, 0xa5e3}, {0x8, 0xd4c5, 0x2, 0x1}, {0x1, 0x632, 0xff, 0x2}, {0xc, 0xa243, 0x8, 0x9}, {0x6, 0x8, 0x2, 0x6}, {0x2000000, 0x5, 0x4, 0x3}, {0x1, 0x7, 0x8}, {0x1, 0x1, 0x6, 0x6b}, {0x10000, 0x0, 0x1f, 0xd}, {0x2, 0xffff6db2, 0x4270, 0x6}, {0x9, 0x2, 0x87c, 0x6}, {0x5, 0x200, 0x5, 0x4}, {0x7, 0x2e7d, 0xfffffff8, 0x8001}, {0x9, 0x2, 0xa, 0x2}, {0xe42, 0x3, 0xfdd, 0x6}, {0xb, 0x1c, 0x3, 0x7}, {0x9, 0x9, 0xe, 0x1000}, {0xfffffff9, 0x10, 0x9, 0x9}, {0x9d, 0x6, 0x5, 0x9}, {0x80000001, 0x7, 0x8001, 0x38}, {0x59f4, 0x5, 0x49c3095a, 0x7f}, {0x800, 0x0, 0x1, 0x2}, {0x10000, 0xe1, 0x1, 0xbdff}, {0xffffff73, 0x2, 0x3, 0x1}, {0x2, 0x0, 0x7, 0x5e48}, {0x735, 0x4, 0x5c73, 0x9}, {0x7, 0xf, 0x0, 0x2}, {0x80000000, 0x30000, 0x5, 0x1ff}, {0x3, 0x188a1cce, 0x4, 0x5}, {0xfff, 0x10, 0x7ff, 0x1}, {0x2, 0x80, 0x5, 0x9}, {0x1, 0x101, 0x4, 0x9}, {0x0, 0x43, 0xd93e, 0x1}, {0x6, 0x6, 0x8af, 0x3}, {0xfff, 0x7, 0xfffffff8, 0x40}, {0x0, 0x80, 0xe, 0x66a}, {0x22c, 0x8, 0xffff3e65, 0xe}, {0x17, 0x3, 0x3, 0x6}, {0x18d405f4, 0xb, 0x7, 0x2}, {0x8, 0x7ff, 0x5, 0xdc}, {0x10001, 0x7, 0xfffff000, 0x4}, {0xf, 0x10000, 0x1, 0xf}, {0x5, 0x7, 0xac4, 0x4}, {0x1ff, 0x1, 0x2, 0xa}, {0xffffffff, 0x10, 0x1, 0xe2}, {0x7, 0x8, 0x42, 0x491}, {0xcf44, 0x6, 0x3}, {0x9, 0x8, 0x3, 0x9}, {0x9, 0x9, 0xb5, 0x5}, {0xfffc0000, 0x7fff, 0xfffff800, 0x100}, {0x3ff, 0x6, 0x8, 0x80000001}, {0x8f1, 0x100, 0x5, 0x9}, {0xe1, 0x3, 0x8001, 0x2}, {0x3, 0x2e0, 0x5, 0x6}, {0x3, 0x5ac2cb0e, 0x0, 0x1}, {0x5, 0x5, 0xa4e, 0xfffffff7}, {0x8, 0x2, 0x7fffffff, 0x5}, {0x8000, 0x6, 0x10000, 0x40000000}, {0x8, 0x2, 0x6, 0x9}, {0xd4ff, 0x4, 0x3, 0x5}, {0xc0bf, 0xfff, 0x3, 0x800}, {0x5, 0x1, 0x1b2fa6f6, 0xb40}, {0x6871e64e, 0xc, 0x3, 0x9}, {0xcaf, 0x18000000, 0x5, 0x1}, {0x5, 0xcc3, 0xfffffffa, 0x2400}, {0x8, 0x6, 0x1, 0x10}, {0x4, 0x4, 0x10001, 0xddb}, {0x6, 0x1ff, 0x0, 0x9}, {0xe1b, 0x6, 0x1, 0x200}]}}]}}, @filter_kind_options=@f_basic={{0xa}, {0x4}}, @filter_kind_options=@f_u32={{0x8}, {0x6b4, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x5, 0x3}}, @TCA_U32_POLICE={0x18, 0x6, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5d90}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb0}]}, @TCA_U32_MARK={0x10, 0xa, {0x7, 0xa}}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x7fff}}, @TCA_U32_INDEV={0x14, 0x8, 'nr0\x00'}, @TCA_U32_CLASSID={0x8, 0x1, {0xb}}, @TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_CLASSID={0x8, 0x1, {0x8, 0xfff1}}, @TCA_U32_SEL={0x634, 0x5, {0x9, 0xe, 0x8, 0x0, 0xc37, 0xd, 0x1, 0x0, [{0x5, 0x6, 0xf, 0x2}, {0xd8f, 0x7, 0x7}, {0x5, 0x7, 0x15, 0xc73}, {0x7, 0x62a, 0x6, 0x7fffffff}, {0x5, 0x707d, 0x5, 0x1}, {0xddc3, 0x9, 0x0, 0x1}, {0x0, 0xfffffff8, 0x1}, {0x80000000, 0x800, 0x12fa59f1}, {0x76, 0x1, 0x10001, 0x100}, {0x10000, 0x81, 0x8, 0x40}, {0x5, 0x3, 0xe, 0x1}, {0x1, 0x3ff, 0x917, 0x9}, {0x5, 0x1, 0x800, 0x5}, {0xbc34, 0x8, 0x80000001, 0x5}, {0xfffff000, 0x200, 0x8, 0x75}, {0x1, 0x3ff, 0x1, 0x8}, {0x1, 0xe9d5, 0x0, 0x3}, {0xbe, 0x8, 0x40, 0x9}, {0x4db1, 0x7ff, 0x1, 0x3}, {0x7f, 0x5, 0x4, 0x1}, {0x9, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x7, 0x4}, {0x4, 0x7, 0xa3e9e69, 0x4}, {0x5, 0x6e9b, 0x100, 0x5}, {0xfffff6fa, 0x4, 0x1, 0x7a0}, {0x6, 0xfffffffc, 0x1, 0xd}, {0x5, 0xfffffff9, 0x8, 0xf9d}, {0x7, 0x8, 0x8}, {0x1, 0x6, 0x400, 0x3}, {0x9, 0x2, 0x7fffffff}, {0x508, 0xfffffff8, 0x1, 0xf}, {0x9, 0x8, 0x0, 0x6}, {0x7fff, 0x4, 0x4}, {0xa, 0x2, 0x2, 0x1}, {0xf2a, 0x9, 0xa5c, 0x9}, {0x7, 0x7, 0x0, 0x7}, {0x1, 0x8, 0x971, 0x2}, {0x16874000, 0x4, 0x7, 0x5}, {0x5, 0x2, 0x8000, 0x7fffffff}, {0x5a6d, 0x2, 0x8}, {0xffffff80, 0x200, 0x10001, 0x8}, {0x6, 0x6, 0x6, 0x4}, {0x0, 0x7, 0x1, 0xc0000}, {0x79, 0x7, 0x40, 0x7}, {0x9c, 0x2, 0x2, 0x6}, {0x8, 0x6, 0xff, 0x6}, {0x80000001, 0x4f, 0x16000, 0x37400000}, {0x5, 0xc, 0x203d, 0x40}, {0xc5e4, 0x7ff, 0x101, 0x5}, {0x8000, 0x6, 0x4, 0xa}, {0x6, 0x8, 0x2, 0x5}, {0x5, 0x1, 0x5, 0x2}, {0x36a9, 0x3, 0x8, 0x4}, {0xb, 0x400, 0x401, 0x81}, {0xef8b, 0x93ef, 0x8000, 0x10001}, {0x3, 0x9e2, 0xff1b4afa, 0x9}, {0x4, 0x8, 0x7, 0xd5c}, {0xffffffff, 0xb, 0x81, 0x8}, {0x2ae, 0x8, 0x4, 0x1}, {0x6, 0x3, 0x1, 0x2}, {0x533, 0x9, 0x372007af, 0xe95}, {0x7, 0x3, 0x1}, {0x9, 0x8a4, 0x3, 0x4}, {0x8, 0xfe19, 0x8, 0x4}, {0x2, 0x8, 0x5, 0x10000}, {0x0, 0x5, 0x10000, 0xa}, {0x7fff, 0x31d, 0x2d}, {0x1000, 0x3, 0xfffffff9, 0x401}, {0xdefc, 0x581b, 0xdc2, 0x6}, {0x7, 0x10000, 0x3, 0x40}, {0x8, 0x8, 0xd, 0xf1d2}, {0x4, 0xe47, 0x7f}, {0x40, 0x51, 0x7, 0x1}, {0xec, 0x400, 0x2, 0x800}, {0x9, 0x3, 0x4, 0x1000}, {0x1ff, 0x254c00, 0xfffffffe, 0x18e}, {0x100, 0xffffffff, 0x1, 0x7fffffff}, {0x5, 0x3, 0x4, 0x3467}, {0x1, 0x6, 0x3, 0x9}, {0x6, 0x7, 0xab, 0x2}, {0x6ef, 0x4, 0x6}, {0x0, 0x6, 0x10, 0x6cf}, {0x5, 0x400, 0xb, 0x3}, {0x4, 0x4, 0xd, 0x9}, {0x7f, 0x3ff, 0x1000000, 0x7}, {0x0, 0xf, 0x0, 0x1}, {0x1, 0x8, 0x6}, {0x8, 0x5, 0x3, 0x1}, {0x9, 0x9, 0x8, 0x7}, {0xa236, 0x1, 0x84, 0x3f8000}, {0xf, 0x746ec4c0, 0x7ff, 0x4}, {0xa0f0, 0x3ff, 0x40ee99c0, 0x400}, {0x40, 0xfffffdec, 0xa3b0, 0x1}, {0xfff, 0x3, 0x2, 0x40}, {0x7ff, 0xa3a, 0xd, 0xfb06}, {0x90, 0x1000, 0x8, 0x9}, {0x3, 0x4, 0x7ab3, 0x81}, {0x1, 0xe, 0xe, 0x3ce}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0xd}}]}}, @TCA_CHAIN={0x8, 0xb, 0xe}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1}}, @filter_kind_options=@f_basic={{0xa}, {0xcc0, 0x2, [@TCA_BASIC_EMATCHES={0x64, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfcf}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x8, 0x8, 0xa}, {0x3, 0x3, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x2, 0x0, 0x0, {{0xf000, 0x9, 0x7}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xc}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}, @TCA_BASIC_ACT={0x3dc, 0x3, [@m_skbmod={0x108, 0x1d, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfffffffb, 0xffffffff, 0x8, 0x3e, 0x2}, 0x9}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}]}, {0x9e, 0x6, "853c5fcaa59a5fbf54d836fc536642fb53332e7270a45b0c5b4c1e4ae5712645d2675d16949b056bb37b5d7bbd62493441014c2c5592a54479d88cd9e3f9e8eda0c96f51ba27a61fc66cac86a9cf4dc1d8cba016771faea0310e42fb28ee31693e57ecc7a218f63e6d0dc80222e20207b66e0e5f5759ce12dcbcdd83627c6f2ae14d3aca4cd0df651920afed7407420263e63b8ceb0ba4668638"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbmod={0xbc, 0x1a, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x1ff, 0x3, 0x2, 0x5}, 0x4}}]}, {0x53, 0x6, "c54506abf50ad670bf87ec45deeafaff26f29b557a590e5206e55ca17a0a966885af5c9486dde3a5fad3b90ae89215fe486525f7ac94942918996a40c7de889a19990a865573891f840f74eec9805b"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x70, 0x1e, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x10000, 0xfffffffb, 0x0, 0xfffffffa}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1ff, 0x7, 0x2, 0x3ff}, 0x1}}]}, {0x9, 0x6, "53b3f2e0b0"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_xt={0x1a4, 0x1, 0x0, 0x0, {{0x7}, {0x154, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5e5c}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x59, 0x6, {0x0, 'nat\x00', 0x0, 0x1, "b6a0232056f8d42cf0d348745c45714130c3567cd33bf755339b18cd75533101e319791fa162ec923fcea5576eb084"}}, @TCA_IPT_TARG={0xbe, 0x6, {0xff44, 'security\x00', 0x80, 0x5, "068b18842b819fec40d83f276b37bebfe4931c043b55af4a2792e344025e2fee63426893835bd4386d279e920d120602c3f28e0c14430ffb98071ee24698f5e294481176346e9f8c54b4740aaf5bf654a06c7991f620bdb473c3a1138171ae41adc34e8cd55d27fec53f67b9c79011386e9638421a0ba9fcc6412984ecedb178e988fadcca53bd2caf9649c1577955dc19cb05d5"}}]}, {0x2c, 0x6, "b6516385a1fd2917ce3c984c9e297b35e9c975e5c8781179981763421ebd4b859c7f420402dec7e9"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_BASIC_POLICE={0x458, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x24000, 0x6, 0xffffff5b, 0x6b, 0x1000, 0x10000, 0x6, 0x2, 0x4, 0x7, 0x9, 0xfffffffa, 0x7, 0x62, 0xc, 0x0, 0xcc, 0xa, 0x5, 0x2, 0x4, 0x9, 0x8a, 0xea3, 0x0, 0x4, 0x2, 0x200, 0x7ff, 0x0, 0x7, 0x8000, 0x4, 0x5, 0x0, 0x2, 0x7, 0x5, 0x40, 0x2, 0xfffffd9b, 0x3, 0x3, 0x5, 0x5, 0x3, 0x0, 0x4, 0x5, 0x6, 0x2, 0x7, 0x9, 0x8, 0x7, 0x6fdb8c88, 0x8000, 0x0, 0x1, 0x6bcc9a20, 0xff, 0x20, 0xfffffffd, 0x2, 0x55, 0x6, 0x7ff, 0x3, 0x6, 0x80000001, 0x5, 0x7fffffff, 0x2, 0x101, 0x1, 0x0, 0x401, 0x9, 0x0, 0x2, 0x6, 0x2, 0xd, 0xfffffff7, 0x7fffffff, 0x3, 0x9, 0x9, 0x77, 0x9, 0x8, 0x4, 0x1, 0xe, 0x7, 0x8, 0x4, 0x0, 0xa, 0x9, 0xffffc843, 0x6, 0x6, 0x60, 0xef9, 0x2, 0x1, 0x8, 0x6, 0x8, 0x81e, 0x0, 0xffffffff, 0x7, 0x4, 0x9f35, 0xda6a, 0x639, 0x92aa171, 0x0, 0x2, 0x0, 0xa, 0x8001, 0x6, 0x9, 0x10001, 0x80000000, 0xc, 0xfffffff8, 0x7aa, 0x80000000, 0x200, 0x0, 0x7ea1, 0x2, 0x8000, 0x647, 0x7, 0x10000, 0x101, 0x2, 0xffff3310, 0x880, 0x3, 0x8b3, 0xffffffff, 0x10001, 0x7ff, 0x401, 0x2, 0x7, 0x40, 0xf, 0x8, 0x3, 0xbe, 0x82, 0x3, 0x7, 0x6, 0x8ad, 0x2, 0x8001, 0x400, 0x6, 0x10, 0xc0, 0x9, 0x2, 0xa32, 0x8, 0xf, 0x3, 0x10, 0x9, 0x6, 0xa5ba, 0x5, 0x10, 0x1, 0x3, 0x6, 0xffffffff, 0xff, 0x2, 0xe9, 0x6, 0x1, 0x5, 0x0, 0xffff0000, 0x5, 0x7fff, 0x6, 0x4, 0x10, 0x4, 0x8, 0x7fff, 0x100, 0x4, 0xe, 0x3, 0xb4b2, 0x3, 0x8000, 0x0, 0x5e, 0x80000000, 0x6, 0x4, 0x7, 0x101, 0x6, 0x4, 0x600577eb, 0x3, 0x3, 0x7f69f212, 0xfffffffd, 0x1, 0x1, 0x6, 0x401, 0x8, 0x4, 0x5e5, 0x4, 0x7ff, 0x5, 0x0, 0x0, 0x3, 0x70000, 0x4, 0xffffffff, 0xffffffff, 0x9051, 0x1, 0x217, 0x9, 0x8, 0x7, 0x8, 0x1, 0x6, 0x5, 0xfff, 0x4, 0x5, 0x1, 0x100, 0x4, 0x617b, 0xc7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe8, 0x2, 0x9, 0x2, 0x7, {0x5, 0x2, 0x59, 0x6, 0xeaf6, 0x3}, {0xb3, 0x1, 0x8, 0xff, 0x7}, 0xffffff1c, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}]}, @TCA_BASIC_POLICE={0x1c, 0x4, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffdf2}]}, @TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe72, 0x9, 0x2, 0x40, 0x4, 0x40, 0xffffff81, 0x3, 0x1, 0x1, 0x2, 0x5, 0x10001, 0xfffffff7, 0x9, 0x3, 0x4, 0x3, 0x401, 0x8, 0x0, 0x7fffffff, 0x7, 0xd4d, 0x9, 0x6, 0x4, 0x4, 0x1ff, 0x6d23, 0x7, 0xfffffff8, 0x8, 0x9, 0x3, 0x8, 0x7, 0x8001, 0x7, 0x8, 0x401, 0x2, 0xf, 0x9, 0x2, 0xf5, 0x7, 0x3000000, 0x7, 0x40, 0x8, 0x1, 0x5, 0x7, 0x8, 0xc56f, 0xff, 0x9, 0x7, 0x1336, 0xff, 0x7, 0x5, 0xffffffff, 0x5, 0xb2, 0xbc3, 0x7, 0x1, 0x10000, 0x8417, 0x1ff, 0x8, 0x0, 0x9d, 0xd5c, 0x3, 0x0, 0x1, 0xe, 0x4, 0x51b8, 0x1, 0x3, 0x401, 0x46, 0x100000, 0x0, 0xc5, 0x2, 0x5, 0x7296, 0x6, 0x8000, 0x101, 0x2, 0x3d5, 0x6, 0x1, 0x2, 0x0, 0x6, 0x980f, 0x8, 0x8, 0x8, 0x0, 0x0, 0x8, 0x3, 0x59b2, 0x9, 0x7, 0xfffffffc, 0xb5, 0x1, 0x7, 0x8001, 0x6, 0x7fff, 0x2, 0x91, 0x4, 0x94, 0x2, 0xac, 0xc90, 0x8, 0x1, 0x0, 0x3, 0x9, 0x9, 0x48000, 0x3, 0x5, 0x9, 0xffffffff, 0x4, 0x1, 0x800, 0x0, 0x7, 0x401, 0x80000000, 0x3, 0x9, 0x0, 0x8530, 0xcf7, 0xfffffffc, 0x9, 0x7, 0x6, 0x8ac0, 0x5, 0x9, 0xd, 0x3, 0x1, 0x290, 0x893b, 0x9, 0x6, 0x24, 0x8, 0x1000, 0x200, 0x4, 0x21c2, 0x5aa, 0x2, 0x0, 0x6, 0x505a, 0x0, 0x2, 0x8001, 0x9, 0x194, 0x7, 0x4, 0xfffffffc, 0x6, 0x2, 0x100, 0x2, 0x8, 0xfff, 0x2, 0x7, 0xec6, 0x2, 0x402, 0x9, 0x4, 0x3, 0x5, 0x2, 0x3, 0x2c01, 0x4, 0x0, 0x7fff, 0x3, 0x7, 0x0, 0x81, 0x0, 0x9, 0x6, 0x7, 0x80000000, 0x5, 0x5, 0x9, 0x380, 0x9, 0x5, 0x6, 0x0, 0x5, 0x2, 0x2, 0x40, 0x400, 0x2, 0x0, 0x5ed1, 0x9, 0x3, 0x7, 0x80, 0x8273, 0x2a71, 0xad, 0x3, 0x2, 0x6, 0x8, 0x83, 0x5, 0x6f54, 0xd09a, 0x3, 0x8, 0x4, 0x6, 0x6, 0x80000001, 0x7ff, 0x1000, 0x9, 0xbf, 0x8, 0x1]}]}]}}]}, 0x2bfc}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x218, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r5, &(0x7f0000000fc0)=[{{0x0, 0x11, &(0x7f0000000040)=[{&(0x7f0000001f80)="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", 0x22d}, {0x0}], 0x2}}], 0x1, 0x0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 20.501131071s ago: executing program 7 (id=5763): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 20.374954724s ago: executing program 7 (id=5765): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) mremap(&(0x7f0000186000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00000ad000/0x3000)=nil) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x201000, 0x1000}, 0x20) 20.111348588s ago: executing program 7 (id=5767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x40) 19.178921426s ago: executing program 7 (id=5769): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) setns(0xffffffffffffffff, 0x24020000) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r5) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f00000000c0)=0x1, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={0x0, 0x94}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x20000f3d, &(0x7f0000000000)={0x2, 0x24e23, @empty}, 0x10) 18.100588131s ago: executing program 7 (id=5772): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, @none, 0x5}, 0xe) 17.770479219s ago: executing program 7 (id=5776): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x800) 9.964115443s ago: executing program 6 (id=5790): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800000002) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x34, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x119f}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8801}, 0x20000010) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'dummy0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7f83, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) socket(0x2b, 0x3, 0x0) 8.673235838s ago: executing program 8 (id=5793): sched_setscheduler(0x0, 0x2, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, 0x0, {0x8000000000000001, 0xbde, 0x0, {0x1, 0x0, 0x0, 0x0, 0x5, 0x800000000000000b, 0x80, 0xb0, 0x0, 0x2000, 0x7f, 0x0, 0x0, 0x0, 0x7ffc}}}, 0x78) writev(r2, &(0x7f00000014c0)=[{&(0x7f0000000140)="11460e502ced3507", 0x8}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.007280793s ago: executing program 6 (id=5796): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4e2d8157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 6.929109319s ago: executing program 8 (id=5797): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x46, &(0x7f0000000680)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 6.826536983s ago: executing program 6 (id=5798): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000001c0)={0x83, 0x4, 0x8, 0x3, 0x15, "e20b0020ffffffff"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x7fffffff, 0x372, 0x0, 0x19, "40b80000000000000000001c00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0x2020) 6.477588584s ago: executing program 8 (id=5799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000008c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fgetxattr(r4, &(0x7f0000000740)=@random={'os2.', '{}\x00'}, &(0x7f0000000780)=""/234, 0xea) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) unshare(0x42000000) 5.274703171s ago: executing program 6 (id=5800): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="240000001200010a00000000070000008000000031970c5b3f"], 0x24}}, 0x0) 4.902985642s ago: executing program 6 (id=5801): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x200000100000011, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 4.371171037s ago: executing program 8 (id=5802): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @empty}}) 4.234683971s ago: executing program 1 (id=5803): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.896449332s ago: executing program 8 (id=5805): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700", @ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000001c0)="0f285907660f06f40f070f20d86635200000000f22d8673e0f01ca66b9800000c00f326635000100000f309467650f3066660f3881aaf60f", 0x38}], 0x1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000080)=""/240, 0xfffffffffffffe77, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.862510728s ago: executing program 1 (id=5806): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) 3.495272386s ago: executing program 1 (id=5808): timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000400)={{{0x3, 0x1}}, 0x0, 0x6, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x0) 3.429020522s ago: executing program 5 (id=5809): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = io_uring_setup(0x327c, 0x0) io_uring_enter(r1, 0x55b4, 0x7698, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000640)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.214173767s ago: executing program 5 (id=5810): r0 = socket(0x2b, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000040)='./file1\x00', 0xb0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) io_getevents(0x0, 0x7, 0x1, &(0x7f0000000280)=[{}], 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000ffffffffb70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000080b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40000000}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) 1.427158903s ago: executing program 36 (id=5776): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x800) 1.384997493s ago: executing program 5 (id=5812): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x17) 1.369898091s ago: executing program 1 (id=5813): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@can_delroute={0x14c, 0x19, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x0, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, "2e274beb027cab31"}, 0x5}}, @CGW_CS_CRC8={0x11e, 0x6, {0x13, 0x72, 0x4d, 0x3, 0xa, "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", 0x2, "440d564e141105107c9357712cf9ef8979fba17d"}}]}, 0x14c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) getcwd(&(0x7f0000000240)=""/87, 0x57) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r4}, &(0x7f0000000a00), &(0x7f0000000a40)=r3}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x200000000000011, 0x2, 0x0) socket(0x11, 0xa, 0x3ff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000340)={0xff02, 0x4e34, 0x0, 0x5, 0x0, "5f730000a9003f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f00000006c0)=0x5f) 1.172369352s