last executing test programs: 8m18.339765896s ago: executing program 32 (id=19): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7c, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffe, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000280)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={&(0x7f00000001c0), 0x0, r4}) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)="5c00000016006bab9a3fe3d86e17aa0a046b876c060048007ea60864160af36504811a0038001d001931a0e69ee517d34460be06000000a705251e6182949a9a7b9bcb84c9f4d4938037e70e4509c5bb4de385aa2adb88a899a655ab", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230000) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x20, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}, [@map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xffff357a}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @ldst={0x3, 0x0, 0x0, 0xa, 0x8, 0xffffffffffffffe0, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @jmp={0x5, 0x0, 0x0, 0x8, 0x6, 0x0, 0xfffffffffffffff0}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x70}]}, &(0x7f0000000580)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan1\x00'}) 8m7.792766493s ago: executing program 33 (id=35): socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x30) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000340)='affs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xb62}, @TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x2}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 7m11.311558721s ago: executing program 1 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@mask_cswp={0x58, 0x114, 0x9, {{0x7fff, 0x80000000}, 0x0, 0x0, 0x9, 0x8, 0x3, 0x800, 0x47, 0x6}}], 0x58}, 0x0) 7m10.019590805s ago: executing program 34 (id=117): ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x4, 0x9, 0xffffffff, 0x7}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) add_key$keyring(&(0x7f0000000080), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioperm(0xfffffffe, 0x40000007, 0x5) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000a80)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000140)) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8280, 0x0) pread64(r2, &(0x7f0000000080)=""/171, 0xab, 0x6) socket$kcm(0x29, 0x2, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r3, &(0x7f00000007c0)=[{&(0x7f0000000340)=""/232, 0xe8}], 0x1, 0x4c, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='1', 0x1) 7m9.645080124s ago: executing program 1 (id=150): socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x10001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) r7 = socket(0x25, 0x7ffff, 0x0) connect$inet6(r2, 0x0, 0xffffffffffffff46) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x800, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m52.762727787s ago: executing program 35 (id=150): socket$alg(0x26, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11000, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x10001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) r7 = socket(0x25, 0x7ffff, 0x0) connect$inet6(r2, 0x0, 0xffffffffffffff46) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200"], 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x800, 0x101301) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 6m40.262608139s ago: executing program 36 (id=161): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) 6m10.667528806s ago: executing program 7 (id=147): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 5m55.33769975s ago: executing program 37 (id=147): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(0x0, 0x18a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x100000, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x101800, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) 5m49.163746928s ago: executing program 38 (id=191): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000006"], 0x48) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x482) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000011c0)=""/4080, 0xff67}, {&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000140)=""/70, 0x46}], 0x3}, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 4m55.675618181s ago: executing program 39 (id=246): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0xfffffffffffffcf5, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x1, 0x0, 0x4}, 0x0) userfaultfd(0x1) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)={0x239, 0x2, 0x0, {{0x500, 0xf8, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x239) 4m46.384237376s ago: executing program 40 (id=253): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) iopl(0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x6}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x9}}, 0x10) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_setup(0x4451, &(0x7f00000001c0)={0x0, 0x4f99, 0x1000, 0x3, 0x23e}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x24d9}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7, 0x0, 0x9}}, 0xe4) socket$inet6(0xa, 0xa, 0x5) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) r7 = openat$ttyS3(0xffffff9c, &(0x7f0000000200), 0x80000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000240)=0x8) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 4m0.54195836s ago: executing program 5 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 3m57.883906548s ago: executing program 5 (id=326): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000001240)={'IDLETIMER\x00'}, &(0x7f0000001280)=0x1e) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x400, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3m53.841483916s ago: executing program 5 (id=329): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, 0x0, 0x0, 0x0, 0x0) 3m52.70705248s ago: executing program 1 (id=266): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m51.914140407s ago: executing program 5 (id=331): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x4008700c, 0x0) 3m51.174083235s ago: executing program 1 (id=333): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt(r0, 0x1, 0x5, &(0x7f0000000240)="83a61448", 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 3m50.678606474s ago: executing program 5 (id=335): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x6a82, &(0x7f0000000300)={0x0, 0xc123, 0x2, 0x2, 0x58}, &(0x7f0000000240), &(0x7f0000000380)) syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x8d9, 0x200, 0x2, 0xd8}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$vga_arbiter(r2, &(0x7f0000000080), 0xf) socket$nl_route(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "00000000faffffff", "cb83a84cbae76006000000192b90d142", '\f_\x00', "e449990e9977d061"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r6, 0x1) gettid() futex(&(0x7f0000000040)=0x1, 0x8, 0x2, 0x0, 0x0, 0x1) 3m49.964847634s ago: executing program 1 (id=337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m45.562910538s ago: executing program 5 (id=339): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) 3m45.440247441s ago: executing program 1 (id=340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xfa) 3m43.572292071s ago: executing program 41 (id=324): openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x481, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20004900) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r0, 0x80045113, 0x0) 3m29.917534072s ago: executing program 42 (id=340): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1002, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x815}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000000c0)={0x0, "08000000000000000000000000000000000000b582000000010000000100"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xfa) 3m29.521592555s ago: executing program 43 (id=339): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x4, 0x1000085}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) 3m15.198098852s ago: executing program 0 (id=364): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x4008700c, 0x0) 3m14.21859593s ago: executing program 0 (id=366): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32, 0x0, 0x3}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r3, 0x50009405, &(0x7f0000001440)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000340)={0x4}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r7}, 0xc) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xd, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) 3m8.970491356s ago: executing program 0 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x5c}}, 0x0) 3m7.76922331s ago: executing program 0 (id=369): syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f0000000680)=ANY=[@ANYBLOB="7626e7012fd6ca447c666b00f8b6dd40d834a7abd835431e39c935f3062b44579d854b2a999f6568d540ed005217001a99f762b594858f2f5ec5ae7387dfd01fcf95f4c02413389b9bc2c507424ac7f4ed57e52c8ab64d1fbace79e7537b63fc2938625784abe79da14dc0c1ccf1c5e7004bafd36d041e70d2e5775d1c9db8d813f5f5"], 0xd, 0x2) userfaultfd(0x80001) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x3, "ee0700000000000000000200"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xff80, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000100001000000000000020000ac1414bb000000000000000000000000000000000000000000000000000000004e2400004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x0) mmap(&(0x7f000085e000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_local_pairing_opts={{0xb4}, {0x5, 0x5, 0x8}}}}, 0x9) 3m3.478129989s ago: executing program 0 (id=371): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x20000, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m2.188270263s ago: executing program 0 (id=374): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc044560f, &(0x7f0000000080)=@mmap={0x7f, 0x1, 0x4, 0x10, 0xb200, {}, {0x5, 0x0, 0x3, 0x0, 0x81, 0x2, "e43d8daa"}, 0x1, 0x1, {}, 0x10}) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000000000000000a0080a36d55dd2ce0833e719880d677978d00000200000000000005001b003a000000"], 0x24}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, 0x0, 0x4000004) landlock_restrict_self(r7, 0x0) 2m53.852744684s ago: executing program 4 (id=378): syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r1, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000080), &(0x7f0000000680)=ANY=[@ANYBLOB="7626e7012fd6ca447c666b00f8b6dd40d834a7abd835431e39c935f3062b44579d854b2a999f6568d540ed005217001a99f762b594858f2f5ec5ae7387dfd01fcf95f4c02413389b9bc2c507424ac7f4ed57e52c8ab64d1fbace79e7537b63fc2938625784abe79da14dc0c1ccf1c5e7004bafd36d041e70d2e5775d1c9db8d813f5f5"], 0xd, 0x2) userfaultfd(0x80001) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x9, 0x5) inotify_init1(0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000140)={0x0, 0x1, 0x3, "ee0700000000000000000200"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0x0, "f682756c98cc948c"}) ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000200)=0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0xff80, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000100001000000000000020000ac1414bb000000000000000000000000000000000000000000000000000000004e2400004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}}, 0x0) mmap(&(0x7f000085e000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 2m50.088369966s ago: executing program 4 (id=379): pipe(0x0) io_uring_setup(0x6ddd, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000240), &(0x7f0000000280)={'U+', 0x6}, 0x16, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x18, 0x3f9, 0x100, 0x70bd27, 0x25dfdbfb, {0x1001}}, 0x18}, 0x1, 0x0, 0x0, 0x20040094}, 0x80) r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha224-ssse3\x00'}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) open(&(0x7f0000000100)='.\x00', 0x591002, 0x6a) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, r2, 0x0) syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m46.651489771s ago: executing program 44 (id=374): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x7, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QUERYBUF(r4, 0xc044560f, &(0x7f0000000080)=@mmap={0x7f, 0x1, 0x4, 0x10, 0xb200, {}, {0x5, 0x0, 0x3, 0x0, 0x81, 0x2, "e43d8daa"}, 0x1, 0x1, {}, 0x10}) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a00010000000000000000000a0080a36d55dd2ce0833e719880d677978d00000200000000000005001b003a000000"], 0x24}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000040)='./file0\x00', 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, 0x0, 0x4000004) landlock_restrict_self(r7, 0x0) 2m46.541155514s ago: executing program 4 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x20000, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x10000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m45.572632366s ago: executing program 4 (id=382): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0x4008700c, 0x0) 2m43.859982028s ago: executing program 4 (id=383): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000400", 0x1c, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0xc2, 0x2000, 0x0, 0x7, {[@mptcp=@generic={0x22, 0x5, "5c7786"}]}}}}}}}}, 0x0) 2m42.4399693s ago: executing program 4 (id=384): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000040)=0x7fff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x24, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xf00001, 0x0, '\x00', @p_u16=0x0}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 2m26.075347678s ago: executing program 45 (id=384): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000040)=0x7fff, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x24, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = openat$vicodec0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0185648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xf00001, 0x0, '\x00', @p_u16=0x0}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 2m22.080088453s ago: executing program 7 (id=353): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$qrtrtun(r0, &(0x7f0000000580)="0b8393b6167aa5d73dad0a66a7c9277d481343d806d17c2ca991d28a336cca04457118d40ecd80b9e740666d460730b94c5c73a5e6", 0xfffffffffffffde2) write$qrtrtun(r0, 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 1m24.926915495s ago: executing program 7 (id=353): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$qrtrtun(r0, &(0x7f0000000580)="0b8393b6167aa5d73dad0a66a7c9277d481343d806d17c2ca991d28a336cca04457118d40ecd80b9e740666d460730b94c5c73a5e6", 0xfffffffffffffde2) write$qrtrtun(r0, 0x0, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 1m21.191831592s ago: executing program 7 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x20000, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m19.884176152s ago: executing program 7 (id=437): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x2, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0), 0x0, 0x4001c00) 1m4.550640764s ago: executing program 46 (id=437): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x2, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0), 0x0, 0x4001c00) 18.643313405s ago: executing program 6 (id=562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 14.02055225s ago: executing program 8 (id=563): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x20000, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x10000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13.728551155s ago: executing program 6 (id=566): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0189436, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCSETD(r3, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)) 11.587827357s ago: executing program 3 (id=569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x95a6, 0x2, 0x4, 0xfffffffd}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r6, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3b}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 11.510440237s ago: executing program 8 (id=570): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xc, @remote, 0xfffffffc}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0xffffffffffffffff, 0xfff}}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x9, 0x0, 0xff, 0x9, 0x0, 0xfffe}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r7, &(0x7f0000004540)={0x2020}, 0x2020) 10.799915988s ago: executing program 9 (id=572): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 10.449907319s ago: executing program 3 (id=573): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7f, 0xef0, 0x80, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$kcm(0x10, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x10b121) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000280)=0x11) writev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000940)=':', 0xfdef}], 0x1) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x49be, &(0x7f0000000380)={0x0, 0x37b0, 0x10100, 0x0, 0x2, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a30000000000800034000000001140000001100010000000000000000000700000a"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f50000000000000000020000000900020073797a3100000000080003400000000109"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) ioctl$TIOCSIG(r2, 0x40045436, 0x33) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="010800040000000000000b00000008000300", @ANYRES32=0x0, @ANYRESHEX], 0x44}}, 0x40000) r8 = userfaultfd(0x1001) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) close_range(r8, 0xffffffffffffffff, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x230402, 0x0) 9.974978335s ago: executing program 8 (id=574): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 9.60842215s ago: executing program 9 (id=575): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x0, 0xfff1}, {0x0, 0x7}}, [{0x8, 0xb, 0xb57}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) 8.332727543s ago: executing program 8 (id=577): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) 7.970710525s ago: executing program 9 (id=578): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$UI_GET_VERSION(r0, 0x8004552d, &(0x7f00000001c0)) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100)={@rand_addr, 0x0}, &(0x7f0000000140)=0x14) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) sendto$packet(r1, &(0x7f0000000000)="9d8a772bcc2293ac4d4f34ece763473278fd65728499bf9ed0d4a388803a411e44a12ebafef65f92286c22488813b4c20da27604589f975d87e0b1ea89dcfe78e09bdfc83a", 0x45, 0x80c0, &(0x7f0000000180)={0x11, 0x11, r2, 0x1, 0xa, 0x6, @random="f6abb08ccce8"}, 0x14) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000180)='4\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) dup3(r3, r0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) 7.21910568s ago: executing program 8 (id=579): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@end]}}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x42) 6.786753344s ago: executing program 2 (id=580): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x20000, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x10000}) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5.760284826s ago: executing program 2 (id=581): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfd, "ffff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCMSET(r0, 0x5418, 0x0) 5.672663891s ago: executing program 8 (id=582): socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0)={0x1, 0x0, [{0x2, 0x5b, &(0x7f0000000440)=""/91}]}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x1d}) 4.450959645s ago: executing program 2 (id=583): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x95a6, 0x2, 0x4, 0xfffffffd}, &(0x7f00000002c0), &(0x7f00000003c0)) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x44, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_POLICE={0x10, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x3b}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 3.977067677s ago: executing program 6 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000200)={0x0, 0x104000, 0x0, 0xa5c}, 0x1c) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000240)=0x1000, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xc, @remote, 0xfffffffc}, {0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0xffffffffffffffff, 0xfff}}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x9, 0x0, 0xff, 0x9, 0x0, 0xfffe}, 0x20) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') read$FUSE(r7, &(0x7f0000004540)={0x2020}, 0x2020) 3.880483352s ago: executing program 3 (id=585): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) 3.799462651s ago: executing program 9 (id=586): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) 3.341685077s ago: executing program 2 (id=587): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000000000000000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe2, 0x0) 3.036509994s ago: executing program 3 (id=588): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0x0, 0xfff1}, {0x0, 0x7}}, [{0x8, 0xb, 0xb57}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) 2.512049416s ago: executing program 6 (id=589): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f03c, 0x5}) 2.053258106s ago: executing program 9 (id=590): membarrier(0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioperm(0x1, 0x3, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00!', @ANYRES16=r2, @ANYBLOB="d5672dbd7000fcdbdf2517000000"], 0x53}, 0x1, 0x0, 0x0, 0x4010}, 0x4000018) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000001c0)={@map, 0x3, 0x1f, 0x0, 0x0, 0xfffffffffffffd93, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_usb_disconnect(r0) syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") memfd_create(&(0x7f0000002c80)='syztnl1\x9b', 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfd, "ffff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCMSET(r5, 0x5418, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x1e, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0xd4ce}}, 0x30) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f00000003c0)={[{@dioread_nolock}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa}}, {@data_err_ignore}, {@nojournal_checksum}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x558, &(0x7f0000001600)="$eJzs3d9rW1UcAPDvTdv91lUYQ0WksAcnc+na+mOCD/NRdDjQ9xnarIymy2jSsdaB24N78UWGIOJAfNd3H4f/gH/FQAdDRtEHXyI3vemyJWmzNjOd9/OBW87Jvcm535x7Ts7pySUB5NZE+qcQ8VJEfJ1EHI6IJNs3GtnOifXj1h5cm023JBqNT/5Mmsel+dZrtZ53MMu8GBG/fhlxotBZbm1ldaFUqZSXsvxkffHyZG1l9eTFxdJ8eb58aXpm5vRbM9PvvvP2wGJ9/dzf331854PTXx1b+/bney/cSuJMHMr2tcexA9fbMxMxkb0nY3HmsQOnBlDYbpIM+wTYlpGsnY9F2gccjpGs1QP/f19ERAPIqUT7h5xqjQNac/sBzYOfGfffX58AdcY/uv6/kdjXnBsdWEsemRml893xAZSflvHLH7dvpVus18O+AbwswJau34iIU6Ojnf1fkvV/23eqj2MeLyNvnz8wTHfS8c8b3cY/hY3xT3QZ/xzs0na3Y+v2X7g3gGJ6Ssd/73Ud/24sWo2PZLnnmmO+seTCxUo57duej4jjMbY3zW+2nnN67W6j17728V+6peW3xoLZedwb3fvoc+ZK9dJOYm53/0bEy13Hv8lG/Sdd6j99P871WcbR8u1Xe+3bOv6nq/FjxGtd6//hilay+frkZPN6mGxdFZ3+unn0t17lDzv+tP4PbB7/eNK+Xlt78jJ+2PdPude+R+KP/q//PcmnzfSe7LGrpXp9aSpiT/JR5+PTD5/byjfa4j9+bPP+r9v1vz8iPusz/ptHfnqlr/iHVP9zT1T/T564++Hn3/cqv7/+781m6nj2SD/9X78nuJP3DgAAAAAAAHabQkQciqRQ3EgXCsXi+vc7jsSBQqVaq5+4UF2+NBfNe2XHY6zQWuk+3PZ9iKns+7Ct/PRj+ZnsXsNvRvY388XZamVu2MEDAAAAAAAAAAAAAAAAAADALnGwx/3/qd9Hhn12wFPnJ78hv7Zs/4P4pSdgV/L5D/ml/UN+af+QX9o/5Jf2D/nV0f4t/ENu+PyH/NL+AQAAAAAAAAAAAAAAAAAAAAAAAAAAYKDOnT2bbo21B9dm0/zclZXlheqVk3Pl2kJxcXm2OFtdulycr1bnK+XibHVxq9erVKuXp6Zj+epkvVyrT9ZWVs8vVpcv1c9fXCzNl8+Xx/6TqAAAAAAAAAAAAAAAAAAAAODZUltZXShVKuUlCYltJUZ3x2lIDDgx7J4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB76NwAA//8uZTXm") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) clock_gettime(0x0, &(0x7f0000005ac0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, r7}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffff"], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.756223721s ago: executing program 2 (id=591): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @multicast}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000840)={0x100, 0x12, 0x2, 0x70bd29, 0x25dfdbfb, "", [@typed={0x4, 0x1d}, @typed={0x14, 0x14a, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @typed={0x8, 0xd6, 0x0, 0x0, @uid}, @generic="d48cb6e0923cd59a3e83a6fd94606324932eba72d539f9f82fba9d909251e499390ed659d28eace0babe86942fa91445ecc89a7bf11f44809aae1948ed37d5ac0d21c43f655de16d95cf2ca2ed2c82fd207bd27c8e5e046e2b043f4695a7fd09b11cb9e18a8cc63c86928eecfc2d42e0499d8707a2b4dd3217d72b5b05d53b891fb088805fa5c5e58ecc81fe72ea0afa8c08ce4464fb49b874f13edf2ee11db71e597e999eda9dd15f362d28e5d2d8c543a0ae6b73d9e419925acf474f40d60dc8402a8409d2fbd9c7d04b1c1d01"]}, 0x100}], 0x2, 0x0, 0x0, 0x20000080}, 0x4000) 1.690736267s ago: executing program 3 (id=592): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) 1.447782547s ago: executing program 6 (id=593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x20001, 0x0, [0x40, 0x4, 0x101, 0xe3, 0x0, 0x7216, 0x1, 0x9]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x3a}, {}, {}, {0x0, 0x35}, {0x81, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6}, {}, {0x73, 0x6, 0x2}, {0x0, 0x0, 0xfe}, {}, {}, {0x80, 0x0, 0x0, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x5, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x0, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x1}]}}) ioctl$KVM_RUN(r2, 0x8004ae98, 0x20e10000) 957.813752ms ago: executing program 2 (id=594): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000001000000000000000000001090224000100000000090400000103000000092105000905810300020000070000000000"], 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000480)='./file1\x00') r0 = socket$caif_seqpacket(0x25, 0x5, 0x3) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3800003, 0x4000010, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$video(&(0x7f0000000340), 0x2, 0x8340) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@mmap={0x5, 0x9, 0x4, 0x10, 0x9, {}, {0x5, 0xc, 0x3, 0x1b, 0x1, 0xa, "c754e8ac"}, 0x0, 0x1, {}, 0x7}) alarm(0x7) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x3, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @initdev={0xac, 0x1e, 0x4, 0x0}, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x6e}, {@local, 0x4e20, 0x2, 0x2, 0x12d5c, 0x12d5c}}, 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg$sock(r4, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x11, 0x20000000) 808.706931ms ago: executing program 3 (id=595): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x1000, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x31, 0x66, 0x0, 0x8b, 0x67, 0x0, @rand_addr=0x64010120, @broadcast}, "2197e3ba627aa2e71bd9fe1a399b5110420b70460c0dad392d66248a43"}}, 0x3f) 408.368539ms ago: executing program 6 (id=596): r0 = syz_open_dev$cec(0x0, 0x0, 0x80200) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000340)={"8171f879", 0x7, 0xb0, 0x0, 0x9, 0x5, "00800000000000f51000", "00598b00", "0200", "01000800", ["dc001000", "0000000000ffe700005a00", "4a218302000000215c384d00", "790000a5a16706008c00edbf"]}) 0s ago: executing program 9 (id=597): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0) openat$dsp(0xffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) socket$netlink(0x10, 0x3, 0xc) syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f00000001c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r5 = dup(r1) write$6lowpan_enable(r5, 0x0, 0x0) r6 = syz_io_uring_setup(0x6d8a, 0x0, 0x0, &(0x7f00000001c0)=0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r8) syz_io_uring_setup(0x235, 0x0, &(0x7f0000000200), 0x0) syz_io_uring_setup(0x5763, 0x0, &(0x7f0000000600), 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r9, 0x0, 0x0) syz_io_uring_submit(0x0, r7, 0x0) io_uring_enter(r6, 0x2def, 0x4000, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 375.883674][ T1781] bridge_slave_1: left promiscuous mode [ 375.890298][ T1781] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.014358][ T1781] bridge_slave_0: left allmulticast mode [ 376.025081][ T1781] bridge_slave_0: left promiscuous mode [ 376.032210][ T1781] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.727403][ T1781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.750694][ T1781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.829972][ T1781] bond0 (unregistering): Released all slaves [ 376.962843][ T6663] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.972111][ T6663] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.981363][ T6663] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.990376][ T6663] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.217067][ T6753] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 377.252421][ T6753] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 377.328005][ T6795] chnl_net:caif_netlink_parms(): no params data found [ 377.353034][ T6753] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 377.531631][ T6753] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 378.186004][ T1781] hsr_slave_0: left promiscuous mode [ 378.207365][ T1781] hsr_slave_1: left promiscuous mode [ 378.216499][ T1781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.224468][ T1781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.288540][ T1781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.296401][ T1781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.389271][ T1781] veth1_macvtap: left promiscuous mode [ 378.395320][ T1781] veth0_macvtap: left promiscuous mode [ 378.401344][ T1781] veth1_vlan: left promiscuous mode [ 378.406847][ T1781] veth0_vlan: left promiscuous mode [ 379.198482][ T1781] team0 (unregistering): Port device