last executing test programs: 26m22.117232747s ago: executing program 2 (id=68): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x1, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) 26m21.220723124s ago: executing program 2 (id=73): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8e", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed", 0x99}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 26m20.908726122s ago: executing program 2 (id=75): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x8000000000000000, 0xffffffffffffffff, 0x3, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 26m18.450298775s ago: executing program 0 (id=79): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) 26m17.04030848s ago: executing program 0 (id=80): r0 = syz_open_dev$dri(0x0, 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xf32, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{0xbffffffd, 0x1, 0xffffffff, 0x4, 'syz1\x00', 0x1f}, 0x2, 0x10000000, 0x5, 0x0, 0x0, 0x4ff, 'syz0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r4, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 26m16.23989545s ago: executing program 3 (id=81): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a784", 0xa, 0x0, &(0x7f0000002400)={0x2, 0x1, @multicast1}, 0x10) 26m16.138765706s ago: executing program 0 (id=82): openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 26m15.866695549s ago: executing program 1 (id=83): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 26m15.782755676s ago: executing program 3 (id=84): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="022e1da8e8d15d70f7b9a30310c77c07fce305305e5a59148612011e87f3d2f88273f1dfcdded1e783076d0d2f", 0x2d}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) syncfs(0xffffffffffffffff) 26m15.622834687s ago: executing program 1 (id=85): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56fa8e", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed", 0x99}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 26m15.411110136s ago: executing program 3 (id=86): unshare(0x22020600) bind(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @multicast2}, 0x0, 0x1, 0x0, 0x2}}, 0x80) 26m15.107470084s ago: executing program 0 (id=87): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="f4f20f01f1b8010000000f01d9670f01ca66bad004b005ee0fc76826c4c285ba0f0f01cf66baa100b8fa000000ef0f35", 0x30}], 0x1, 0x29, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, &(0x7f0000000080)=[{&(0x7f00000016c0)="27031c00160014000000002f06afacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c36505968f28a488a8401688a8fc1480ffaa7585283a2c2da93510fcc826b10c3b3ccb2e1a3de2e549fb2fccd96a9f5e4d5573f5fde1945dd4e631ac0cf6742d79135dc7626a127b11cce50b1d626c0add12b8564655ecf4b37c1acb61d171708974e8ef3bde8af180fa182cf54f5605997fb370f05443a27ab9b693a86a90423c7a7297c2ccfd07fdfbc24f42d0a723daa6975f20109e2cf10080f1c72b3bc15b5b8da6700cf210b3750a7eda5145994437ccddc97158806b984865b3c0c801", 0xf1}, {&(0x7f0000000540)="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", 0xe69}], 0x2}, 0x20000004) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x7ff, 0x0, 'queue1\x00'}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000600)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast1, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="12000010000000002900000004000000ff00000000000000180000000000000029000000040000003200000000000000"], 0x30}}], 0x1, 0x240240e0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 26m14.825479796s ago: executing program 2 (id=88): sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900"], 0xe0}}, 0x0) 26m14.782786793s ago: executing program 3 (id=89): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 26m14.781504647s ago: executing program 1 (id=90): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0x68) 26m14.638799639s ago: executing program 2 (id=91): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000210001000000000000000000e000000100000000000000006142", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 26m14.385061028s ago: executing program 3 (id=92): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 26m13.816129337s ago: executing program 2 (id=93): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}, 0x40000002) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008002000fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 26m13.779048812s ago: executing program 0 (id=94): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f", 0xc, 0x0, &(0x7f0000002400)={0x2, 0x1, @multicast1}, 0x10) 26m13.431746699s ago: executing program 1 (id=95): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 26m13.325484442s ago: executing program 1 (id=96): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="022e1da8e8d15d70f7b9a30310c77c07fce305305e5a59148612011e87f3d2f88273f1dfcdded1e783076d0d2f", 0x2d}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x8, 0x3, 0x7ffffdbd}]}) syncfs(0xffffffffffffffff) 26m13.285847335s ago: executing program 0 (id=97): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r3], 0x20) 26m13.01519211s ago: executing program 1 (id=98): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x8000000000000000, 0xffffffffffffffff, 0x3, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 26m11.043297108s ago: executing program 3 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) 26m6.41391739s ago: executing program 32 (id=70): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x4, 0x1000, 0x2, 0x5}, 0x7, 0x0, 0x0, 0xf, 0x27, 0xf, 0x2, 0x18, 0x1, 0x7, {0x1, 0x19, 0x9, 0xb, 0x6, 0xcf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x6a, 0x6, 0x0, 0x0) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="41fb3578bf8a"}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x10000000, 0x4, 0x4, 0x3}, 0x6fb}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000280)={0x58000}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) 25m58.426930868s ago: executing program 33 (id=93): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c}}], 0x20}, 0x40000002) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008002000fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 25m57.96435866s ago: executing program 34 (id=97): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x40000, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) socket(0x10, 0x803, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$inet(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES8=r3], 0x20) 25m57.873909047s ago: executing program 35 (id=98): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r5, 0x0, 0x2000fb) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r7 = msgget$private(0x0, 0x4a0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c000280060001000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r7, 0x2, 0x0) msgsnd(r7, &(0x7f0000000440)=ANY=[], 0xe3, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x8000000000000000, 0xffffffffffffffff, 0x3, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 25m55.931270307s ago: executing program 36 (id=99): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) 21m33.255114927s ago: executing program 5 (id=535): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$eJzs3AuYjlW7OPB1r7UexjTpbZLDsO51P7xpaJkkySGnHJIkCUlOCUmTJAmJcZY0JCHHSXIYkuQwjUnjfD7knDT5pEmSkJBk/S/V3r5v9327vf/f9//b1577d13rsm7Pc9/vWnPPNe963uua+bbXmHot69duRkTinwK//ZMihIgRQowQQlwnhAiEEBXjK8Zfvl5AQco/9yLsX6t5+tVeAbuauP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zGv2PU88u7gz//zMn7//18kt9zULzeVu7H3fyOF+5+3cf/zNu5/3sb9z9u4/3kb9/9/v1r/yTXuf97G/WcsL7vanz/zuLrjan//McYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLG877K7QQ4t/m/zDh5z+7gTHGGGOMMcYYY//T+PxXewWMMcYYY4wxxhj7fw+EFEpoEYh8Ir+IEQVErLhGxIlrRUFxnYiI60W8uEEUEjeKwqKIKCqKiQRRXJQQRqCwgkQoSopSIipuEqXFzSJRlBFlxS3CiXIiSdwqyovbRAVxu6go7hCVxJ2isqgiqopq4i5RXdQQNUUtUVvcLeqIuqKeqC/uEQ3EvaKhuE80EveLxuIB0UQ8KJqKh0Qz0Vy0EA+LluIR0Uo8KlqLNqKtaCfa/1/lvyj6iZdEfzFApIiBYpAYLIaIoWKYGC5GiJfFSPGKGCVeFalitBgjXhNjxetinHhDjBcTxETxppgkJospYqqYJqaLNPGWmCHeFjPFO2KWmC3miLkiXcwT88W7YoF4TywU74tF4gOxWCwRS8UykSE+FJliucgSH4kV4mORLVaKVWK1WCPWinVivdggNopNYrPYIraKbWK72CE+ETvFLrFb7BF7xT6xX3wqDojPxEHxucgRX/w388/9h/zeIECABAkaNOSDfBADMRALsRAHcVAQCkIEIhAP8VAICkFhKAxFoSgkQAKUgBKAgEBAUBJKQhSiUBpKQyIkQlkoCw4cJEESlIfboAJUgIpQESpBJagMVaAKVINqUB2qQ02oCbWhNtSBOlAP6sE9cA/cCw2hITSCRtAYGkMTaAJNoSk0g2bQAlpAS2gJraAVtIbW0BbaQntoDx2gA3SEjtAZOkMX6AJdoSskQzJ0g27QHbpDD+gBPaEn9IJe0Bv6QB94EV6El+AlGAB15EAYBINgCAyBYTAchsPLMBJegVfgVUiF0TAGXoPX4HUYB2dhPEyAiTARqsvJMAWmAsnpkAZpMANmwEyYCbNgNsyGuZAO82A+zIcF8B68B+/DIvgAPoAlsASWQQZkQCYshyzIghVwDrJhJayC1bAG1sIaWA8bYD1sgs2wCbbCVtgO2+ET+AR2wS7YA3tgH+yDT+FT+Aw+g1TIgRw4BIfgMByGI3AEciEXjsJROAbH4DgchxNwAk7CKTgNp+AMnIGzcA7Ow3m4ABfgIjyf8HWLfWU2pgp5mZZa5pP5ZIyMkbEyVsbJOFlQFpQRGZHxMl4WkoVkYVlYFpVFZYJMkCVkCYkSJclQlpQlZVRGZWlZWibKRFlWlpVOOpkkk2R5WV5WkBVkRXmHrCTvlJVlFdnJVZPVZHXZ2dWUtWRtWVvWkXVlPVlf1pcNZAPZUDaUjWQj2Vg2lk3kg7KpHAjDoLm83JmWcjS0kmOgtWwj28p28nV4THaQ46Cj7CQ7yyfkBBgPXWUHlyyflt3kFOgun5VT4TnZU06HXvIF2Vv2kX3li7Kf7Oj6ywFyFgyUg+RcGCKHymFyuFwAdeXljtWTr8pUOVqOka/JZfC6HCffkOPlBDlRviknyclyipwqp8npMk2+JWfIt+VM+Y6cJWfLOXKuTJfz5Hz5rlwg35ML5ftykfxALpZL5FK5TGbID2WmXC6z5EdyhfxYZsuVcpVcLdfItXKdXC83yI1yk9wst8itcpvcLnfIT+ROuUvulnvkXrlP7pefygPyM3lQfi5z5BfykPyLPCy/lEfkVzJXfi2Pym/kMfmtPC6/kyfk9/KkPCVPyx/kGfmjPCvPyfPyJ3lB/iwvyl/kJemlUKCkUkqrQOVT+VWMKqBi1TUqTl2rCqrrVERdr+LVDaqQulEVVkVUUVVMJajiqoQyCpVVpEJVUpVSUXWTKq1uVomqjCqrblFOlVNJ6lZVXt2mKqjbVUV1h6qk7lSVVRVVVVVTd6nqqoaqqWqp2upuVUfVVfVUfXWPaqDuVQ3VfaqRul81Vg+oJupB1VQ9pJqp5qqFeli1VI+oVupR1Vq1UW1VO9VePaY6qMdVR9VJdVZPqC7qSdVVPaWS1dOqm3pGdVfPqh7qOdVTPa96qRdUb9VH9VW/qEvKq/5qgEpRA9UgNVgNUUPVMDVcjVAvq5HqFTVKvapS1Wg1Rr2mxqrX1Tj1hhqvJqiJ6k01SU1WU9RUNU1NV2nqLTVDva1mqnfULDVbzVFzVbqap4b9XmnhfyH/7b+TP+rXV9+udqhP1E61S+1We9RetU/tV/vVAXVAHVQHVY7KUYfUIXVYHVZH1BGVq3LVUXVUHVPH1HF1XJ1QJ9RJdUr9pH5QZ9SP6qw6p86pn9QFdUFd/P1rIDRoqZXWOtD5dH4dowvoWH2NjtPX6oL6Oh3R1+t4fYMupG/UhXURXVQX0wm6uC6hjUZtNelQl9SldFTfpEvrm3WiLqPL6lu00+V0kr71n87/s/W11+11B91Bd9QddWfdWXfRXXRX3VUn62TdTXfT3XV33UP30D11T91L99K9dW/dV/fV/XQ/3V/31yk6RQ/Sg/UQPVQP08P1CP2yHqlH6lF6lE7VqXqMHqPH6rF6nB6nx+vxeqKeqCfpSXqKnqKn6Wk6TafpGXqGnqln6ll6lp6j5+h0na7n6/l6gV6gF+qFepFepBfrxXqpXqozdIbO1Jk6S2fpFXqFztYr9Uq9Wq/Wa/VavV6v1xv1Rr1Zb9Zb9VadrXfoHXqn3ql36916r96r9+v9+oA+oA/qgzpH5+hD+pA+rA/rI/qIztW5+qg+qo/pY/q4Pq5P6BP6pD6pT+vT+ow+o8/qs/q8Pq8v6Av6or6oL+lLl499gQxkoAMd5AvyBTFBTBAbxAZxQVxQMCgYRIJIEB/EB4WCG4PCQZGgaFAsSAiKByUCE2BgAwrCoGRQKogGNwWlg5uDxKBMUDa4JXBBuSApuDUoH9wWVAhuDyoGdwSVgjuDykGVoGpQLbgrqB7UCGoGtYLawd1BnaBuUC+oH9wTNAjuDRoG9wWNgvuDxsEDQZPgwaBp8FDQLGgetAgeDloGjwStgkeD1kGboG3QLmj/L63v/dkij7v+ZoBJMQPNIDPYDDFDzTAz3IwwL5uR5hUzyrxqUs1oM8a8Zsaa180484YZbyaYieZNM8lMNlPMVDPNTDdp5i0zw7xtZpp3zCwz28wxc026mVfj90O3WWjeN4vMB2axWWKWmmUmw3xoMs1yk2U+MivMxybbrDSrzGqzxqw168x6s8FsNJvMZrPFbDXbzHazw3xidppdZrfZY/aafWa/+dQcMJ+Zg+Zzk2O+MIfMX8xh86U5Yr4yueZrc9R8Y46Zb81x8505Yb43J80pc9r8YM6YH81Zc86cNz+ZC+Znc9H8Yi4Zf/lwf/ntHTVqzIf5MAZjMBZjMQ7jsCAWxAhGMB7jsRAWwsJYGItiUUzABCyBJfAyQsKSWBKjGMXSWBoTMRHLYll06DAJk7A8lscKWAErYkWshJWwMlbGqlgV78K7sAbWwFpYC+/Gu7Eu1sX6WB8bYANsiA2xETbCxtgYm2ATbIpNsRk2wxbYAltiS2yFrbA1tsa22BbbY3vsgB2wI3bEztgZu2AX7IpdMRmTsRt2w+7YHXtgD+yJPbEX9sLe2Bv7Yl/sh/2wP/bHFEzBQTgIh+AQHIbDcASOwJE4EkfhKEzFVByDY3AsjsVxOA7H4wSciG/iJJyMU3AqTsPpmIZpOANn4EycibNwFs7BOZiO6Tgf5+MCXIALcSEuwkW4GBfjUlyKGZiBmZiJWZiFK3AFZmM2rsJVuAbX4DpchxtwA27CTbgFt+A23IY7cAfuxJ24G3fjXtyL+3E/HsADeBAPYg7m4CE8hIfxMB7BI5iLuXgUj+IxPIbH8TiewBN4Ek/iaTyNZ/AMnsWzeB7P4wX8GS/iL3gJPcZYKWLtNTbOXmsL2utsjC1g/zouaovZBFvclrDGFrZF/iZGa22iLWPL2luss+Vskr31D3FlW8VWtdXsXba6rWFr/iFuYO+1De19tpG939a39/xN3Ng+YJvYR2xT+6htZtvYFradbWkfsa3so7a1bWPb2na2i33SdrVP2WT7tO1mn/lDnGmX2w12o91kN9sD9jN73v5kj9lv7QX7s+1vB9gR9mU70r5iR9lXbaod/Yd4on3TTrKT7RQ71U6z0/8Qz7FzbbqdZ+fbd+0C+94f4gz7oV1ks+xiu8Qutct+jS+vKct+ZFfYj222XWlX2dV2jV1r19n1/77W1Xar3Wa32/32U7vT7rK77R671+77Nb68j4P2c5tjv7BH7Tf2sP3SHrHHba79+tf48v6O2+/sCfu9PWlP2dP2B3vG/mjP2nO/7v/y3n+wv9hL1ltBQJIUaQooH+WnGCpAsXQNxdG1VJCuowhdT/F0AxWiG6kwFaGiVIwSqDiVIENIlohCKkmlKEo3UWm6mRKpDJWlW8hROUqiW6k83UYV6HaqSHdQJbqTKlMVqkrV6C6qTjWoJtWi2nQ31aG6VI/q0z3UgO6lhnQfNaL7qTE9QE3oQWpKD1Ezak4t6GFqSY9QK3qUWlMbakvtqD09Rh3ocepInagzPUFd6EnqSk9RMj1N3egZ6k7PUg96jnrS89SLXqDe1If60ovUj16i/jSAUmggDaLBNISG0jAaTiPoZRpJr9AoepVSaTSNoddoLL1O4+gNGk8TaCK9SZNoMk2hqTSNplMavUUz6G2aSe/QLJpNc2gupdM8mk/v0gJ6jxbS+7SIPqDFtISW0jLKoA8pk5ZTFn1EK+hjyqaVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoE9oJ+2i3bSH9tI+2k+f0gH6jA7S55RDX9Ah+gsdpi/pCH1FufQ1HaVv6Bh9S8fpOzpB39NJOkWn6Qc6Qz/SWTpH5+knukA/00X6hS6RJxFCKEMV6jAI84X5w5iwQBgbXhPGhdeGBcPrwkh4fRgf3hAWCm8MC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Ulg5vDhPDMmHZ8JbQheXCpPDWsHx4W1ghvD2sGN4RVgrvDCuHVcJH7q8W3hVWD2uENcNaYe3w7rBOWDesF9YP7wkbhPeGDcP7wkbh/WGF8IGwSfhg2DR8KGwWNg9bhA+HLcNHwlbho2HrsE3YNmwXtg8fCzuEj4cdw05h5/CJsEv4ZNg1fCpMDp8Ou4XP/On1lHBgOCgcHA4Ovb9PLY0ui2ZEP4xmRpdHs6IfRVdEP45mR1dGV0VXR9dE10bXRddHN0Q3RjdFN0e3RLdGt0W3R72vn184cNIpp13g8rn8LsYVcLHuGhfnrnUF3XUu4q538e4GV8jd6Aq7Iq6oK+YSXHFXwhmHzjpyoSvpSrmou8mVdje7RDe4+W8HiHIuybVz7V1718E97jq6Tq6ze8I94Z50T7qn3FPuadfNPeO6u2ddD/ec6+med8+7F1xv18f1dS+6fu4l198NcCkuxQ1yg9wQN8QNc8PcCDfCjXQj3Sg3yqW6VDfGjXFj3Vg3zo1z4914N9FNdJPcJDfFTXHT3DSX5tLcDDfDzXQz3Sw3y81xc1y6S3fz3Xy3wC1wC91CtyhxkVvsFrulbqnLcBku02W6LJflVrgVLttlu1VulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb7Xa7vW6v2+/2uwPugDvoDrocl+MOuUPusDvsjrivXK772h1137hj7lt33H3nTrjv3Ul3yp12P7gz7kd31p1z591P7oL72V10v7hLzru0yFuRGZG3IzMj70RmRWZH5kTmRtIj8yLzI+9GFkTeiyyMvB9ZFPkgsjiyJLI0siySEfkwkhlZHsmKfBRZEfk4kh1ZGVkVWR1ZE1kb8b74ztCX9KV81N/kS/ubfaIv48v6W7zz5XySv9WX97f5Cv52X9Hf4Sv5O31lX8VX9Y/61r6Nb+vb+fb+Md/BP+47+k6+s3/Cd/FP+q7+KZ/sn/bd/DO+u3/W9/DP+Z7+ed/Lv+B7+z6+r3/R9/Mv+f5+gE/xA/0gP9gP8UP9MD/cj/Av+5H+FT/Kv+pT/Wg/xr/mx/rX/Tj/hh/vJ/iJ/k0/yU/2U/xUP81P92n+LT/Dv+1n+nf8LD/bz/Fzfbqf5+f7d/0C/55f6N/3i/wHfrFf4pf6ZT7Df+gz/XKf5T/yK/zHPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+J3+l1+t9/j9/p9fr//1B/wn/mD/nOf47/wh/xf/GH/pT/iv/K5/mt/1H/jj/lv/XH/nT/hv/cn/Sl/2v/gz/gf/Vl/zp/3P/kL/md/0f/iL/GvpDHGGGOM/ZeoP7k+8O/8n/x9XDZICHHtrmK5/7HmlsK/zYfKhC4RIcTTA3o1/7dRp05KSsrv92YrEZRaIoSIXMnPJ67EK0Vn8aRIFp1E+b+7vqGyzwX6k/rRO4SI/aucGHElvlL/tn9Q/7EnJmZWCs/H/yf1lwiRWOpKTgFxJb5Sv8I/qF+kw5+sv8CXaUJ0/KucOHElvlI/STwunhHJf3MnY4wxxhhjjDH2m6Gyao8/e36+/HyeoK/k5BdX4j97PmeMMcYYY4wxxtjV91yfvk89lpzcqQdPeMITnvz75Gr/ZGKMMcYYY4z9q1059F/tlTDGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3nX/48/J3a198gYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xdbf8nAAD//yx2QLk=") stat(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)) 20m30.015830039s ago: executing program 5 (id=535): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f3, &(0x7f0000001580)="$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") stat(&(0x7f0000002ac0)='./file0\x00', &(0x7f0000002b00)) 20m28.889755116s ago: executing program 5 (id=599): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x5422) 20m28.688349291s ago: executing program 5 (id=601): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) 20m27.213501312s ago: executing program 5 (id=603): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 20m27.053244105s ago: executing program 5 (id=605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 20m10.496953006s ago: executing program 37 (id=605): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 18m35.342445187s ago: executing program 8 (id=735): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2077) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000061c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2264590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65bf667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a9645044d3010bd77ed18fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601b1bbf5792b2a641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd74874ffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c3d00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, &(0x7f00000000c0)='!', 0xb7f40}]) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) dup3(r2, r0, 0x0) 18m34.697957014s ago: executing program 8 (id=736): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 18m31.579729305s ago: executing program 8 (id=738): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 18m28.711720356s ago: executing program 8 (id=746): io_setup(0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x124f400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 18m28.518892786s ago: executing program 8 (id=747): bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x0, 0x2c, 0x0, @remote, @local}}}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x4) 18m24.436846425s ago: executing program 8 (id=755): io_setup(0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x124f400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc9) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) 4m8.659445015s ago: executing program 9 (id=2140): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r2, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000080)='user_id', 0x0, 0xffffffffffffff9c) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xc0) syz_usb_connect(0x1, 0x24, &(0x7f0000000ec0)=ANY=[@ANYBLOB], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r4, &(0x7f0000001e80)=""/96, 0x60) 3m55.33848314s ago: executing program 9 (id=2159): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000000000000000000000000000313e87218d64fdb7000000000002"], 0x80}, 0x1, 0x7}, 0x4008000) 3m54.979590673s ago: executing program 9 (id=2160): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x20}) socket$kcm(0x2, 0xa, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_socket_connect_nvme_tcp() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='illinois', 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 3m53.573961897s ago: executing program 9 (id=2161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0xa, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/stat\x00', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0xf, 0x8000) 3m52.148809205s ago: executing program 9 (id=2162): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000000c0)={{0xec, 0x8e}, 'port1\x00', 0x22, 0x60428, 0x0, 0x6, 0x0, 0x400, 0x9, 0x0, 0xf, 0x6c}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_procfs(0xffffffffffffffff, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004015}, 0x800) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40000) 3m50.701138441s ago: executing program 9 (id=2164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40380, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, 0x0, 0x0, 0x800) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) r3 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 3m33.011664525s ago: executing program 38 (id=2164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40380, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, 0x0, 0x0, 0x800) bind$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) r3 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0x9, 0xffffffff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) gettid() mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 12.307849828s ago: executing program 4 (id=2449): socket$inet6_udp(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x12) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) 10.741793998s ago: executing program 4 (id=2450): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x50, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) fcntl$setlease(r1, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x40488c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) socket(0x2c, 0x3, 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) socket$inet6(0xa, 0x6, 0xfff) 8.511571358s ago: executing program 7 (id=2459): socket$inet6_udp(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x12) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) 6.630354735s ago: executing program 7 (id=2460): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$l2tp6(r2, 0x0, 0x0, 0x4008000, 0x0, 0x0) read$alg(r2, &(0x7f0000000000)=""/35, 0x23) 4.634866432s ago: executing program 7 (id=2462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), 0x0}, 0x20) read(0xffffffffffffffff, &(0x7f0000001180)=""/4083, 0xff3) syz_open_dev$hidraw(&(0x7f0000000000), 0x7, 