ago: executing program 5 (id=5814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000009, 0x1, 0x800) 1.028917247s ago: executing program 1 (id=5815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) 965.137814ms ago: executing program 5 (id=5816): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1f5) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={0x25c, 0x0, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_MARK_MASK={0x8}, @CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x102}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x12}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}, @CTA_TUPLE_ORIG={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x2, 0x2]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x140e}, @CTA_NAT_SRC={0x9c, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_PROTO={0x4c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_MASTER={0xd8, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x200}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xcb45}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x40}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x1) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000000000000040000000000000002b00000000000000000000000000380001000000000000000300000000000000000000000000000000000000000000009f0000000000000000080000000000000002000000000000"], 0x78) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x2000800) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 554.340128ms ago: executing program 5 (id=5817): open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) flock(r2, 0x2) flock(r2, 0x2) 248.828484ms ago: executing program 8 (id=5818): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) sched_setparam(r1, &(0x7f0000000340)=0x2) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001e00e501000000000000000007000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000ffffffff401d0000"], 0x38}}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) 64.979154ms ago: executing program 1 (id=5819): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000106b1d010140000102030109027a00030106000e0904000000010100000a2401000e060201020d240203010202070400f70209040100000102000009040101010102000009050109000409090e0725010009cc6509040200000102000009040201010102200008240201030105ff07a501501002100905820940"], 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000340)=""/160}, 0x20) 0s ago: executing program 6 (id=5820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x0, 0x0) modify_ldt$read(0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000700)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x2000c850, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) kernel console output (not intermixed with test programs): 07f768b7a5fa0 R15: 00007ffe8515a118 [ 1923.730893][T24333] [ 1925.489417][T16950] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1925.752041][T16950] usb 9-1: Using ep0 maxpacket: 8 [ 1925.915221][T16950] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1925.941848][T16950] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1925.950565][T24358] netlink: 'syz.7.4827': attribute type 5 has an invalid length. [ 1925.961168][T16950] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1925.999048][T16950] usb 9-1: config 0 has no interface number 0 [ 1926.005969][T16950] usb 9-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1926.034235][T16950] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1926.044414][T16950] usb 9-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1926.053048][T16950] usb 9-1: Product: syz [ 1926.062016][T16950] usb 9-1: Manufacturer: syz [ 1926.077946][T16950] usb 9-1: config 0 descriptor?? [ 1926.642135][T16950] usb 9-1: USB disconnect, device number 53 [ 1931.102759][T24402] 9pnet_fd: Insufficient options for proto=fd [ 1931.133923][T24402] overlayfs: overlapping lowerdir path [ 1935.348534][T24431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4844'. [ 1935.779844][T24443] netlink: 116 bytes leftover after parsing attributes in process `syz.8.4850'. [ 1935.848730][T12897] Bluetooth: hci2: unexpected cc 0x2024 length: 5 > 1 [ 1935.859913][T12897] Bluetooth: hci2: unexpected event for opcode 0x2024 [ 1937.687451][T24461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1942.406437][T24498] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4865'. [ 1944.989168][T24525] ======================================================= [ 1944.989168][T24525] WARNING: The mand mount option has been deprecated and [ 1944.989168][T24525] and is ignored by this kernel. Remove the mand [ 1944.989168][T24525] option from the mount to silence this warning. [ 1944.989168][T24525] ======================================================= [ 1945.471928][T24528] Cannot find map_set index 0 as target [ 1946.021792][T21401] IPVS: starting estimator thread 0... [ 1946.131832][T24534] IPVS: using max 25 ests per chain, 60000 per kthread [ 1948.411645][T24557] netlink: 'syz.8.4881': attribute type 5 has an invalid length. [ 1948.671983][T16950] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1948.718282][T24547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1948.822086][T16950] usb 9-1: Using ep0 maxpacket: 8 [ 1948.846861][T16950] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 1948.881423][T16950] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1948.914048][T16950] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1948.932734][T16950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.940880][T16950] usb 9-1: Product: syz [ 1948.947979][T16950] usb 9-1: Manufacturer: syz [ 1948.954120][T16950] usb 9-1: SerialNumber: syz [ 1948.963166][T16950] usb 9-1: config 0 descriptor?? [ 1948.974554][T16950] streamzap 9-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1950.132358][T24557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.151302][T24557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.732394][ T5905] usb 9-1: USB disconnect, device number 54 [ 1950.762000][T12897] Bluetooth: hci2: command 0x0406 tx timeout [ 1951.963401][T16950] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1952.193318][T16950] usb 6-1: Using ep0 maxpacket: 32 [ 1952.296447][T16950] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1952.488602][T16950] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1952.498479][T16950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1952.539309][T16950] usb 6-1: Product: syz [ 1952.558660][T16950] usb 6-1: Manufacturer: syz [ 1952.583896][T16950] usb 6-1: SerialNumber: syz [ 1952.610012][T16950] usb 6-1: config 0 descriptor?? [ 1953.165740][T16950] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 1953.176985][T16950] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 1953.950428][T24616] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4899'. [ 1954.023453][T19228] usb 6-1: USB disconnect, device number 70 [ 1954.581841][T16950] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1954.648233][T24629] overlayfs: overlapping lowerdir path [ 1954.810373][T24631] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 1954.821040][T16950] usb 9-1: Using ep0 maxpacket: 32 [ 1954.865431][T16950] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1955.002394][T16950] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1955.020155][T16950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.031883][T16950] usb 9-1: Product: syz [ 1955.039603][T16950] usb 9-1: Manufacturer: syz [ 1955.058272][T16950] usb 9-1: SerialNumber: syz [ 1955.303260][T16950] usb 9-1: config 0 descriptor?? [ 1955.489864][T24640] fuse: Bad value for 'rootmode' [ 1955.522230][T24640] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4907'. [ 1955.849139][T16950] gs_usb 9-1:0.0: Couldn't get device config: (err=-121) [ 1955.856733][T16950] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -121 [ 1956.623990][T16950] usb 9-1: USB disconnect, device number 55 [ 1959.153210][T24648] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1959.294574][T24670] overlayfs: overlapping lowerdir path [ 1961.205057][T12897] Bluetooth: hci2: command 0x0406 tx timeout [ 1965.933076][T24745] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1966.235205][T24734] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1966.397193][T24760] pimreg: entered allmulticast mode [ 1966.432160][T24760] pimreg: left allmulticast mode [ 1966.748856][T24768] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4942'. [ 1968.282041][T12897] Bluetooth: hci2: command 0x0406 tx timeout [ 1969.977505][T24800] mmap: syz.6.4953 (24800) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1970.022626][T12051] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1970.231892][T12051] usb 6-1: Using ep0 maxpacket: 8 [ 1970.248798][T12051] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1970.303005][T24807] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4952'. [ 1970.316211][T24807] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4952'. [ 1970.317659][T12051] usb 6-1: no configurations [ 1970.325360][T24807] netlink: 'syz.7.4952': attribute type 14 has an invalid length. [ 1970.551936][T12051] usb 6-1: can't read configurations, error -22 [ 1971.432023][T24817] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 1971.706263][T24835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1971.807654][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4963'. [ 1972.306770][T24850] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4968'. [ 1972.316192][T24850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4968'. [ 1972.326075][T24850] netlink: 'syz.5.4968': attribute type 14 has an invalid length. [ 1973.115457][T24858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4970'. [ 1976.522845][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.798502][T24890] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4977'. [ 1977.489039][T24901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4982'. [ 1977.516253][T24905] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4980'. [ 1977.547930][T24905] nbd: must specify a device to reconfigure [ 1980.730622][T24946] overlayfs: failed to clone upperpath [ 1980.932462][T24956] FAULT_INJECTION: forcing a failure. [ 1980.932462][T24956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1980.945675][T24956] CPU: 1 UID: 0 PID: 24956 Comm: syz.7.4997 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 1980.945699][T24956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1980.945710][T24956] Call Trace: [ 1980.945717][T24956] [ 1980.945725][T24956] dump_stack_lvl+0x241/0x360 [ 1980.945752][T24956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1980.945770][T24956] ? __pfx__printk+0x10/0x10 [ 1980.945794][T24956] ? __pfx_lock_release+0x10/0x10 [ 1980.945824][T24956] should_fail_ex+0x40a/0x550 [ 1980.945850][T24956] _copy_from_user+0x2d/0xb0 [ 1980.945870][T24956] copy_msghdr_from_user+0xae/0x680 [ 1980.945895][T24956] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1980.945910][T24956] ? __fget_files+0x2a/0x410 [ 1980.945934][T24956] ? __fget_files+0x2a/0x410 [ 1980.945957][T24956] __sys_sendmsg+0x209/0x350 [ 1980.945983][T24956] ? __pfx___sys_sendmsg+0x10/0x10 [ 1980.946016][T24956] ? do_sys_openat2+0x17a/0x1d0 [ 1980.946057][T24956] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1980.946080][T24956] ? do_syscall_64+0x100/0x230 [ 1980.946103][T24956] ? do_syscall_64+0xb6/0x230 [ 1980.946124][T24956] do_syscall_64+0xf3/0x230 [ 1980.946149][T24956] ? clear_bhb_loop+0x35/0x90 [ 1980.946174][T24956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.946194][T24956] RIP: 0033:0x7f270c38cde9 [ 1980.946211][T24956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1980.946226][T24956] RSP: 002b:00007f270d12b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1980.946246][T24956] RAX: ffffffffffffffda RBX: 00007f270c5a5fa0 RCX: 00007f270c38cde9 [ 1980.946259][T24956] RDX: 00000000040c0080 RSI: 00004000000002c0 RDI: 0000000000000003 [ 1980.946270][T24956] RBP: 00007f270d12b090 R08: 0000000000000000 R09: 0000000000000000 [ 1980.946282][T24956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1980.946292][T24956] R13: 0000000000000000 R14: 00007f270c5a5fa0 R15: 00007ffe01f66a18 [ 1980.946319][T24956] [ 1982.413729][ T5905] IPVS: starting estimator thread 0... [ 1982.561395][T24967] IPVS: using max 25 ests per chain, 60000 per kthread [ 1982.961257][T24971] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5001'. [ 1982.986503][T24970] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5001'. [ 1984.364350][T24988] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5006'. [ 1984.373799][T24988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5006'. [ 1984.383585][T24988] netlink: 'syz.7.5006': attribute type 14 has an invalid length. [ 1985.532285][T25000] FAULT_INJECTION: forcing a failure. [ 1985.532285][T25000] name failslab, interval 1, probability 0, space 0, times 0 [ 1985.577648][T25003] batadv0: entered promiscuous mode [ 1985.583374][T25000] CPU: 0 UID: 0 PID: 25000 Comm: syz.8.5009 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 1985.583399][T25000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1985.583410][T25000] Call Trace: [ 1985.583416][T25000] [ 1985.583424][T25000] dump_stack_lvl+0x241/0x360 [ 1985.583449][T25000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1985.583466][T25000] ? __pfx__printk+0x10/0x10 [ 1985.583489][T25000] ? fs_reclaim_acquire+0x93/0x130 [ 1985.583510][T25000] ? __pfx___might_resched+0x10/0x10 [ 1985.583532][T25000] should_fail_ex+0x40a/0x550 [ 1985.583557][T25000] should_failslab+0xac/0x100 [ 1985.583590][T25000] __kmalloc_noprof+0xdd/0x4c0 [ 1985.583605][T25000] ? tomoyo_encode+0x26f/0x540 [ 1985.583629][T25000] tomoyo_encode+0x26f/0x540 [ 1985.583658][T25000] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1985.583685][T25000] tomoyo_path_number_perm+0x239/0x770 [ 1985.583709][T25000] ? __lock_acquire+0x1397/0x2100 [ 1985.583732][T25000] ? tomoyo_path_number_perm+0x209/0x770 [ 1985.583755][T25000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1985.583813][T25000] ? __fget_files+0x2a/0x410 [ 1985.583834][T25000] ? __fget_files+0x2a/0x410 [ 1985.583852][T25000] security_file_ioctl+0xc6/0x2a0 [ 1985.583874][T25000] __se_sys_ioctl+0x46/0x170 [ 1985.583895][T25000] do_syscall_64+0xf3/0x230 [ 1985.583914][T25000] ? clear_bhb_loop+0x35/0x90 [ 1985.583938][T25000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1985.583956][T25000] RIP: 0033:0x7ffb53d8cde9 [ 1985.583971][T25000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1985.583985][T25000] RSP: 002b:00007ffb54bd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1985.584005][T25000] RAX: ffffffffffffffda RBX: 00007ffb53fa5fa0 RCX: 00007ffb53d8cde9 [ 1985.584017][T25000] RDX: 0000400000000040 RSI: 0000000040505330 RDI: 0000000000000003 [ 1985.584029][T25000] RBP: 00007ffb54bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 1985.584039][T25000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1985.584050][T25000] R13: 0000000000000000 R14: 00007ffb53fa5fa0 R15: 00007ffcd9dff3c8 [ 1985.584077][T25000] [ 1985.584099][T25000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1986.411930][T25003] batadv0: left promiscuous mode [ 1986.455539][T25014] ip6t_REJECT: ECHOREPLY is not supported [ 1988.005553][T25047] Cannot find map_set index 0 as target [ 1988.391653][T25057] x_tables: duplicate underflow at hook 3 [ 1988.519442][T25052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.686545][T25071] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5029'. [ 1989.695796][T25071] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5029'. [ 1989.705086][T25071] netlink: 'syz.8.5029': attribute type 14 has an invalid length. [ 1989.925101][T25052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.205124][T25052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.429314][T25052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.683404][T25052] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.717910][T25052] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.746211][T25052] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1990.776867][T25052] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.554015][T25096] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5037'. [ 1993.907181][T25122] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5049'. [ 1995.660209][T25140] 9pnet_fd: Insufficient options for proto=fd [ 1995.668442][T25140] overlayfs: overlapping lowerdir path [ 1995.740411][T25145] netlink: 'syz.6.5055': attribute type 5 has an invalid length. [ 1996.554761][T25161] ip6t_REJECT: ECHOREPLY is not supported [ 1997.114229][T25167] overlayfs: overlapping lowerdir path [ 1997.380965][T25165] 9pnet: Could not find request transport: fd0x0000000000000003 [ 1997.500295][T25174] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5061'. [ 1999.108471][T25182] 9pnet_fd: Insufficient options for proto=fd [ 1999.117366][T25182] overlayfs: overlapping lowerdir path [ 1999.429370][T25188] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5067'. [ 1999.656584][T25188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1999.813475][T25188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2000.238156][T25201] Cannot find map_set index 0 as target [ 2000.514107][T25200] tap0: tun_chr_ioctl cmd 1074025672 [ 2000.519593][T25200] tap0: ignored: set checksum enabled [ 2000.952385][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 2000.952440][ T29] audit: type=1800 audit(1739729247.359:499): pid=25212 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.5071" name="SYSV00000000" dev="tmpfs" ino=11 res=0 