team_slave_1 removed [ 379.290513][ T1781] team0 (unregistering): Port device team_slave_0 removed [ 380.558463][ T1810] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.896319][ T1810] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.995299][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.004539][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.012452][ T6795] bridge_slave_0: entered allmulticast mode [ 381.022238][ T6795] bridge_slave_0: entered promiscuous mode [ 381.179408][ T1810] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.270426][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.280607][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.288777][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.296523][ T6795] bridge_slave_1: entered allmulticast mode [ 381.305873][ T6795] bridge_slave_1: entered promiscuous mode [ 381.405374][ T1810] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.454793][ T6862] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 381.496727][ T6862] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 381.869284][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.894439][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.122562][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.159235][ T1791] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.166955][ T1791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.546269][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.553990][ T1791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.721131][ T6795] team0: Port device team_slave_0 added [ 383.711295][ T1810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.738561][ T1810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.755734][ T1810] bond0 (unregistering): Released all slaves [ 385.376494][ T6795] team0: Port device team_slave_1 added [ 385.963237][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.970617][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.997214][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.194353][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.202035][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.228481][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.434184][ T1810] hsr_slave_0: left promiscuous mode [ 386.491667][ T1810] hsr_slave_1: left promiscuous mode [ 386.499628][ T1810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.507741][ T1810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.634327][ T1810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.642626][ T1810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.809587][ T1810] veth1_macvtap: left promiscuous mode [ 386.815613][ T1810] veth0_macvtap: left promiscuous mode [ 386.821691][ T1810] veth1_vlan: left promiscuous mode [ 386.827290][ T1810] veth0_vlan: left promiscuous mode [ 387.639422][ T1810] team0 (unregistering): Port device team_slave_1 removed [ 387.778021][ T1810] team0 (unregistering): Port device team_slave_0 removed [ 388.717740][ T6795] hsr_slave_0: entered promiscuous mode [ 388.727788][ T6795] hsr_slave_1: entered promiscuous mode [ 390.070713][ T1810] IPVS: stop unused estimator thread 0... [ 391.550267][ T6795] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 391.657840][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.682932][ T6795] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 391.742424][ T1810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.750512][ T1810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.856542][ T6795] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 391.933971][ T6795] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 392.053470][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.062677][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.358875][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.521828][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 393.521895][ T30] audit: type=1804 audit(1746739141.805:24): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.147" name="/newroot/0/file0/bus/file1" dev="ramfs" ino=12871 res=1 errno=0 [ 393.593156][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.177134][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.184610][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.262433][ T1810] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.270088][ T1810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.412217][ T30] audit: type=1804 audit(1746739142.665:25): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.147" name="/newroot/0/file0/bus/bus" dev="ramfs" ino=14222 res=1 errno=0 [ 394.434691][ T30] audit: type=1804 audit(1746739142.675:26): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.147" name="/newroot/0/file0/bus/bus" dev="ramfs" ino=14222 res=1 errno=0 [ 394.947987][ T6753] veth0_vlan: entered promiscuous mode [ 395.110160][ T6753] veth1_vlan: entered promiscuous mode [ 395.326471][ T5808] Bluetooth: hci5: command 0x0406 tx timeout [ 395.605061][ T6753] veth0_macvtap: entered promiscuous mode [ 395.704147][ T6753] veth1_macvtap: entered promiscuous mode [ 396.345570][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.189'. [ 398.651399][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.662204][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.673512][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.684195][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.697627][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.104870][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.116127][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.126338][ T6753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.137193][ T6753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.150816][ T6753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.459383][ T6753] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.474190][ T6753] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.486007][ T6753] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.496195][ T6753] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.578902][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.787661][ T6795] veth0_vlan: entered promiscuous mode [ 403.979439][ T6795] veth1_vlan: entered promiscuous mode [ 404.735053][ T6795] veth0_macvtap: entered promiscuous mode [ 404.864843][ T6795] veth1_macvtap: entered promiscuous mode [ 405.104652][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.115594][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.125931][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.136931][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.147160][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.157977][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.172544][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.307099][ T7002] netlink: 8 bytes leftover after parsing attributes in process `syz.5.195'. [ 405.578756][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.589765][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.601426][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.614448][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.624877][ T6795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 405.635638][ T6795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.650605][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.994300][ T6795] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.003527][ T6795] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.012624][ T6795] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.023825][ T6795] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.621653][ T4020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.629752][ T4020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.680564][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.689619][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 408.893328][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.901517][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.262333][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 410.302354][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 410.314188][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 410.341957][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 410.392617][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.813884][ T7048] syzkaller1: entered promiscuous mode [ 410.819637][ T7048] syzkaller1: entered allmulticast mode [ 412.324305][ T7041] chnl_net:caif_netlink_parms(): no params data found [ 412.548703][ T5798] Bluetooth: hci1: command tx timeout [ 413.451342][ T30] audit: type=1326 audit(1746739161.735:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.8.202" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 413.931557][ T7071] tipc: Started in network mode [ 413.936982][ T7071] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 413.946479][ T7071] tipc: Enabled bearer , priority 10 [ 414.182201][ T7073] veth1_macvtap: left promiscuous mode [ 414.236169][ T1781] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.548601][ T1781] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.592241][ T5798] Bluetooth: hci1: command tx timeout [ 414.839989][ T1781] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.040433][ T1781] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.061196][ T2082] tipc: Node number set to 15444650 [ 415.608161][ T7041] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.615984][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.625114][ T7041] bridge_slave_0: entered allmulticast mode [ 415.642433][ T7041] bridge_slave_0: entered promiscuous mode [ 415.942065][ T7041] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.949696][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.963952][ T7041] bridge_slave_1: entered allmulticast mode [ 415.973711][ T7041] bridge_slave_1: entered promiscuous mode [ 415.983838][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.021285][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.031632][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.039680][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.072351][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.189683][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.206610][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.619924][ T7041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.631663][ T1781] bridge_slave_1: left allmulticast mode [ 416.637563][ T1781] bridge_slave_1: left promiscuous mode [ 416.644381][ T1781] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.681540][ T5798] Bluetooth: hci1: command tx timeout [ 416.746748][ T1781] bridge_slave_0: left allmulticast mode [ 416.753234][ T1781] bridge_slave_0: left promiscuous mode [ 416.759844][ T1781] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.462576][ T1781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.748646][ T1781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.837235][ T1781] bond0 (unregistering): Released all slaves [ 417.939639][ T1810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.947865][ T1810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.062977][ T7041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.281581][ T5798] Bluetooth: hci2: command tx timeout [ 418.853777][ T5798] Bluetooth: hci1: command tx timeout [ 420.911607][ T5798] Bluetooth: hci2: command tx timeout [ 422.431324][ T7095] Set syz1 is full, maxelem 65536 reached [ 422.791649][ T7041] team0: Port device team_slave_0 added [ 422.803898][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 422.987285][ T1781] hsr_slave_0: left promiscuous mode [ 422.996531][ T5798] Bluetooth: hci2: command tx timeout [ 423.033386][ T1781] hsr_slave_1: left promiscuous mode [ 423.041873][ T1781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.049943][ T1781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.155091][ T1781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.163042][ T1781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.253825][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.211'. [ 423.279280][ T1781] veth1_macvtap: left promiscuous mode [ 423.285303][ T1781] veth0_macvtap: left promiscuous mode [ 423.291544][ T1781] veth1_vlan: left promiscuous mode [ 423.297153][ T1781] veth0_vlan: left promiscuous mode [ 424.618347][ T1781] team0 (unregistering): Port device team_slave_1 removed [ 424.711465][ T1781] team0 (unregistering): Port device team_slave_0 removed [ 425.088194][ T5798] Bluetooth: hci2: command tx timeout [ 425.179529][ T7041] team0: Port device team_slave_1 added [ 425.659730][ T7123] netlink: 12 bytes leftover after parsing attributes in process `syz.5.215'. [ 425.780231][ T7041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.789719][ T7041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.816538][ T7041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.034551][ T7041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.041867][ T7041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.068243][ T7041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.393142][ T7041] hsr_slave_0: entered promiscuous mode [ 426.409409][ T7041] hsr_slave_1: entered promiscuous mode [ 426.418396][ T7041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.426316][ T7041] Cannot create hsr debugfs directory [ 428.338972][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.352652][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.360416][ T7088] bridge_slave_0: entered allmulticast mode [ 428.370276][ T7088] bridge_slave_0: entered promiscuous mode [ 428.832062][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.839639][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.847681][ T7088] bridge_slave_1: entered allmulticast mode [ 428.860365][ T7088] bridge_slave_1: entered promiscuous mode [ 429.461480][ T1781] bond0 (unregistering): Released all slaves [ 429.485490][ T1781] bond1 (unregistering): Released all slaves [ 430.203517][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.359304][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.748140][ T1781] hsr_slave_0: left promiscuous mode [ 430.776418][ T1781] hsr_slave_1: left promiscuous mode [ 431.817322][ T7088] team0: Port device team_slave_0 added [ 432.199235][ T7088] team0: Port device team_slave_1 added [ 432.990090][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.998233][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.024967][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.263488][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.270710][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.298497][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.815780][ T7041] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 433.906044][ T7088] hsr_slave_0: entered promiscuous mode [ 433.916985][ T7088] hsr_slave_1: entered promiscuous mode [ 433.926179][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 433.934172][ T7088] Cannot create hsr debugfs directory [ 433.992079][ T7041] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 434.055857][ T7041] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 434.813896][ T7041] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 434.921599][ T7181] netlink: 36 bytes leftover after parsing attributes in process `syz.8.226'. [ 437.684176][ T7195] netlink: 'syz.8.227': attribute type 1 has an invalid length. [ 437.693535][ T7195] netlink: 'syz.8.227': attribute type 2 has an invalid length. [ 439.453902][ T7041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.973617][ T7041] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.004740][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.012226][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.066569][ T7088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.140205][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.147867][ T3748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.241355][ T7088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.410151][ T7088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.535941][ T7208] Zero length message leads to an empty skb [ 440.549532][ T7088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 443.877781][ T7224] random: crng reseeded on system resumption [ 444.442395][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.724921][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.827166][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.834935][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.871462][ T5798] Bluetooth: hci6: ISO packet too small [ 444.900506][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.908159][ T3748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.018540][ T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 445.284942][ T24] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 445.293895][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.349798][ T24] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 445.359554][ T24] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 445.368248][ T24] usb 10-1: Manufacturer: syz [ 445.499233][ T24] usb 10-1: config 0 descriptor?? [ 445.650807][ T7041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.961216][ T24] rc_core: IR keymap rc-hauppauge not found [ 445.967508][ T24] Registered IR keymap rc-empty [ 445.976375][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 445.990521][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input5 [ 446.219605][ T24] usb 10-1: USB disconnect, device number 2 [ 448.858679][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.944604][ T7088] veth0_vlan: entered promiscuous mode [ 450.175792][ T7088] veth1_vlan: entered promiscuous mode [ 450.519368][ T7041] veth0_vlan: entered promiscuous mode [ 450.598058][ T7088] veth0_macvtap: entered promiscuous mode [ 450.673273][ T7041] veth1_vlan: entered promiscuous mode [ 450.698611][ T7088] veth1_macvtap: entered promiscuous mode [ 450.943155][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.954448][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.964697][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.979550][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.991107][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.001992][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.017275][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.277940][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.293133][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.305001][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.315948][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.326204][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.337018][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.352494][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.380655][ T7041] veth0_macvtap: entered promiscuous mode [ 451.471393][ T7088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.480635][ T7088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.496572][ T7088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.507082][ T7088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.574914][ T7041] veth1_macvtap: entered promiscuous mode [ 451.847972][ T7041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.859402][ T7041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.869714][ T7041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.880570][ T7041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.891101][ T7041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.904029][ T7041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.915457][ T7041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.926260][ T7041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.941751][ T7041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.058882][ T7041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.069862][ T7041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.080596][ T7041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.101094][ T7041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.116528][ T7041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.127350][ T7041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.137551][ T7041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.148368][ T7041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.163588][ T7041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.350189][ T7041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.359740][ T7041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.369042][ T7041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.379240][ T7041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.638824][ T7272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.361430][ T45] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 454.591245][ T45] usb 9-1: Using ep0 maxpacket: 8 [ 454.637288][ T45] usb 9-1: config 0 has no interfaces? [ 454.644381][ T45] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 454.653904][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.734169][ T45] usb 9-1: config 0 descriptor?? [ 454.994729][ T45] usb 9-1: USB disconnect, device number 2 [ 456.791194][ T5845] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 457.001943][ T5845] usb 9-1: device descriptor read/64, error -71 [ 457.271016][ T5845] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 457.461224][ T5845] usb 9-1: device descriptor read/64, error -71 [ 457.573714][ T5845] usb usb9-port1: attempt power cycle [ 458.031550][ T5845] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 458.119240][ T5845] usb 9-1: device descriptor read/8, error -71 [ 458.385724][ T5845] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 458.473888][ T5845] usb 9-1: device descriptor read/8, error -71 [ 458.594440][ T5845] usb usb9-port1: unable to enumerate USB device [ 461.058478][ T1810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.066837][ T1810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.410673][ T1810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.422915][ T1810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.949649][ T3624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.965835][ T3624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.258172][ T1781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.266408][ T1781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.341151][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.3.256'. [ 466.906230][ T7388] syz.5.257 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 467.002809][ T7384] sctp: failed to load transform for md5: -2 [ 469.577924][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.593206][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.602594][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.622222][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.635013][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.194993][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 470.202083][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.252716][ T5798] Bluetooth: hci3: command tx timeout [ 476.287300][ T5808] Bluetooth: hci3: command tx timeout [ 476.746623][ T7407] chnl_net:caif_netlink_parms(): no params data found [ 476.994732][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 477.232906][ T5808] Bluetooth: hci6: command 0x0406 tx timeout [ 477.283722][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.293330][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.354678][ T5798] Bluetooth: hci3: command tx timeout [ 479.481727][ T5845] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 479.547178][ T7407] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.555027][ T7407] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.563704][ T7407] bridge_slave_0: entered allmulticast mode [ 479.572448][ T7407] bridge_slave_0: entered promiscuous mode [ 479.695543][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 479.742475][ T5845] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 479.756016][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 479.768748][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 479.780031][ T5845] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.793484][ T5845] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.802915][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.858931][ T7407] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.866809][ T7407] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.920743][ T7407] bridge_slave_1: entered allmulticast mode [ 479.924632][ T7407] bridge_slave_1: entered promiscuous mode [ 480.188234][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.199572][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.218197][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.236462][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.248198][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 480.330388][ T5845] usb 6-1: GET_CAPABILITIES returned 73 [ 480.336353][ T5845] usbtmc 6-1:16.0: can't read capabilities [ 480.472575][ T5808] Bluetooth: hci3: command tx timeout [ 480.498032][ T7407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.524638][ T7407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.542139][ T5845] usb 6-1: USB disconnect, device number 5 [ 480.973212][ T7407] team0: Port device team_slave_0 added [ 481.153858][ T7407] team0: Port device team_slave_1 added [ 481.792968][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.803892][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.830098][ C0] vkms_vblank_simulate: vblank timer overrun [ 481.839452][ T7407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.159854][ T7407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.167302][ T7407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.193556][ C0] vkms_vblank_simulate: vblank timer overrun [ 482.200699][ T7407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.369187][ T5808] Bluetooth: hci4: command tx timeout [ 482.564371][ T3672] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.448996][ T5808] Bluetooth: hci4: command tx timeout [ 484.469606][ T3672] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.817281][ T3672] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.302175][ T3672] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.662541][ T5111] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 485.887471][ T5111] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 485.900766][ T5111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.913163][ T5111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.923419][ T5111] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 485.956813][ T7407] hsr_slave_0: entered promiscuous mode [ 485.967609][ T7407] hsr_slave_1: entered promiscuous mode [ 485.976952][ T7407] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.984969][ T7407] Cannot create hsr debugfs directory [ 486.114742][ T5111] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 486.124685][ T5111] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 486.134084][ T5111] usb 6-1: Manufacturer: syz [ 486.188947][ T5111] usb 6-1: config 0 descriptor?? [ 486.512153][ T5808] Bluetooth: hci4: command tx timeout [ 486.724936][ T5111] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 486.874139][ T5111] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 486.997562][ T5111] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 487.219688][ T3672] bridge_slave_1: left allmulticast mode [ 487.229088][ T3672] bridge_slave_1: left promiscuous mode [ 487.235684][ T3672] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.387403][ T3672] bridge_slave_0: left allmulticast mode [ 487.394349][ T3672] bridge_slave_0: left promiscuous mode [ 487.401823][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.604860][ T5808] Bluetooth: hci4: command tx timeout [ 488.773208][ T3672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.867979][ T24] usb 6-1: USB disconnect, device number 6 [ 488.893262][ T3672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.955325][ T3672] bond0 (unregistering): Released all slaves [ 489.522018][ T7499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.278'. [ 489.981046][ T7458] chnl_net:caif_netlink_parms(): no params data found [ 490.417238][ T3672] hsr_slave_0: left promiscuous mode [ 490.452859][ T3672] hsr_slave_1: left promiscuous mode [ 490.462886][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.470582][ T3672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.590584][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.598781][ T3672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.798335][ T3672] veth1_macvtap: left promiscuous mode [ 490.804391][ T3672] veth0_macvtap: left promiscuous mode [ 490.812862][ T3672] veth1_vlan: left promiscuous mode [ 490.818457][ T3672] veth0_vlan: left promiscuous mode [ 492.427292][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.283'. [ 493.096896][ T3672] team0 (unregistering): Port device team_slave_1 removed [ 493.315019][ T3672] team0 (unregistering): Port device team_slave_0 removed [ 495.299752][ T3672] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.520657][ T3672] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.733215][ T3672] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.907396][ T3672] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.203727][ T7458] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.211525][ T7458] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.219399][ T7458] bridge_slave_0: entered allmulticast mode [ 496.229059][ T7458] bridge_slave_0: entered promiscuous mode [ 496.704539][ T7458] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.712438][ T7458] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.720201][ T7458] bridge_slave_1: entered allmulticast mode [ 496.730147][ T7458] bridge_slave_1: entered promiscuous mode [ 496.740747][ T7407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.927700][ T7407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.302559][ T3672] bridge_slave_1: left allmulticast mode [ 497.308588][ T3672] bridge_slave_1: left promiscuous mode [ 497.315725][ T3672] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.386472][ T3672] bridge_slave_0: left allmulticast mode [ 497.392614][ T3672] bridge_slave_0: left promiscuous mode [ 497.398916][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.454904][ T3672] tipc: Resetting bearer [ 497.753085][ T3672] tipc: Disabling bearer [ 498.004398][ T3672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.152721][ T3672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.196351][ T3672] bond0 (unregistering): Released all slaves [ 498.273559][ T7407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 498.429672][ T7458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.478533][ T7407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 498.616530][ T7458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.630038][ T3672] tipc: Left network mode [ 498.846341][ T7551] bridge_slave_0: left allmulticast mode [ 498.852623][ T7551] bridge_slave_0: left promiscuous mode [ 498.859401][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.891572][ T7555] netlink: 'syz.4.289': attribute type 10 has an invalid length. [ 498.978333][ T7551] bridge_slave_1: left allmulticast mode [ 498.987274][ T7551] bridge_slave_1: left promiscuous mode [ 498.994438][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.247347][ T7551] bond0: (slave bond_slave_0): Releasing backup interface [ 499.296123][ T7551] bond0: (slave bond_slave_1): Releasing backup interface [ 499.497475][ T7551] team0: Port device team_slave_0 removed [ 499.577715][ T7551] team0: Port device team_slave_1 removed [ 499.589158][ T7551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.597059][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.711350][ T7551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.720609][ T7551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.316033][ T7458] team0: Port device team_slave_0 added [ 500.578438][ T7458] team0: Port device team_slave_1 added [ 500.901483][ T3672] hsr_slave_0: left promiscuous mode [ 500.950095][ T3672] hsr_slave_1: left promiscuous mode [ 500.958611][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.966508][ T3672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.086008][ T3672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.094201][ T3672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.197026][ T3672] veth0_macvtap: left promiscuous mode [ 501.203147][ T3672] veth1_vlan: left promiscuous mode [ 501.208737][ T3672] veth0_vlan: left promiscuous mode [ 501.731154][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 501.921913][ T30] audit: type=1326 audit(1746739250.175:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7568 comm="syz.5.292" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7fc00000 [ 501.950454][ T3672] team0 (unregistering): Port device team_slave_1 removed [ 502.048859][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 502.068766][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 502.119501][ T24] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 502.129020][ T24] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 502.137843][ T24] usb 5-1: Product: syz [ 502.142369][ T24] usb 5-1: Manufacturer: syz [ 502.147211][ T24] usb 5-1: SerialNumber: syz [ 502.163996][ T3672] team0 (unregistering): Port device team_slave_0 removed [ 502.317592][ T24] usb 5-1: config 0 descriptor?? [ 502.329230][ T7572] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.635657][ T7572] netlink: 12 bytes leftover after parsing attributes in process `syz.4.291'. [ 502.813516][ T5845] usb 5-1: USB disconnect, device number 2 [ 503.025455][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.033032][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.059746][ T7458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.297047][ T7458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.305427][ T7458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.334235][ T7458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.005664][ T7458] hsr_slave_0: entered promiscuous mode [ 504.017677][ T7458] hsr_slave_1: entered promiscuous mode [ 504.494106][ T7407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.784398][ T7407] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.882838][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.890436][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.927519][ T7598] netlink: 'syz.4.298': attribute type 13 has an invalid length. [ 506.545942][ T7598] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.555549][ T7598] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.566572][ T7598] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.581859][ T7598] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.842764][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.850512][ T3672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.879390][ T7458] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.903580][ T7458] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 507.951983][ T7458] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 507.993409][ T7458] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.380183][ T7407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.467837][ T7458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.705429][ T7458] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.877217][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.884905][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.979228][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.986853][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.364625][ T7407] veth0_vlan: entered promiscuous mode [ 512.560543][ T7407] veth1_vlan: entered promiscuous mode [ 513.081809][ T7407] veth0_macvtap: entered promiscuous mode [ 513.207908][ T7653] kvm: pic: non byte read [ 513.213139][ T7407] veth1_macvtap: entered promiscuous mode [ 513.439361][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.450218][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.460438][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.471887][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.485996][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.787920][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.798792][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.809153][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.819941][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.834820][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.125249][ T7407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.136455][ T7407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.145631][ T7407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.154888][ T7407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.554776][ T30] audit: type=1326 audit(1746739262.845:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 514.577303][ T30] audit: type=1326 audit(1746739262.855:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 514.817906][ T7458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.861611][ T30] audit: type=1326 audit(1746739262.935:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 514.884871][ T30] audit: type=1326 audit(1746739262.935:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 514.907330][ T30] audit: type=1326 audit(1746739262.935:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 514.929659][ T30] audit: type=1326 audit(1746739262.975:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf709e539 code=0x7ffc0000 [ 514.951984][ T30] audit: type=1326 audit(1746739262.975:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 514.974486][ T30] audit: type=1326 audit(1746739262.975:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 514.996726][ T30] audit: type=1326 audit(1746739262.975:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 515.019149][ T30] audit: type=1326 audit(1746739262.975:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7668 comm="syz.3.308" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf709e558 code=0x7ffc0000 [ 515.286744][ T7675] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 515.523167][ T7458] veth0_vlan: entered promiscuous mode [ 515.612164][ T7458] veth1_vlan: entered promiscuous mode [ 516.004310][ T7458] veth0_macvtap: entered promiscuous mode [ 516.011601][ T5111] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 516.075369][ T7458] veth1_macvtap: entered promiscuous mode [ 516.229702][ T5111] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.259355][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.270244][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.282646][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.293449][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.307355][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.308875][ T5111] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 516.319336][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.327445][ T5111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.343179][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.345542][ T5111] usb 6-1: Product: syz [ 516.357480][ T5111] usb 6-1: Manufacturer: syz [ 516.362967][ T5111] usb 6-1: SerialNumber: syz [ 516.566303][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.578572][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.588988][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.601295][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.615906][ T7458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.627891][ T7458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.642965][ T7458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.824139][ T5111] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 517.041219][ T7458] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.050509][ T7458] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.052470][ T5111] usb 6-1: USB disconnect, device number 7 [ 517.060193][ T7458] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.075328][ T7458] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.143255][ T5111] usblp0: removed [ 519.773270][ T7729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 521.095648][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.107303][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.634388][ T7747] 9pnet_virtio: no channels available for device syz [ 522.817321][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.825974][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.004325][ T7747] 9pnet_fd: Insufficient options for proto=fd [ 524.033502][ T7768] syzkaller1: entered promiscuous mode [ 524.039246][ T7768] syzkaller1: entered allmulticast mode [ 527.036666][ T4020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.044986][ T4020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.024571][ T1781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.032764][ T1781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.585921][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.595350][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.622391][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 533.632389][ T5808] Bluetooth: hci1: command 0x0406 tx timeout [ 533.692466][ T7825] random: crng reseeded on system resumption [ 537.685394][ T7825] IPVS: Error connecting to the multicast addr [ 537.713402][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.334'. [ 539.471492][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 543.143237][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 543.161227][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 543.174426][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 543.263565][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 543.276868][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.956051][ T7868] chnl_net:caif_netlink_parms(): no params data found [ 545.336453][ T5808] Bluetooth: hci0: command tx timeout [ 547.612953][ T5808] Bluetooth: hci0: command tx timeout [ 549.735819][ T5808] Bluetooth: hci0: command tx timeout [ 549.856918][ T7868] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.864594][ T7868] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.872334][ T7868] bridge_slave_0: entered allmulticast mode [ 549.880699][ T7868] bridge_slave_0: entered promiscuous mode [ 550.101695][ T7868] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.109628][ T7868] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.117739][ T7868] bridge_slave_1: entered allmulticast mode [ 550.127778][ T7868] bridge_slave_1: entered promiscuous mode [ 550.606202][ T7868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 550.780223][ T7868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.298454][ T7868] team0: Port device team_slave_0 added [ 551.311642][ T7905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.348'. [ 551.435004][ T7868] team0: Port device team_slave_1 added [ 551.811379][ T5808] Bluetooth: hci0: command tx timeout [ 551.906616][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.913976][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.944387][ T7868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.226749][ T7868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.234245][ T7868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.264920][ T7868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.935937][ T7919] syz.0.351: attempt to access beyond end of device [ 552.935937][ T7919] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 552.948980][ T7919] vxfs: unable to read disk superblock at 1 [ 552.955728][ T7919] syz.0.351: attempt to access beyond end of device [ 552.955728][ T7919] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 552.971685][ T7919] vxfs: unable to read disk superblock at 8 [ 552.977747][ T7919] vxfs: can't find superblock. [ 553.189176][ T7868] hsr_slave_0: entered promiscuous mode [ 553.198170][ T7868] hsr_slave_1: entered promiscuous mode [ 553.207089][ T7868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.215058][ T7868] Cannot create hsr debugfs directory [ 555.912943][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 555.950987][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 555.962775][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 555.975674][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 555.987266][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 556.045206][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 556.072317][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 556.124256][ T5793] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 556.237230][ T5793] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 556.265012][ T5793] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 556.524772][ T3594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.121219][ T3594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.098326][ T3594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.112533][ T5798] Bluetooth: hci2: command tx timeout [ 559.081980][ T7868] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 559.102669][ T5798] Bluetooth: hci6: command tx timeout [ 559.671345][ T7951] serio: Serial port ptm0 [ 560.209672][ T5798] Bluetooth: hci2: command tx timeout [ 561.117808][ T3594] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.552330][ T5798] Bluetooth: hci6: command tx timeout [ 561.652860][ T7868] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 561.755278][ T7868] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 562.023066][ T7868] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 562.194078][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.358'. [ 562.271183][ T5793] Bluetooth: hci2: command tx timeout [ 562.389762][ T7957] batadv_slave_0: entered promiscuous mode [ 562.464825][ T7959] batadv_slave_0 (unregistering): left promiscuous mode [ 562.654574][ T3594] bridge_slave_1: left allmulticast mode [ 562.660403][ T3594] bridge_slave_1: left promiscuous mode [ 562.667977][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.367089][ T3594] bridge_slave_0: left allmulticast mode [ 563.373162][ T3594] bridge_slave_0: left promiscuous mode [ 563.379778][ T3594] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.302038][ T5793] Bluetooth: hci6: command tx timeout [ 564.912282][ T5793] Bluetooth: hci2: command tx timeout [ 565.782567][ T3594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.814964][ T3594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.894334][ T3594] bond0 (unregistering): Released all slaves [ 566.158035][ T7967] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 566.591538][ T5793] Bluetooth: hci6: command tx timeout [ 567.458877][ T7939] chnl_net:caif_netlink_parms(): no params data found [ 567.537175][ T5793] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 567.864846][ T3594] hsr_slave_0: left promiscuous mode [ 567.895081][ T3594] hsr_slave_1: left promiscuous mode [ 567.903936][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.912005][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.946142][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.954353][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.057133][ T3594] veth1_macvtap: left promiscuous mode [ 568.063158][ T3594] veth0_macvtap: left promiscuous mode [ 568.068957][ T3594] veth1_vlan: left promiscuous mode [ 568.074612][ T3594] veth0_vlan: left promiscuous mode [ 569.128098][ T3594] team0 (unregistering): Port device team_slave_1 removed [ 569.272648][ T3594] team0 (unregistering): Port device team_slave_0 removed [ 569.771823][ T7936] chnl_net:caif_netlink_parms(): no params data found [ 570.879048][ T3594] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.988719][ T8005] binfmt_misc: register: failed to install interpreter file ./file0 [ 571.164694][ T3594] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.431276][ T3594] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.691429][ T3594] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.444263][ T7936] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.452241][ T7936] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.460061][ T7936] bridge_slave_0: entered allmulticast mode [ 572.469674][ T7936] bridge_slave_0: entered promiscuous mode [ 572.608794][ T7868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.791290][ T7936] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.799151][ T7936] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.807289][ T7936] bridge_slave_1: entered allmulticast mode [ 572.817184][ T7936] bridge_slave_1: entered promiscuous mode [ 573.025834][ T3594] bridge_slave_1: left allmulticast mode [ 573.032055][ T3594] bridge_slave_1: left promiscuous mode [ 573.043259][ T3594] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.208294][ T3594] bridge_slave_0: left allmulticast mode [ 573.214492][ T3594] bridge_slave_0: left promiscuous mode [ 573.221667][ T3594] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.728376][ T8005] ALSA: mixer_oss: invalid index 40000 [ 573.734244][ T8005] ALSA: mixer_oss: invalid OSS volume '' [ 574.121392][ T3594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.140506][ T3594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.168903][ T3594] bond0 (unregistering): Released all slaves [ 575.018000][ T7936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.035980][ T7939] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.046043][ T7939] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.056011][ T7939] bridge_slave_0: entered allmulticast mode [ 575.067250][ T7939] bridge_slave_0: entered promiscuous mode [ 575.162076][ T7936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.241589][ T3594] hsr_slave_0: left promiscuous mode [ 575.273078][ T3594] hsr_slave_1: left promiscuous mode [ 575.283184][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.292565][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.351939][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.359622][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.444260][ T3594] veth1_macvtap: left promiscuous mode [ 575.450133][ T3594] veth0_macvtap: left promiscuous mode [ 575.456529][ T3594] veth1_vlan: left promiscuous mode [ 575.462252][ T3594] veth0_vlan: left promiscuous mode [ 576.593162][ T3594] team0 (unregistering): Port device team_slave_1 removed [ 577.616420][ T3594] team0 (unregistering): Port device team_slave_0 removed [ 579.053197][ T7868] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.063879][ T7939] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.071496][ T7939] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.081792][ T7939] bridge_slave_1: entered allmulticast mode [ 579.091560][ T7939] bridge_slave_1: entered promiscuous mode [ 579.186024][ T3748] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.193614][ T3748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.236161][ T3748] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.243784][ T3748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.714417][ T7936] team0: Port device team_slave_0 added [ 579.743957][ T7936] team0: Port device team_slave_1 added [ 579.816001][ T7939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.096384][ T7939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.520160][ T7936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.527427][ T7936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.553863][ T7936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.605325][ T7939] team0: Port device team_slave_0 added [ 580.710036][ T7939] team0: Port device team_slave_1 added [ 580.728290][ T7936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.736768][ T7936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.765651][ T7936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.114857][ T7939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 581.123091][ T7939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.150977][ T7939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.544016][ T7939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.551785][ T7939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.578293][ T7939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.625018][ T7936] hsr_slave_0: entered promiscuous mode [ 581.638326][ T7936] hsr_slave_1: entered promiscuous mode [ 582.773901][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 582.959731][ T7939] hsr_slave_0: entered promiscuous mode [ 582.986277][ T7939] hsr_slave_1: entered promiscuous mode [ 582.994245][ T7939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 583.001994][ T7939] Cannot create hsr debugfs directory [ 583.390545][ T7868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.901117][ T5793] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 585.214296][ T7936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 585.412562][ T7936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 585.612743][ T7936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 585.668056][ T7936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 585.912547][ T7939] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 586.011883][ T7939] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 586.072302][ T7939] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 586.092476][ T5845] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 586.194357][ T7939] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 586.318681][ T5845] usb 5-1: config 1 interface 0 has no altsetting 0 [ 586.452320][ T5845] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 586.462004][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.470259][ T5845] usb 5-1: Product: syz [ 586.474860][ T5845] usb 5-1: Manufacturer: syz [ 586.479705][ T5845] usb 5-1: SerialNumber: syz [ 587.259494][ T5845] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 587.584153][ T7868] veth0_vlan: entered promiscuous mode [ 587.630092][ T7936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.784666][ T7868] veth1_vlan: entered promiscuous mode [ 588.073564][ T7936] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.241561][ T7868] veth0_macvtap: entered promiscuous mode [ 588.259368][ T1810] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.266963][ T1810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.329149][ T7939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.399908][ T7868] veth1_macvtap: entered promiscuous mode [ 588.467084][ T3857] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.474804][ T3857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.647833][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.658604][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.668825][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.679511][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.693409][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.982776][ T7939] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.263478][ T45] usb 5-1: USB disconnect, device number 3 [ 589.370616][ T45] usblp0: removed [ 589.454967][ T3748] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.555972][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.566792][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.576997][ T7868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 589.587761][ T7868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.601583][ T7868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.652712][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.660292][ T3672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.765071][ T3748] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.957797][ T1791] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.965377][ T1791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.002430][ T7868] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.013150][ T7868] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.022517][ T7868] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.034041][ T7868] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.124699][ T3748] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.256399][ T3748] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.183858][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 593.190716][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 594.181149][ T3748] bridge_slave_1: left allmulticast mode [ 594.188006][ T3748] bridge_slave_1: left promiscuous mode [ 594.199239][ T3748] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.336258][ T3748] bridge_slave_0: left allmulticast mode [ 594.342628][ T3748] bridge_slave_0: left promiscuous mode [ 594.349114][ T3748] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.942287][ T8125] could not allocate digest TFM handle sha224-ssse3 [ 595.047305][ T3748] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.111525][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 595.133292][ T3748] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.181340][ T3748] bond0 (unregistering): Released all slaves [ 595.524410][ T7936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 596.201513][ T3748] hsr_slave_0: left promiscuous mode [ 596.231728][ T3748] hsr_slave_1: left promiscuous mode [ 596.238717][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.247392][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 596.369787][ T3748] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.378749][ T3748] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 596.587583][ T3748] veth1_macvtap: left promiscuous mode [ 596.594066][ T3748] veth0_macvtap: left promiscuous mode [ 596.599984][ T3748] veth1_vlan: left promiscuous mode [ 596.605891][ T3748] veth0_vlan: left promiscuous mode [ 597.798397][ T3748] team0 (unregistering): Port device team_slave_1 removed [ 597.876464][ T3748] team0 (unregistering): Port device team_slave_0 removed [ 598.174150][ T5798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 598.193309][ T5798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 598.205042][ T5798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 598.231219][ T5798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 598.274561][ T5798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 598.614950][ T7936] veth0_vlan: entered promiscuous mode [ 598.962233][ T7936] veth1_vlan: entered promiscuous mode [ 599.262656][ T7936] veth0_macvtap: entered promiscuous mode [ 599.411275][ T7936] veth1_macvtap: entered promiscuous mode [ 600.175910][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.186786][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.197170][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.207991][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.223439][ T7936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 600.489123][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.501927][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.512256][ T7936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 600.523014][ T7936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 600.537748][ T7936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 600.565889][ T7939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.614916][ T5798] Bluetooth: hci4: command tx timeout [ 600.640435][ T7936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.652404][ T7936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.661975][ T7936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 600.671152][ T7936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.226115][ T8147] chnl_net:caif_netlink_parms(): no params data found [ 602.671429][ T5798] Bluetooth: hci4: command tx timeout [ 602.911135][ T5793] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 602.962161][ T5793] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 603.068942][ T5793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 603.090759][ T5793] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 603.121985][ T5793] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 604.838939][ T5793] Bluetooth: hci4: command tx timeout [ 605.248813][ T5793] Bluetooth: hci5: command tx timeout [ 605.476442][ T7939] veth0_vlan: entered promiscuous mode [ 605.779691][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.794857][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.802801][ T8147] bridge_slave_0: entered allmulticast mode [ 605.812538][ T8147] bridge_slave_0: entered promiscuous mode [ 605.992753][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.000350][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.016960][ T8147] bridge_slave_1: entered allmulticast mode [ 606.029285][ T8147] bridge_slave_1: entered promiscuous mode [ 606.098117][ T7939] veth1_vlan: entered promiscuous mode [ 606.564905][ T8147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.676332][ T8147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.702439][ T8192] chnl_net:caif_netlink_parms(): no params data found [ 606.751409][ T7939] veth0_macvtap: entered promiscuous mode [ 606.914853][ T5793] Bluetooth: hci4: command tx timeout [ 607.107527][ T7939] veth1_macvtap: entered promiscuous mode [ 607.132400][ T8147] team0: Port device team_slave_0 added [ 607.312578][ T5793] Bluetooth: hci5: command tx timeout [ 607.357094][ T8147] team0: Port device team_slave_1 added [ 607.911209][ T3857] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.977046][ T8147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.985253][ T8147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.014328][ T8147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.029146][ T7939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.041529][ T7939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.051739][ T7939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.062546][ T7939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.072854][ T7939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.083688][ T7939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.098555][ T7939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.124356][ T8147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.131683][ T8147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 608.163377][ T8147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.223428][ T3857] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.339431][ T7939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.351857][ T7939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.364016][ T7939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.375926][ T7939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.387010][ T7939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.398453][ T7939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.413645][ T7939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.529941][ T3857] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.706588][ T3857] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.801540][ T7939] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.810579][ T7939] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.819782][ T7939] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.828782][ T7939] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.307254][ T8192] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.322207][ T8192] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.331313][ T8192] bridge_slave_0: entered allmulticast mode [ 609.340540][ T8192] bridge_slave_0: entered promiscuous mode [ 609.401641][ T5793] Bluetooth: hci5: command tx timeout [ 609.424400][ T8147] hsr_slave_0: entered promiscuous mode [ 609.436534][ T8147] hsr_slave_1: entered promiscuous mode [ 609.445595][ T8147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.453506][ T8147] Cannot create hsr debugfs directory [ 609.502233][ T8192] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.509911][ T8192] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.518003][ T8192] bridge_slave_1: entered allmulticast mode [ 609.534279][ T8192] bridge_slave_1: entered promiscuous mode [ 609.871265][ T3857] bridge_slave_1: left allmulticast mode [ 609.877309][ T3857] bridge_slave_1: left promiscuous mode [ 609.884138][ T3857] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.935337][ T3857] bridge_slave_0: left allmulticast mode [ 609.943006][ T3857] bridge_slave_0: left promiscuous mode [ 609.949268][ T3857] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.358145][ T3857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.382267][ T3857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.414053][ T3857] bond0 (unregistering): Released all slaves [ 610.658931][ T3857] hsr_slave_0: left promiscuous mode [ 610.678578][ T3857] hsr_slave_1: left promiscuous mode [ 610.689902][ T3857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.697741][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.708355][ T3857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.718708][ T3857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.740397][ T3857] veth1_macvtap: left promiscuous mode [ 610.747973][ T3857] veth0_macvtap: left promiscuous mode [ 610.753816][ T3857] veth1_vlan: left promiscuous mode [ 610.759226][ T3857] veth0_vlan: left promiscuous mode [ 611.427949][ T3857] team0 (unregistering): Port device team_slave_1 removed [ 611.455813][ T3857] team0 (unregistering): Port device team_slave_0 removed [ 611.614957][ T5793] Bluetooth: hci5: command tx timeout [ 611.994252][ T8192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.222998][ T8192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.275551][ T1781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.283771][ T1781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.538369][ T3594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.547325][ T3594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.580543][ T8192] team0: Port device team_slave_0 added [ 612.738919][ T8192] team0: Port device team_slave_1 added [ 613.131358][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.138492][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.164961][ T8192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.362757][ T8192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.369850][ T8192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.401676][ T8192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.861504][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 615.219904][ T24] usb 3-1: device descriptor read/64, error -71 [ 615.461373][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 616.151350][ T24] usb 3-1: device descriptor read/64, error -71 [ 616.334885][ T24] usb usb3-port1: attempt power cycle [ 616.781314][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 616.787880][ T8192] hsr_slave_0: entered promiscuous mode [ 616.797947][ T8192] hsr_slave_1: entered promiscuous mode [ 616.805946][ T8192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.813734][ T8192] Cannot create hsr debugfs directory [ 617.267524][ T24] usb 3-1: device descriptor read/8, error -71 [ 617.368576][ T8147] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 617.536329][ T8147] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 617.667671][ T8147] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 617.792184][ T8147] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 618.655707][ T5798] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 618.744306][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 618.776238][ T5798] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 618.891841][ T5798] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 618.907657][ T5798] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 621.111405][ T5793] Bluetooth: hci0: command 0x0c1a tx timeout [ 621.179912][ T8326] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 621.566748][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 621.593096][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 621.610073][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 621.647490][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 621.669611][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 622.540520][ T8192] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 622.563999][ T8192] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 622.688393][ T8147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.753279][ T8192] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 622.958344][ T8192] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 623.239129][ T8147] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.449681][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.457239][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.612892][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.620384][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.794788][ T5798] Bluetooth: hci3: command tx timeout [ 623.885229][ T8147] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.464215][ T8333] chnl_net:caif_netlink_parms(): no params data found [ 625.222329][ T8192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.603772][ T64] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.666062][ T8192] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.745824][ T64] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.879219][ T5798] Bluetooth: hci3: command tx timeout [ 625.913535][ T64] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.997722][ T64] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.033951][ T8147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.079507][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.087142][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.103484][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.111165][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.973610][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.981648][ T8333] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.989430][ T8333] bridge_slave_0: entered allmulticast mode [ 627.000880][ T8333] bridge_slave_0: entered promiscuous mode [ 627.075453][ T64] bridge_slave_1: left allmulticast mode [ 627.082247][ T64] bridge_slave_1: left promiscuous mode [ 627.088942][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.197963][ T64] bridge_slave_0: left allmulticast mode [ 627.207573][ T64] bridge_slave_0: left promiscuous mode [ 627.214339][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.657555][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.737555][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.805202][ T64] bond0 (unregistering): Released all slaves [ 627.912119][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.925165][ T8333] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.933548][ T8333] bridge_slave_1: entered allmulticast mode [ 627.942321][ T8333] bridge_slave_1: entered promiscuous mode [ 627.991575][ T5798] Bluetooth: hci3: command tx timeout [ 628.489874][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 628.504071][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 628.515494][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 628.529583][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 628.543775][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 628.585369][ T64] hsr_slave_0: left promiscuous mode [ 628.643727][ T64] hsr_slave_1: left promiscuous mode [ 628.654580][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.663232][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.708684][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.716520][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.748474][ T64] veth1_macvtap: left promiscuous mode [ 628.761480][ T64] veth0_macvtap: left promiscuous mode [ 628.767418][ T64] veth1_vlan: left promiscuous mode [ 628.772993][ T64] veth0_vlan: left promiscuous mode [ 629.555132][ T64] team0 (unregistering): Port device team_slave_1 removed [ 629.669124][ T64] team0 (unregistering): Port device team_slave_0 removed [ 629.839441][ T8333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 629.994821][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'. [ 630.184937][ T5798] Bluetooth: hci3: command tx timeout [ 630.269938][ T8333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.602181][ T5798] Bluetooth: hci0: command tx timeout [ 630.745169][ T8333] team0: Port device team_slave_0 added [ 630.839879][ T8333] team0: Port device team_slave_1 added [ 631.178998][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.186401][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.216489][ T8333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.343371][ T8147] veth0_vlan: entered promiscuous mode [ 631.376576][ T8333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.384114][ T8333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.414317][ T8333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.540855][ T8147] veth1_vlan: entered promiscuous mode [ 632.067191][ T8333] hsr_slave_0: entered promiscuous mode [ 632.076642][ T8333] hsr_slave_1: entered promiscuous mode [ 632.084534][ T8333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 632.092333][ T8333] Cannot create hsr debugfs directory [ 632.106771][ T8147] veth0_macvtap: entered promiscuous mode [ 632.170134][ T8147] veth1_macvtap: entered promiscuous mode [ 632.266958][ T8377] chnl_net:caif_netlink_parms(): no params data found [ 