0x581003) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004180)="1e50580b212925c68bfb42bea851daa6f51321320bef2d72341e7597ccf41367f400a66f28214c64f9e28f8329999658e71ccd68d81e5fcd581eedf06fc25148568ee32168a1dfb17d0b4e0008ab82000760c1540f817f34c0af4e7cb50ae182b92cdff861074c9769f3d2f4a5d025205db18fb2ed68a35230a49f61474116d9286de2f5e0c1d3855cf4363ce4a075716a420c888c17cfdb6606d38bc79add436742e8d0d286a9a21b3b54e2df18e9f8a225296799dc4f238aa2c69b6664900a7231940f9c7f490bae3a8a43e6428dcbb19e31204e79472d72a62e8afcfae3d0e808d5e13df78feb3fa105ac798001b134a21f40f3adf050a54cdafa28501b3294219d8be8610887bbc4655ebb24c9c53343b8d85d152d82ef79ca9aba915d1a7fbc67ab58b3647a5d5608a71ca078eca37febecd9aa967e2dd2f24c6fa543f96e4b0de71f1e4f639ba2ccbcee17bea469237727340d18a2f8043542bc7df2054f5e157e66a165dace51418a81fae69e43288dd92e9041dd4fb5c3fa0b72e6948980e1f9d96085faca392e75f1afe4dda3e2c37439ffd718c21a08abda79c5d7c5e1f37505e56a0c416211ce7339b1c70fcb3ebedf42a53037bea4ad6394417f8811279d047fc2817c21264d0b79028b753deb252328bf1fc6a223e9985c03fc1bc118a56f604d8c1074e3c73c2d571671c04411ddea726dea2fd5ef266847febc4a411de3fc50ec46dac6ef6594dc8ba86f70dfb6f9eb9d6d1553cf7a8e6a2339b6f26787b8a18c3a1e31c2293091affbe84a7ab266a0aed384a15c4e826f73441233d5e07302c4fac44eb81c518547f653d5b3ba53bba0484beae5bddd5dddf4c12e995159d4a39e3ac2de949724e8197191216d94149af943e80e7f9562db9eea98b6fa7af53bbfdf38ec94a2cbceb157e9b917392ddd18b8299d3842f83b6b86032c1518b15423101a11565c79cc37873602f684192bbc8fdec7d855bb6bf4efc4a0c62cda0e230ab3497d89b59f3118c41406a8d2f3251b836d8e22532bf95832cce7f6ad1b14fddf088a0ecd6d3e274aa4bc3f3cb393e3ffab611a71bf5959901798878d8da83f11b4080f60e924e5b2dbf93220da8f0c752d53f69f4ebc3c7e0c5eff049ad8f859391107591bc26ad641e1cee5133369a82ebc0c0179b7d1ca87724152df4fd8301add4f33a41664522783d1c4a810d4be770937831a6894dfbd14c2da7764adaaa60a86a29120ac998cae7edbc41d68d57d70f2b1a3a5801ce9d4d10e71f102eb05aef781065b8ad6716190f8220db12ca892d79b3a19be3f08d8679cc980e47418b5f7e6615ee3ad37392ebba9585953d78e4961c92b4c059da35c5fe77dfd1a60c1bff3ff9481c8f230070929c3e704bfbc641d3e1f12119e748ca29d2c5491741d73fff60dbdcd6cccbe0f70361ca8ba814fe5934f329c4f89274c7d15a5b172e413e1818a971870593db7c54c4cec7549498fe9fb4b82b75bbcb49cfcb55981a75681158ca862a2351e1fcb3dfbe1f295150374dcdb0f46a12f5bf6871730e55c14237239fce3a772e4ae3d0e25c85782244eefef57813623d4bd0b82d7c4230ce5c32b8ad97395b7ff5f488db77d243475aadb4713142144500b16e24f2bfead01a2ad8bf0fbce50747fe1f6925e39871e6bc6188e60b6e56355f3e65c6a48f9181e928dee72f95b9307e4146aca32f513d5da238d7dfe910dd259e41b38e76eb2317a3bbd6e7231b7f6592b660c9af5249b92e92c38c26c2543c808fcd499618833cf9609cc29d7a26abb5656f2c9b615af6b7c11e9e3857d133380502dfe16fb1c1d1b863493d4a352080df46c8ac8a07fd5704f37de9c334cdbcfff966afefee9c102bf5f895f2eafd9b77f22e8a3fa817a6ebe744999e33a33c81d036b006282429c277fcb86dee2eed987c292ffcdd47dcbca137b2e0071567c20d9d067e30e72d5a1337b6943af4c17f705181aac337f6709e6d295bc9a3740e6f08f2c8e906c461e55f6f02a633e7f8b7ee80bae7a5a7e55786d10a354cfba26ac3b89bbc3812a6bb5e387aa0b66c8a5d4737f7c3387266cac86bc360b6b92be11d5b897a4f587bd192b7d6dd1f0c2b998a8da2055d6fb57a742444029e85b166bbb92762af61cbf9e99536548517a34a46670fdc24c8ed512a491736beaa0ca6ea7c19d770e4e2a49221140276c8dd327bc4778c5486a2023d7f0348bcf0628552d49bba01357394168e6a55c10c2d4bf52ce1c3d08d4135ed41502cbdc2e48f3405ca3f08f383b2b4008a853705070d785bbe6f6d274387609f3d25bf8938bfaa7a6e14e5f15e33a6cb9e6c5bea36995231af6cd09bd58588e381ddfab027178ac6e9bc1c028caab1bf0b487d73321d985a42f036d485665f7254c21eb55b071dafc2e20b45661fdea51bfe063f4827e2f60d8abb2d9aca2d9b745b58e3e8cc9e05842a8bd609a0263861c7f982210e3464a6273ec099bde5e7c8883b440edb745aa7ccde1c7f726f7b6c4221f7ab94ff2d9fe3d43857c7583fda9582fade47c9e7f8f90503b00cf6d37985880556bfc64ba96789a9bcb29da2fe49a0b87c5bb966f79f30005d893558fe78db63512c34a51e44d893f90fcad8d296d650d966e21db02ebd412a03d35777fbd21332012aa550b0e6da1211eb0be1bdbd3c17e6fee80d7041158a9cc4aad45db69edff15c24825b7bfae4dc2d6a006c195bd39d3942203b8cfc91de1b8bce7f7972b25591ca6f0162f7f9c1344fe2be850f4368dd9e827729f94c822ebd5083afa72184371a8d0abec7e69dd2ceac3165c83ce53e5136e4a80530d270b1d6692cc8643a4e38c8cc210c7476c971f2054bf7f139f0fd4dacfb90b5e92cf89dfc6033fbed5c2f424d64c373f64379a0a93dc4627f5d9ae9c8067ae3a60fd2e090f20d48158fc1bb217b7bde7878ba44303ea3f6640b5fc5f8bff57b5f7a64801d55dc41f6d95b6c550ef58ad1ad795b8cfe8cca1cd55c17cdb6a48dd294f13d67ae79ab2fdde1e9d4e7aa92444cea8e2695eeca1c8d347cd195d97ea4330f0e58768a7e83ab76646206f327b81bc7f3815e191422d5f7ee8390ff8efb5a87bfd1684697d8ca2b05f0c8ce327f2f6ba88c425e01f65b6bf97804e6baadd1bed519c38c1ccbc48c0dff9e6d80bd215bd3100ce866cbfe952f72fc0d0b9d69612b081b9c619f16edce07808d8ab9b5f28fd12943efeef137f4d4ceada72625c4ca7f887e15899433fd74817107056b71baaca1cb3b198d2f115d92cae3429b6f67b6e885fc45655b1594f591350141842e3974ead9d61b03ec36f7851bf4b0da723db26fa22ac8a186f4b959b3614732eccb5154b7c65171184a617e67ea4d19cb8d849a21c94a753febf60e7be6127f96b0527cc16507c6eafee8a7a78927b670063bec9e9058269c067b529c0c573158bf00f2e637ea9305a462647c5d110a40cef4af4548c7f43cc71789ff49d43d1e962231bd79e67a49c331e2c215d697678aaf746f3c9bbc1cd052170895a9c37c9255db630ba3d20c5f05290a4557f5a989aedcd9b2e080f0ab6dd0d928f779cd4453ff299ad147294b04226b963584720943db9981a9603957dcc87eeb7618834f7edbe6e32826bb177dddf325b2bc055a53c34f62241a39d0257968c60147a0cd8f157b3a969c4fcd9a2673b5b317fd4b01d915180ee3d01d436bfbd576a2efce35b399a328165e72956f42e059e53f5cff5d3213f593ce8d1dd564ab63fdc30941e7097f54244d3666d9b47bc9030098cdaa924136b2e8566ab72010336bf6aeba325099e01e2f5bfbe6a21660e75eae8b52e9bf9356e80499ed3629d67c973f4bbebc2aa4efc1f36ba56c944b0194bd1fcd518b6bd05f316dd4270f0054cdfd696990ec71188db2b9c0bb3ba4b81bf32cd46f1e72183413422ce1161d5b86f7a2c30fbfbadf04819afcdc33b0b74b358afbd7f3c5e737f20936a18b01ee00c46755c1e4eda2e83e4e876650aa4b2246db8b97bb7f36165984fe8b148195cc0242ba9f4e07538d35ed2106c2272c4fbc59e0b4922854a3d04b14e029b842e9169ee1c8064003c8aebafa9211aa4112783c4b3d2de7158aeff39c64ae520491d1182a66cf3316f15147f128001acba4ab8f4e3c7eda79b932d79beaf5ffe73c85739770bd5522f9efeb76bbd0fab5a9a91e6c6d194b6712d8b5bf47f9595da2aff333294b30bb915972f1d7834391fa1bc96d87f6afe4dbb7f1d79b8f13d1b1f739d132695256cf47e9155d4ec5706af9e9f7f9f9131d1ef90545dd127cfd672ce6030c59a187bc9677ce89f2105e1a7ba6f81bc7b3f7962c1b9a36a060cf5d6d674865be7e0fba79e4cb4c78126968a038d6826d90fa733a45472d101416ed88123e973b8d7b852b728f43e31a2b2f7aef1c7d8fcf07fefb06c65a0e4bf470a3bb838b85d9519fa7f2a6bb25be3a5c3cf228637176896b956739d6182a2d808144233e6544923d08bdf6c2275a676ee5a4679c9ae97ce716daa0b72957bb9933c0fa88d31b2a3753694b51ae1dfd323e6e88af8f9125304d5bd74c3273ea83df6cb80f852fa9e9a847f89fa1de88aa920d35472edf0f38af3ee7ad3b7106ab3c02d2ecec2aed1b3291a6535482147a8f91dc22692c3abd39ff093590babc2f252c3a91ea0742691aefb76c3df9cbabf28fcfc29fa0998c4683adf8606ea79d563a6312b0b775eb01c1883e81a2058c6d3ac8c3d19edd41284e1bca5cdcd056d219d9b2f3761ebd3cfb0082c1c8200a0a5c814d1953b18ec7586395513e9122c23deedc285ed38999e7e2fa0ac5873a0b9f8387417d0153a8eea421bd03cefeb382c41d41145ec7aa2ccd8a70635c646c1cebdead9b6aebb1f7390b43cd2669a1a033b593ee66a2c447e172ee559777e314758ca127befa7278497509f10713d120269eff8369c3fb37fdf8e6739652c02a99d5e6aaba89ed44bc96f1a67069c2bc74048a35d06070a056e7c80725b22a8a3f41b755d42ff2ce8cac534bcea9ee171289778c162a98a0aada305664553d818953ed512a1b1eca37a0b59b9c7b9f35a90b034b41f30f485b313c0258c356c3c269b2a5832ddce95d17426363fcc64e7d2216386e152a4dab6a8fcd37da40da13c2d6009517b272c8230fcf3f5ce00d58dafe9100580695d255b5bf491cd9ba59b6801ff4ffa5242e835ada12e4a14405420551378b38643b1c44167c7f378a1531be4b97891cf159dd9e8740d4869aa4275c2910866e413b1c257eec9158ce2dc3749bdd51b98a91efbee2c64b3376a00b5602c766fd29237f33344d34060993a80588ef0f3b250e0623140427a6e3590f2a88d7b337d406e3e15915661e3a590eedf71ce74b2167703f739069732503125ce19d27994e202aba407e0d0876c6a22aaccc63867ffced5e1ada33c1e5811e73874ad2631769d98f4e463e78d48cd7ea0273e121e6f596a242ad94d639a0ae84afb0b5cf733cb1a966dde38e9260e64e50e5981433733c254bec5d068b6c0dda1879bff779ef062ccb6b21dcbfcff87b982d56dbb48e32c46d4caf574cdd1a7df5faf6b13d52a0356066802f6a07e6d0d2925fd9443e87e9147d4e89014d18a7dcf8c4841d842ba5ce914b3107e7bd7b1db7e7dec1d69c4ac6a1aedf479a4612582567499c84acb5461cc1dac70de18867567045915ae072f23300c6da16d4bc6440992bf8bf7e697f78603492c1f69a956499aa70df5aa117c2c70651efeced4499e12f2ca445d5d6fb837df8b1b43a1bdc1fafd2b32a1bc1545f2d3f05b6258470b79b7468d350f47d9a5e6bcb77b93e0128172fae5b800fa808faecd9170dba72f49178debdadd7f4c81f158b680468dfb3844c2f8ffd6800bc0aa11bd872648b8e38cf1da392899129ee9fdf495ef433988a3f1a9491c9370a6785cac333bd8b2caf36e5ba351d20a36319a69fbff123d7e01e44a513a95d2cce9c9c2e1f3ef7ccad74bece4520febe289cc423294ce4bb475c4083ead51b815889d2e65e8b75be7da1279c5b93d38b6928fe2a660747da9b682fef86c83ace15d0090332bff28ee470bd9ef6ff616a8aec0bc52053ed5d9a75d64e05aa540f0ae8ba2e1fbb1bd2dae59d04c98da91b8534156488caa6537bb11c63389c122f0a1e0417b70172d938c341e66e59056a58b0d71b4f1483abeca97a9be7551c248db76af5f090e148fc2e039fb4a565c64343ebc70e2aa1be25f8f90e313e3177fd2227d849a19068f1a466d9d07b650932c14336753ec801fe25ac6bce6ccd631f6fae42d0a9c6a6afe418a9d2d7f7bfeee45db4d5b7aead1394dd980ce2b1f6dd13c82b4f70b6e34b1ccfee0be19cebbf2f72ea8f04c70bf010b0d40a318df53994aa9e3b92fcec2526526d5f5606f84118725e8e7bd241630be3ebf998333ac846336c20610e0907fe18654fed585a281db6e9d5d51fcbd31308a6b3744dfa6bd7f4b3922918717b2e917c1ca6f58506f2a6353bc7a2ea94b181e7cb7b3c78532f7a37bcae31efeff06dc1a9456dfce6080f8c8f0d71b86a93b3c4e89169cc346f95837f9fbdaf949c27e41b6fb550b74fae058b652a9bc9db78b4a7776c7c183330d90ba81bc0dada4ecee52cc1bf70aed661e425b1304ba4de829b24ca9238388778baf5e663766708fd604c071bceeae76780e1c1edc65e4f98a98ae0e29cb7fb6b7f48ac4015e2527b7001aad11c687bdc841f243b2f7aaccd560cad978cdb07e54f0a830fcb0dc4435dab6b6c9518ee09826f3b871b4fcaf42686506e8e1bebb60c0998718858b629091a4ba6446ed5f36d4438ee175c932c1e9d1a16f6c44bd618cd91bd4081e15dc7a22266972ffb1e0086e46fcdcba28c4138284e1ed9d8f4b0b186209bcc4ddd7b9ef6a5a15159e04ef488cd480fdfe499d40373ccff0b423c718c66391822aab449fbf4b83034c5d76cfd48257ada2d9e6f6ec049717dbdb0a748058156d042324092e1a03d97b993b1fb8781e73d776af75bcbdd74b68d63670efa039d9b3cdb908f13431f53c68d3e91c31cf0f2f0428c6084d329d0e7f8622ace0bd9edf43e1f513436887f09861106d2391ef083b9b189a7f33430c57e148815ef96447d38bb15d058d0118d24170c8135677992a01b0e7adc336bbea35915eb6b23f9addc2e363f52ebc0b16dbab6bc1665f0c30bbb1128ba1c9a15641437840ae73aaf1dab88d93669aecadaefd991ddf155fb8f55a76bfb31ce36b0fd6309962028f1d2583079669128576092f2e92c8fa83775bec9beebd4cd7a414cfd80cb50752fd1e23e3b9183d8e1175c4d6f8931cee61f023467ccacf3d6eeffee6876c6e6f6c483f465b2efb6b9856391dcb7033e9bbd7ec8f6112a655467c591eb87efb8e6ccc8e441d3ecf1359ae52f698db75273de456cc382e892d3564aee366f34e50e6007ed17d4712f6c4d130df499848e957b9a8b696767618ab191d1d1ac77ddd5b07b70fa46d99624fb3f54c3cabe18ef91f34d5e18e048cc731a8a82f83e54d9deb736dd55b3aaec907536dc39bacca338cd00d2f75e47400a09fadc9e68d160c4b69c2d8135e92e34885f56fea7a490abbb4315a44e5eedd56def949fa244b396fab23c74e93b50a5fc848e5951245f8832c6be854247346109048b41e2b8b151b1551e1dc1d83abe7a3b14dd6e8c83bcebf924ffed69e1beb9098de16a8f86984168db97c7caf45dc35fac341953382efcd2134f9be4676b0b842da904e0ba3aa4146a576b0aa458e092e9fb67d442cad04cb130df2f3da7274b5881b06216cdda3a24f3b7ae7a30439313a14962737dced82699423ee00385288f4b79d6c0e61e8c2ba70f10f54cad2963c8e9ef38dd1c474e7efd67099bfa29586155faf4802116906d6ca6d60b04ed9783eb3ea7563f3c09f736ab934ecb3342a627bf0ab289f1476b7657dd5100dc23eb9eec9b124e5e9f61c1fb6732bc9e3eed4324ed4bc19babe5b5cb8304d1ef150c0934f4dea5659e7fd097dea9bbd7ffb2530f007dce72199a5603a4ff17b52ae132a5c47c72da1f3aa7e73c5ef5fe360c180d9a3f45b53f9e9ea834d1884ad78f47561eec4fbd640d55fe8bf1c0dcf5dc5d1b35905f6638a477f3450a5df4a0bd413c66690463004f14d55be156615e4a6087b624f90bee4519c04689f486c48a40a681190231f6d1e79e8d6a2ebc09ea8830370772348b164ffbc4439561df928a05843faf049d560c5388cade88a15371c0bc01c15e1b3b7032f1eebb63b70fb3d9d939fce4997900400d10f93b4ccc68f99ebf4357008b2692e8b64cbfdcd734bd3aa54df368aecd01097f32e288abb974ad168348a578f7e6f696978068fcf622c6e0991fa48c2e823e9d8f64d75360e303ac0572cb522acd3843e08811aa8ef637cd8ea17967e1961dbee9e45383c2a37a7b08a05b4523c61bc4ae4cecedb0a8b955725b697dfd8c7d92c12cea79d3fafd09ae8c324d38b69478765f364700aca368571dfb8aebbc545e1ee9468375f29e17ce1270d2175f93d62c6b4eccc6e444922e2e0bcbaefb7eff9382683f19d73ec281ddd9be9cebec50c9dae0133dc05f23d98584270ab756cfc7c31ad47344403854195c0850a0ac696dc8741937c49b8c4e829efa5aadea293a03e57761daa7a36411e851177a8050a40cec862eec775d9769f052ba16a67ddedc0b46adf5934931699a67cfc24db69896bb629ae241b95dd1b7a2dff182e0cfefe1bef7eab2e807298d1133049d437b26f8c282184942d81f79f1fdce0c0387333e495989b8b1cec60cefcfbee71e9b1dcfe2705db5b8d998021d408b08d862ed3a30129df47ae12e311f3970815f71e628e3bec8c9a27f3d0c12e51760405066018956012a61ea70a8419e90ab7c0339da79393a7f10f1dd5d28b953ae89d4627766ca61238a575dbcaa73e3dd074a6b01bf9538b38e8ff5eb3fad28ddbd3dbfa74d3e6350be9a123a0c1a4fc1b4c478805c10d9ad44ab646870edbc9202dacc02e490edf994983cd7a8ca9137dea00e9e361de2f3b9e55ae3dfffa4e4af1cadf774b665e3f9921280304e7e5a3befbe6e955c3225424ddebf96cb489d2c4f49fa2d3346e41317790d37d5d1e03e4476ffa598d114bfdca0a28d613015868eb7e361cc10d78ca9e89aa084e67458c3540a72f6943ef6b53774d9f0d92e2a0113c979571d6449017f00fa043721a068cbea2052d98e8d9a95ba6fa1780e10c4593989d6b264df253a8f26d02d6b40d87200907f8ddeb91353d899d7ac4f956066bd9d1ca3b577b14d1270fed5184cd6c150280f73b6a5e5b0dbaa36f1769e2424e4d5ba9232620ab24313e631a1440c6406b7f9e1dbb7cc859d25b87eadd09e0afbf65ebef16b672c367fc07182ce6e2988d9d8e57017b293f876a44990cb51184db81d5cb58597bf1980bbec05be7a0cc125351599cd8f26398af7954e220efa92e1d99c7a895b99d7104777b1fae4c35321f1cec33295b66367d5cffb2a3239ee6180407478d1b4f1ca07e190c9936b3e124e337e6ef69a3b54b73b645334deaaa86899dd60604faf34ac4e8fc6c0bc76546ba8d6c22ac911e0fb8727e1804a7ae21b15c185b717b6ed643ebb8937bd1bcb9210054cfe9f2c8ce4ec20e28406bb6a1a384fad7f2033a858becadab320492dfad25c8f1fb36a62fc07bd7b3a00f162c5f3fea7c416d0152ac840f8745d0893ae7434a19f06c5283b467201aa1ded5cb92443b62874d72bb663eaa10a78742520cdcfe348b444efd36f0b5720e580433afc6fd7757f4e7c5a8140db3662c7d2e0d0db457b72feb6a98999337e114a0f9895c423dfb92253dab95a029a8f56a3cb86e115edb40ab4ccd97a9cb6f7a7f40feb535b7f6d6f3e091d9eab28d07ffc5473fa69d3c594f16efc80ad778adff478322d107176da89d3116744019363f6da9ddc1b3f2fe66a8d496acf10bae9a99b5fbbfe3b37f0f7c2dbb57c588ff013b33fd5ae2669a5182d89c54a312b1ed7ec69acaf35894fb1636944e4468e79b1fe592ef4e4f3fa347186e8cbee7ca9a04b6f2b6e0e20bd7e9a1da816371431544c4481893d7e86718d38d91551bdd6ef56035359dc2e3d954596975a73baae6cea97dd670a010eaec7f5f94b07b81590c8d64571306b2543c4fbbbd218710d9fc6f19245884119756dd12f74f01b4872651332e5f7be96d4f85acd95a784d943e1644d80b96cdeeac27889f80d9685b552bcf248321433db365f97e8c63fd170d9800315ff67e4137799d8ffb366889d591a099228ed5640dd64bafaba48b0150a01ffac36bb01c22f1143764ea4754d93451737b516302de24f345f8273dcdb686e9251b4aeafd6b7cdf5f7b646e1705437a8a7632823bcf9be5358a57f4d6d1b6ad8933960edf6ecd7bc79b2e136e24bcbc98f448438a672f14da98864c11559223156272001a8f5c20f3860b2064c6a1dda48a0f45bfab048b210c26d7978ff5b5041f908bb128176892b513f24c8a53a454c874da9576d82d0ac7b50e60073256555349ace215b7266e5e309e3c383c599666c6866444daed993c208bee6f699c4d1eccce6c22b7a5c77a384e19268351a66058098854ebd29946081cba68322903b0c8704173a41a6c8ce46830c6d495778853dd44e94b8751f627b49696e245f750517a3ffda6698291c044848aace35cf65690edc8b7923de05a54830c4745af4fbcfdb0d075cebfb473a77ecb6cbba01cf13dca8e456692ed8264345f45e918c7cf81982a98a6bcae37573c59f487b4a1a03fab118541bce0d26e8017027e6f8af2aeec5efddc06e54620e6c6515106c9e2817d484bb3e57b850d5b97c4fbbf0a2560c89847592f34be14565e29c0a85db38ba2e7bc66acfa9dae12311c42f2a4071721ade465ebf292501317fae936375f209684f0388ae0a145e2018154ed6d4f2d9f37d16b42b51a8e804fa49f3a1001a623c68c2c4c03241f1cc2a359c1467043f508b4808315c7622848cc8a3d09631cad902f623cf49dbd65a0e0f9eefc9aeb3321fb42d652aaafdae8ca10a4723abfcac4aa80c3fbde54839bce85eff3c3443d155157131748b5aaafdb6cc8d193f9b015c9f45a23b18ab416cb9d1b969a3274442cd561c9550c39c5ffde0ba79c338e6e764751603a38a7dd79ef4b2051bd619c25bca6a6282647b56975f9c1eef48c105243d52d2313d76caf766c51b3dfedf928ab2e4aea9d129e124f71f28c6030637d7de3872894e60c0bb3f33f6b93f96f638302db0d0cd3cfedb5373ae7927e51c2befd723ea3a5a53a0f4ba8387ab0f2a4e3be9600050c83de25dffcb30ed9a4c2f378698db11e7604a9bfcb9bb3ce3a2f1ee260f570a97067f821362006b9ce35bf473923286a5b9e22de87b5453264b79dc06c92daf6a1f9765fb482fe2f0e0e957ff7dd991e4485182f7140a6e1826a71fbfc49f77b06ec75e548fc4c9828e7ea9d1c33031ddcd9df1d9042d46d543036803f8be25189ac43256f74df1bc0cc7ecb897deca31c0af62f5d22dc3135d8f8d811a4bfc354c1d6e5a1b13f85182f639d00fbac338ffb", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 4.587703143s ago: executing program 4 (id=2464): socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0xe000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.389139592s ago: executing program 7 (id=2466): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000200)="cfc850defd27f31e2d20223673feacf3b7545c037b5222", 0xfdef, 0x3b00, 0x0, 0x0) 3.279143686s ago: executing program 6 (id=2467): socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) socket$inet6(0x10, 0x2, 0x0) mount$nfs(&(0x7f0000000400)='\x00\x00\x00\x00\x00', &(0x7f0000000080)='./cgroup\x00', 0x0, 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) pwrite64(r1, 0x0, 0x0, 0x6) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$evdev(0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdb7c, {0x60, 0x0, 0x0, r6, {}, {0x1, 0x2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x2, 0xb, 0x6}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x40010) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000380)="78459860415b7ec76232a8a6de311154d0345ea58ccc9ccdf7d5b410a3f1da59312ca52fb6727d3d91cd688eba315d50fb0a1acc3ed4bb45c57ff7c67f0dd0de8804cb8fedfad4008d8a8cfcbb48b524e03b80e97d788c3f3de913550e43c4a8a0", 0x3a) r7 = accept(r3, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xe8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 3.229049616s ago: executing program 4 (id=2468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c014}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40004000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0027400000000000000c7f14000000110001"], 0xb4}}, 0x8044) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a000001"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2.771312115s ago: executing program 4 (id=2469): socket$inet6_udp(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r5 = syz_open_pts(0xffffffffffffffff, 0x0) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000140)=0x12) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010828bd7000fcdbdf2501000000000000000b000000001400143954"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x800) 2.632930718s ago: executing program 7 (id=2470): r0 = openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl730\x00', [0xa910, 0x5, 0xd09d, 0xfff7ffff, 0x2d4, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x9, 0x1, 0x3, 0x6, 0x7, 0x40000009, 0x830, 0x30000, 0xf4, 0x2, 0x800, 0xe2db, 0x2, 0xc, 0x7, 0x3, 0x4, 0x5, 0x70f]}) 1.229236634s ago: executing program 6 (id=2471): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000004140)={0x0, 0x0, &(0x7f0000004100)={0x0}, 0x1, 0x0, 0x0, 0xc0000}, 0x40080) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000200)=0x188, 0x4) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) sendto$inet(r3, &(0x7f0000000000)="f461c5bbd75c3583", 0xffc7, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000021c0)=@newtaction={0x14, 0x76, 0x1, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40044}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2f}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r6, 0x0, 0xe) write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="00006004020304000500e60c8100ffffffffffffaaaaaaaaaaaa88a8bfe381ff360008060001080006040003ffffffffffffe0000001ac57d0bc0706e0000002"], 0x40) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000880)={{r3}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000180)=ANY=[]}, @subvolid=0x81}) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x7, 0x100, 0x0, {0x5, 0xfffff7fe, 0x27, 0x7}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xe) 1.132133034s ago: executing program 4 (id=2472): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r3) 891.168248ms ago: executing program 7 (id=2473): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x50, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x8, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) fcntl$setlease(r1, 0x400, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r2) fcntl$getownex(r1, 0x10, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0x14, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x40488c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40086602, &(0x7f0000000000)) socket(0x2c, 0x3, 0x1000) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) socket$inet6(0xa, 0x6, 0xfff) 870.914938ms ago: executing program 6 (id=2474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000001000000000000000000000000000000002000002000000000000000000000000fc01"], 0xa0}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464"], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 636.498965ms ago: executing program 6 (id=2475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a3000000000280004"], 0xd8}}, 0x8090) 147.252275ms ago: executing program 6 (id=2476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x44014) 0s ago: executing program 6 (id=2477): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000)="f4", 0x1, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) pselect6(0x0, 0x0, &(0x7f00000000c0)={0x9, 0xe, 0x8000, 0x0, 0x4, 0x3, 0xc, 0x1f}, 0x0, &(0x7f0000000240)={0x77359400}, 0x0) kernel console output (not intermixed with test programs): : attribute type 1 has an invalid length. [ 1300.324330][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1797'. [ 1300.367711][T15420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1301.109941][T15599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1301.477423][T15599] 8021q: adding VLAN 0 to HW filter on device team0 [ 1301.670958][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.671179][T10994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1301.945085][T15420] veth0_vlan: entered promiscuous mode [ 1302.597876][ T1466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.598044][ T1466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1302.871436][T15420] veth1_vlan: entered promiscuous mode [ 1302.994905][T15971] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1803'. [ 1304.567073][T15984] netlink: 'syz.7.1806': attribute type 1 has an invalid length. [ 1304.567107][T15984] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1806'. [ 1305.091207][T15993] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 1305.091228][T15993] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1305.092595][T15993] vhci_hcd vhci_hcd.0: Device attached [ 1305.129134][T15993] overlayfs: missing 'lowerdir' [ 1305.184198][T15995] vhci_hcd: connection closed [ 1305.199931][ T1466] vhci_hcd vhci_hcd.6: stop threads [ 1305.199955][ T1466] vhci_hcd vhci_hcd.6: release socket [ 1305.199988][ T1466] vhci_hcd vhci_hcd.6: disconnect device [ 1305.260451][ T5636] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1305.375032][ T5636] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1305.410452][ T5636] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1305.453005][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1305.462563][ T5636] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1308.024177][ T5636] Bluetooth: hci4: command tx timeout [ 1308.702742][T16028] use of bytesused == 0 is deprecated and will be removed in the future, [ 1308.702761][T16028] use the actual size instead. [ 1310.126481][T15599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1310.245584][ T5636] Bluetooth: hci4: command tx timeout [ 1310.367531][T15994] lo speed is unknown, defaulting to 1000 [ 1310.904115][T16060] PKCS8: Unsupported PKCS#8 version [ 1311.933677][T16059] overlayfs: missing 'lowerdir' [ 1312.488928][ T5636] Bluetooth: hci4: command tx timeout [ 1314.907512][ T5636] Bluetooth: hci4: command tx timeout [ 1318.995451][T16100] PKCS8: Unsupported PKCS#8 version [ 1324.224016][T16119] overlayfs: missing 'lowerdir' [ 1325.602408][T15599] veth0_vlan: entered promiscuous mode [ 1325.735698][T15599] veth1_vlan: entered promiscuous mode [ 1326.045804][T15994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.046081][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.046315][T15994] bridge_slave_0: entered allmulticast mode [ 1326.076799][T15994] bridge_slave_0: entered promiscuous mode [ 1326.128377][T15994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.128738][T15994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.129092][T15994] bridge_slave_1: entered allmulticast mode [ 1326.189399][T15994] bridge_slave_1: entered promiscuous mode [ 1326.394577][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1326.428645][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.669380][T15994] team0: Port device team_slave_0 added [ 1327.704220][T15994] team0: Port device team_slave_1 added [ 1327.927244][T15599] veth0_macvtap: entered promiscuous mode [ 1328.562877][T16143] PKCS8: Unsupported PKCS#8 version [ 1329.587436][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1329.587453][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.587483][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1331.303469][ T4937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1331.408024][ T4937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1331.410567][ T4937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1331.415477][ T4937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1331.434089][ T4937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1331.524958][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1331.524975][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1331.525002][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.753260][ T5636] Bluetooth: hci5: command tx timeout [ 1333.890663][ T161] bridge_slave_1: left allmulticast mode [ 1333.890700][ T161] bridge_slave_1: left promiscuous mode [ 1333.890991][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.948099][T16178] overlayfs: missing 'lowerdir' [ 1334.116893][ T161] bridge_slave_0: left allmulticast mode [ 1334.116930][ T161] bridge_slave_0: left promiscuous mode [ 1334.117236][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.207206][ T5356] libceph: connect (1)[c::]:6789 error -101 [ 1334.207431][ T5356] libceph: mon0 (1)[c::]:6789 connect error [ 1334.624575][T16193] PKCS8: Unsupported PKCS#8 version [ 1335.482659][T16187] ceph: No mds server is up or the cluster is laggy [ 1335.483713][ T5356] libceph: connect (1)[c::]:6789 error -101 [ 1335.483928][ T5356] libceph: mon0 (1)[c::]:6789 connect error [ 1336.522137][ T5636] Bluetooth: hci5: command tx timeout [ 1338.729492][ T5636] Bluetooth: hci5: command tx timeout [ 1338.973843][T16203] PKCS8: Unsupported PKCS#8 version [ 1340.132044][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.226233][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.262951][ T161] bond0 (unregistering): Released all slaves [ 1340.352049][T15994] hsr_slave_0: entered promiscuous mode [ 1340.354213][T15994] hsr_slave_1: entered promiscuous mode [ 1340.371044][T15994] debugfs: 'hsr0' already exists in 'hsr' [ 1340.371092][T15994] Cannot create hsr debugfs directory [ 1341.014812][ T5636] Bluetooth: hci5: command tx timeout [ 1343.806570][T16160] lo speed is unknown, defaulting to 1000 [ 1344.847375][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 1344.847575][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 1344.848924][ T5754] libceph: connect (1)[c::]:6789 error -101 [ 1344.849110][ T5754] libceph: mon0 (1)[c::]:6789 connect error [ 1344.884900][T16235] overlayfs: missing 'lowerdir' [ 1344.938280][T16229] ceph: No mds server is up or the cluster is laggy [ 1345.122563][ T8227] libceph: connect (1)[c::]:6789 error -101 [ 1345.122724][ T8227] libceph: mon0 (1)[c::]:6789 connect error [ 1346.934031][T16253] PKCS8: Unsupported PKCS#8 version [ 1351.746899][ T161] hsr_slave_0: left promiscuous mode [ 1351.789749][ T161] hsr_slave_1: left promiscuous mode [ 1351.791022][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.833498][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.999967][T16282] netlink: 'syz.9.1874': attribute type 10 has an invalid length. [ 1352.000013][T16282] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1874'. [ 1352.004168][ T161] veth1_vlan: left promiscuous mode [ 1352.004371][ T161] veth0_vlan: left promiscuous mode [ 1352.717418][ T161] team0 (unregistering): Port device team_slave_1 removed [ 1352.784212][ T161] team0 (unregistering): Port device team_slave_0 removed [ 1353.034142][T16282] bridge0: port 3(veth1_macvtap) entered blocking state [ 1353.034391][T16282] bridge0: port 3(veth1_macvtap) entered disabled state [ 1353.034651][T16282] veth1_macvtap: entered allmulticast mode [ 1353.037157][T16282] veth1_macvtap: left allmulticast mode [ 1353.037178][T16282] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1353.215102][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1354.663258][T16301] PKCS8: Unsupported PKCS#8 version [ 1356.315435][T16302] overlayfs: missing 'lowerdir' [ 1360.103821][T16346] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1884'. [ 1360.816515][T16354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.831773][T16354] batadv_slave_1: entered promiscuous mode [ 1360.985279][T16160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.985617][T16160] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.985933][T16160] bridge_slave_0: entered allmulticast mode [ 1361.014553][T16160] bridge_slave_0: entered promiscuous mode [ 1361.032449][T16160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1361.042224][T16160] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.042597][T16160] bridge_slave_1: entered allmulticast mode [ 1361.071949][T16160] bridge_slave_1: entered promiscuous mode [ 1361.748289][T16160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.858667][T16160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1362.182085][ T4937] Bluetooth: hci2: command 0x0406 tx timeout [ 1364.002511][T16160] team0: Port device team_slave_0 added [ 1364.032635][T16160] team0: Port device team_slave_1 added [ 1364.208918][T16371] PKCS8: Unsupported PKCS#8 version [ 1365.349143][T16377] overlayfs: missing 'lowerdir' [ 1365.392636][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1365.401249][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.481635][T16387] siw: device registration error -23 [ 1367.794619][T16389] netlink: 'syz.6.1893': attribute type 1 has an invalid length. [ 1367.794643][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1893'. [ 1368.599524][T16160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1368.599538][T16160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.599559][T16160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1368.836909][T16160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1368.836928][T16160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1368.836958][T16160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.030985][T16160] hsr_slave_0: entered promiscuous mode [ 1369.032576][T16160] hsr_slave_1: entered promiscuous mode [ 1369.033849][T16160] debugfs: 'hsr0' already exists in 'hsr' [ 1369.033878][T16160] Cannot create hsr debugfs directory [ 1370.297099][ T4937] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1371.091144][ T4937] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1371.092992][ T4937] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1371.102626][ T4937] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1371.103502][ T4937] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1373.344819][T16449] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1901'. [ 1373.404590][T16451] netlink: 'syz.7.1903': attribute type 1 has an invalid length. [ 1373.404613][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1903'. [ 1373.674640][T16417] Bluetooth: hci3: command tx timeout [ 1376.106996][T16417] Bluetooth: hci3: command tx timeout [ 1376.560854][ T161] bridge_slave_1: left allmulticast mode [ 1376.560890][ T161] bridge_slave_1: left promiscuous mode [ 1376.561187][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.330939][ T161] bridge_slave_0: left allmulticast mode [ 1377.330977][ T161] bridge_slave_0: left promiscuous mode [ 1377.331286][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.575010][ T5356] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1377.780775][ T5356] usb 7-1: Using ep0 maxpacket: 16 [ 1377.784169][ T5356] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1377.786232][ T5356] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1377.792834][ T5356] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1377.792910][ T5356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.792964][ T5356] usb 7-1: Product: syz [ 1377.793004][ T5356] usb 7-1: Manufacturer: syz [ 1377.793033][ T5356] usb 7-1: SerialNumber: syz [ 1378.301124][T16417] Bluetooth: hci3: command tx timeout [ 1378.409319][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.473828][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.518219][ T161] bond0 (unregistering): Released all slaves [ 1379.968755][ T5356] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1379.969508][ T5356] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1380.127624][ T5356] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1380.211031][T16411] lo speed is unknown, defaulting to 1000 [ 1380.398751][ T5356] usb 7-1: USB disconnect, device number 2 [ 1380.424408][T16518] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1914'. [ 1380.801869][T16417] Bluetooth: hci3: command tx timeout [ 1381.744813][T16286] udevd[16286]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1383.808798][T15157] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1383.838878][ T161] hsr_slave_0: left promiscuous mode [ 1383.880069][ T161] hsr_slave_1: left promiscuous mode [ 1383.881248][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.967684][T15157] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1383.967746][T15157] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1383.972466][T15157] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1383.972498][T15157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.972521][T15157] usb 7-1: Product: syz [ 1383.972536][T15157] usb 7-1: Manufacturer: syz [ 1383.972552][T15157] usb 7-1: SerialNumber: syz [ 1384.005438][T15157] rtl8150 7-1:1.0: couldn't find required endpoints [ 1384.005727][T15157] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1384.183660][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1384.964126][ T161] veth0_macvtap: left promiscuous mode [ 1384.964404][ T161] veth1_vlan: left promiscuous mode [ 1384.964581][ T161] veth0_vlan: left promiscuous mode [ 1385.478347][T15157] usb 7-1: USB disconnect, device number 3 [ 1386.488058][ T161] team0 (unregistering): Port device team_slave_1 removed [ 1386.522414][ T161] team0 (unregistering): Port device team_slave_0 removed [ 1386.931535][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1388.641422][T16579] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1927'. [ 1390.134519][T16590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.138253][T16590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.342651][T16590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.723614][T16590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1390.727142][T16590] batadv_slave_1: left promiscuous mode [ 1390.729170][T16590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1390.764027][T16590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1390.764055][T16590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1390.799702][T16590] veth1_vlan: left promiscuous mode [ 1390.802510][T16590] veth0_vlan: left promiscuous mode [ 1390.820771][T16590] veth0_vlan: entered promiscuous mode [ 1390.834576][T16590] veth1_vlan: entered promiscuous mode [ 1390.854611][T16590] veth1_macvtap: left promiscuous mode [ 1390.865340][T16590] veth0_macvtap: left promiscuous mode [ 1390.868014][T16590] veth0_macvtap: entered promiscuous mode [ 1390.883367][T16590] veth1_macvtap: entered promiscuous mode [ 1390.910452][T16590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1390.920737][T16590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1390.931958][T16590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1390.947302][T16590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1390.949078][T16590] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 1390.952398][T16590] gretap0: entered promiscuous mode [ 1390.997978][ T1464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1390.998271][ T1464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.016381][ T1464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.016532][ T1464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.060844][ T5356] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1391.232806][ T5356] usb 7-1: Using ep0 maxpacket: 16 [ 1391.234172][T16114] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.235549][ T5356] usb 7-1: config 5 has an invalid interface number: 43 but max is 0 [ 1391.235573][ T5356] usb 7-1: config 5 has no interface number 0 [ 1391.235602][ T5356] usb 7-1: config 5 interface 43 has no altsetting 0 [ 1391.272440][ T5356] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a4.98 [ 1391.272518][ T5356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.272580][ T5356] usb 7-1: Product: syz [ 1391.272691][ T5356] usb 7-1: Manufacturer: syz [ 1391.272734][ T5356] usb 7-1: SerialNumber: syz [ 1393.626821][T16114] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.709094][ T5356] usb 7-1: USB disconnect, device number 4 [ 1393.733497][T16114] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.896751][T16114] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.135026][T16411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.135423][T16411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.135779][T16411] bridge_slave_0: entered allmulticast mode [ 1395.146144][T16411] bridge_slave_0: entered promiscuous mode [ 1395.240676][T16411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.240947][T16411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1395.241209][T16411] bridge_slave_1: entered allmulticast mode [ 1395.243679][T16411] bridge_slave_1: entered promiscuous mode [ 1395.534146][T16411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1395.556479][T16411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.675753][T16411] team0: Port device team_slave_0 added [ 1395.692994][T16411] team0: Port device team_slave_1 added [ 1395.866122][T16411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.866148][T16411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.866176][T16411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.896727][T16411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1395.896765][T16411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1395.896834][T16411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.582805][T15998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1398.602508][T16642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1936'. [ 1398.602544][T16642] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1936'. [ 1398.961996][T15998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1398.965012][T15998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1398.982844][T15998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1399.003314][T16411] hsr_slave_0: entered promiscuous mode [ 1399.005263][T16411] hsr_slave_1: entered promiscuous mode [ 1399.005793][T15998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1399.008372][T16411] debugfs: 'hsr0' already exists in 'hsr' [ 1399.008394][T16411] Cannot create hsr debugfs directory [ 1399.009731][T16647] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1937'. [ 1400.358010][T10994] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.690560][T10994] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.693478][T16417] Bluetooth: hci4: command tx timeout [ 