errno=0 [ 2001.460169][T25217] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5073'. [ 2003.283756][T25227] FAULT_INJECTION: forcing a failure. [ 2003.283756][T25227] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2003.342294][T25227] CPU: 0 UID: 0 PID: 25227 Comm: syz.8.5076 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 2003.342322][T25227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2003.342334][T25227] Call Trace: [ 2003.342341][T25227] [ 2003.342348][T25227] dump_stack_lvl+0x241/0x360 [ 2003.342376][T25227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2003.342393][T25227] ? __pfx__printk+0x10/0x10 [ 2003.342417][T25227] ? __pfx_lock_release+0x10/0x10 [ 2003.342447][T25227] should_fail_ex+0x40a/0x550 [ 2003.342473][T25227] set_fd_set+0x3a/0xa0 [ 2003.342496][T25227] core_sys_select+0x87d/0xa40 [ 2003.342528][T25227] ? __pfx_core_sys_select+0x10/0x10 [ 2003.342553][T25227] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2003.342594][T25227] ? __pfx_vfs_write+0x10/0x10 [ 2003.342624][T25227] ? __pfx_set_user_sigmask+0x10/0x10 [ 2003.342643][T25227] ? __pfx_do_sys_openat2+0x10/0x10 [ 2003.342658][T25227] ? put_files_struct+0x23d/0x310 [ 2003.342687][T25227] __se_sys_pselect6+0x321/0x3e0 [ 2003.342718][T25227] ? __pfx___se_sys_pselect6+0x10/0x10 [ 2003.342740][T25227] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2003.342763][T25227] ? do_syscall_64+0x100/0x230 [ 2003.342784][T25227] ? __x64_sys_pselect6+0x21/0xf0 [ 2003.342808][T25227] do_syscall_64+0xf3/0x230 [ 2003.342827][T25227] ? clear_bhb_loop+0x35/0x90 [ 2003.342851][T25227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2003.342871][T25227] RIP: 0033:0x7ffb53d8cde9 [ 2003.342887][T25227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2003.342902][T25227] RSP: 002b:00007ffb54bd4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 2003.342921][T25227] RAX: ffffffffffffffda RBX: 00007ffb53fa5fa0 RCX: 00007ffb53d8cde9 [ 2003.342934][T25227] RDX: 0000400000000180 RSI: 0000400000000040 RDI: 0000000000000040 [ 2003.342946][T25227] RBP: 00007ffb54bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 2003.342957][T25227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2003.342967][T25227] R13: 0000000000000000 R14: 00007ffb53fa5fa0 R15: 00007ffcd9dff3c8 [ 2003.342994][T25227] [ 2005.267228][T25244] pimreg: entered allmulticast mode [ 2005.283700][T25243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5078'. [ 2005.304988][T25243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5078'. [ 2005.327430][T25244] pimreg: left allmulticast mode [ 2005.346311][T25243] netlink: 'syz.6.5078': attribute type 14 has an invalid length. [ 2005.819149][T25257] vlan3: entered promiscuous mode [ 2005.824353][T25257] hsr0: entered promiscuous mode [ 2005.838827][T25257] hsr0: left promiscuous mode [ 2006.308942][T25256] xt_CT: No such helper "pptp" [ 2006.559701][T25265] FAULT_INJECTION: forcing a failure. [ 2006.559701][T25265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2006.586963][T25265] CPU: 1 UID: 0 PID: 25265 Comm: syz.8.5086 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 2006.586987][T25265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2006.586998][T25265] Call Trace: [ 2006.587006][T25265] [ 2006.587014][T25265] dump_stack_lvl+0x241/0x360 [ 2006.587037][T25265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2006.587053][T25265] ? __pfx__printk+0x10/0x10 [ 2006.587080][T25265] ? snprintf+0xda/0x120 [ 2006.587105][T25265] should_fail_ex+0x40a/0x550 [ 2006.587131][T25265] _copy_to_user+0x31/0xb0 [ 2006.587153][T25265] simple_read_from_buffer+0xca/0x150 [ 2006.587180][T25265] proc_fail_nth_read+0x1e9/0x250 [ 2006.587206][T25265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2006.587231][T25265] ? rw_verify_area+0x243/0x630 [ 2006.587250][T25265] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2006.587275][T25265] vfs_read+0x1f8/0xb40 [ 2006.587294][T25265] ? fdget_pos+0x254/0x320 [ 2006.587311][T25265] ? __pfx___mutex_lock+0x10/0x10 [ 2006.587331][T25265] ? __pfx_vfs_read+0x10/0x10 [ 2006.587352][T25265] ? __fget_files+0x2a/0x410 [ 2006.587371][T25265] ? __fget_files+0x395/0x410 [ 2006.587386][T25265] ? __fget_files+0x2a/0x410 [ 2006.587411][T25265] ksys_read+0x18f/0x2b0 [ 2006.587430][T25265] ? __pfx_ksys_read+0x10/0x10 [ 2006.587449][T25265] ? do_syscall_64+0x100/0x230 [ 2006.587471][T25265] ? do_syscall_64+0xb6/0x230 [ 2006.587492][T25265] do_syscall_64+0xf3/0x230 [ 2006.587511][T25265] ? clear_bhb_loop+0x35/0x90 [ 2006.587536][T25265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2006.587556][T25265] RIP: 0033:0x7ffb53d8b7fc [ 2006.587572][T25265] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2006.587586][T25265] RSP: 002b:00007ffb54bd4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2006.587604][T25265] RAX: ffffffffffffffda RBX: 00007ffb53fa5fa0 RCX: 00007ffb53d8b7fc [ 2006.587617][T25265] RDX: 000000000000000f RSI: 00007ffb54bd40a0 RDI: 0000000000000003 [ 2006.587627][T25265] RBP: 00007ffb54bd4090 R08: 0000000000000000 R09: 0000000000000000 [ 2006.587637][T25265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2006.587647][T25265] R13: 0000000000000000 R14: 00007ffb53fa5fa0 R15: 00007ffcd9dff3c8 [ 2006.587680][T25265] [ 2007.977350][T25274] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5088'. [ 2007.987073][T25274] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5088'. [ 2007.997209][T25274] netlink: 'syz.7.5088': attribute type 14 has an invalid length. [ 2010.077485][T25294] pimreg: entered allmulticast mode [ 2010.222525][T25294] pimreg: left allmulticast mode [ 2011.236057][T25301] overlayfs: failed to clone upperpath [ 2015.736066][T25327] vivid-007: ================= START STATUS ================= [ 2015.744088][T25327] vivid-007: Enable Output Cropping: true [ 2015.749944][T25327] vivid-007: Enable Output Composing: true [ 2015.756044][T25327] vivid-007: Enable Output Scaler: true [ 2015.761735][T25327] vivid-007: Tx RGB Quantization Range: Automatic [ 2015.768333][T25327] vivid-007: Transmit Mode: HDMI [ 2015.773666][T25327] vivid-007: Hotplug Present: 0x00000000 [ 2015.779414][T25327] vivid-007: RxSense Present: 0x00000000 [ 2015.785257][T25327] vivid-007: EDID Present: 0x00000000 [ 2015.790735][T25327] vivid-007: ================== END STATUS ================== [ 2018.058827][ T5825] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 2018.251965][ T5825] usb 9-1: Using ep0 maxpacket: 32 [ 2018.332344][ T5825] usb 9-1: config 0 has an invalid interface number: 35 but max is 0 [ 2018.340941][ T5825] usb 9-1: config 0 has no interface number 0 [ 2018.359803][ T5825] usb 9-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 2018.382054][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.428045][ T5825] usb 9-1: Product: syz [ 2018.436029][ T5825] usb 9-1: Manufacturer: syz [ 2018.440897][ T5825] usb 9-1: SerialNumber: syz [ 2018.449817][ T5825] usb 9-1: config 0 descriptor?? [ 2018.661407][ T5825] radio-si470x 9-1:0.35: this is not a si470x device. [ 2018.845171][T25371] Invalid source name [ 2018.932422][ T5825] radio-raremono 9-1:0.35: this is not Thanko's Raremono. [ 2018.951168][T25369] vivid-007: ================= START STATUS ================= [ 2018.958956][T25369] vivid-007: Enable Output Cropping: true [ 2018.964813][T25369] vivid-007: Enable Output Composing: true [ 2018.970679][T25369] vivid-007: Enable Output Scaler: true [ 2018.976340][ T5825] usb 9-1: USB disconnect, device number 56 [ 2018.982355][T25369] vivid-007: Tx RGB Quantization Range: Automatic [ 2018.988823][T25369] vivid-007: Transmit Mode: HDMI [ 2018.993912][T25369] vivid-007: Hotplug Present: 0x00000000 [ 2018.999681][T25369] vivid-007: RxSense Present: 0x00000000 [ 2019.005521][T25369] vivid-007: EDID Present: 0x00000000 [ 2019.010949][T25369] vivid-007: ================== END STATUS ================== [ 2019.219376][T25377] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5119'. [ 2019.380040][T25379] dns_resolver: Unsupported content type (254) [ 2020.241490][T25391] bond1: entered promiscuous mode [ 2020.258608][T25391] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2020.934735][T25408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5128'. [ 2020.943959][T25408] nbd: must specify a device to reconfigure [ 2021.529247][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5131'. [ 2021.538288][T25415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5131'. [ 2021.547231][T25415] netlink: 'syz.1.5131': attribute type 14 has an invalid length. [ 2022.894465][T25434] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5137'. [ 2023.392521][T25434] nbd: socks must be embedded in a SOCK_ITEM attr [ 2023.522105][T24549] block nbd64: NBD_DISCONNECT [ 2023.849131][T25455] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 2024.010048][T25458] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 2024.392091][ T5825] usb 9-1: new low-speed USB device number 57 using dummy_hcd [ 2024.512167][T12051] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 2024.704191][ T5825] usb 9-1: config 1 has an invalid interface descriptor of length 6, skipping [ 2024.721771][ T5825] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.735933][ T5825] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2024.745046][ T5825] usb 9-1: config 1 has no interface number 1 [ 2024.758524][ T5825] usb 9-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 2024.770761][ T5825] usb 9-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 2024.811870][T12051] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 2024.831824][T12051] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2024.842540][ T5825] usb 9-1: config 1 interface 2 has no altsetting 1 [ 2024.849557][T12051] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2024.860150][T12051] usb 6-1: config 1 has no interface number 1 [ 2024.867524][T12051] usb 6-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 2024.879861][ T5825] usb 9-1: string descriptor 0 read error: -22 [ 2024.886330][ T5825] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2024.897269][T12051] usb 6-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 2024.911141][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.942163][ T5825] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2024.949639][ T5825] usb 9-1: MIDIStreaming interface descriptor not found [ 2024.957138][T12051] usb 6-1: config 1 interface 2 has no altsetting 1 [ 2024.980421][T12051] usb 6-1: string descriptor 0 read error: -22 [ 2024.987263][T12051] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2025.020465][T12051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2025.083920][T12051] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2025.121652][T12051] usb 6-1: MIDIStreaming interface descriptor not found [ 2025.208137][T25468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5146'. [ 2025.242606][T25468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5146'. [ 2025.641184][T25468] netlink: 'syz.1.5146': attribute type 14 has an invalid length. [ 2026.584842][ T5905] usb 9-1: USB disconnect, device number 57 [ 2026.625030][T25478] overlayfs: failed to clone lowerpath [ 2026.701722][T16950] usb 6-1: USB disconnect, device number 73 [ 2026.849068][T25483] netlink: 'syz.5.5151': attribute type 7 has an invalid length. [ 2027.093719][T25495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5154'. [ 2027.132318][ T5905] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 2027.133878][T25495] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5154'. [ 2027.312048][ T5905] usb 9-1: Using ep0 maxpacket: 32 [ 2027.583095][ T5905] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2027.706431][ T5905] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2027.722376][ T5905] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2027.732502][ T5905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.509015][ T5905] hub 9-1:4.0: USB hub found [ 2028.752356][ T5905] hub 9-1:4.0: 8 ports detected [ 2028.758103][ T5905] hub 9-1:4.0: insufficient power available to use all downstream ports [ 2028.975575][ T5905] hub 9-1:4.0: hub_hub_status failed (err = -71) [ 2029.016293][ T5905] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 2029.083785][ T5905] usb 9-1: USB disconnect, device number 58 [ 2031.176044][T25536] overlayfs: statfs failed on './file0' [ 2031.592088][T16950] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 2031.933991][T25540] Falling back ldisc for ttyS3. [ 2032.121926][T16950] usb 9-1: Using ep0 maxpacket: 32 [ 2032.148012][T16950] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2032.168987][T16950] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2032.205602][T16950] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 2032.215245][T16950] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.289520][T16950] usb 9-1: Product: syz [ 2032.309677][T16950] usb 9-1: Manufacturer: syz [ 2032.340998][T16950] usb 9-1: SerialNumber: syz [ 2032.379191][T16950] usb 9-1: config 0 descriptor?? [ 2032.408936][T16950] hub 9-1:0.0: bad descriptor, ignoring hub [ 2032.430918][T16950] hub 9-1:0.0: probe with driver hub failed with error -5 [ 2034.590111][T25579] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5172'. [ 2034.654280][T25577] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5172'. [ 2034.748297][ T5825] usb 9-1: USB disconnect, device number 59 [ 2036.401900][T16950] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 2036.817164][T16950] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2036.846458][T16950] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2036.879697][T16950] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2036.928884][T16950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.022722][T25608] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2037.114711][T16950] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2037.923232][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2041.246867][T25640] vlan4: entered promiscuous mode [ 2041.252193][T25640] hsr0: entered promiscuous mode [ 2041.263696][T25640] hsr0: left promiscuous mode [ 2041.413607][T25639] xt_CT: No such helper "pptp" [ 2041.692376][ T5825] usb 6-1: USB disconnect, device number 74 [ 2042.704042][T25658] pimreg: entered allmulticast mode [ 2042.713335][T25653] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5188'. [ 2042.835860][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5188'. [ 2042.880427][T25663] pimreg: left allmulticast mode [ 2043.022263][T25665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5190'. [ 2043.808185][T25653] netlink: 'syz.5.5188': attribute type 14 has an invalid length. [ 2046.987558][T25676] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5195'. [ 2046.996586][T25676] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5195'. [ 2047.005516][T25676] netlink: 'syz.8.5195': attribute type 14 has an invalid length. [ 2047.458502][T25698] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5200'. [ 2047.476035][T25697] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5200'. [ 2047.933249][T25709] netlink: 116 bytes leftover after parsing attributes in process `syz.7.5204'. [ 2048.034521][T25711] netlink: 'syz.1.5205': attribute type 5 has an invalid length. [ 2048.246112][T25714] pimreg: entered allmulticast mode [ 2048.272392][T25716] pimreg: left allmulticast mode [ 2048.644740][T25720] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5207'. [ 2049.082813][T25703] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2050.900510][T25732] vlan3: entered promiscuous mode [ 2050.905768][T25732] hsr0: entered promiscuous mode [ 2050.914339][T25732] hsr0: left promiscuous mode [ 2051.490686][T12897] Bluetooth: hci2: command 0x0406 tx timeout [ 2051.556500][T25731] xt_CT: No such helper "pptp" [ 2054.882120][T25753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5213'. [ 2055.946292][T25767] netlink: 'syz.1.5219': attribute type 5 has an invalid length. [ 2055.987382][T25768] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5218'. [ 2057.215767][ T5825] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 2058.841792][ T5825] usb 9-1: Using ep0 maxpacket: 16 [ 2059.333456][ T5825] usb 9-1: device descriptor read/all, error -71 [ 2060.159744][T25793] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5223'. [ 2060.176521][T25784] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.5223'. [ 2060.514888][T25797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5224'. [ 2063.009477][T16950] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 2063.165803][T25821] ip6t_REJECT: ECHOREPLY is not supported [ 2063.778166][T16950] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2063.795000][T16950] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2063.804200][T16950] usb 6-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 2063.814115][T16950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2064.891868][T25834] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5234'. [ 2064.917021][T25828] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5234'. [ 2064.933349][T16950] usb 6-1: config 0 descriptor?? [ 2064.955548][T16950] usb 6-1: can't set config #0, error -71 [ 2065.012795][T16950] usb 6-1: USB disconnect, device number 75 [ 2065.755476][T25841] netlink: 'syz.5.5238': attribute type 5 has an invalid length. [ 2065.834013][T25846] tmpfs: Bad value for 'mpol' [ 2067.715844][T25861] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5240'. [ 2069.097363][T25878] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5247'. [ 2069.108481][T25877] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5247'. [ 2070.008102][T25888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5250'. [ 2070.564617][T25896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5251'. [ 2071.074585][T25901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5253'. [ 2072.831569][T25921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5257'. [ 2073.952165][T25937] ip6t_REJECT: ECHOREPLY is not supported [ 2074.382244][T25949] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5264'. [ 2074.746979][T25956] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5267'. [ 2074.761961][T25956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5267'. [ 2074.788600][T25956] netlink: 'syz.8.5267': attribute type 14 has an invalid length. [ 2074.810606][T25956] netlink: 'syz.8.5267': attribute type 13 has an invalid length. [ 2077.005632][T25977] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5272'. [ 2077.023473][T25975] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5272'. [ 2077.033150][T25963] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5270'. [ 2077.042258][T25963] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5270'. [ 2077.051163][T25963] netlink: 'syz.8.5270': attribute type 14 has an invalid length. [ 2077.132389][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5274'. [ 2080.489408][T26023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5283'. [ 2080.498659][T26023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5283'. [ 2080.508112][T26023] netlink: 'syz.5.5283': attribute type 14 has an invalid length. [ 2080.844236][T26022] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5285'. [ 2081.044006][T26026] overlayfs: missing 'lowerdir' [ 2081.582065][T26030] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2082.535378][T26060] vlan3: entered promiscuous mode [ 2083.232586][T26059] xt_CT: No such helper "pptp" [ 2083.311492][T26066] overlayfs: missing 'lowerdir' [ 2083.813434][T26077] Cannot find map_set index 0 as target [ 2083.947986][T26079] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5302'. [ 2085.475472][T26085] xt_CT: No such helper "pptp" [ 2085.484989][T26088] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2088.009625][T26094] Bluetooth: hci2: command 0x0406 tx timeout [ 2089.264104][T26122] Cannot find map_set index 0 as target [ 2090.983481][T17860] Bluetooth: (null): Invalid header checksum [ 2091.166753][T17860] Bluetooth: (null): Invalid header checksum [ 2091.214594][T17860] Bluetooth: (null): Invalid header checksum [ 2091.225749][T17860] Bluetooth: (null): Invalid header checksum [ 2091.280348][ T3540] Bluetooth: (null): Invalid header checksum [ 2091.807167][T26145] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 2092.431103][T26150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5321'. [ 2092.440864][T26150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5321'. [ 2092.450637][T26150] netlink: 'syz.5.5321': attribute type 14 has an invalid length. [ 2093.483727][T26166] ip6t_REJECT: ECHOREPLY is not supported [ 2099.323494][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.926422][T26191] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5333'. [ 2101.402750][T26208] input: syz0 as /devices/virtual/input/input86 [ 2101.607900][T26210] vlan3: entered promiscuous mode [ 2101.613144][T26210] hsr0: entered promiscuous mode [ 2101.627195][T26210] hsr0: left promiscuous mode [ 2102.218421][T26209] xt_CT: No such helper "pptp" [ 2104.845864][T26238] vlan4: entered promiscuous mode [ 2104.851032][T26238] hsr0: entered promiscuous mode [ 2104.861264][T26238] hsr0: left promiscuous mode [ 2105.733071][T26234] xt_CT: No such helper "pptp" [ 2107.443630][T26259] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5348'. [ 2107.452799][T26259] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5348'. [ 2107.461853][T26259] netlink: 'syz.5.5348': attribute type 14 has an invalid length. [ 2110.343810][T26291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5354'. [ 2111.160094][T26302] vlan3: entered promiscuous mode [ 2111.727313][T26300] xt_CT: No such helper "pptp" [ 2112.487772][T26315] cgroup: fork rejected by pids controller in /syz8 [ 2113.704506][T26323] pimreg: entered allmulticast mode [ 2113.714422][T26323] pimreg: left allmulticast mode [ 2114.002936][T13358] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2114.115962][T26328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5366'. [ 2114.136741][T26330] pimreg: entered allmulticast mode [ 2114.248432][T13358] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2114.432876][T26330] pimreg: left allmulticast mode [ 2114.557886][T13358] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2114.756707][T13358] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2115.105841][T13358] bridge_slave_1: left allmulticast mode [ 2115.111586][T13358] bridge_slave_1: left promiscuous mode [ 2115.355595][T13358] bridge0: port 2(bridge_slave_1) entered disabled state [ 2115.394254][T13358] bridge_slave_0: left allmulticast mode [ 2115.399953][T13358] bridge_slave_0: left promiscuous mode [ 2115.448935][T13358] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.055700][T26094] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2116.066049][T26094] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2116.078036][T26094] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2116.096045][T26094] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2116.103864][T26094] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2116.113236][T26094] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2118.886448][T26094] Bluetooth: hci2: command tx timeout [ 2120.935184][T26094] Bluetooth: hci2: command tx timeout [ 2121.051939][T13358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2121.073756][T13358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2122.025432][T13358] bond0 (unregistering): Released all slaves [ 2123.002565][T26094] Bluetooth: hci2: command tx timeout [ 2123.833762][ T1213] kernel write not supported for file /sg0 (pid: 1213 comm: kworker/0:3) [ 2124.012889][T13358] bond1 (unregistering): Released all slaves [ 2124.035861][T26342] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2124.215698][T26395] pimreg: entered allmulticast mode [ 2124.221093][T26396] pimreg: left allmulticast mode [ 2124.356264][T26353] lo speed is unknown, defaulting to 1000 [ 2124.424708][T26414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5385'. [ 2125.162181][T26094] Bluetooth: hci2: command tx timeout [ 2125.772119][T13358] hsr_slave_0: left promiscuous mode [ 2125.807450][T13358] hsr_slave_1: left promiscuous mode [ 2125.814489][T13358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2125.842586][T13358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2128.137075][T26465] xt_CT: No such helper "pptp" [ 2128.217306][T13358] team0 (unregistering): Port device team_slave_1 removed [ 2128.290494][T13358] team0 (unregistering): Port device team_slave_0 removed [ 2128.895645][T26353] chnl_net:caif_netlink_parms(): no params data found [ 2128.926642][T26444] veth0_to_team: mtu less than device minimum [ 2128.955096][T26467] vlan4: entered promiscuous mode [ 2128.960234][T26467] hsr0: entered promiscuous mode [ 2128.968256][T26467] hsr0: left promiscuous mode [ 2128.991399][T26466] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2129.392212][T26353] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.441872][T26353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2129.469666][T26353] bridge_slave_0: entered allmulticast mode [ 2129.523267][T26353] bridge_slave_0: entered promiscuous mode [ 2129.531273][T26353] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.538997][T26353] bridge0: port 2(bridge_slave_1) entered disabled state [ 2129.546985][T26353] bridge_slave_1: entered allmulticast mode [ 2129.555123][T26353] bridge_slave_1: entered promiscuous mode [ 2130.297147][T26496] vlan3: entered promiscuous mode [ 2130.302338][T26496] hsr0: entered promiscuous mode [ 2130.309568][T26496] hsr0: left promiscuous mode [ 2130.362263][T26494] xt_CT: No such helper "pptp" [ 2130.511177][T26353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2130.593653][T26353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2130.710930][T26353] team0: Port device team_slave_0 added [ 2130.749235][T26353] team0: Port device team_slave_1 added [ 2130.792423][T13358] IPVS: stop unused estimator thread 0... [ 2130.861455][T26353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2130.957522][T26353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2131.420595][T26353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2131.443078][T26353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2131.450286][T26353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2131.502499][T26353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2131.789432][T26353] hsr_slave_0: entered promiscuous mode [ 2132.452713][T26353] hsr_slave_1: entered promiscuous mode [ 2132.459039][T26353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2132.479984][T26353] Cannot create hsr debugfs directory [ 2132.619450][T26530] veth0_to_team: mtu less than device minimum [ 2135.004322][T26558] veth0_to_team: mtu less than device minimum [ 2135.235280][T26540] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2135.262512][T26540] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2135.412780][T26540] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2136.641987][T26353] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2137.212431][T26094] Bluetooth: hci2: command 0x0c1a tx timeout [ 2137.503337][T26353] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2137.588745][T26353] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2137.633442][T26353] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2137.685697][T26601] x_tables: duplicate underflow at hook 3 [ 2138.663610][T26610] cgroup: fork rejected by pids controller in /syz6 [ 2139.156233][T26615] ip6t_REJECT: ECHOREPLY is not supported [ 2139.899284][T26094] Bluetooth: hci2: command 0x0c1a tx timeout [ 2140.637133][T26353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2141.056680][T26353] 8021q: adding VLAN 0 to HW filter on device team0 [ 2141.223388][T17860] bridge0: port 1(bridge_slave_0) entered blocking state [ 2141.230514][T17860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2141.280856][T17860] bridge0: port 2(bridge_slave_1) entered blocking state [ 2141.288097][T17860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2141.962045][T26094] Bluetooth: hci2: command 0x0c1a tx timeout [ 2142.130916][T26640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5430'. [ 2142.427082][T26353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2143.086740][T26667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5433'. [ 2143.252823][T12897] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2143.278676][T12897] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2143.290341][T12897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2143.303175][T12897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2143.313744][T12897] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2143.322600][T12897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2143.420871][T26353] veth0_vlan: entered promiscuous mode [ 2143.480017][T26353] veth1_vlan: entered promiscuous mode [ 2143.615961][T26656] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2143.625255][T26353] veth0_macvtap: entered promiscuous mode [ 2143.631268][T26656] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2143.639567][T26656] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2143.648551][T26656] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 2143.704046][T26353] veth1_macvtap: entered promiscuous mode [ 2143.865294][T26353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2143.900437][T26353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2143.951848][T26353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2143.963071][T26353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2143.973294][T26353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.002003][T26353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.011972][T26353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2144.035510][T26353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.058042][T26353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2144.094978][T26353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.132883][T26353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.166159][T26353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.189477][T26353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.212333][T26353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2144.245935][T26353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2144.279512][T26353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2144.310587][T26695] netlink: 'syz.5.5435': attribute type 5 has an invalid length. [ 2144.360356][T26353] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.387527][T26353] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.405148][T26353] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.421844][T26353] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2144.448890][T26671] chnl_net:caif_netlink_parms(): no params data found [ 2144.787534][T26671] bridge0: port 1(bridge_slave_0) entered blocking state [ 2144.823269][T26671] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.853138][T26671] bridge_slave_0: entered allmulticast mode [ 2144.875060][T26671] bridge_slave_0: entered promiscuous mode [ 2144.902719][T26671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2144.922364][T26671] bridge0: port 2(bridge_slave_1) entered disabled state [ 2144.929672][T26671] bridge_slave_1: entered allmulticast mode [ 2144.973012][T26671] bridge_slave_1: entered promiscuous mode [ 2145.043357][T25702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2145.245706][T25702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2145.375176][T26671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2145.430246][T26671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2145.562403][T26094] Bluetooth: hci2: command 0x0c1a tx timeout [ 2145.640273][T26671] team0: Port device team_slave_0 added [ 2145.653640][T26671] team0: Port device team_slave_1 added [ 2145.899589][T26094] Bluetooth: hci4: command 0x041b tx timeout [ 2146.659756][T17868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2147.562775][T17868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2147.632698][T26741] xt_CT: No such helper "pptp" [ 2147.905392][T26742] vlan3: entered promiscuous mode [ 2147.910490][T26742] hsr0: entered promiscuous mode [ 2147.918240][T26742] hsr0: left promiscuous mode [ 2148.151774][T26094] Bluetooth: hci4: command 0x041b tx timeout [ 2148.725744][T26671] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2148.736509][T26671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2148.763837][T26671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2148.807661][T26671] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2148.947291][T26671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2149.116097][T26671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2150.143092][T26671] hsr_slave_0: entered promiscuous mode [ 2150.161502][T26671] hsr_slave_1: entered promiscuous mode [ 2150.202274][T26094] Bluetooth: hci4: command 0x041b tx timeout [ 2150.220513][T26671] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2150.228690][T26671] Cannot create hsr debugfs directory [ 2150.992013][T26771] xt_CT: No such helper "pptp" [ 2151.046573][T26774] vlan2: entered promiscuous mode [ 2151.051871][T26774] hsr0: entered promiscuous mode [ 2151.059227][T26774] hsr0: left promiscuous mode [ 2152.287563][T26094] Bluetooth: hci4: command 0x041b tx timeout [ 2152.479067][T26671] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.082250][T26805] xt_CT: No such helper "pptp" [ 2153.120166][T26807] vlan2: entered promiscuous mode [ 2153.125383][T26807] hsr0: entered promiscuous mode [ 2153.133001][T26807] hsr0: left promiscuous mode [ 2153.253998][T26671] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2153.288392][T26768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2153.303004][T26768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2153.330532][T26813] netlink: 'syz.1.5454': attribute type 26 has an invalid length. [ 2153.823805][T26671] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.235269][T26671] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.452053][ T1213] usb 9-1: new low-speed USB device number 62 using dummy_hcd [ 2154.557558][T26671] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2154.597744][T26671] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2154.638245][T26671] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2154.647524][ T1213] usb 9-1: config 1 has an invalid interface descriptor of length 6, skipping [ 2154.679141][ T1213] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2154.701144][T26671] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2154.728460][ T1213] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2154.772924][ T1213] usb 9-1: config 1 has no interface number 1 [ 2154.866621][ T1213] usb 9-1: too many endpoints for config 1 interface 2 altsetting 116: 104, using maximum allowed: 30 [ 2155.022841][ T1213] usb 9-1: config 1 interface 2 altsetting 116 has 0 endpoint descriptors, different from the interface descriptor's value: 104 [ 2155.117313][ T1213] usb 9-1: config 1 interface 2 has no altsetting 1 [ 2155.154239][ T1213] usb 9-1: string descriptor 0 read error: -22 [ 2155.176888][ T1213] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2155.210793][ T1213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2155.243285][T26094] Bluetooth: hci2: command 0x0c1a tx timeout [ 2155.259494][T26671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2155.323249][T26094] Bluetooth: hci4: command 0x041b tx timeout [ 2155.332245][ T1213] usb 9-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 2155.339702][ T1213] usb 9-1: MIDIStreaming interface descriptor not found [ 2155.355236][T26671] 8021q: adding VLAN 0 to HW filter on device team0 [ 2155.369104][T25702] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.376285][T25702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2155.483886][T26833] tmpfs: Unknown parameter 'usrquota؈b6š‡¹ÊÞª‚èZIÃ*‚½Ò¾‹~QEò¦5%Ï’åM|y<Ÿ ðJD [ 2155.483886][T26833] „Ý÷Ï8¹9.