1401.806622][T10994] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.866613][T16114] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1401.934001][ T5754] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1402.973734][ T5754] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1402.973808][ T5754] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1403.008611][ T5754] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1403.008657][ T5754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.008678][ T5754] usb 7-1: Product: syz [ 1403.008691][ T5754] usb 7-1: Manufacturer: syz [ 1403.008706][ T5754] usb 7-1: SerialNumber: syz [ 1403.079478][ T5754] rtl8150 7-1:1.0: couldn't find required endpoints [ 1403.081734][ T5754] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1403.748492][T16639] lo speed is unknown, defaulting to 1000 [ 1403.853275][T16417] Bluetooth: hci4: command tx timeout [ 1404.611845][T15157] usb 7-1: USB disconnect, device number 5 [ 1406.086095][T16417] Bluetooth: hci4: command tx timeout [ 1406.320653][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1950'. [ 1406.320691][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1950'. [ 1406.865603][ T68] bridge_slave_1: left allmulticast mode [ 1406.865642][ T68] bridge_slave_1: left promiscuous mode [ 1406.865937][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1407.021696][ T68] bridge_slave_0: left allmulticast mode [ 1407.021732][ T68] bridge_slave_0: left promiscuous mode [ 1407.022276][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.280520][T16417] Bluetooth: hci4: command tx timeout [ 1409.650921][T16718] kAFS: unable to lookup cell 'ÿ' [ 1409.905730][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1410.223581][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.099506][ T68] bond0 (unregistering): Released all slaves [ 1411.912037][ T5754] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1412.092546][ T5754] usb 7-1: Using ep0 maxpacket: 16 [ 1412.117481][ T5754] usb 7-1: config 5 has an invalid interface number: 43 but max is 0 [ 1412.117510][ T5754] usb 7-1: config 5 has no interface number 0 [ 1412.117544][ T5754] usb 7-1: config 5 interface 43 has no altsetting 0 [ 1412.159727][ T5754] usb 7-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a4.98 [ 1412.159762][ T5754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.159784][ T5754] usb 7-1: Product: syz [ 1412.159800][ T5754] usb 7-1: Manufacturer: syz [ 1412.159816][ T5754] usb 7-1: SerialNumber: syz [ 1412.482515][T16739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1960'. [ 1412.482553][T16739] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1960'. [ 1412.485901][ T5754] usb 7-1: USB disconnect, device number 6 [ 1412.730919][T16114] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1413.127814][ T68] hsr_slave_0: left promiscuous mode [ 1413.170287][ T68] hsr_slave_1: left promiscuous mode [ 1413.171221][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.216821][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.965985][T16768] siw: device registration error -23 [ 1418.123195][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1418.182928][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1418.347339][T16779] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1971'. [ 1418.536613][T16114] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1418.571752][T16783] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1973'. [ 1418.623087][T16114] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1420.189848][T16114] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1421.039519][T16639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.039905][T16639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.040276][T16639] bridge_slave_0: entered allmulticast mode [ 1421.084139][T16639] bridge_slave_0: entered promiscuous mode [ 1421.139804][T16639] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.140159][T16639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.140508][T16639] bridge_slave_1: entered allmulticast mode [ 1421.195546][T16639] bridge_slave_1: entered promiscuous mode [ 1421.321689][T16639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1421.398840][T16639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1421.757957][T16639] team0: Port device team_slave_0 added [ 1421.787754][T16639] team0: Port device team_slave_1 added [ 1422.560142][T16639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1422.560167][T16639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.560196][T16639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1422.610441][T16639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1422.610460][T16639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1422.610490][T16639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.454540][T16826] IPVS: length: 24 != 67608 [ 1425.026918][T16830] batadv_slave_1: left promiscuous mode [ 1425.028915][T16830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.410052][T16639] hsr_slave_0: entered promiscuous mode [ 1425.412409][T16639] hsr_slave_1: entered promiscuous mode [ 1425.414208][T16639] debugfs: 'hsr0' already exists in 'hsr' [ 1425.414233][T16639] Cannot create hsr debugfs directory [ 1425.585225][T16838] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1983'. [ 1425.644853][T16834] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1982'. [ 1425.649699][T16840] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1425.649699][T16840] The task syz.7.1981 (16840) triggered the difference, watch for misbehavior. [ 1425.825603][T16844] netlink: 124 bytes leftover after parsing attributes in process `syz.6.1984'. [ 1426.443103][ T5753] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1427.175442][ T5753] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.175513][ T5753] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1427.175598][ T5753] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1427.175625][ T5753] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.222840][ T5753] usb 7-1: config 0 descriptor?? [ 1427.253883][ T5753] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1429.620383][T16411] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1429.684419][T16411] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1429.753209][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1993'. [ 1429.799639][T16411] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1429.891130][T15157] usb 7-1: USB disconnect, device number 7 [ 1429.904322][T16891] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1994'. [ 1430.032501][T16411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1430.054559][T16411] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1430.182095][T16411] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1430.234923][T16411] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1430.964590][T16411] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1431.400051][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1431.400165][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.158924][ T68] bridge_slave_1: left allmulticast mode [ 1433.158962][ T68] bridge_slave_1: left promiscuous mode [ 1433.159260][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.599488][ T68] bridge_slave_0: left allmulticast mode [ 1433.599526][ T68] bridge_slave_0: left promiscuous mode [ 1433.599839][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.211915][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.212472][T16942] netlink: 'syz.7.2003': attribute type 1 has an invalid length. [ 1434.340173][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1434.380409][T16944] overlayfs: failed to clone upperpath [ 1434.481056][ T68] bond0 (unregistering): Released all slaves [ 1434.548283][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1435.482848][ T68] hsr_slave_0: left promiscuous mode [ 1435.540414][ T68] hsr_slave_1: left promiscuous mode [ 1435.541566][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.603066][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.949614][T16949] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2004'. [ 1436.294420][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1437.113054][T16417] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1437.116360][ T8640] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1437.174095][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1437.208011][T16417] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1437.232203][T16417] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1437.270955][T16417] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1437.272251][T16417] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1437.365588][ T8640] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.365638][ T8640] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1437.365678][ T8640] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1437.365700][ T8640] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.478059][ T8640] usb 7-1: config 0 descriptor?? [ 1437.511061][ T8640] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1439.501420][T16417] Bluetooth: hci3: command tx timeout [ 1439.812023][T16955] lo speed is unknown, defaulting to 1000 [ 1440.398583][T15157] usb 7-1: USB disconnect, device number 8 [ 1441.714068][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2015'. [ 1441.736293][T16417] Bluetooth: hci3: command tx timeout [ 1441.801316][T17016] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2015'. [ 1443.963296][T16417] Bluetooth: hci3: command tx timeout [ 1445.107329][T17049] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2021'. [ 1445.388831][ T6714] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1445.558718][ T6714] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.558878][ T6714] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1445.558923][ T6714] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1445.558949][ T6714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.635192][ T6714] usb 7-1: config 0 descriptor?? [ 1445.696424][ T6714] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1446.051310][T17063] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2023'. [ 1446.168749][T16417] Bluetooth: hci3: command tx timeout [ 1448.535493][ T5356] usb 7-1: USB disconnect, device number 9 [ 1449.007584][T16639] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1449.123327][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1449.342579][ T5356] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1449.513521][ T5356] usb 7-1: Using ep0 maxpacket: 16 [ 1449.522083][ T5356] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1449.531770][ T5356] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1449.546312][ T5356] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1449.546361][ T5356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.546382][ T5356] usb 7-1: Product: syz [ 1449.546397][ T5356] usb 7-1: Manufacturer: syz [ 1449.546414][ T5356] usb 7-1: SerialNumber: syz [ 1451.181937][T16639] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1451.229722][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1451.492670][T16639] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1451.595964][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1451.599851][T16955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.603201][T16955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.614058][T16955] bridge_slave_0: entered allmulticast mode [ 1451.642718][T16955] bridge_slave_0: entered promiscuous mode [ 1451.669916][T16639] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1451.791862][T16639] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1451.822939][T16955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.823298][T16955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.823663][T16955] bridge_slave_1: entered allmulticast mode [ 1451.869154][T16955] bridge_slave_1: entered promiscuous mode [ 1452.137894][T17121] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2033'. [ 1454.171518][T16955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.565206][ T5356] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1454.565703][ T5356] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1454.604074][ T5356] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1454.948093][ T5356] usb 7-1: USB disconnect, device number 10 [ 1455.547464][T16955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1455.633659][T17156] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2043'. [ 1455.791614][T16955] team0: Port device team_slave_0 added [ 1455.824677][T16955] team0: Port device team_slave_1 added [ 1460.379277][T16955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1460.379309][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.379329][T16955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1460.536711][T16955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1460.536732][T16955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1460.536762][T16955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1461.239653][T16955] hsr_slave_0: entered promiscuous mode [ 1461.256010][T16955] hsr_slave_1: entered promiscuous mode [ 1461.266954][T16955] debugfs: 'hsr0' already exists in 'hsr' [ 1461.266983][T16955] Cannot create hsr debugfs directory [ 1462.138042][ T68] bridge_slave_1: left allmulticast mode [ 1462.138070][ T68] bridge_slave_1: left promiscuous mode [ 1462.138281][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.265367][T17186] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2053'. [ 1462.320555][ T68] bridge_slave_0: left allmulticast mode [ 1462.320583][ T68] bridge_slave_0: left promiscuous mode [ 1462.322531][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.630132][T15998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1462.682128][T15998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1462.745841][T15998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1462.804857][T15998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1462.810282][T15998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1465.147244][T16417] Bluetooth: hci4: command tx timeout [ 1466.665535][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.877565][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.971778][ T68] bond0 (unregistering): Released all slaves [ 1467.358403][T17225] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2064'. [ 1467.380872][T16417] Bluetooth: hci4: command tx timeout [ 1469.592711][T16417] Bluetooth: hci4: command tx timeout [ 1471.359272][ T68] hsr_slave_0: left promiscuous mode [ 1471.366073][T17276] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2076'. [ 1471.413853][ T68] hsr_slave_1: left promiscuous mode [ 1471.423493][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1471.474736][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.817010][T16417] Bluetooth: hci4: command tx timeout [ 1472.452878][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1472.597715][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1473.040830][T17293] loop6: detected capacity change from 0 to 2048 [ 1474.308506][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1474.875670][T17293] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.803536][T15315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1477.023075][T17312] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2087'. [ 1477.098619][T17191] lo speed is unknown, defaulting to 1000 [ 1480.138210][T17351] loop6: detected capacity change from 0 to 2048 [ 1480.509733][T17351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1481.579658][T15315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.853891][T17191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1488.854239][T17191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1488.854718][T17191] bridge_slave_0: entered allmulticast mode [ 1488.859043][T17191] bridge_slave_0: entered promiscuous mode [ 1489.412872][T17191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1489.413924][T17191] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.414255][T17191] bridge_slave_1: entered allmulticast mode [ 1489.441006][T17191] bridge_slave_1: entered promiscuous mode [ 1489.528835][T17191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1489.551623][T17191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1489.605449][T16955] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1489.660499][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1491.157591][T16955] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1491.220617][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1491.258227][T17191] team0: Port device team_slave_0 added [ 1491.423014][T16955] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1491.520049][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1491.554199][T17191] team0: Port device team_slave_1 added [ 1491.557004][T16955] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1491.611592][T16955] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1494.613237][T17191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1494.613257][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.613286][T17191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1494.702375][T17191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1494.702394][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.702425][T17191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1495.218766][T17503] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2121'. [ 1495.857346][T17191] hsr_slave_0: entered promiscuous mode [ 1495.860083][T17191] hsr_slave_1: entered promiscuous mode [ 1495.861836][T17191] debugfs: 'hsr0' already exists in 'hsr' [ 1495.861862][T17191] Cannot create hsr debugfs directory [ 1496.697519][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1496.697632][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1497.980783][T16955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.097128][T16955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.134368][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.134554][T14467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1499.510604][ T68] bridge_slave_1: left allmulticast mode [ 1499.510640][ T68] bridge_slave_1: left promiscuous mode [ 1499.510902][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.824729][ T68] bridge_slave_0: left allmulticast mode [ 1499.824756][ T68] bridge_slave_0: left promiscuous mode [ 1499.824956][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1500.733018][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1500.817999][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1500.885594][ T68] bond0 (unregistering): Released all slaves [ 1500.941876][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1501.936202][T17563] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2131'. [ 1501.950203][ T68] hsr_slave_0: left promiscuous mode [ 1502.040249][ T68] hsr_slave_1: left promiscuous mode [ 1502.041352][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.086202][T15998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1502.139077][T15998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1502.140588][T15998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1502.152222][T15998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1502.162617][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.189339][T15998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1503.567615][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1504.449242][T16417] Bluetooth: hci3: command tx timeout [ 1504.457826][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1507.259037][T16417] Bluetooth: hci3: command tx timeout [ 1507.692927][T17566] lo speed is unknown, defaulting to 1000 [ 1509.496502][T16417] Bluetooth: hci3: command tx timeout [ 1511.716975][T16417] Bluetooth: hci3: command tx timeout [ 1515.004746][T17653] loop6: detected capacity change from 0 to 2048 [ 1515.074694][T17653] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1515.955553][T15315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.986054][T17672] PKCS8: Unsupported PKCS#8 version [ 1518.003987][T17672] overlayfs: failed to resolve './file0': -2 [ 1518.087041][T17676] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2155'. [ 1518.216225][T17676] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2155'. [ 1525.791191][T17717] PKCS8: Unsupported PKCS#8 version [ 1525.796839][T17717] overlayfs: failed to resolve './file0': -2 [ 1525.803600][T17720] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2166'. [ 1525.883532][T17721] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2166'. [ 1526.330462][T17714] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1526.483608][T17731] overlayfs: missing 'lowerdir' [ 1529.806498][T15998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1529.851603][T15998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1529.854460][T15998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1529.856219][T15998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1529.857275][T15998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1532.169279][T16417] Bluetooth: hci4: command tx timeout [ 1533.413984][T17566] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.415998][T17566] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.417907][T17566] bridge_slave_0: entered allmulticast mode [ 1533.453100][T17566] bridge_slave_0: entered promiscuous mode [ 1533.980712][T17566] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.980950][T17566] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.981195][T17566] bridge_slave_1: entered allmulticast mode [ 1534.310918][T17566] bridge_slave_1: entered promiscuous mode [ 1534.438630][T16417] Bluetooth: hci4: command tx timeout [ 1535.819196][T17798] overlayfs: failed to resolve './file0': -2 [ 1536.045502][T17800] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2177'. [ 1536.112288][T17803] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1536.112309][T17803] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1536.112417][T17803] vhci_hcd vhci_hcd.0: Device attached [ 1536.117705][T17803] overlayfs: missing 'lowerdir' [ 1536.127687][T17802] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2177'. [ 1536.193838][T17804] vhci_hcd: connection closed [ 1536.194245][ T13] vhci_hcd vhci_hcd.6: stop threads [ 1536.194267][ T13] vhci_hcd vhci_hcd.6: release socket [ 1536.194301][ T13] vhci_hcd vhci_hcd.6: disconnect device [ 1536.194695][T17566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.261963][T17566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1536.492722][T17566] team0: Port device team_slave_0 added [ 1536.507345][T17566] team0: Port device team_slave_1 added [ 1536.790017][T16417] Bluetooth: hci4: command tx timeout [ 1536.813753][T17566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1536.813772][T17566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.813802][T17566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1536.878860][T17566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1536.878879][T17566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1536.878909][T17566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.028753][T17766] lo speed is unknown, defaulting to 1000 [ 1537.164509][T17819] comedi: valid board names for 8255 driver are: [ 1537.164521][T17819] 8255 [ 1537.164526][T17819] comedi: valid board names for vmk80xx driver are: [ 1537.164533][T17819] vmk80xx [ 1537.164538][T17819] comedi: valid board names for usbduxsigma driver are: [ 1537.164544][T17819] usbduxsigma [ 1537.164549][T17819] comedi: valid board names for usbduxfast driver are: [ 1537.164556][T17819] usbduxfast [ 1537.164561][T17819] comedi: valid board names for usbdux driver are: [ 1537.164567][T17819] usbdux [ 1537.164572][T17819] comedi: valid board names for ni6501 driver are: [ 1537.164578][T17819] ni6501 [ 1537.164583][T17819] comedi: valid board names for dt9812 driver are: [ 1537.164589][T17819] dt9812 [ 1537.164593][T17819] comedi: valid board names for ni_labpc_cs driver are: [ 1537.164600][T17819] ni_labpc_cs [ 1537.164605][T17819] comedi: valid board names for ni_daq_700 driver are: [ 1537.164611][T17819] ni_daq_700 [ 1537.164616][T17819] comedi: valid board names for labpc_pci driver are: [ 1537.164623][T17819] labpc_pci [ 1537.164627][T17819] comedi: valid board names for adl_pci9118 driver are: [ 1537.164634][T17819] pci9118dg [ 1537.164639][T17819] pci9118hg [ 1537.164644][T17819] pci9118hr [ 1537.164648][T17819] comedi: valid board names for 8255_pci driver are: [ 1537.164654][T17819] 8255_pci [ 1537.164659][T17819] comedi: valid board names for s526 driver are: [ 1537.164666][T17819] s526 [ 1537.164670][T17819] comedi: valid board names for multiq3 driver are: [ 1537.164676][T17819] multiq3 [ 1537.164681][T17819] comedi: valid board names for pcmuio driver are: [ 1537.164687][T17819] pcmuio48 [ 1537.164710][T17819] pcmuio96 [ 1537.164715][T17819] comedi: valid board names for pcmmio driver are: [ 1537.164721][T17819] pcmmio [ 1537.164727][T17819] comedi: valid board names for pcmda12 driver are: [ 1537.164735][T17819] pcmda12 [ 1537.164741][T17819] comedi: valid board names for pcmad driver are: [ 1537.164748][T17819] pcmad12 [ 1537.164753][T17819] pcmad16 [ 1537.164758][T17819] comedi: valid board names for ni_labpc driver are: [ 1537.164764][T17819] lab-pc-1200 [ 1537.164769][T17819] lab-pc-1200ai [ 1537.164781][T17819] lab-pc+ [ 1537.164786][T17819] comedi: valid board names for atmio16 driver are: [ 1537.164792][T17819] atmio16 [ 1537.164797][T17819] atmio16d [ 1537.164802][T17819] comedi: valid board names for ni_at_ao driver are: [ 1537.164808][T17819] at-ao-6 [ 1537.164813][T17819] at-ao-10 [ 1537.164818][T17819] comedi: valid board names for ni_at_a2150 driver are: [ 1537.164825][T17819] ni_at_a2150 [ 1537.164829][T17819] comedi: valid board names for adq12b driver are: [ 1537.164836][T17819] adq12b [ 1537.164840][T17819] comedi: valid board names for mpc624 driver are: [ 1537.164847][T17819] mpc624 [ 1537.164852][T17819] comedi: valid board names for c6xdigio driver are: [ 1537.166054][T17819] c6xdigio [ 1537.166063][T17819] comedi: valid board names for aio_iiro_16 driver are: [ 1537.166070][T17819] aio_iiro_16 [ 1537.166075][T17819] comedi: valid board names for aio_aio12_8 driver are: [ 1537.166083][T17819] aio_aio12_8 [ 1537.166088][T17819] aio_ai12_8 [ 1537.166093][T17819] aio_ao12_4 [ 1537.166098][T17819] comedi: valid board names for fl512 driver are: [ 1537.166104][T17819] fl512 [ 1537.166109][T17819] comedi: valid board names for dmm32at driver are: [ 1537.166115][T17819] dmm32at [ 1537.166120][T17819] comedi: valid board names for dt282x driver are: [ 1537.166126][T17819] dt2821 [ 1537.166131][T17819] dt2821-f [ 1537.166136][T17819] dt2821-g [ 1537.166140][T17819] dt2823 [ 1537.166145][T17819] dt2824-pgh [ 1537.166150][T17819] dt2824-pgl [ 1537.166155][T17819] dt2825 [ 1537.166159][T17819] dt2827 [ 1537.166164][T17819] dt2828 [ 1537.166169][T17819] dt2829 [ 1537.166174][T17819] dt21-ez [ 1537.166178][T17819] dt23-ez [ 1537.166183][T17819] dt24-ez [ 1537.166188][T17819] dt24-ez-pgl [ 1537.166193][T17819] comedi: valid board names for dt2817 driver are: [ 1537.166199][T17819] dt2817 [ 1537.166203][T17819] comedi: valid board names for dt2815 driver are: [ 1537.166210][T17819] dt2815 [ 1537.166214][T17819] comedi: valid board names for dt2814 driver are: [ 1537.166221][T17819] dt2814 [ 1537.166225][T17819] comedi: valid board names for dt2811 driver are: [ 1537.166232][T17819] dt2811-pgh [ 1537.166237][T17819] dt2811-pgl [ 1537.166241][T17819] comedi: valid board names for dt2801 driver are: [ 1537.166248][T17819] dt2801 [ 1537.166252][T17819] comedi: valid board names for das6402 driver are: [ 1537.166259][T17819] das6402-12 [ 1537.166263][T17819] das6402-16 [ 1537.166269][T17819] comedi: valid board names for das1800 driver are: [ 1537.166277][T17819] das-1701st [ 1537.166282][T17819] das-1701st-da [ 1537.166287][T17819] das-1702st [ 1537.166292][T17819] das-1702st-da [ 1537.166296][T17819] das-1702hr [ 1537.166301][T17819] das-1702hr-da [ 1537.166306][T17819] das-1701ao [ 1537.166311][T17819] das-1702ao [ 1537.166316][T17819] das-1801st [ 1537.166321][T17819] das-1801st-da [ 1537.166325][T17819] das-1802st [ 1537.166330][T17819] das-1802st-da [ 1537.166335][T17819] das-1802hr [ 1537.166340][T17819] das-1802hr-da [ 1537.166344][T17819] das-1801hc [ 1537.166349][T17819] das-1802hc [ 1537.166354][T17819] das-1801ao [ 1537.166358][T17819] das-1802ao [ 1537.166363][T17819] comedi: valid board names for das800 driver are: [ 1537.166370][T17819] das-800 [ 1537.166375][T17819] cio-das800 [ 1537.166379][T17819] das-801 [ 1537.166384][T17819] cio-das801 [ 1537.166389][T17819] das-802 [ 1537.166393][T17819] cio-das802 [ 1537.166398][T17819] cio-das802/16 [ 1537.166403][T17819] comedi: valid board names for isa-das08 driver are: [ 1537.166410][T17819] isa-das08 [ 1537.166415][T17819] das08-pgm [ 1537.166419][T17819] das08-pgh [ 1537.166424][T17819] das08-pgl [ 1537.166429][T17819] das08-aoh [ 1537.166434][T17819] das08-aol [ 1537.166438][T17819] das08-aom [ 1537.166443][T17819] das08/jr-ao [ 1537.166448][T17819] das08jr-16-ao [ 1537.166453][T17819] pc104-das08 [ 1537.166458][T17819] das08jr/16 [ 1537.166463][T17819] comedi: valid board names for das16m1 driver are: [ 1537.166469][T17819] das16m1 [ 1537.166474][T17819] comedi: valid board names for dac02 driver are: [ 1537.166481][T17819] dac02 [ 1537.166485][T17819] comedi: valid board names for rti802 driver are: [ 1537.166492][T17819] rti802 [ 1537.166496][T17819] comedi: valid board names for rti800 driver are: [ 1537.166503][T17819] rti800 [ 1537.166507][T17819] rti815 [ 1537.166512][T17819] comedi: valid board names for pcm3724 driver are: [ 1537.166518][T17819] pcm3724 [ 1537.166523][T17819] comedi: valid board names for pcl818 driver are: [ 1537.166530][T17819] pcl818l [ 1537.166534][T17819] pcl818h [ 1537.166539][T17819] pcl818hd [ 1537.166544][T17819] pcl818hg [ 1537.166548][T17819] pcl818 [ 1537.166553][T17819] pcl718 [ 1537.166558][T17819] pcm3718 [ 1537.166563][T17819] comedi: valid board names for pcl816 driver are: [ 1537.166569][T17819] pcl816 [ 1537.166573][T17819] pcl814b [ 1537.166578][T17819] comedi: valid board names for pcl812 driver are: [ 1537.166584][T17819] pcl812 [ 1537.166589][T17819] pcl812pg [ 1537.166594][T17819] acl8112pg [ 1537.166599][T17819] acl8112dg [ 1537.166604][T17819] acl8112hg [ 1537.166608][T17819] a821pgl [ 1537.166613][T17819] a821pglnda [ 1537.166618][T17819] a821pgh [ 1537.166622][T17819] a822pgl [ 1537.166627][T17819] a822pgh [ 1537.166632][T17819] a823pgl [ 1537.166636][T17819] a823pgh [ 1537.166642][T17819] pcl813 [ 1537.166647][T17819] pcl813b [ 1537.166652][T17819] acl8113 [ 1537.166657][T17819] iso813 [ 1537.166663][T17819] acl8216 [ 1537.166668][T17819] a826pg [ 1537.166673][T17819] comedi: valid board names for pcl730 driver are: [ 1537.166680][T17819] pcl730 [ 1537.166685][T17819] iso730 [ 1537.166690][T17819] acl7130 [ 1537.166695][T17819] pcm3730 [ 1537.166700][T17819] pcl725 [ 1537.166706][T17819] p8r8dio [ 1537.166711][T17819] acl7225b [ 1537.166716][T17819] p16r16dio [ 1537.166721][T17819] pcl733 [ 1537.166726][T17819] pcl734 [ 1537.166732][T17819] opmm-1616-xt [ 1537.166737][T17819] pearl-mm-p [ 1537.166743][T17819] ir104-pbf [ 1537.166748][T17819] comedi: valid board names for pcl726 driver are: [ 1537.166755][T17819] pcl726 [ 1537.166760][T17819] pcl727 [ 1537.166765][T17819] pcl728 [ 1537.166776][T17819] acl6126 [ 1537.166782][T17819] acl6128 [ 1537.166787][T17819] comedi: valid board names for pcl724 driver are: [ 1537.166794][T17819] pcl724 [ 1537.166799][T17819] pcl722 [ 1537.166805][T17819] pcl731 [ 1537.166810][T17819] acl7122 [ 1537.166815][T17819] acl7124 [ 1537.166821][T17819] pet48dio [ 1537.166826][T17819] pcmio48 [ 1537.166831][T17819] onyx-mm-dio [ 1537.166836][T17819] comedi: valid board names for pcl711 driver are: [ 1537.166843][T17819] pcl711 [ 1537.166849][T17819] pcl711b [ 1537.166854][T17819] acl8112hg [ 1537.166859][T17819] acl8112dg [ 1537.166865][T17819] comedi: valid board names for amplc_pc263 driver are: [ 1537.166872][T17819] pc263 [ 1537.166878][T17819] comedi: valid board names for amplc_pc236 driver are: [ 1537.166885][T17819] pc36at [ 1537.166891][T17819] comedi: valid board names for amplc_dio200 driver are: [ 1537.166898][T17819] pc212e [ 1537.166903][T17819] pc214e [ 1537.166909][T17819] pc215e [ 1537.166914][T17819] pc218e [ 1537.166919][T17819] pc272e [ 1537.166925][T17819] comedi: valid board names for comedi_parport driver are: [ 1537.166933][T17819] comedi_parport [ 1537.166938][T17819] comedi: valid board names for comedi_test driver are: [ 1537.166945][T17819] comedi_test [ 1537.166951][T17819] comedi: valid board names for comedi_bond driver are: [ 1537.166958][T17819] comedi_bond [ 1539.721042][T16417] Bluetooth: hci4: command tx timeout [ 1540.980716][T17566] hsr_slave_0: entered promiscuous mode [ 1540.982914][T17566] hsr_slave_1: entered promiscuous mode [ 1540.984693][T17566] debugfs: 'hsr0' already exists in 'hsr' [ 1540.984718][T17566] Cannot create hsr debugfs directory [ 1542.360054][ T68] bridge_slave_1: left allmulticast mode [ 1542.360092][ T68] bridge_slave_1: left promiscuous mode [ 1542.360403][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.403327][T16417] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1542.487607][T16417] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1542.509549][T16417] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1542.534646][T16417] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1542.550560][T16417] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1542.742696][ T68] bridge_slave_0: left allmulticast mode [ 1542.742732][ T68] bridge_slave_0: left promiscuous mode [ 1542.743059][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1543.565820][T17853] PKCS8: Unsupported PKCS#8 version [ 1543.591518][T17853] overlayfs: failed to resolve './file0': -2 [ 1543.918377][T17860] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2188'. [ 1544.005618][T17862] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2188'. [ 1544.792643][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1544.887325][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1544.907965][T16417] Bluetooth: hci5: command tx timeout [ 1545.006101][ T68] bond0 (unregistering): Released all slaves [ 1545.285876][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1545.633219][T17869] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1545.633250][T17869] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1545.635339][T17869] vhci_hcd vhci_hcd.0: Device attached [ 1545.640128][T17869] overlayfs: missing 'lowerdir' [ 1545.682189][T17872] vhci_hcd: connection closed [ 1545.683663][ T1408] vhci_hcd vhci_hcd.6: stop threads [ 1545.683692][ T1408] vhci_hcd vhci_hcd.6: release socket [ 1545.683733][ T1408] vhci_hcd vhci_hcd.6: disconnect device [ 1547.130796][T16417] Bluetooth: hci5: command tx timeout [ 1548.251916][T17885] loop6: detected capacity change from 0 to 2048 [ 1548.294525][T17885] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1549.387238][T16417] Bluetooth: hci5: command tx timeout [ 1549.444375][T15315] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1550.108900][T17902] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2197'. [ 1550.193669][T17903] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2197'. [ 1550.475444][ T68] hsr_slave_0: left promiscuous mode [ 1550.518034][ T68] hsr_slave_1: left promiscuous mode [ 1550.519175][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.561871][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1551.099659][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1551.160098][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1551.576151][T16417] Bluetooth: hci5: command tx timeout [ 1552.503451][T17840] lo speed is unknown, defaulting to 1000 [ 1552.685400][T17924] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2201'. [ 1552.926616][T17928] overlayfs: missing 'lowerdir' [ 1553.037428][ T8227] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1553.272043][ T8227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.272082][ T8227] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1553.272126][ T8227] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1553.272151][ T8227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.309501][ T8227] usb 7-1: config 0 descriptor?? [ 1553.817034][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1555.973344][ T8227] usbhid 7-1:0.0: can't add hid device: -71 [ 1555.973439][ T8227] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1556.042400][ T8227] usb 7-1: USB disconnect, device number 11 [ 1556.167742][T17957] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2206'. [ 1556.401661][T17766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.415677][T17766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.416006][T17766] bridge_slave_0: entered allmulticast mode [ 1556.437028][T17766] bridge_slave_0: entered promiscuous mode [ 1556.498806][T17766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1556.516046][T17766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1556.516392][T17766] bridge_slave_1: entered allmulticast mode [ 1556.523424][T17766] bridge_slave_1: entered promiscuous mode [ 1558.397857][ T823] libceph: connect (1)[c::]:6789 error -101 [ 1558.398093][ T823] libceph: mon0 (1)[c::]:6789 connect error [ 1558.705379][ T823] libceph: connect (1)[c::]:6789 error -101 [ 1558.710924][ T823] libceph: mon0 (1)[c::]:6789 connect error [ 1559.075103][T17766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1559.153522][T17965] ceph: No mds server is up or the cluster is laggy [ 1559.195263][T17766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1559.255093][ T823] libceph: connect (1)[c::]:6789 error -101 [ 1559.255290][ T823] libceph: mon0 (1)[c::]:6789 connect error [ 1560.024514][ T68] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.024555][ T68] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1560.539372][T17976] overlayfs: missing 'lowerdir' [ 1560.890379][T17766] team0: Port device team_slave_0 added [ 1560.919648][T17766] team0: Port device team_slave_1 added [ 1561.514213][ T68] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1561.514244][ T68] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.229451][T17974] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1562.229477][T17974] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1562.360369][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1562.360481][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1562.963388][T17766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.963402][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1562.963423][T17766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.157132][T17766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.157147][T17766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.157168][T17766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1564.538925][ T68] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.538963][ T68] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.019150][T18013] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2214'. [ 1565.193858][T17766] hsr_slave_0: entered promiscuous mode [ 1565.209295][T17766] hsr_slave_1: entered promiscuous mode [ 1565.219778][T17766] debugfs: 'hsr0' already exists in 'hsr' [ 1565.219806][T17766] Cannot create hsr debugfs directory [ 1565.435774][T15157] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1565.600500][T15157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.600525][T15157] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1565.600556][T15157] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1565.600573][T15157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.655401][T15157] usb 7-1: config 0 descriptor?? [ 1565.721535][ T68] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.721575][ T68] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.637745][T17840] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.638138][T17840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.638473][T17840] bridge_slave_0: entered allmulticast mode [ 1567.675087][T17840] bridge_slave_0: entered promiscuous mode [ 1567.815864][T17840] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.816883][T17840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.818087][T17840] bridge_slave_1: entered allmulticast mode [ 1567.877979][T17840] bridge_slave_1: entered promiscuous mode [ 1568.291144][T15157] usbhid 7-1:0.0: can't add hid device: -71 [ 1568.291271][T15157] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1568.390663][T18045] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2216'. [ 1568.467359][T15157] usb 7-1: USB disconnect, device number 12 [ 1568.664203][T15998] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1568.715146][T17840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1568.757567][T15998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1568.777094][T15998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1568.789125][T15998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1568.799926][T15998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1570.567674][T17840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.649696][ T8640] libceph: connect (1)[c::]:6789 error -101 [ 1570.649870][ T8640] libceph: mon0 (1)[c::]:6789 connect error [ 1570.665231][ T8640] libceph: connect (1)[c::]:6789 error -101 [ 1570.665406][ T8640] libceph: mon0 (1)[c::]:6789 connect error [ 1570.962228][ T8640] libceph: connect (1)[c::]:6789 error -101 [ 1570.981264][ T8640] libceph: mon0 (1)[c::]:6789 connect error [ 1571.029473][T17840] team0: Port device team_slave_0 added [ 1571.087702][T17840] team0: Port device team_slave_1 added [ 1571.164440][T16417] Bluetooth: hci0: command tx timeout [ 1571.258432][T17840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1571.258453][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.258483][T17840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1571.276056][T17840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1571.276075][T17840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1571.276107][T17840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1571.368567][T18057] ceph: No mds server is up or the cluster is laggy [ 1571.519546][ T8640] libceph: connect (1)[c::]:6789 error -101 [ 1571.519773][ T8640] libceph: mon0 (1)[c::]:6789 connect error [ 1571.895307][T18068] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1571.895341][T18068] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1571.895412][T18068] vhci_hcd vhci_hcd.0: Device attached [ 1571.897426][T18068] overlayfs: missing 'lowerdir' [ 1571.945391][T18069] vhci_hcd: connection closed [ 1571.948045][ T1468] vhci_hcd vhci_hcd.6: stop threads [ 1571.948074][ T1468] vhci_hcd vhci_hcd.6: release socket [ 1571.948115][ T1468] vhci_hcd vhci_hcd.6: disconnect device [ 1572.091383][T17840] hsr_slave_0: entered promiscuous mode [ 1572.094316][T17840] hsr_slave_1: entered promiscuous mode [ 1572.097494][T17840] debugfs: 'hsr0' already exists in 'hsr' [ 1572.097513][T17840] Cannot create hsr debugfs directory [ 1572.469321][T18048] lo speed is unknown, defaulting to 1000 [ 1573.387051][T16417] Bluetooth: hci0: command tx timeout [ 1573.661727][ T5282] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1573.809424][T18101] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2224'. [ 1574.091601][T15157] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1574.279830][T15157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.279864][T15157] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1574.279906][T15157] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1574.279929][T15157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.342202][T15157] usb 7-1: config 0 descriptor?? [ 1575.601470][T16417] Bluetooth: hci0: command tx timeout [ 1577.104413][T15157] usbhid 7-1:0.0: can't add hid device: -71 [ 1577.104508][T15157] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1577.273781][T15157] usb 7-1: USB disconnect, device number 13 [ 1577.711051][T18129] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2226'. [ 1577.820999][T16417] Bluetooth: hci0: command tx timeout [ 1577.890538][T18048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.892593][T18048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.892920][T18048] bridge_slave_0: entered allmulticast mode [ 1577.936037][T18048] bridge_slave_0: entered promiscuous mode [ 1577.946443][T18048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.948374][T18048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.963880][T18048] bridge_slave_1: entered allmulticast mode [ 1577.967555][T18048] bridge_slave_1: entered promiscuous mode [ 1579.285228][ T68] bridge_slave_1: left allmulticast mode [ 1579.285277][ T68] bridge_slave_1: left promiscuous mode [ 1579.285547][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.523607][ T68] bridge_slave_0: left allmulticast mode [ 1579.523647][ T68] bridge_slave_0: left promiscuous mode [ 1579.523924][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.654944][T18139] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1579.654974][T18139] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1579.655042][T18139] vhci_hcd vhci_hcd.0: Device attached [ 1579.665409][T18139] overlayfs: missing 'lowerdir' [ 1579.697453][T18140] vhci_hcd: connection closed [ 1579.699148][T14467] vhci_hcd vhci_hcd.6: stop threads [ 1579.699176][T14467] vhci_hcd vhci_hcd.6: release socket [ 1579.699217][T14467] vhci_hcd vhci_hcd.6: disconnect device [ 1579.840738][ T68] bridge_slave_1: left allmulticast mode [ 1579.840775][ T68] bridge_slave_1: left promiscuous mode [ 1579.841016][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1579.992738][ T68] bridge_slave_0: left allmulticast mode [ 1579.992779][ T68] bridge_slave_0: left promiscuous mode [ 1579.992997][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1581.772291][T18148] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1581.772755][T18148] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1582.635136][T18154] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2233'. [ 1583.036438][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1583.122044][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.145551][ T68] bond0 (unregistering): Released all slaves [ 1583.399860][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1583.485445][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.550856][ T68] bond0 (unregistering): Released all slaves [ 1583.699598][ T5282] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1584.566587][T15157] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 1584.566855][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 1584.751776][T15157] usb 7-1: device descriptor read/64, error -32 [ 1584.959449][T18048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1585.043515][T15157] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1585.557429][T18048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.054875][T18048] team0: Port device team_slave_0 added [ 1586.068786][T18048] team0: Port device team_slave_1 added [ 1586.415850][T18048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1586.415864][T18048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.415885][T18048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1586.493483][T18048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1586.493557][T18048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1586.493580][T18048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1586.576850][T15157] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 1586.576881][T15157] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1586.576901][T15157] usb 7-1: config 0 has no interface number 0 [ 1586.576936][T15157] usb 7-1: config 0 interface 205 has no altsetting 0 [ 1586.699578][T18170] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2236'. [ 1586.758973][ T68] rxrpc: Call ffff888035da2bc0 still in use (1,Complete,1409,0)! [ 1589.318042][T18048] hsr_slave_0: entered promiscuous mode [ 1589.333704][T18048] hsr_slave_1: entered promiscuous mode [ 1589.351166][T18048] debugfs: 'hsr0' already exists in 'hsr' [ 1589.351263][T18048] Cannot create hsr debugfs directory [ 1591.215762][ T5282] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1592.000402][T15157] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1592.000444][T15157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.000466][T15157] usb 7-1: Product: syz [ 1592.000483][T15157] usb 7-1: Manufacturer: syz [ 1592.057222][T15157] usb 7-1: config 0 descriptor?? [ 1592.059330][T15157] usb 7-1: can't set config #0, error -71 [ 1592.075297][T15157] usb 7-1: USB disconnect, device number 15 [ 1592.133814][T18189] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 1592.133842][T18189] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1592.135061][T18189] vhci_hcd vhci_hcd.0: Device attached [ 1592.233128][T18189] overlayfs: missing 'lowerdir' [ 1592.270501][T18191] vhci_hcd: connection closed [ 1592.273531][ T161] vhci_hcd vhci_hcd.6: stop threads [ 1592.273553][ T161] vhci_hcd vhci_hcd.6: release socket [ 1592.273584][ T161] vhci_hcd vhci_hcd.6: disconnect device [ 1592.647384][T18194] PKCS8: Unsupported PKCS#8 version [ 1592.651303][T18194] overlayfs: failed to resolve './file0': -2 [ 1593.291646][ T5282] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1594.566667][T15998] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1594.623261][T15998] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1594.645050][T15998] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1594.649702][T15998] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1594.690938][T15998] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1596.076222][T18235] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1596.076245][T18235] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1597.109961][T18236] lo speed is unknown, defaulting to 1000 [ 1597.141335][T16417] Bluetooth: hci3: command tx timeout [ 1597.285433][T17766] netdevsim netdevsim4: probe with driver netdevsim failed with error -12 [ 1597.632320][T18267] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2244'. [ 1598.010030][T18274] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2245'. [ 1599.294300][T18236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.294850][T18236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.295142][T18236] bridge_slave_0: entered allmulticast mode [ 1599.297869][T18236] bridge_slave_0: entered promiscuous mode [ 1599.332023][T18236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.332256][T18236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.332675][T18236] bridge_slave_1: entered allmulticast mode [ 1599.336800][T18236] bridge_slave_1: entered promiscuous mode [ 1599.366818][T16417] Bluetooth: hci3: command tx timeout [ 1599.374873][T15157] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1599.435341][T18236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1599.458039][T18236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1599.584713][T15157] usb 7-1: config 0 has an invalid interface number: 205 but max is 0 [ 1599.584734][T15157] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1599.584749][T15157] usb 7-1: config 0 has no interface number 0 [ 1599.584771][T15157] usb 7-1: config 0 interface 205 has no altsetting 0 [ 1599.654875][T15157] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 1599.654899][T15157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.654914][T15157] usb 7-1: Product: syz [ 1599.654926][T15157] usb 7-1: Manufacturer: syz [ 1599.654937][T15157] usb 7-1: SerialNumber: syz [ 1599.724539][T15157] usb 7-1: config 0 descriptor?? [ 1599.745123][T15157] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 1599.772806][T15157] dvb-usb: bulk message failed: -22 (3/0) [ 1599.944423][T18236] team0: Port device team_slave_0 added [ 1599.977853][T15157] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1599.996665][T15157] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 1599.996818][T15157] usb 7-1: media controller created [ 1600.040452][T18236] team0: Port device team_slave_1 added [ 1600.066940][T15157] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1600.165908][T18236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1600.165924][T18236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.165947][T18236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1600.174733][T18236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1600.174752][T18236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.174782][T18236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1600.481065][T15157] dvb-usb: bulk message failed: -22 (6/0) [ 1600.481273][T15157] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 1600.564279][T15157] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input7 [ 1600.690700][T18236] hsr_slave_0: entered promiscuous mode [ 1600.693448][T18236] hsr_slave_1: entered promiscuous mode [ 1600.707630][T18236] debugfs: 'hsr0' already exists in 'hsr' [ 1600.707652][T18236] Cannot create hsr debugfs directory [ 1600.716539][T15157] dvb-usb: schedule remote query interval to 150 msecs. [ 1600.716667][T15157] dvb-usb: bulk message failed: -22 (3/0) [ 1600.761387][T15157] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 1600.886099][T15157] dvb-usb: bulk message failed: -22 (1/0) [ 1600.886138][T15157] dvb-usb: error while querying for an remote control event. [ 1601.054142][T15157] dvb-usb: bulk message failed: -22 (1/0) [ 1601.054169][T15157] dvb-usb: error while querying for an remote control event. [ 1601.194036][T18312] PKCS8: Unsupported PKCS#8 version [ 1601.195394][T18312] overlayfs: failed to resolve './file0': -2 [ 1601.223445][T15157] dvb-usb: bulk message failed: -22 (1/0) [ 1601.223479][T15157] dvb-usb: error while querying for an remote control event. [ 1601.394894][ T5753] dvb-usb: bulk message failed: -22 (1/0) [ 1601.394918][ T5753] dvb-usb: error while querying for an remote control event. [ 1601.525233][T18315] overlayfs: missing 'lowerdir' [ 1601.566489][ T5753] dvb-usb: bulk message failed: -22 (1/0) [ 1601.566537][ T5753] dvb-usb: error while querying for an remote control event. [ 1601.597403][T16417] Bluetooth: hci3: command tx timeout [ 1601.736983][T15157] dvb-usb: bulk message failed: -22 (1/0) [ 1601.737009][T15157] dvb-usb: error while querying for an remote control event. [ 1601.947588][ T5753] dvb-usb: bulk message failed: -22 (1/0) [ 1601.947624][ T5753] dvb-usb: error while querying for an remote control event. [ 1602.110299][T15157] dvb-usb: bulk message failed: -22 (1/0) [ 1602.110324][T15157] dvb-usb: error while querying for an remote control event. [ 1602.281597][ T5753] dvb-usb: bulk message failed: -22 (1/0) [ 1602.281636][ T5753] dvb-usb: error while querying for an remote control event. [ 1602.638038][T18040] dvb-usb: bulk message failed: -22 (1/0) [ 1602.638077][T18040] dvb-usb: error while querying for an remote control event. [ 1602.805021][T15157] dvb-usb: bulk message failed: -22 (1/0) [ 1602.805058][T15157] dvb-usb: error while querying for an remote control event. [ 1602.978786][T15157] dvb-usb: bulk message failed: -22 (1/0) [ 1602.978822][T15157] dvb-usb: error while querying for an remote control event. [ 1603.152297][T15157] dvb-usb: bulk message failed: -22 (1/0) [ 1603.152331][T15157] dvb-usb: error while querying for an remote control event. [ 1603.317820][T15157] dvb-usb: bulk message failed: -22 (1/0) [ 1603.317856][T15157] dvb-usb: error while querying for an remote control event. [ 1603.489661][T18040] dvb-usb: bulk message failed: -22 (1/0) [ 1603.489687][T18040] dvb-usb: error while querying for an remote control event. [ 1603.659830][T18040] dvb-usb: bulk message failed: -22 (1/0) [ 1603.659866][T18040] dvb-usb: error while querying for an remote control event. [ 1603.784140][T18040] usb 7-1: USB disconnect, device number 16 [ 1603.811383][T16417] Bluetooth: hci3: command tx timeout [ 1605.245037][T18040] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 1605.488188][T17840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1605.538257][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1605.550146][T17840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1605.639088][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1605.643496][T17840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1605.751608][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1605.768938][T17840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1605.872557][T17840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1606.433702][T18377] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2254'. [ 1606.849084][T15998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1606.921220][T18386] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2256'. [ 1606.958848][T15998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1606.986679][T15998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1606.987736][T15998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1606.988551][T15998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1607.325150][T15157] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1607.481488][T18397] PKCS8: Unsupported PKCS#8 version [ 1607.494371][T15157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1607.494407][T15157] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1607.494460][T15157] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1607.494485][T15157] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.550940][T18397] overlayfs: failed to resolve './file0': -2 [ 1607.621762][T15157] usb 7-1: config 0 descriptor?? [ 1608.072369][T18404] overlayfs: missing 'lowerdir' [ 1608.178795][T18048] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1608.264167][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1608.282382][T18048] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1608.564111][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1608.603656][T18048] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1609.014668][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1609.055126][T18048] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1609.162010][T18048] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1609.327700][T16417] Bluetooth: hci4: command tx timeout [ 1610.518522][T18379] lo speed is unknown, defaulting to 1000 [ 1610.742360][T15157] usbhid 7-1:0.0: can't add hid device: -71 [ 1610.742486][T15157] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1610.792387][T15157] usb 7-1: USB disconnect, device number 17 [ 1611.391736][T18236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1611.449008][T18236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1611.503389][T16417] Bluetooth: hci4: command tx timeout [ 1611.510779][T18236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1611.640760][T18236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1611.718071][T18236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1611.757372][T18236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1611.918651][T18236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1611.959118][T18236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1612.521682][T18445] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1612.521700][T18445] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1613.709198][T18477] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2265'. [ 1613.736912][T16417] Bluetooth: hci4: command tx timeout [ 1614.108877][T18048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1614.356582][ T8640] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1614.438646][T18379] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.439102][T18379] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.439468][T18379] bridge_slave_0: entered allmulticast mode [ 1614.463121][T18379] bridge_slave_0: entered promiscuous mode [ 1614.494428][T18379] bridge0: port 2(bridge_slave_1) entered blocking state [ 