~BÜ<†r' [ 2155.688209][T13358] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.695470][T13358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2156.975072][ T5905] usb 9-1: USB disconnect, device number 62 [ 2157.203851][T26671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2157.408955][T26094] Bluetooth: hci4: command 0x041b tx timeout [ 2158.109857][T26873] 9pnet_fd: Insufficient options for proto=fd [ 2158.284441][T26671] veth0_vlan: entered promiscuous mode [ 2158.328743][T26671] veth1_vlan: entered promiscuous mode [ 2158.370449][T26671] veth0_macvtap: entered promiscuous mode [ 2158.382994][T26671] veth1_macvtap: entered promiscuous mode [ 2158.406318][T26671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.417597][T26671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.428588][T26671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.439646][T26671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.456456][T26671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.467386][T26671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.480584][T26671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.491844][T26671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.504544][T26671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2158.515412][T26671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.532469][T26671] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2158.539866][T26861] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2158.545112][T26671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2158.557182][T26671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.562690][T26861] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2158.569581][T26671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2158.586129][T26671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.599678][T26671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2158.611765][T26671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.630537][T26671] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2158.653210][T26671] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2158.964879][T26671] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2159.160641][T26887] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5474'. [ 2159.192553][T26886] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5474'. [ 2159.250018][T26671] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.281005][T26671] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.301530][T26671] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.317512][T26671] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2159.357800][T26896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5476'. [ 2160.442576][T26094] Bluetooth: hci2: command 0x0c1a tx timeout [ 2160.601960][T26094] Bluetooth: hci4: command 0x041b tx timeout [ 2160.764030][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.179093][T13358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2161.202346][T13358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2161.287584][T13358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2161.306587][T13358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2161.353648][T26907] nbd: must specify at least one socket [ 2161.379955][T26911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5481'. [ 2161.400029][T26911] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5481'. [ 2161.420026][T26911] netlink: 'syz.5.5481': attribute type 14 has an invalid length. [ 2161.429570][T26911] netlink: 'syz.5.5481': attribute type 13 has an invalid length. [ 2163.141925][T26708] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 2163.301956][T26708] usb 6-1: Using ep0 maxpacket: 16 [ 2163.319064][T26708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2163.346715][T26708] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2163.359348][T26708] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2163.383434][T26708] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2163.400952][T26708] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2163.411493][T26708] usb 6-1: config 0 descriptor?? [ 2163.811565][T26935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2163.819326][T26935] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2164.894094][T26936] input: syz0 as /devices/virtual/input/input87 [ 2165.017575][T26951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.085848][T26951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.431103][T26936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.481008][T26936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2165.735280][T26094] Bluetooth: hci2: command 0x0c1a tx timeout [ 2165.881935][T26094] Bluetooth: hci4: command 0x041b tx timeout [ 2166.475534][T26708] usbhid 6-1:0.0: can't add hid device: -71 [ 2166.496948][T26708] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2166.528848][T26708] usb 6-1: USB disconnect, device number 76 [ 2169.406196][T26989] pimreg: entered allmulticast mode [ 2169.435562][T26989] pimreg: left allmulticast mode [ 2170.531433][ T29] audit: type=1326 audit(1739729416.969:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27005 comm="syz.7.5510" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f270c38cde9 code=0x0 [ 2170.775934][T27007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5509'. [ 2170.832157][ T5825] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 2170.996489][ T5825] usb 9-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 2171.026603][ T5825] usb 9-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 2171.876766][ T5825] usb 9-1: Product: syz [ 2171.880996][ T5825] usb 9-1: Manufacturer: syz [ 2171.886986][ T5825] usb 9-1: SerialNumber: syz [ 2171.907688][ T5825] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 2172.220426][T27026] FAULT_INJECTION: forcing a failure. [ 2172.220426][T27026] name failslab, interval 1, probability 0, space 0, times 0 [ 2172.380664][T27026] CPU: 0 UID: 0 PID: 27026 Comm: syz.5.5515 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 2172.380685][T27026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2172.380692][T27026] Call Trace: [ 2172.380696][T27026] [ 2172.380702][T27026] dump_stack_lvl+0x241/0x360 [ 2172.380720][T27026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2172.380730][T27026] ? __pfx__printk+0x10/0x10 [ 2172.380745][T27026] ? fs_reclaim_acquire+0x93/0x130 [ 2172.380761][T27026] ? __pfx___might_resched+0x10/0x10 [ 2172.380785][T27026] should_fail_ex+0x40a/0x550 [ 2172.380812][T27026] should_failslab+0xac/0x100 [ 2172.380836][T27026] __kmalloc_noprof+0xdd/0x4c0 [ 2172.380849][T27026] ? tomoyo_encode+0x26f/0x540 [ 2172.380862][T27026] tomoyo_encode+0x26f/0x540 [ 2172.380884][T27026] tomoyo_realpath_from_path+0x59e/0x5e0 [ 2172.380900][T27026] tomoyo_path_number_perm+0x239/0x770 [ 2172.380916][T27026] ? __lock_acquire+0x1397/0x2100 [ 2172.380940][T27026] ? tomoyo_path_number_perm+0x209/0x770 [ 2172.380964][T27026] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2172.381018][T27026] ? __fget_files+0x2a/0x410 [ 2172.381030][T27026] ? __fget_files+0x2a/0x410 [ 2172.381041][T27026] security_file_ioctl+0xc6/0x2a0 [ 2172.381057][T27026] __se_sys_ioctl+0x46/0x170 [ 2172.381075][T27026] do_syscall_64+0xf3/0x230 [ 2172.381095][T27026] ? clear_bhb_loop+0x35/0x90 [ 2172.381120][T27026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2172.381141][T27026] RIP: 0033:0x7f2afc98cde9 [ 2172.381156][T27026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2172.381166][T27026] RSP: 002b:00007f2afd8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2172.381177][T27026] RAX: ffffffffffffffda RBX: 00007f2afcba5fa0 RCX: 00007f2afc98cde9 [ 2172.381184][T27026] RDX: 0000400000000080 RSI: 000000008040451a RDI: 0000000000000004 [ 2172.381191][T27026] RBP: 00007f2afd8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 2172.381196][T27026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2172.381202][T27026] R13: 0000000000000000 R14: 00007f2afcba5fa0 R15: 00007ffc764d92c8 [ 2172.381219][T27026] [ 2172.381237][T27026] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2172.547009][ T5825] vp7045: USB control message 'out' went wrong. [ 2172.781831][ T5825] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 2172.801871][ T5825] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 2172.827207][ T5825] usb 9-1: USB disconnect, device number 63 [ 2172.840713][T27033] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5517'. [ 2173.072013][T27040] pimreg: entered allmulticast mode [ 2173.130408][T27043] pimreg: left allmulticast mode [ 2174.791936][ T5825] IPVS: starting estimator thread 0... [ 2174.911951][T27060] IPVS: using max 26 ests per chain, 62400 per kthread [ 2175.218862][T27064] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5527'. [ 2175.433433][T27070] vlan3: entered promiscuous mode [ 2175.438602][T27070] hsr0: entered promiscuous mode [ 2175.452942][T27070] hsr0: left promiscuous mode [ 2176.050332][T27069] xt_CT: No such helper "pptp" [ 2176.253618][T27074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5529'. [ 2178.802079][T27059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2178.810662][T27059] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2179.657894][T27111] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 2179.666795][T27111] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 2179.675831][T27111] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 2179.966374][T27114] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2180.747838][T27148] vlan3: entered promiscuous mode [ 2180.753033][T27148] hsr0: entered promiscuous mode [ 2180.767949][T27148] hsr0: left promiscuous mode [ 2180.852353][T26094] Bluetooth: hci4: command 0x041b tx timeout [ 2180.858715][T12897] Bluetooth: hci2: command 0x0c1a tx timeout [ 2181.230108][T27146] xt_CT: No such helper "pptp" [ 2181.391801][T16950] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 2183.371511][T27157] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2183.380487][T27157] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2183.497287][T27181] overlayfs: failed to clone upperpath [ 2184.639233][T27192] vlan2: entered promiscuous mode [ 2184.644613][T27192] hsr0: entered promiscuous mode [ 2184.658886][T27192] hsr0: left promiscuous mode [ 2185.132565][T27190] xt_CT: No such helper "pptp" [ 2185.282178][T12897] Bluetooth: hci2: command 0x0c1a tx timeout [ 2185.354352][T27202] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5564'. [ 2185.598416][T27203] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2185.622173][T12897] Bluetooth: hci4: command 0x041b tx timeout [ 2185.832076][T27207] vlan3: entered promiscuous mode [ 2185.837307][T27207] hsr0: entered promiscuous mode [ 2185.851742][T27207] hsr0: left promiscuous mode [ 2186.741933][T27206] xt_CT: No such helper "pptp" [ 2186.909327][T21401] IPVS: starting estimator thread 0... [ 2187.242123][T27218] IPVS: using max 22 ests per chain, 52800 per kthread [ 2190.559552][T27255] netlink: 'syz.7.5578': attribute type 10 has an invalid length. [ 2190.604353][T27255] bridge0: port 3(team0) entered disabled state [ 2190.610919][T27255] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.618343][T27255] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.715826][T27255] bridge0: port 3(team0) entered blocking state [ 2190.722268][T27255] bridge0: port 3(team0) entered forwarding state [ 2190.728967][T27255] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.736178][T27255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2190.743688][T27255] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.750822][T27255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2191.266180][T27255] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2191.282453][T27259] xt_CT: No such helper "pptp" [ 2196.865448][T27296] sp0: Synchronizing with TNC [ 2197.008899][T26094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2197.029687][T26094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2197.045064][T26094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2197.060936][T26094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2197.105327][T26094] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2197.115070][T26094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2197.418066][T24290] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.090314][T27318] xt_CT: No such helper "pptp" [ 2198.296947][T24290] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.427499][T24290] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2199.243999][T12897] Bluetooth: hci5: command tx timeout [ 2199.453697][T24290] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.529160][T27308] chnl_net:caif_netlink_parms(): no params data found [ 2200.635987][T24290] ip6gretap0 (unregistering): left promiscuous mode [ 2201.124783][T24290] bond0 (unregistering): Released all slaves [ 2201.155614][T24290] bond1 (unregistering): Released all slaves [ 2201.166605][T24290] bond2 (unregistering): Released all slaves [ 2201.184401][T24290] bond3 (unregistering): Released all slaves [ 2201.200034][T24290] bond4 (unregistering): (slave team_slave_1): Releasing active interface [ 2201.210681][T24290] team_slave_1: left promiscuous mode [ 2201.221038][T24290] bond4 (unregistering): Released all slaves [ 2201.230885][T24290] bond5 (unregistering): Released all slaves [ 2201.298997][T27308] bridge0: port 1(bridge_slave_0) entered blocking state [ 2201.313336][T27308] bridge0: port 1(bridge_slave_0) entered disabled state [ 2201.320767][T27308] bridge_slave_0: entered allmulticast mode [ 2201.328661][T27308] bridge_slave_0: entered promiscuous mode [ 2201.338227][T12897] Bluetooth: hci5: command tx timeout [ 2201.357976][T27308] bridge0: port 2(bridge_slave_1) entered blocking state [ 2201.376867][T27308] bridge0: port 2(bridge_slave_1) entered disabled state [ 2201.398396][T27308] bridge_slave_1: entered allmulticast mode [ 2201.413523][T27308] bridge_slave_1: entered promiscuous mode [ 2201.489093][T27308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2201.509049][T27308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2201.599593][T27308] team0: Port device team_slave_0 added [ 2201.669602][T27308] team0: Port device team_slave_1 added [ 2201.785578][T24290] hsr_slave_0: left promiscuous mode [ 2201.794416][T24290] hsr_slave_1: left promiscuous mode [ 2201.821519][T24290] veth1_macvtap: left promiscuous mode [ 2201.827253][T24290] veth0_macvtap: left promiscuous mode [ 2201.833444][T24290] veth1_vlan: left promiscuous mode [ 2201.838895][T24290] veth0_vlan: left promiscuous mode [ 2203.213099][T27308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2203.220159][T27308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2203.246895][T27308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2203.268396][T27308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2203.275513][T27308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2203.301606][T27308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2203.407583][T12897] Bluetooth: hci5: command tx timeout [ 2203.444428][T27308] hsr_slave_0: entered promiscuous mode [ 2203.450553][T27308] hsr_slave_1: entered promiscuous mode [ 2203.639548][T24290] IPVS: stop unused estimator thread 0... [ 2204.144744][T27308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2204.164197][T27308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2204.181389][T27308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2204.199858][T27308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2204.316602][T27308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2204.362128][T27308] 8021q: adding VLAN 0 to HW filter on device team0 [ 2204.383086][ T6034] bridge0: port 1(bridge_slave_0) entered blocking state [ 2204.390235][ T6034] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2204.414497][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 2204.421607][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2204.470206][T27308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2204.484197][T27308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2204.663164][T27308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2204.733103][T27308] veth0_vlan: entered promiscuous mode [ 2204.755766][T27308] veth1_vlan: entered promiscuous mode [ 2204.796280][T27308] veth0_macvtap: entered promiscuous mode [ 2204.806188][T27308] veth1_macvtap: entered promiscuous mode [ 2204.822829][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.836220][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.846631][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.857500][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.868131][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.878819][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.890458][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.911852][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.938283][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.950482][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2204.969810][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2204.980704][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.000018][T27308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2205.025753][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.044599][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.065663][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.080650][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.099025][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.110176][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.132301][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.151242][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.172833][T27308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2205.186248][T27308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2205.197515][T27308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2205.210548][T27308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.219482][T27308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.228783][T27308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.238305][T27308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2205.309629][ T6034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2205.323943][ T6034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2205.351157][T17715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2205.359192][T17715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2205.440675][T27418] pimreg: entered allmulticast mode [ 2205.449578][T27418] pimreg: left allmulticast mode [ 2205.482073][T12897] Bluetooth: hci5: command tx timeout [ 2222.204247][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2232.396352][T27308] cgroup: fork rejected by pids controller in /syz1 [ 2233.932158][T26094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2233.942549][T26094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2233.958388][T26094] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2233.977493][T26094] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2233.988253][T26094] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2233.995978][T26094] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2235.146554][T27449] vivid-007: ================= START STATUS ================= [ 2235.180825][T27449] vivid-007: Enable Output Cropping: true [ 2235.193778][T27449] vivid-007: Enable Output Composing: true [ 2235.214639][T27449] vivid-007: Enable Output Scaler: true [ 2235.281975][T27449] vivid-007: Tx RGB Quantization Range: Automatic [ 2235.680937][T27449] vivid-007: Transmit Mode: HDMI [ 2235.722440][T27449] vivid-007: Hotplug Present: 0x00000000 [ 2235.728168][T27449] vivid-007: RxSense Present: 0x00000000 [ 2235.772255][T17715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2235.783672][T27449] vivid-007: EDID Present: 0x00000000 [ 2235.801525][T27449] vivid-007: ================== END STATUS ================== [ 2236.042121][T26094] Bluetooth: hci0: command tx timeout [ 2237.147733][T17715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.584261][T27459] syz.6.5606 (27459): drop_caches: 2 [ 2237.593470][T27459] syz.6.5606 (27459): drop_caches: 2 [ 2238.109978][T12897] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2238.124225][T12897] Bluetooth: hci0: command tx timeout [ 2238.129723][T12897] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2238.931185][T27472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2238.971914][T27472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2238.980640][T27472] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2238.990214][T27472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2239.067149][T17715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2239.331640][T17715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2239.652380][T27439] chnl_net:caif_netlink_parms(): no params data found [ 2240.979937][T27439] bridge0: port 1(bridge_slave_0) entered blocking state [ 2241.000496][T27439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.008983][T27439] bridge_slave_0: entered allmulticast mode [ 2241.013238][T27472] Bluetooth: hci0: command tx timeout [ 2241.017243][T27439] bridge_slave_0: entered promiscuous mode [ 2241.035868][T17715] bridge_slave_1: left allmulticast mode [ 2241.053719][T17715] bridge_slave_1: left promiscuous mode [ 2241.059524][T17715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.081870][T27472] Bluetooth: hci3: command tx timeout [ 2241.132504][T17715] bridge_slave_0: left allmulticast mode [ 2241.138256][T17715] bridge_slave_0: left promiscuous mode [ 2241.179296][T17715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2242.829797][T26094] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2242.843973][T26094] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2242.854218][T26094] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2242.865062][T26094] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2242.875670][T26094] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2242.883725][T26094] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2243.082059][T26094] Bluetooth: hci0: command tx timeout [ 2243.182571][T26094] Bluetooth: hci3: command tx timeout [ 2243.384983][T27523] vivid-007: ================= START STATUS ================= [ 2243.393024][T27523] vivid-007: Enable Output Cropping: true [ 2243.398786][T27523] vivid-007: Enable Output Composing: true [ 2243.404709][T27523] vivid-007: Enable Output Scaler: true [ 2243.410288][T27523] vivid-007: Tx RGB Quantization Range: Automatic [ 2243.416881][T27523] vivid-007: Transmit Mode: HDMI [ 2243.421889][T27523] vivid-007: Hotplug Present: 0x00000000 [ 2243.427557][T27523] vivid-007: RxSense Present: 0x00000000 [ 2243.433309][T27523] vivid-007: EDID Present: 0x00000000 [ 2243.438738][T27523] vivid-007: ================== END STATUS ================== [ 2243.930420][T17715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2243.947700][T17715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2243.965811][T17715] bond0 (unregistering): Released all slaves [ 2243.993868][T27439] bridge0: port 2(bridge_slave_1) entered blocking state [ 2244.001046][T27439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2244.008501][T27439] bridge_slave_1: entered allmulticast mode [ 2244.015279][T27439] bridge_slave_1: entered promiscuous mode [ 2244.663221][T27524] syz_tun: entered allmulticast mode [ 2244.682553][T27526] syz_tun: left allmulticast mode [ 2244.719621][T27532] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5619'. [ 2244.903862][T27439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2244.921859][T26094] Bluetooth: hci4: command tx timeout [ 2245.028274][T27439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2245.242071][T26094] Bluetooth: hci3: command tx timeout [ 2245.249213][T27439] team0: Port device team_slave_0 added [ 2245.302563][T27466] chnl_net:caif_netlink_parms(): no params data found [ 2245.319805][T27439] team0: Port device team_slave_1 added [ 2245.456098][T27439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2245.478312][T27439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2245.527586][T27439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2245.651838][T17715] hsr_slave_0: left promiscuous mode [ 2245.673652][T17715] hsr_slave_1: left promiscuous mode [ 2245.691240][T17715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2245.704050][T17715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2245.747019][T17715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2245.777369][T17715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2245.862769][T17715] veth1_macvtap: left promiscuous mode [ 2245.880811][T17715] veth0_macvtap: left promiscuous mode [ 2245.900444][T17715] veth1_vlan: left promiscuous mode [ 2245.917872][T17715] veth0_vlan: left promiscuous mode [ 2247.002737][T26094] Bluetooth: hci4: command tx timeout [ 2247.008742][T17715] team0 (unregistering): Port device team_slave_1 removed [ 2247.115588][T17715] team0 (unregistering): Port device team_slave_0 removed [ 2247.321953][T26094] Bluetooth: hci3: command tx timeout [ 2248.378931][T27439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2248.386503][T27439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2248.421224][T27439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2248.439832][T27556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 2248.450284][T27556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2248.975484][T27439] hsr_slave_0: entered promiscuous mode [ 2248.984831][T27583] ip6t_REJECT: ECHOREPLY is not supported [ 2249.013365][T27439] hsr_slave_1: entered promiscuous mode [ 2249.084291][T26094] Bluetooth: hci4: command tx timeout [ 2249.320424][T27466] bridge0: port 1(bridge_slave_0) entered blocking state [ 2249.328561][T27466] bridge0: port 1(bridge_slave_0) entered disabled state [ 2249.336364][T27466] bridge_slave_0: entered allmulticast mode [ 2249.343982][T27466] bridge_slave_0: entered promiscuous mode [ 2249.432098][T27466] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.439247][T27466] bridge0: port 2(bridge_slave_1) entered disabled state [ 2249.462393][T27466] bridge_slave_1: entered allmulticast mode [ 2249.469486][T27466] bridge_slave_1: entered promiscuous mode [ 2249.571133][T27466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2249.639047][T27466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2249.660265][T27517] chnl_net:caif_netlink_parms(): no params data found [ 2249.804434][T27466] team0: Port device team_slave_0 added [ 2249.872920][T27466] team0: Port device team_slave_1 added [ 2250.068962][T27466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2250.076739][T27466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2250.103431][T27466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2250.116728][T27466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2250.124595][T27466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2250.182175][T27466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2250.327762][T17715] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.423671][T27517] bridge0: port 1(bridge_slave_0) entered blocking state [ 2250.431428][T27517] bridge0: port 1(bridge_slave_0) entered disabled state [ 2250.454063][T27517] bridge_slave_0: entered allmulticast mode [ 2250.461176][T27517] bridge_slave_0: entered promiscuous mode [ 2250.646059][T27439] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.894622][T17715] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2250.914650][T27517] bridge0: port 2(bridge_slave_1) entered blocking state [ 2250.922163][T27517] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.930009][T27517] bridge_slave_1: entered allmulticast mode [ 2250.940432][T27517] bridge_slave_1: entered promiscuous mode [ 2251.045447][T27439] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.111250][T17715] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.163511][T26094] Bluetooth: hci4: command tx timeout [ 2251.238678][T27439] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.316550][T17715] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.443112][T27439] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.469067][T27466] hsr_slave_0: entered promiscuous mode [ 2251.570017][T27466] hsr_slave_1: entered promiscuous mode [ 2251.578519][T27466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2251.603386][T27466] Cannot create hsr debugfs directory [ 2251.687347][T27517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2251.729253][T27517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2251.939064][T27517] team0: Port device team_slave_0 added [ 2252.119816][T27517] team0: Port device team_slave_1 added [ 2252.419520][T27439] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2252.474901][T27439] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2252.553603][T27439] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2252.604872][T27517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2252.632160][T27517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2252.707477][T27517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2252.747176][T17715] bridge_slave_1: left allmulticast mode [ 2252.762119][T17715] bridge_slave_1: left promiscuous mode [ 2252.772935][T17715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2252.836188][T17715] bridge_slave_0: left allmulticast mode [ 2252.862247][T17715] bridge_slave_0: left promiscuous mode [ 2252.868046][T17715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2252.944795][T17715] bridge_slave_1: left allmulticast mode [ 2252.950555][T17715] bridge_slave_1: left promiscuous mode [ 2252.956752][T17715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2252.969058][T17715] bridge_slave_0: left allmulticast mode [ 2252.983389][T17715] bridge_slave_0: left promiscuous mode [ 2252.989146][T17715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2253.358589][T27700] netlink: 'syz.7.5666': attribute type 10 has an invalid length. [ 2253.392187][T27700] netlink: 55 bytes leftover after parsing attributes in process `syz.7.5666'. [ 2253.744457][T17715] batman_adv: batadv0: Removing interface: gretap1 [ 2254.455553][T17715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2254.466744][T17715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2254.478330][T17715] bond0 (unregistering): Released all slaves [ 2254.786614][T17715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2254.802653][T17715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2254.813112][T17715] bond0 (unregistering): Released all slaves [ 2254.824296][T17715] bond1 (unregistering): Released all slaves [ 2254.836276][T17715] bond2 (unregistering): Released all slaves [ 2254.850099][T17715] bond3 (unregistering): Released all slaves [ 2254.865485][T17715] bond4 (unregistering): Released all slaves [ 2254.880816][T17715] bond5 (unregistering): Released all slaves [ 2254.891163][T17715] bond6 (unregistering): Released all slaves [ 2254.906177][T27439] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2254.925418][T27517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2254.934741][T27517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2254.986641][T27517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2255.577624][T27517] hsr_slave_0: entered promiscuous mode [ 2255.585916][T27517] hsr_slave_1: entered promiscuous mode [ 2255.593504][T27517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2255.601101][T27517] Cannot create hsr debugfs directory [ 2256.286006][T17715] hsr_slave_0: left promiscuous mode [ 2256.294418][T17715] hsr_slave_1: left promiscuous mode [ 2256.300467][T17715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2256.310974][T17715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2256.321957][T17715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2256.329487][T17715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2256.346718][T17715] hsr_slave_0: left promiscuous mode [ 2256.353324][T17715] hsr_slave_1: left promiscuous mode [ 2256.359125][T17715] batman_adv: batadv0: Interface deactivated: dummy0 [ 2256.391912][T17715] batman_adv: batadv0: Removing interface: dummy0 [ 2256.399141][T17715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2256.412342][T17715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2256.426489][T17715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2256.452147][T17715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2256.547916][T17715] veth1_macvtap: left promiscuous mode [ 2256.572073][T17715] veth0_macvtap: left promiscuous mode [ 2256.577926][T17715] veth1_vlan: left promiscuous mode [ 2256.592973][T17715] veth0_vlan: left promiscuous mode [ 2256.646980][T17715] veth1_to_bridge: left promiscuous mode [ 2256.662263][T17715] veth1_macvtap: left promiscuous mode [ 2256.662407][T17715] veth0_macvtap: left promiscuous mode [ 2256.662534][T17715] veth1_vlan: left promiscuous mode [ 2256.662624][T17715] veth0_vlan: left promiscuous mode [ 2258.561947][T12051] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 2258.723658][T12051] usb 9-1: config 253 has an invalid interface number: 154 but max is 0 [ 2258.738195][T12051] usb 9-1: config 253 has no interface number 0 [ 2258.747597][T12051] usb 9-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=bb.94 [ 2258.757399][T12051] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.775536][T12051] usb 9-1: Product: syz [ 2258.779832][T12051] usb 9-1: Manufacturer: syz [ 2258.785013][T12051] usb 9-1: SerialNumber: syz [ 2258.844829][T17715] team0 (unregistering): Port device team_slave_1 removed [ 2258.986564][T17715] team0 (unregistering): Port device team_slave_0 removed [ 2259.058083][T12051] usb_ehset_test 9-1:253.154: probe with driver usb_ehset_test failed with error -32 [ 2259.248099][T12051] usb 9-1: USB disconnect, device number 65 [ 2261.306993][T17715] team0 (unregistering): Port device team_slave_1 removed [ 2261.392733][T17715] team0 (unregistering): Port device team_slave_0 removed [ 2263.130169][T27439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2263.433072][T27439] 8021q: adding VLAN 0 to HW filter on device team0 [ 2263.440318][T27466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2263.505423][T17860] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.512589][T17860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2263.564953][T17860] bridge0: port 2(bridge_slave_1) entered blocking state [ 2263.572113][T17860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2263.653411][T27466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2263.671088][T27466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2263.687840][T27466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2263.921314][T27439] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2263.989006][T27439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2264.398377][T27466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2264.516724][T27439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2264.551115][T27517] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2264.597068][T27517] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2264.652779][T27517] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2264.683044][T27517] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2264.718726][T27466] 8021q: adding VLAN 0 to HW filter on device team0 [ 2264.734802][T17715] IPVS: stop unused estimator thread 0... [ 2264.756041][T17715] IPVS: stop unused estimator thread 0... [ 2264.765062][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.772244][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2264.782554][ T1213] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 2264.803881][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.811031][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2264.954089][T27466] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2264.973537][ T1213] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2265.729959][ T1213] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2265.743033][ T1213] usb 9-1: config 0 descriptor?? [ 2266.047529][T27517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2266.134494][T27517] 8021q: adding VLAN 0 to HW filter on device team0 [ 2266.174014][T25702] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.181218][T25702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2266.264144][ T1213] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 2266.294395][T25702] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.301560][T25702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.465120][T26708] usb 9-1: USB disconnect, device number 66 [ 2266.697994][T27826] ip6t_rpfilter: unknown options [ 2267.370618][T27517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2267.409286][T27439] veth0_vlan: entered promiscuous mode [ 2267.492409][T27466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2267.542632][T27439] veth1_vlan: entered promiscuous mode [ 2267.652269][T27439] veth0_macvtap: entered promiscuous mode [ 2267.698687][T27466] veth0_vlan: entered promiscuous mode [ 2267.728635][T27439] veth1_macvtap: entered promiscuous mode [ 2267.751650][T27466] veth1_vlan: entered promiscuous mode [ 2267.844485][T27439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.889223][T27439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2267.933148][T27439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2267.977560][T27439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.002162][T27439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2268.020551][T27439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.030789][T27439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2268.041903][T27439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.068942][T27439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2268.097776][T27439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2268.128943][T27439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.159020][T27439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2268.186271][T27439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.201854][T27439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2268.241772][T27439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.252293][T27851] input: syz0 as /devices/virtual/input/input88 [ 2268.301087][T27439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2268.377747][T27439] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.411923][T27439] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.430973][T27439] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.462095][T27439] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2268.546110][T27517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2268.574819][T27466] veth0_macvtap: entered promiscuous mode [ 2268.600698][T27466] veth1_macvtap: entered promiscuous mode [ 2268.734405][T27466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2268.757659][T27466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.769946][T27466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2268.782423][T27466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.792845][T27466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2268.803973][T27466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.822648][T27466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2268.839786][T27466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.860185][T27466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2268.884479][T27466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2268.933480][T27466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2269.145062][T27466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2269.162042][T17715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2269.197865][T17715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2269.207890][T27466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2269.238070][T27466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2269.259100][T27466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2269.281824][T27466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2269.301813][T27466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2269.363047][T27466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2269.400065][T27466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2269.624556][T27466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2269.705790][T27466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.722145][T27466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.741514][T27466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.759663][T27466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2269.871162][T17849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2269.911314][T17849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2270.161149][T27517] veth0_vlan: entered promiscuous mode [ 2270.167799][T17715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2270.211874][T17715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2270.285533][T27517] veth1_vlan: entered promiscuous mode [ 2270.382991][T17849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2270.411038][T17849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2270.430184][T27517] veth0_macvtap: entered promiscuous mode [ 2270.485295][T27517] veth1_macvtap: entered promiscuous mode [ 2270.559140][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.593493][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.612559][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.632242][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.649601][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.675036][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.695726][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.717115][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.751900][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.799692][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.842159][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2270.878952][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2270.896613][T27517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2270.968132][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2271.005135][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.040106][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2271.068359][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.098750][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2271.131913][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.161325][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2271.261796][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.271658][T27517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2271.613084][T27517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2271.946932][T27517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2272.014396][T27517] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2272.099570][T27517] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2272.140963][T27517] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2272.175740][T27517] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2274.155197][T17715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.189137][T17715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2274.442695][T17849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2274.450567][T17849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2275.955629][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2277.665091][T27980] bridge0: entered promiscuous mode [ 2277.671360][T27980] bridge0: entered allmulticast mode [ 2279.519047][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.846465][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2279.950448][T27472] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2279.979649][T27472] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2279.995357][T27472] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2280.005971][T27472] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2280.015172][T27472] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2280.022903][T27472] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2280.354677][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.504659][T28038] netlink: 'syz.8.5739': attribute type 6 has an invalid length. [ 2282.182058][T26094] Bluetooth: hci3: command tx timeout [ 2282.523969][ T11] bridge_slave_1: left allmulticast mode [ 2282.529674][ T11] bridge_slave_1: left promiscuous mode [ 2282.565760][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2282.637869][ T11] bridge_slave_0: left allmulticast mode [ 2282.661837][ T11] bridge_slave_0: left promiscuous mode [ 2282.677872][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.946925][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.202070][T26094] Bluetooth: hci3: command tx timeout [ 2285.175272][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2285.189993][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2285.209869][ T11] bond0 (unregistering): Released all slaves [ 2285.226583][T28021] chnl_net:caif_netlink_parms(): no params data found [ 2285.257310][T28043] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.264870][T28043] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.272689][T28043] bridge0: entered allmulticast mode [ 2285.280267][T28074] tipc: Started in network mode [ 2285.285575][T28074] tipc: Node identity 7f000001, cluster identity 4711 [ 2285.293779][T28074] tipc: Enabled bearer , priority 10 [ 2286.305242][T26094] Bluetooth: hci3: command tx timeout [ 2286.437030][T16950] tipc: Node number set to 2130706433 [ 2286.663195][T28021] bridge0: port 1(bridge_slave_0) entered blocking state [ 2286.670337][T28021] bridge0: port 1(bridge_slave_0) entered disabled state [ 2286.708519][T28021] bridge_slave_0: entered allmulticast mode [ 2286.728284][T28021] bridge_slave_0: entered promiscuous mode [ 2286.793137][T28021] bridge0: port 2(bridge_slave_1) entered blocking state [ 2286.830816][T28021] bridge0: port 2(bridge_slave_1) entered disabled state [ 2286.885437][T28021] bridge_slave_1: entered allmulticast mode [ 2286.932564][T28021] bridge_slave_1: entered promiscuous mode [ 2287.305258][T28021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2287.742699][ T11] hsr_slave_0: left promiscuous mode [ 2287.763087][ T11] hsr_slave_1: left promiscuous mode [ 2287.784487][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2287.822002][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2287.872581][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2287.891947][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2287.980396][ T11] veth1_macvtap: left promiscuous mode [ 2288.027916][ T11] veth0_macvtap: left promiscuous mode [ 2288.042787][ T11] veth1_vlan: left promiscuous mode [ 2288.068663][ T11] veth0_vlan: left promiscuous mode [ 2288.362482][T26094] Bluetooth: hci3: command tx timeout [ 2289.750878][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2289.835169][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2290.471587][T28021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2290.722776][T28021] team0: Port device team_slave_0 added [ 2290.958599][T28141] wireguard0: entered promiscuous mode [ 2290.966503][T28141] wireguard0: entered allmulticast mode [ 2291.507159][T28021] team0: Port device team_slave_1 added [ 2291.754348][T28021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2291.761343][T28021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2291.809403][T28105] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 2291.835895][T28021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2291.885284][T28021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2291.929712][T28021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2291.957355][T28021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2292.021998][T28105] usb 6-1: Using ep0 maxpacket: 16 [ 2292.052589][T28105] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2292.067165][T28105] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2292.102343][T28105] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2292.143631][T28105] usb 6-1: config 1 has no interface number 1 [ 2292.161962][T28105] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2292.196413][T28021] hsr_slave_0: entered promiscuous mode [ 2292.221090][T28105] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2292.235998][T28105] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2292.241671][T28021] hsr_slave_1: entered promiscuous mode [ 2292.253414][T28105] usb 6-1: Product: syz [ 2292.257625][T28105] usb 6-1: Manufacturer: syz [ 2292.262806][T28105] usb 6-1: SerialNumber: syz [ 2292.272472][T28021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2292.301892][T28021] Cannot create hsr debugfs directory [ 2292.379311][T28165] netlink: 'syz.8.5764': attribute type 4 has an invalid length. [ 2292.399835][T28165] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.5764'. [ 2292.652232][T28175] ip6t_rpfilter: unknown options [ 2293.583815][T28184] netlink: 'syz.8.5768': attribute type 6 has an invalid length. [ 2294.661919][T28105] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2294.748925][T28105] usb 6-1: USB disconnect, device number 77 [ 2294.982742][T27430] udevd[27430]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2297.191074][T28021] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2297.328178][T28021] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2297.406789][T28021] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2297.495839][T28021] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2298.079329][T28021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2298.150248][T28021] 8021q: adding VLAN 0 to HW filter on device team0 [ 2298.388730][T28021] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2298.399393][T28021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2298.537300][T17846] bridge0: port 1(bridge_slave_0) entered blocking state [ 2298.544513][T17846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2299.294406][T17846] bridge0: port 2(bridge_slave_1) entered blocking state [ 2299.301580][T17846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2300.643333][T28021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2300.784434][T28021] veth0_vlan: entered promiscuous mode [ 2300.934068][T28021] veth1_vlan: entered promiscuous mode [ 2301.009515][T28021] veth0_macvtap: entered promiscuous mode [ 2301.114249][T28021] veth1_macvtap: entered promiscuous mode [ 2301.149976][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2301.193056][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.227672][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2301.261836][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.291771][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2301.322252][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.366055][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2301.391757][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.410199][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2301.431772][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.452146][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2301.481929][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.500622][T28021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2301.571602][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2301.612205][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.643400][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2301.679927][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.751837][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2301.789251][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.820281][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2301.841074][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.851047][T28021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2301.861858][T28021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2301.891956][T28021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2302.158668][T28021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.278519][T28021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.401164][T28021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.492655][T28021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2302.699873][T17715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2302.730975][T17715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2302.806394][T25702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2302.845028][T25702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2312.650922][T27472] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2312.662549][T27472] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2312.673379][T27472] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2312.705780][T27472] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2312.726952][T27472] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2312.736095][T27472] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2312.903194][T28382] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5818'. [ 