1614.494783][T18379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1614.495097][T18379] bridge_slave_1: entered allmulticast mode [ 1614.524728][T18379] bridge_slave_1: entered promiscuous mode [ 1614.547494][ T8640] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1614.547525][ T8640] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.547547][ T8640] usb 7-1: Product: syz [ 1614.547563][ T8640] usb 7-1: Manufacturer: syz [ 1614.547579][ T8640] usb 7-1: SerialNumber: syz [ 1614.589652][ T8640] usb 7-1: config 0 descriptor?? [ 1614.672208][T18048] 8021q: adding VLAN 0 to HW filter on device team0 [ 1614.704664][T18379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1614.740750][T18379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1614.968407][ T1408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1614.970595][ T1408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1614.997228][T18379] team0: Port device team_slave_0 added [ 1615.117374][T18379] team0: Port device team_slave_1 added [ 1615.264491][ T1408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.264983][ T1408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1615.390810][T18236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1615.399099][T18379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1615.399116][T18379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.399146][T18379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1615.419564][T18379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1615.419583][T18379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1615.419613][T18379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1615.836968][T18514] IPVS: length: 24 != 67608 [ 1615.957640][T16417] Bluetooth: hci4: command tx timeout [ 1616.546382][T18519] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2269'. [ 1616.650829][ T8640] usb 7-1: f81604_read: reg: 100e failed: -EPROTO [ 1616.749518][ T8640] usb 7-1: f81604_read: reg: 200f failed: -EPROTO [ 1616.768040][ T8640] usb 7-1: USB disconnect, device number 18 [ 1616.802486][T18379] hsr_slave_0: entered promiscuous mode [ 1616.812279][T18379] hsr_slave_1: entered promiscuous mode [ 1616.820917][T18379] debugfs: 'hsr0' already exists in 'hsr' [ 1616.820947][T18379] Cannot create hsr debugfs directory [ 1616.938201][ T8640] usb 7-1: f81604_read: reg: 100f failed: -ENODEV [ 1617.004680][T18236] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.107163][ T8640] usb 7-1: f81604_read: reg: 200f failed: -ENODEV [ 1617.227487][ T161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.250364][ T161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.375521][T16752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.375698][T16752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1620.154798][T18553] IPVS: length: 24 != 67608 [ 1622.781756][T18246] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1623.013986][T18246] usb 7-1: Using ep0 maxpacket: 16 [ 1623.016463][T18246] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1623.017806][T18246] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1623.020312][T18246] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1623.020342][T18246] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.020356][T18246] usb 7-1: Product: syz [ 1623.020367][T18246] usb 7-1: Manufacturer: syz [ 1623.020378][T18246] usb 7-1: SerialNumber: syz [ 1624.401764][T18048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1625.130621][T18246] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1625.131097][T18246] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1625.179863][T18246] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1625.261539][T18246] usb 7-1: USB disconnect, device number 19 [ 1625.525437][T18573] udevd[18573]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1625.585449][T18236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1626.135998][T18623] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2281'. [ 1627.288161][T18635] netlink: 'syz.6.2283': attribute type 2 has an invalid length. [ 1627.830144][T18379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1627.924643][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1627.939239][T18379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1628.004792][T18648] IPVS: length: 24 != 67608 [ 1628.271247][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1628.307864][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1628.778620][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1628.816400][T18379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1628.855794][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1628.884394][T18379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1628.938150][T18379] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1628.941051][T18048] veth0_vlan: entered promiscuous mode [ 1629.034095][T18048] veth1_vlan: entered promiscuous mode [ 1629.077887][T18236] veth0_vlan: entered promiscuous mode [ 1629.224750][T18236] veth1_vlan: entered promiscuous mode [ 1629.417971][T18048] veth0_macvtap: entered promiscuous mode [ 1629.457082][T18048] veth1_macvtap: entered promiscuous mode [ 1629.564331][T18236] veth0_macvtap: entered promiscuous mode [ 1630.247972][T18236] veth1_macvtap: entered promiscuous mode [ 1630.307508][T18048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.398373][T18048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1630.514124][T18379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1630.564796][ T1470] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.582789][ T1470] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.613061][T18236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1630.617152][ T1470] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.688503][ T1470] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1630.798063][T18236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1631.027737][T18379] 8021q: adding VLAN 0 to HW filter on device team0 [ 1631.066957][T16114] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.200419][T16114] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.297019][T16114] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.925595][ T161] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1631.931361][ T1466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1631.931528][ T1466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.765143][T18685] netlink: 'syz.7.2292': attribute type 2 has an invalid length. [ 1632.795877][T14665] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.796022][T14665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.847886][T16114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1633.847909][T16114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1634.130813][ T1021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1634.130836][ T1021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.285058][T18701] IPVS: length: 24 != 67608 [ 1636.493852][T15998] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1636.617262][T18713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2295'. [ 1637.323825][T15998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1637.328307][T15998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1637.346949][T15998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1637.351421][T15998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1637.645564][T18716] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2296'. [ 1638.466434][T18734] IPv6: Can't replace route, no match found [ 1639.768028][T15998] Bluetooth: hci0: command tx timeout [ 1641.148358][T18754] loop4: detected capacity change from 0 to 2048 [ 1641.762584][T18754] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1641.806447][T18379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.033401][T15998] Bluetooth: hci0: command tx timeout [ 1642.204551][T18708] lo speed is unknown, defaulting to 1000 [ 1644.908487][T18779] IPVS: length: 24 != 67608 [ 1645.044789][T15998] Bluetooth: hci0: command tx timeout [ 1645.504246][T18786] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2309'. [ 1645.609141][T18379] veth0_vlan: entered promiscuous mode [ 1645.937395][T18379] veth1_vlan: entered promiscuous mode [ 1647.238331][T16417] Bluetooth: hci0: command tx timeout [ 1647.682339][T18815] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2314'. [ 1647.989513][ T6714] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1648.188373][ T6714] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.188779][ T6714] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1648.188826][ T6714] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1648.188850][ T6714] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.256826][ T6714] usb 7-1: config 0 descriptor?? [ 1648.366459][T18379] veth0_macvtap: entered promiscuous mode [ 1648.503107][T18822] Illegal XDP return value 4291663488 on prog (id 120) dev N/A, expect packet loss! [ 1648.679044][T18379] veth1_macvtap: entered promiscuous mode [ 1649.090225][T18708] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.090578][T18708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.090902][T18708] bridge_slave_0: entered allmulticast mode [ 1649.094780][T18708] bridge_slave_0: entered promiscuous mode [ 1649.103518][T18708] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.103866][T18708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.104184][T18708] bridge_slave_1: entered allmulticast mode [ 1649.358498][T18836] IPVS: length: 24 != 67608 [ 1650.306391][T18708] bridge_slave_1: entered promiscuous mode [ 1653.573592][ T6714] usbhid 7-1:0.0: can't add hid device: -71 [ 1653.573721][ T6714] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1653.605143][ T6714] usb 7-1: USB disconnect, device number 20 [ 1653.686191][T18708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1654.206935][T18708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1654.302784][T18379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1656.791762][T18708] team0: Port device team_slave_0 added [ 1656.797152][T18379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1656.856873][T18708] team0: Port device team_slave_1 added [ 1657.345891][T18708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1657.345911][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.345941][T18708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1657.430295][T18708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1657.430502][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1657.430599][T18708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1657.758006][T10994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1657.922972][T10994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.102334][T18881] IPVS: length: 24 != 67608 [ 1658.928190][T14665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.244952][T10994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1659.321808][T18708] hsr_slave_0: entered promiscuous mode [ 1659.338314][T18708] hsr_slave_1: entered promiscuous mode [ 1659.356239][T18708] debugfs: 'hsr0' already exists in 'hsr' [ 1659.356269][T18708] Cannot create hsr debugfs directory [ 1659.766087][T18892] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2330'. [ 1663.714773][ T1466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1663.714797][ T1466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1664.231371][T18923] IPVS: length: 24 != 67608 [ 1669.189995][T18947] netlink: 124 bytes leftover after parsing attributes in process `syz.7.2344'. [ 1669.402203][T18708] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.536519][ T1464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1669.536581][ T1464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.535692][T18972] IPVS: length: 24 != 67608 [ 1674.651754][T18708] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.049588][T15998] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1676.209128][T15998] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1676.267717][T15998] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1676.272901][T15998] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1676.276326][T15998] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1679.370194][T18708] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1679.424269][T19004] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2358'. [ 1679.477700][T16417] Bluetooth: hci5: command tx timeout [ 1680.035553][T18603] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1680.498103][T18603] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.498141][T18603] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1680.498185][T18603] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1680.498210][T18603] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.552795][T18603] usb 7-1: config 0 descriptor?? [ 1681.157498][T19024] IPVS: length: 24 != 67608 [ 1681.689355][T16417] Bluetooth: hci5: command tx timeout [ 1683.604327][T18708] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.114106][T16417] Bluetooth: hci5: command tx timeout [ 1685.148498][ T37] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1685.359985][T18603] usbhid 7-1:0.0: can't add hid device: -71 [ 1685.360743][T18603] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1685.402017][T18603] usb 7-1: USB disconnect, device number 21 [ 1685.692425][T18976] lo speed is unknown, defaulting to 1000 [ 1685.731360][ T37] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1685.731399][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.731419][ T37] usb 5-1: Product: syz [ 1685.731433][ T37] usb 5-1: Manufacturer: syz [ 1685.731448][ T37] usb 5-1: SerialNumber: syz [ 1685.773877][ T37] usb 5-1: config 0 descriptor?? [ 1687.334627][T16417] Bluetooth: hci5: command tx timeout [ 1687.968137][ T37] usb 5-1: f81604_read: reg: 100e failed: -EPROTO [ 1688.225704][T19070] IPVS: length: 24 != 67608 [ 1688.746537][ T37] usb 5-1: f81604_read: reg: 200f failed: -EPROTO [ 1688.791840][ T37] usb 5-1: USB disconnect, device number 2 [ 1689.039284][ T37] usb 5-1: f81604_read: reg: 100f failed: -ENODEV [ 1692.060053][T19089] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2376'. [ 1693.013183][T19092] Set syz0 is full, maxelem 0 reached [ 1693.114266][ T37] usb 5-1: f81604_read: reg: 200f failed: -ENODEV [ 1694.452509][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 1694.452626][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1695.194675][T18708] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1695.288672][T18708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1695.385553][T18708] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1695.451353][T18708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1695.608621][T18708] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1695.918801][T18708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1695.925737][T18976] bridge0: port 1(bridge_slave_0) entered blocking state [ 1695.925990][T18976] bridge0: port 1(bridge_slave_0) entered disabled state [ 1695.926321][T18976] bridge_slave_0: entered allmulticast mode [ 1695.932553][T18976] bridge_slave_0: entered promiscuous mode [ 1695.954441][T18708] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1696.042908][T19114] IPVS: length: 24 != 67608 [ 1696.538441][T18708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1696.840892][T18976] bridge0: port 2(bridge_slave_1) entered blocking state [ 1696.841224][T18976] bridge0: port 2(bridge_slave_1) entered disabled state [ 1696.841613][T18976] bridge_slave_1: entered allmulticast mode [ 1696.873317][T18976] bridge_slave_1: entered promiscuous mode [ 1697.436927][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2387'. [ 1698.839911][T18708] kthread_run failed with err -4 [ 1698.857996][T18976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1698.897231][T18976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1699.116829][T18976] team0: Port device team_slave_0 added [ 1699.138751][T18976] team0: Port device team_slave_1 added [ 1699.264807][T18976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.264826][T18976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.264853][T18976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.270764][T18976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.270782][T18976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1699.270812][T18976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.432202][T18976] hsr_slave_0: entered promiscuous mode [ 1699.433864][T18976] hsr_slave_1: entered promiscuous mode [ 1699.435175][T18976] debugfs: 'hsr0' already exists in 'hsr' [ 1699.435203][T18976] Cannot create hsr debugfs directory [ 1700.271436][T18976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.046305][T19143] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2391'. [ 1701.325201][T15998] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1701.894375][T15998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1701.999132][T15998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1702.065679][T15998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1702.095908][T15998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1702.402258][T18976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1702.626010][T15157] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1703.552940][T15157] usb 5-1: Using ep0 maxpacket: 16 [ 1703.561480][T15157] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1703.571169][T15157] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 1703.585877][T15157] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1703.585910][T15157] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1703.585933][T15157] usb 5-1: Product: syz [ 1703.585950][T15157] usb 5-1: Manufacturer: syz [ 1703.585966][T15157] usb 5-1: SerialNumber: syz [ 1704.545758][T16417] Bluetooth: hci0: command tx timeout [ 1705.178565][T19160] PKCS8: Unsupported PKCS#8 version [ 1705.422171][T19160] overlayfs: failed to clone upperpath [ 1706.002637][T19171] IPVS: length: 24 != 67608 [ 1706.749005][T16417] Bluetooth: hci0: command tx timeout [ 1706.930962][T15157] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 1706.991249][T18976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.031523][T15157] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1707.059657][T15157] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1707.236246][T15157] usb 5-1: USB disconnect, device number 3 [ 1707.279210][T19140] lo speed is unknown, defaulting to 1000 [ 1707.501916][T18943] udevd[18943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1707.720291][T19182] tipc: Failed to remove unknown binding: 66,0,0/0:1711781740/1711781741 [ 1707.721236][T19182] tipc: Failed to remove unknown binding: 66,0,0/0:1711781740/1711781741 [ 1707.933542][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2398'. [ 1709.145339][T16417] Bluetooth: hci0: command tx timeout [ 1709.468158][T19195] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2402'. [ 1709.551595][T18976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.612185][ T5356] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1712.075543][T16417] Bluetooth: hci0: command tx timeout [ 1712.688596][T19208] IPVS: length: 24 != 67608 [ 1714.045085][T19217] PKCS8: Unsupported PKCS#8 version [ 1714.618725][T19217] overlayfs: failed to set uuid (35/file0, err=-1); falling back to uuid=null. [ 1714.623287][T19217] overlayfs: failed to verify upper root origin [ 1715.447492][ T5356] usb 7-1: device descriptor read/all, error -110 [ 1715.587743][ T5356] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 1716.966056][T19140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.967289][T19140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.968697][T19140] bridge_slave_0: entered allmulticast mode [ 1717.048181][T19140] bridge_slave_0: entered promiscuous mode [ 1717.159488][T19140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.159841][T19140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.160264][T19140] bridge_slave_1: entered allmulticast mode [ 