2312.991966][T12051] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2313.203188][T12051] usb 2-1: Using ep0 maxpacket: 16 [ 2313.287527][T12051] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2313.841961][T12051] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2314.210162][T28391] fuse: Bad value for 'fd' [ 2314.224553][T28373] chnl_net:caif_netlink_parms(): no params data found [ 2314.761958][T27472] Bluetooth: hci5: command tx timeout [ 2314.814746][T12051] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2314.842364][T12051] usb 2-1: config 1 has no interface number 1 [ 2314.848523][T12051] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2314.861586][T12051] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2315.001019][T12051] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2315.010023][T12051] usb 2-1: Product: syz [ 2315.014412][T12051] usb 2-1: Manufacturer: syz [ 2315.019031][T12051] usb 2-1: SerialNumber: syz [ 2315.084378][T28373] bridge0: port 1(bridge_slave_0) entered blocking state [ 2315.091553][T28373] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.124231][T28373] bridge_slave_0: entered allmulticast mode [ 2315.131610][T28373] bridge_slave_0: entered promiscuous mode [ 2315.161605][T28373] bridge0: port 2(bridge_slave_1) entered blocking state [ 2315.413171][T28373] bridge0: port 2(bridge_slave_1) entered disabled state [ 2315.421798][T28373] bridge_slave_1: entered allmulticast mode [ 2315.429226][T28373] bridge_slave_1: entered promiscuous mode [ 2315.535861][T28405] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5823'. [ 2316.125700][T28373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2316.187668][T28373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2316.417356][T28373] team0: Port device team_slave_0 added [ 2316.452306][T28373] team0: Port device team_slave_1 added [ 2316.570814][T12051] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2316.600994][T28373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2316.631762][T28373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2316.662385][T12051] usb 2-1: USB disconnect, device number 4 [ 2316.842091][T27472] Bluetooth: hci5: command tx timeout [ 2316.878382][T28373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2316.892490][T28373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2316.899484][T28373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2316.970713][T28373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2317.704529][T27668] udevd[27668]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2317.981553][T28373] hsr_slave_0: entered promiscuous mode [ 2318.001001][T28373] hsr_slave_1: entered promiscuous mode [ 2318.007737][T28373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2318.037641][T28373] Cannot create hsr debugfs directory [ 2318.161474][T17846] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.292287][T17846] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.404031][T17846] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.533480][T17846] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2318.616734][T28373] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2318.632828][T28373] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2318.652198][T28373] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2318.672637][T28373] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2318.827293][T17846] team0: left allmulticast mode [ 2318.832282][T17846] team_slave_0: left allmulticast mode [ 2318.838912][T17846] bridge0: port 3(team0) entered disabled state [ 2318.872516][T17846] bridge_slave_1: left allmulticast mode [ 2318.878202][T17846] bridge_slave_1: left promiscuous mode [ 2318.884020][T17846] bridge0: port 2(bridge_slave_1) entered disabled state [ 2318.902164][T17846] bridge_slave_0: left allmulticast mode [ 2318.907864][T17846] bridge_slave_0: left promiscuous mode [ 2318.916976][T17846] bridge0: port 1(bridge_slave_0) entered disabled state [ 2318.924522][T27472] Bluetooth: hci5: command tx timeout [ 2318.939531][ T2971] [ 2318.939723][T17846] ================================================================== [ 2318.942673][ T2971] ============================= [ 2318.950343][T17846] BUG: KASAN: slab-out-of-bounds in dev_deactivate_queue+0xb4/0x1b0 [ 2318.955532][ T2971] WARNING: suspicious RCU usage [ 2318.963117][T17846] Read of size 8 at addr ffff88802a7b4190 by task kworker/u8:14/17846 [ 2318.963134][T17846] [ 2318.963143][T17846] CPU: 0 UID: 0 PID: 17846 Comm: kworker/u8:14 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 2318.963161][T17846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2318.963172][T17846] Workqueue: netns cleanup_net [ 2318.963194][T17846] Call Trace: [ 2318.963201][T17846] [ 2318.963210][T17846] dump_stack_lvl+0x241/0x360 [ 2318.963230][T17846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2318.963247][T17846] ? __pfx__printk+0x10/0x10 [ 2318.963271][T17846] ? _printk+0xd5/0x120 [ 2318.963292][T17846] ? __virt_addr_valid+0x183/0x530 [ 2318.963314][T17846] ? __virt_addr_valid+0x183/0x530 [ 2318.963338][T17846] print_report+0x169/0x550 [ 2318.963361][T17846] ? __virt_addr_valid+0x183/0x530 [ 2318.963381][T17846] ? __virt_addr_valid+0x183/0x530 [ 2318.963400][T17846] ? __virt_addr_valid+0x45f/0x530 [ 2318.963420][T17846] ? __phys_addr+0xba/0x170 [ 2318.963441][T17846] ? dev_deactivate_queue+0xb4/0x1b0 [ 2318.963464][T17846] kasan_report+0x143/0x180 [ 2318.963486][T17846] ? dev_deactivate_queue+0xb4/0x1b0 [ 2318.963512][T17846] dev_deactivate_queue+0xb4/0x1b0 [ 2318.963535][T17846] dev_deactivate_many+0x14a/0xc90 [ 2318.963559][T17846] ? dev_deactivate_many+0x2e3/0xc90 [ 2318.963582][T17846] ? __pfx_dev_deactivate_many+0x10/0x10 [ 2318.963605][T17846] ? notifier_call_chain+0x3cc/0x3f0 [ 2318.963627][T17846] __dev_close_many+0x1a4/0x350 [ 2318.963647][T17846] ? __pfx___dev_close_many+0x10/0x10 [ 2318.963667][T17846] ? mark_lock+0x9a/0x360 [ 2318.963689][T17846] dev_close_many+0x24e/0x4c0 [ 2318.963709][T17846] ? __pfx_dev_close_many+0x10/0x10 [ 2318.963730][T17846] unregister_netdevice_many_notify+0x52d/0x1f10 [ 2318.963760][T17846] ? net_generic+0x1f/0x240 [ 2318.963778][T17846] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2318.963804][T17846] ? unregister_netdevice_queue+0x26b/0x370 [ 2318.963827][T17846] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2318.963854][T17846] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 2318.963879][T17846] cleanup_net+0x76d/0xd60 [ 2318.963899][T17846] ? __pfx_cleanup_net+0x10/0x10 [ 2318.963922][T17846] ? process_scheduled_works+0x9c6/0x18e0 [ 2318.963941][T17846] process_scheduled_works+0xabe/0x18e0 [ 2318.963970][T17846] ? __pfx_process_scheduled_works+0x10/0x10 [ 2318.963992][T17846] ? assign_work+0x364/0x3d0 [ 2318.964012][T17846] worker_thread+0x870/0xd30 [ 2318.964129][T17846] ? __kthread_parkme+0x169/0x1d0 [ 2318.964157][T17846] ? __pfx_worker_thread+0x10/0x10 [ 2318.964175][T17846] kthread+0x7a9/0x920 [ 2318.964194][T17846] ? __pfx_kthread+0x10/0x10 [ 2318.964215][T17846] ? __pfx_worker_thread+0x10/0x10 [ 2318.964233][T17846] ? __pfx_kthread+0x10/0x10 [ 2318.964252][T17846] ? __pfx_kthread+0x10/0x10 [ 2318.964272][T17846] ? __pfx_kthread+0x10/0x10 [ 2318.964290][T17846] ? _raw_spin_unlock_irq+0x23/0x50 [ 2318.964306][T17846] ? lockdep_hardirqs_on+0x99/0x150 [ 2318.964323][T17846] ? __pfx_kthread+0x10/0x10 [ 2318.964343][T17846] ret_from_fork+0x4b/0x80 [ 2318.964361][T17846] ? __pfx_kthread+0x10/0x10 [ 2318.964381][T17846] ret_from_fork_asm+0x1a/0x30 [ 2318.964404][T17846] [ 2318.964411][T17846] [ 2318.968246][ T2971] 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 Not tainted [ 2318.976374][T17846] Allocated by task 12952: [ 2318.976401][T17846] kasan_save_track+0x3f/0x80 [ 2318.976422][T17846] __kasan_kmalloc+0x98/0xb0 [ 2318.976439][T17846] __kmalloc_node_noprof+0x290/0x4d0 [ 2318.976452][T17846] __kvmalloc_node_noprof+0x72/0x190 [ 2318.976466][T17846] alloc_netdev_mqs+0x92d/0x1210 [ 2318.976485][T17846] rtnl_create_link+0x2f9/0xc90 [ 2318.976504][T17846] rtnl_newlink_create+0x210/0xa40 [ 2318.976520][T17846] rtnl_newlink+0x17cc/0x1d30 [ 2318.976535][T17846] rtnetlink_rcv_msg+0x791/0xcf0 [ 2318.976550][T17846] netlink_rcv_skb+0x206/0x480 [ 2318.976571][T17846] netlink_unicast+0x7f6/0x990 [ 2318.976589][T17846] netlink_sendmsg+0x8de/0xcb0 [ 2318.976610][T17846] __sock_sendmsg+0x221/0x270 [ 2318.976625][T17846] __sys_sendto+0x363/0x4c0 [ 2318.976643][T17846] __x64_sys_sendto+0xde/0x100 [ 2318.976659][T17846] do_syscall_64+0xf3/0x230 [ 2318.978961][ T2971] ----------------------------- [ 2318.989944][T17846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2318.989971][T17846] [ 2318.989976][T17846] The buggy address belongs to the object at ffff88802a7b4000 [ 2318.989976][T17846] which belongs to the cache kmalloc-cg-512 of size 512 [ 2318.989990][T17846] The buggy address is located 16 bytes to the right of [ 2318.989990][T17846] allocated 384-byte region [ffff88802a7b4000, ffff88802a7b4180) [ 2318.990011][T17846] [ 2318.990017][T17846] The buggy address belongs to the physical page: [ 2318.990037][T17846] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a7b4 [ 2318.990052][T17846] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2318.990065][T17846] memcg:ffff8880284c2101 [ 2318.990073][T17846] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2318.990088][T17846] page_type: f5(slab) [ 2318.990107][T17846] raw: 00fff00000000040 ffff88801b04f140 ffffea00017a8800 dead000000000002 [ 2318.990122][T17846] raw: 0000000000000000 0000000000100010 00000000f5000000 ffff8880284c2101 [ 2318.990137][T17846] head: 00fff00000000040 ffff88801b04f140 ffffea00017a8800 dead000000000002 [ 2318.990152][T17846] head: 0000000000000000 0000000000100010 00000000f5000000 ffff8880284c2101 [ 2318.990168][T17846] head: 00fff00000000002 ffffea0000a9ed01 ffffffffffffffff 0000000000000000 [ 2318.990182][T17846] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 2318.990192][T17846] page dumped because: kasan: bad access detected [ 2318.990210][T17846] page_owner tracks the page as allocated [ 2318.990217][T17846] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5211, tgid 5211 (udevd), ts 25843202294, free_ts 25784241750 [ 2318.990246][T17846] post_alloc_hook+0x1f4/0x240 [ 2319.000602][ T2971] net/sched/sch_generic.c:1285 suspicious rcu_dereference_protected() usage! [ 2319.005106][T17846] get_page_from_freelist+0x3651/0x37a0 [ 2319.005130][T17846] __alloc_frozen_pages_noprof+0x292/0x710 [ 2319.005148][T17846] alloc_pages_mpol+0x311/0x660 [ 2319.005167][T17846] allocate_slab+0x8f/0x3a0 [ 2319.005183][T17846] ___slab_alloc+0xc27/0x14a0 [ 2319.005197][T17846] __slab_alloc+0x58/0xa0 [ 2319.005211][T17846] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 2319.005224][T17846] kmalloc_reserve+0x111/0x2a0 [ 2319.005243][T17846] __alloc_skb+0x1f3/0x440 [ 2319.005258][T17846] alloc_skb_with_frags+0xc3/0x820 [ 2319.005275][T17846] sock_alloc_send_pskb+0x91a/0xa60 [ 2319.005294][T17846] unix_dgram_sendmsg+0x5e8/0x1df0 [ 2319.005314][T17846] __sock_sendmsg+0x221/0x270 [ 2319.005329][T17846] sock_write_iter+0x2d7/0x3f0 [ 2319.005343][T17846] vfs_write+0xacf/0xd10 [ 2319.008605][ T2971] [ 2319.008605][ T2971] other info that might help us debug this: [ 2319.008605][ T2971] [ 2319.011516][T17846] page last free pid 5198 tgid 5198 stack trace: [ 2319.016260][ T2971] [ 2319.016260][ T2971] rcu_scheduler_active = 2, debug_locks = 1 [ 2319.021339][T17846] free_frozen_pages+0xe04/0x10e0 [ 2319.026040][ T2971] 3 locks held by kworker/u8:6/2971: [ 2319.030131][T17846] __put_partials+0x160/0x1c0 [ 2319.035401][ T2971] #0: [ 2319.040308][T17846] put_cpu_partial+0x17c/0x250 [ 2319.040332][T17846] __slab_free+0x290/0x380 [ 2319.040348][T17846] qlist_free_all+0x9a/0x140 [ 2319.040365][T17846] kasan_quarantine_reduce+0x14f/0x170 [ 2319.040380][T17846] __kasan_slab_alloc+0x23/0x80 [ 2319.040398][T17846] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 2319.040418][T17846] kmalloc_reserve+0xa8/0x2a0 [ 2319.040437][T17846] __alloc_skb+0x1f3/0x440 [ 2319.040453][T17846] netlink_sendmsg+0x634/0xcb0 [ 2319.040474][T17846] __sock_sendmsg+0x221/0x270 [ 2319.040489][T17846] ____sys_sendmsg+0x53a/0x860 [ 2319.040508][T17846] __sys_sendmsg+0x269/0x350 [ 2319.040526][T17846] do_syscall_64+0xf3/0x230 [ 2319.040542][T17846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2319.040564][T17846] [ 2319.040570][T17846] Memory state around the buggy address: [ 2319.040581][T17846] ffff88802a7b4080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2319.040593][T17846] ffff88802a7b4100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2319.040605][T17846] >ffff88802a7b4180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2319.040614][T17846] ^ [ 2319.040623][T17846] ffff88802a7b4200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2319.040635][T17846] ffff88802a7b4280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2319.040644][T17846] ================================================================== [ 2319.099475][T17846] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2319.099493][T17846] CPU: 0 UID: 0 PID: 17846 Comm: kworker/u8:14 Not tainted 6.14.0-rc2-syzkaller-00303-gad1b832bf1cf #0 [ 2319.099513][T17846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 2319.099525][T17846] Workqueue: netns cleanup_net [ 2319.099552][T17846] Call Trace: [ 2319.099560][T17846] [ 2319.099569][T17846] dump_stack_lvl+0x241/0x360 [ 2319.099590][T17846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2319.099606][T17846] ? __pfx__printk+0x10/0x10 [ 2319.099628][T17846] ? preempt_schedule+0xe1/0xf0 [ 2319.099647][T17846] ? vscnprintf+0x5d/0x90 [ 2319.099669][T17846] panic+0x349/0x880 [ 2319.099690][T17846] ? check_panic_on_warn+0x21/0xb0 [ 2319.099711][T17846] ? __pfx_panic+0x10/0x10 [ 2319.099735][T17846] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 2319.099751][T17846] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2319.099767][T17846] ? print_report+0x502/0x550 [ 2319.099791][T17846] check_panic_on_warn+0x86/0xb0 [ 2319.099811][T17846] ? dev_deactivate_queue+0xb4/0x1b0 [ 2319.099834][T17846] end_report+0x77/0x160 [ 2319.099854][T17846] kasan_report+0x154/0x180 [ 2319.099875][T17846] ? dev_deactivate_queue+0xb4/0x1b0 [ 2319.099901][T17846] dev_deactivate_queue+0xb4/0x1b0 [ 2319.099924][T17846] dev_deactivate_many+0x14a/0xc90 [ 2319.099947][T17846] ? dev_deactivate_many+0x2e3/0xc90 [ 2319.099970][T17846] ? __pfx_dev_deactivate_many+0x10/0x10 [ 2319.099993][T17846] ? notifier_call_chain+0x3cc/0x3f0 [ 2319.100015][T17846] __dev_close_many+0x1a4/0x350 [ 2319.100041][T17846] ? __pfx___dev_close_many+0x10/0x10 [ 2319.100060][T17846] ? mark_lock+0x9a/0x360 [ 2319.100082][T17846] dev_close_many+0x24e/0x4c0 [ 2319.100101][T17846] ? __pfx_dev_close_many+0x10/0x10 [ 2319.100123][T17846] unregister_netdevice_many_notify+0x52d/0x1f10 [ 2319.100152][T17846] ? net_generic+0x1f/0x240 [ 2319.100170][T17846] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 2319.100195][T17846] ? unregister_netdevice_queue+0x26b/0x370 [ 2319.100218][T17846] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 2319.100244][T17846] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 2319.100270][T17846] cleanup_net+0x76d/0xd60 [ 2319.100291][T17846] ? __pfx_cleanup_net+0x10/0x10 [ 2319.100314][T17846] ? process_scheduled_works+0x9c6/0x18e0 [ 2319.100332][T17846] process_scheduled_works+0xabe/0x18e0 [ 2319.100361][T17846] ? __pfx_process_scheduled_works+0x10/0x10 [ 2319.100383][T17846] ? assign_work+0x364/0x3d0 [ 2319.100403][T17846] worker_thread+0x870/0xd30 [ 2319.100427][T17846] ? __kthread_parkme+0x169/0x1d0 [ 2319.100449][T17846] ? __pfx_worker_thread+0x10/0x10 [ 2319.100467][T17846] kthread+0x7a9/0x920 [ 2319.100487][T17846] ? __pfx_kthread+0x10/0x10 [ 2319.100508][T17846] ? __pfx_worker_thread+0x10/0x10 [ 2319.100526][T17846] ? __pfx_kthread+0x10/0x10 [ 2319.100546][T17846] ? __pfx_kthread+0x10/0x10 [ 2319.100568][T17846] ? __pfx_kthread+0x10/0x10 [ 2319.100587][T17846] ? _raw_spin_unlock_irq+0x23/0x50 [ 2319.100603][T17846] ? lockdep_hardirqs_on+0x99/0x150 [ 2319.100619][T17846] ? __pfx_kthread+0x10/0x10 [ 2319.100640][T17846] ret_from_fork+0x4b/0x80 [ 2319.100659][T17846] ? __pfx_kthread+0x10/0x10 [ 2319.100680][T17846] ret_from_fork_asm+0x1a/0x30 [ 2319.100702][T17846] [ 2319.103844][T17846] Kernel Offset: disabled