1717.235053][T19140] bridge_slave_1: entered promiscuous mode [ 1718.059677][T19231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2408'. [ 1720.762866][T19140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.792999][T19140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.221010][T19140] team0: Port device team_slave_0 added [ 1723.261230][T19140] team0: Port device team_slave_1 added [ 1723.329009][T18976] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1723.446973][T18976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1723.482912][T18976] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1723.640004][T18976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1723.655336][T19140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.655354][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.655384][T19140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.656470][T18976] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1723.741018][T18976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1723.755108][T19140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.755122][T19140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.755142][T19140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.770503][T18976] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1723.860982][T18976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1724.535450][T19260] IPVS: length: 24 != 67608 [ 1725.263494][T19140] hsr_slave_0: entered promiscuous mode [ 1725.524021][T19140] hsr_slave_1: entered promiscuous mode [ 1725.548728][T19140] debugfs: 'hsr0' already exists in 'hsr' [ 1725.548750][T19140] Cannot create hsr debugfs directory [ 1726.946223][T19270] PKCS8: Unsupported PKCS#8 version [ 1727.211652][T19270] overlayfs: failed to set uuid (40/file0, err=-1); falling back to uuid=null. [ 1727.231481][T19270] overlayfs: failed to verify upper root origin [ 1728.879219][T15998] Bluetooth: hci3: command 0x0406 tx timeout [ 1728.942388][T18976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1729.116236][T18976] 8021q: adding VLAN 0 to HW filter on device team0 [ 1729.125257][T15157] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1729.343781][T15157] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1729.343846][T15157] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1729.346785][T15157] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1729.346817][T15157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.346840][T15157] usb 7-1: Product: syz [ 1729.346857][T15157] usb 7-1: Manufacturer: syz [ 1729.346874][T15157] usb 7-1: SerialNumber: syz [ 1729.437211][T15157] rtl8150 7-1:1.0: couldn't find required endpoints [ 1729.442229][T15157] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1730.805759][T18602] usb 7-1: USB disconnect, device number 24 [ 1730.998945][T16114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.002807][T16114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.100674][ T161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.100827][ T161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1732.506046][T19298] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1732.506077][T19298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1732.599643][T19298] vhci_hcd vhci_hcd.0: Device attached [ 1732.887331][ T37] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1733.336015][T19299] vhci_hcd: connection reset by peer [ 1733.352973][ T1021] vhci_hcd vhci_hcd.4: stop threads [ 1733.353000][ T1021] vhci_hcd vhci_hcd.4: release socket [ 1733.353081][ T1021] vhci_hcd vhci_hcd.4: disconnect device [ 1733.886024][T19312] IPVS: length: 24 != 67608 [ 1735.609752][T19322] loop4: detected capacity change from 0 to 2048 [ 1735.705040][T19322] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1736.998552][T19332] PKCS8: Unsupported PKCS#8 version [ 1737.033915][T18976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1737.626116][T19342] batman_adv: batadv0: Adding interface: dummy0 [ 1737.626138][T19342] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.626175][T19342] batman_adv: batadv0: Interface activated: dummy0 [ 1738.167802][T19342] batadv0: mtu less than device minimum [ 1738.310098][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1738.358210][ T37] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1738.389140][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1738.435598][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1738.465218][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1738.492833][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1738.513289][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1738.535501][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1738.560534][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1738.583591][T19342] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1738.747945][T15998] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1738.771184][T15998] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1738.830573][T15998] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1738.846668][T15998] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1738.914686][T15998] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1739.338081][T19348] loop8: detected capacity change from 0 to 8 [ 1739.487372][T19348] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1739.487414][T19348] loop8: partition table partially beyond EOD, truncated [ 1739.547622][T19348] loop8: p1 size 877688686 extends beyond EOD, truncated [ 1740.051136][T19353] IPVS: length: 24 != 67608 [ 1741.282271][T19360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2441'. [ 1741.509123][T18943] udevd[18943]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1741.536041][T15998] Bluetooth: hci4: command tx timeout [ 1742.351253][T19382] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2448'. [ 1742.588206][T19140] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1742.654841][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1742.662700][T19140] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1742.999088][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1743.021399][T19140] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1743.831800][T15998] Bluetooth: hci4: command tx timeout [ 1744.230898][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1744.246292][T19140] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1744.316695][T19140] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1744.411516][T19344] lo speed is unknown, defaulting to 1000 [ 1744.449057][T19396] PKCS8: Unsupported PKCS#8 version [ 1744.816758][T19396] overlayfs: failed to set uuid (54/file0, err=-1); falling back to uuid=null. [ 1744.816958][T19396] overlayfs: failed to verify upper root origin [ 1745.206754][T19406] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2452'. [ 1746.039294][T19140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.075260][T15998] Bluetooth: hci4: command tx timeout [ 1746.212034][T19423] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2458'. [ 1748.284828][T15998] Bluetooth: hci4: command tx timeout [ 1748.559411][T19140] 8021q: adding VLAN 0 to HW filter on device team0 [ 1748.706269][T19344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.706539][T19344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.706884][T19344] bridge_slave_0: entered allmulticast mode [ 1748.733073][T19344] bridge_slave_0: entered promiscuous mode [ 1748.773041][T19344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.773352][T19344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.773678][T19344] bridge_slave_1: entered allmulticast mode [ 1748.805084][T19344] bridge_slave_1: entered promiscuous mode [ 1748.831522][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.831692][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1749.142929][T19344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1749.198305][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.200503][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1749.267148][T19344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.515373][T19344] team0: Port device team_slave_0 added [ 1749.543109][T19344] team0: Port device team_slave_1 added [ 1749.819526][T19344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.819538][T19344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.819559][T19344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.912631][T19344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.912645][T19344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.912665][T19344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1750.203703][T19344] hsr_slave_0: entered promiscuous mode [ 1750.216071][T19344] hsr_slave_1: entered promiscuous mode [ 1750.249064][T19344] debugfs: 'hsr0' already exists in 'hsr' [ 1750.249094][T19344] Cannot create hsr debugfs directory [ 1750.358592][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2463'. [ 1751.766823][T19454] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2468'. [ 1754.050123][T19473] PKCS8: Unsupported PKCS#8 version [ 1754.136078][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2474'. [ 1756.578934][ T39] INFO: task kworker/u8:5:68 blocked for more than 144 seconds. [ 1756.578957][ T39] Tainted: G L syzkaller #0 [ 1756.578966][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1756.578978][ T39] task:kworker/u8:5 state:D stack:21320 pid:68 tgid:68 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1756.579026][ T39] Workqueue: netns cleanup_net [ 1756.579056][ T39] Call Trace: SYZFAIL: failed to recv rpc [ 1756.579065][ T39] [ 1756.579076][ T39] __schedule+0x16f9/0x5500 [ 1756.579199][ T39] ? __pfx___schedule+0x10/0x10 [ 1756.579226][ T39] ? schedule+0x90/0x360 [ 1756.579250][ T39] schedule+0x164/0x360 [ 1756.579271][ T39] rxrpc_destroy_all_calls+0x44e/0x570 [ 1756.579330][ T39] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1756.579352][ T39] ? __pfx_var_wake_function+0x10/0x10 [ 1756.579418][ T39] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1756.579459][ T39] ? __timer_delete_sync+0x53e/0x610 [ 1756.579505][ T39] rxrpc_exit_net+0x6f/0xc0 [ 1756.579526][ T39] ops_undo_list+0x49f/0x940 [ 1756.579548][ T39] ? rt_spin_unlock+0x1f0/0x200 [ 1756.579565][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 1756.579584][ T39] ? rt_spin_unlock+0x14f/0x200 [ 1756.579602][ T39] ? idr_destroy+0x21b/0x2a0 [ 1756.579640][ T39] ? rt_spin_unlock+0x160/0x200 [ 1756.579658][ T39] cleanup_net+0x56e/0x800 [ 1756.579680][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 1756.579708][ T39] ? process_one_work+0x8be/0x1630 [ 1756.579732][ T39] process_one_work+0x98b/0x1630 [ 1756.579778][ T39] ? __pfx_process_one_work+0x10/0x10 [ 1756.579801][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 1756.579848][ T39] worker_thread+0xb49/0x1140 [ 1756.579921][ T39] kthread+0x389/0x470 [ 1756.579949][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1756.579999][ T39] ? __pfx_kthread+0x10/0x10 [ 1756.580118][ T39] ret_from_fork+0x514/0xb70 [ 1756.580144][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1756.580166][ T39] ? __switch_to+0xc79/0x1410 [ 1756.580186][ T39] ? __pfx_kthread+0x10/0x10 [ 1756.580205][ T39] ret_from_fork_asm+0x1a/0x30 [ 1756.580243][ T39] [ 1756.580391][ T39] [ 1756.580391][ T39] Showing all locks held in the system: [ 1756.580400][ T39] 1 lock held by khungtaskd/39: [ 1756.580410][ T39] #0: ffffffff8dfcaa00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1756.582120][ T39] 3 locks held by kworker/u8:5/68: [ 1756.582132][ T39] #0: ffff88801b68e138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1756.582181][ T39] #1: ffffc9000154fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1756.582243][ T39] #2: ffffffff8f36c800 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1756.582317][ T39] 5 locks held by kworker/u8:16/1468: [ 1756.582331][ T39] #0: ffff888032b83938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1756.582400][ T39] #1: ffffc90006a6fc40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1756.582445][ T39] #2: ffffffff8de61340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1756.582491][ T39] #3: ffffffff8dfcaa00 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 1756.582547][ T39] #4: ffff8880708505d8 (&hash->list_locks[i]){+...}-{3:3}, at: __batadv_dat_purge+0x131/0x400 [ 1756.582619][ T39] 2 locks held by getty/5374: [ 1756.582628][ T39] #0: ffff8880325720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1756.582729][ T39] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1756.582806][ T39] 2 locks held by kworker/u8:0/14467: [ 1756.582816][ T39] #0: ffff88813fe84138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1756.582861][ T39] #1: ffffc90004d47c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1756.582914][ T39] 3 locks held by kworker/0:1/18602: [ 1756.582923][ T39] #0: ffff88813fe47938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 1756.582967][ T39] #1: ffffc900040c7c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 1756.583011][ T39] #2: ffff88802dfec280 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x222/0x3e0 [ 1756.583064][ T39] 8 locks held by syz-executor/19344: [ 1756.583074][ T39] #0: ffff888033c30480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1756.583116][ T39] #1: ffff888062850478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1756.583157][ T39] #2: ffff8880296470f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1756.583201][ T39] #3: ffffffff8ebf0998 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1756.583247][ T39] #4: ffff88803fea4160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1756.583291][ T39] #5: ffff888038090310 (&devlink->lock_key#69){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1756.583350][ T39] #6: ffff888063e3de70 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520 [ 1756.583486][ T39] #7: ffffffff8dfcaa00 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 1756.585218][ T39] 2 locks held by syz.7.2473/19473: [ 1756.585234][ T39] #0: ffff888032d44480 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x380d/0x4540 [ 1756.585438][ T39] #1: ffff88805af48388 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x82/0x120 [ 1756.585715][ T39] 2 locks held by syz.6.2477/19482: [ 1756.585729][ T39] #0: ffff8880402382b8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x89/0x250 [ 1756.585807][ T39] #1: ffff8880394b6358 (sk_lock-AF_CAN){+.+.}-{0:0}, at: j1939_sk_release+0xba/0x6c0 [ 1756.585932][ T39] 1 lock held by modprobe/19487: [ 1756.585965][ T39] #0: ffff8880377147b0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x237/0x4f0 [ 1756.586139][ T39] [ 1756.586153][ T39] ============================================= [ 1756.586153][ T39] [ 1756.586191][ T39] NMI backtrace for cpu 0 [ 1756.586245][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1756.586315][ T39] Tainted: [L]=SOFTLOCKUP [ 1756.586343][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1756.586376][ T39] Call Trace: [ 1756.586404][ T39] [ 1756.586426][ T39] dump_stack_lvl+0xe8/0x150 [ 1756.586513][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 1756.586594][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1756.586715][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1756.586817][ T39] sys_info+0x135/0x170 [ 1756.586868][ T39] watchdog+0xfd3/0x1030 [ 1756.586992][ T39] ? watchdog+0x1c9/0x1030 [ 1756.587021][ T39] kthread+0x389/0x470 [ 1756.587047][ T39] ? __pfx_watchdog+0x10/0x10 [ 1756.587109][ T39] ? __pfx_kthread+0x10/0x10 [ 1756.587184][ T39] ret_from_fork+0x514/0xb70 [ 1756.587272][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1756.587346][ T39] ? __switch_to+0xc79/0x1410 [ 1756.587418][ T39] ? __pfx_kthread+0x10/0x10 [ 1756.587493][ T39] ret_from_fork_asm+0x1a/0x30 [ 1756.587616][ T39] [ 1756.587662][ T39] Sending NMI from CPU 0 to CPUs 1: [ 1756.587774][ C1] NMI backtrace for cpu 1 [ 1756.587792][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1756.587818][ C1] Tainted: [L]=SOFTLOCKUP [ 1756.587825][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1756.587835][ C1] RIP: 0010:pwq_tryinc_nr_active+0x671/0x9b0 [ 1756.587865][ C1] Code: 25 e2 36 00 eb 9e e8 1e e2 36 00 49 bc 00 00 00 00 00 fc ff df 48 8b 44 24 18 42 c6 44 20 04 f8 4c 89 ef e8 81 14 a1 09 31 c0 <48> c7 44 24 60 0e 36 e0 45 48 8b 4c 24 18 4a c7 04 21 00 00 00 00 [ 1756.587881][ C1] RSP: 0018:ffffc90000a4f840 EFLAGS: 00000002 [ 1756.587897][ C1] RAX: 0000000000000001 RBX: ffff888032921c60 RCX: ffff88801de89ec0 [ 1756.587911][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1756.587923][ C1] RBP: ffffc90000a4f930 R08: 0000000000000000 R09: 0000000000000100 [ 1756.587935][ C1] R10: dffffc0000000000 R11: fffff52000149f1a R12: dffffc0000000000 [ 1756.587949][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888032099c01 [ 1756.587961][ C1] FS: 0000000000000000(0000) GS:ffff888125ff4000(0000) knlGS:0000000000000000 [ 1756.587976][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1756.587989][ C1] CR2: 00007fcfdc3ca540 CR3: 0000000040a86000 CR4: 00000000003526f0 [ 1756.588006][ C1] Call Trace: [ 1756.588013][ C1] [ 1756.588026][ C1] ? __pfx_pwq_tryinc_nr_active+0x10/0x10 [ 1756.588064][ C1] __queue_work+0xb8e/0x1090 [ 1756.588085][ C1] ? __queue_work+0x1dc/0x1090 [ 1756.588100][ C1] ? rcu_is_watching+0x15/0xb0 [ 1756.588191][ C1] queue_work_on+0x106/0x1d0 [ 1756.588211][ C1] call_timer_fn+0x192/0x5e0 [ 1756.588237][ C1] ? __pfx_rxrpc_peer_keepalive_timeout+0x10/0x10 [ 1756.588268][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1756.588292][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1756.588341][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1756.588365][ C1] ? __pfx_rxrpc_peer_keepalive_timeout+0x10/0x10 [ 1756.588391][ C1] __run_timer_base+0x6a3/0x9f0 [ 1756.588424][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1756.588445][ C1] ? rt_spin_lock+0x1e0/0x400 [ 1756.588466][ C1] ? __local_bh_disable_ip+0x3c/0x420 [ 1756.588502][ C1] run_timer_softirq+0xb7/0x170 [ 1756.588526][ C1] handle_softirqs+0x1de/0x6d0 [ 1756.588560][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1756.588605][ C1] run_ktimerd+0x69/0x100 [ 1756.588624][ C1] smpboot_thread_fn+0x541/0xa50 [ 1756.588644][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 1756.588668][ C1] kthread+0x389/0x470 [ 1756.588689][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1756.588707][ C1] ? __pfx_kthread+0x10/0x10 [ 1756.588730][ C1] ret_from_fork+0x514/0xb70 [ 1756.588756][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1756.588781][ C1] ? __switch_to+0xc79/0x1410 [ 1756.588802][ C1] ? __pfx_kthread+0x10/0x10 [ 1756.588824][ C1] ret_from_fork_asm+0x1a/0x30 [ 1756.588860][ C1] [ 1756.591188][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888040a65800: rx timeout, send abort [ 1756.601192][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888040a65800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1756.741966][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1756.742036][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1756.742115][ T39] Tainted: [L]=SOFTLOCKUP [ 1756.742135][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1756.742174][ T39] Call Trace: [ 1756.742195][ T39] [ 1756.742222][ T39] vpanic+0x56c/0xa60 [ 1756.742316][ T39] ? __pfx___schedule+0x10/0x10 [ 1756.742387][ T39] ? __pfx_vpanic+0x10/0x10 [ 1756.742489][ T39] panic+0xc5/0xd0 [ 1756.742588][ T39] ? __pfx_panic+0x10/0x10 [ 1756.742668][ T39] ? preempt_schedule_thunk+0x16/0x40 [ 1756.742741][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1756.742815][ T39] watchdog+0x102c/0x1030 [ 1756.742897][ T39] ? watchdog+0x1c9/0x1030 [ 1756.742990][ T39] kthread+0x389/0x470 [ 1756.743073][ T39] ? __pfx_watchdog+0x10/0x10 [ 1756.743128][ T39] ? __pfx_kthread+0x10/0x10 [ 1756.743202][ T39] ret_from_fork+0x514/0xb70 [ 1756.743278][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1756.743396][ T39] ? __switch_to+0xc79/0x1410 [ 1756.743435][ T39] ? __pfx_kthread+0x10/0x10 [ 1756.743463][ T39] ret_from_fork_asm+0x1a/0x30 [ 1756.743508][ T39] [ 1756.743941][ T39] Kernel Offset: disabled