632.636946][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.647808][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.657977][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 632.668637][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 632.683622][ T8147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.692789][ T5798] Bluetooth: hci0: command tx timeout [ 632.766628][ T8192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.007019][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.018452][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.028906][ T8147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.042643][ T8147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.057037][ T8147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.493885][ T8147] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.503894][ T8147] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.513177][ T8147] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.522178][ T8147] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.728529][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.736288][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.744267][ T8377] bridge_slave_0: entered allmulticast mode [ 634.754045][ T8377] bridge_slave_0: entered promiscuous mode [ 634.786087][ T5798] Bluetooth: hci0: command tx timeout [ 634.846245][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.853971][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.862063][ T8377] bridge_slave_1: entered allmulticast mode [ 634.871981][ T8377] bridge_slave_1: entered promiscuous mode [ 635.404121][ T8333] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 635.470712][ T8377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.490373][ T8333] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 635.537307][ T8377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.559128][ T8333] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 635.916142][ T8333] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 635.974115][ T8377] team0: Port device team_slave_0 added [ 636.080062][ T8377] team0: Port device team_slave_1 added [ 636.410211][ T8192] veth0_vlan: entered promiscuous mode [ 636.442601][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.449767][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.476121][ T8377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.605809][ T8192] veth1_vlan: entered promiscuous mode [ 636.712672][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.719956][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.748209][ T8377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.841321][ T5798] Bluetooth: hci0: command tx timeout [ 636.955674][ T8192] veth0_macvtap: entered promiscuous mode [ 637.178151][ T8377] hsr_slave_0: entered promiscuous mode [ 637.187415][ T8377] hsr_slave_1: entered promiscuous mode [ 637.195175][ T8377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.202937][ T8377] Cannot create hsr debugfs directory [ 637.250519][ T8192] veth1_macvtap: entered promiscuous mode [ 637.639258][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.657994][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.668850][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.679607][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.689778][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.700487][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.719539][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.019912][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.032197][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.042915][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.053985][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.067772][ T8192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.079137][ T8192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.093328][ T8192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.434657][ T8333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.574216][ T8192] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.583827][ T8192] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.593094][ T8192] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.602211][ T8192] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.924578][ T8333] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.093380][ T8453] block device autoloading is deprecated and will be removed. [ 639.953204][ T5798] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 639.961868][ T5798] Bluetooth: hci2: Injecting HCI hardware error event [ 639.969177][ T5798] Bluetooth: hci2: hardware error 0x00 [ 640.889919][ T1810] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.897394][ T1810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.246029][ T1810] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.253524][ T1810] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.927375][ T5798] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 644.077066][ T8377] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 644.368627][ T8377] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 644.587129][ T8377] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 644.767322][ T8377] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 645.460515][ T1836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.469609][ T1836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.785666][ T8333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.857789][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.866084][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.095068][ T8377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.398046][ T8377] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.962909][ T3857] bond0 (unregistering): Released all slaves [ 648.024680][ T1836] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.032283][ T1836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.140630][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.148297][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.901716][ T3857] hsr_slave_0: left promiscuous mode [ 649.024323][ T3857] hsr_slave_1: left promiscuous mode [ 650.357539][ T8333] veth0_vlan: entered promiscuous mode [ 650.519598][ T8333] veth1_vlan: entered promiscuous mode [ 650.915099][ T8333] veth0_macvtap: entered promiscuous mode [ 651.048381][ T8333] veth1_macvtap: entered promiscuous mode [ 651.461070][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.481424][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.492655][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.503328][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.513365][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.524001][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.536313][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.548202][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.563678][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.029289][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.040393][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.050645][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.061678][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.072179][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.082928][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.095906][ T8333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 652.107774][ T8333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.122851][ T8333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.297804][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.307344][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.603569][ T8333] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.612722][ T8333] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.622052][ T8333] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.631216][ T8333] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.663734][ T8246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.672249][ T8246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.712383][ T8377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.096078][ T8540] netlink: 12 bytes leftover after parsing attributes in process `syz.9.398'. [ 654.393743][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.400462][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.479529][ T8559] random: crng reseeded on system resumption [ 658.915268][ T8377] veth0_vlan: entered promiscuous mode [ 660.827761][ T8377] veth1_vlan: entered promiscuous mode [ 661.520717][ T8377] veth0_macvtap: entered promiscuous mode [ 661.731777][ T8377] veth1_macvtap: entered promiscuous mode [ 662.016587][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.032087][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.045722][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.057264][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.067461][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.078281][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.088561][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.099379][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.109660][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.120681][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.141155][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.353495][ T5846] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 662.478399][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.489318][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.500084][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.511098][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.521321][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.535571][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.546473][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.557245][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.567364][ T8377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.578069][ T8377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.593072][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.646710][ T5846] usb 7-1: Using ep0 maxpacket: 16 [ 662.706876][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 662.718665][ T5846] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26473, setting to 1024 [ 662.730463][ T5846] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.746875][ T5846] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 662.756965][ T5846] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.900539][ T5846] usb 7-1: config 0 descriptor?? [ 662.910057][ T8585] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 662.955445][ T8377] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.964685][ T8377] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.973864][ T8377] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.983110][ T8377] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.037861][ T5846] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input6 [ 663.337118][ T5846] usb 7-1: USB disconnect, device number 2 [ 664.944329][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 665.740155][ T8246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.748586][ T8246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.879690][ T3857] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.888243][ T3857] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.011105][ T8627] trusted_key: encrypted_key: insufficient parameters specified [ 673.758428][ T8680] kvm: pic: non byte read [ 674.608647][ T8689] netlink: 36 bytes leftover after parsing attributes in process `syz.6.419'. [ 676.506146][ T1810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.515283][ T1810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.190342][ T1810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.198801][ T1810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.646059][ T8700] syzkaller0: entered promiscuous mode [ 677.651974][ T8700] syzkaller0: entered allmulticast mode [ 678.256239][ T8706] netlink: 32 bytes leftover after parsing attributes in process `syz.9.425'. [ 678.521350][ T8710] input: syz0 as /devices/virtual/input/input7 [ 685.821472][ T8754] loop8: detected capacity change from 0 to 1024 [ 685.899596][ T8754] EXT4-fs: Ignoring removed bh option [ 686.157344][ T8754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 687.465930][ T8333] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.203217][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 701.214869][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 701.224664][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.742407][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.784160][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 704.937085][ T8879] chnl_net:caif_netlink_parms(): no params data found [ 704.991121][ T5793] Bluetooth: hci1: command tx timeout [ 706.826994][ T1791] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.086551][ T5793] Bluetooth: hci1: command tx timeout [ 707.346990][ T8879] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.363118][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.371219][ T8879] bridge_slave_0: entered allmulticast mode [ 707.379685][ T8879] bridge_slave_0: entered promiscuous mode [ 707.453094][ T1791] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.716795][ T1791] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.811861][ T8879] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.819382][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.827153][ T8879] bridge_slave_1: entered allmulticast mode [ 707.835463][ T8879] bridge_slave_1: entered promiscuous mode [ 707.958289][ T1791] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.181645][ T5793] Bluetooth: hci1: command tx timeout [ 711.231333][ T5793] Bluetooth: hci1: command tx timeout [ 712.364700][ T8879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.489822][ T8879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.793635][ T8948] netlink: 16 bytes leftover after parsing attributes in process `syz.9.482'. [ 713.347405][ T8879] team0: Port device team_slave_0 added [ 713.356916][ T1791] bridge_slave_1: left allmulticast mode [ 713.363098][ T1791] bridge_slave_1: left promiscuous mode [ 713.369778][ T1791] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.553048][ T1791] bridge_slave_0: left allmulticast mode [ 713.558967][ T1791] bridge_slave_0: left promiscuous mode [ 713.566061][ T1791] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.498814][ T1791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.598231][ T1791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.650342][ T1791] bond0 (unregistering): Released all slaves [ 714.777373][ T8879] team0: Port device team_slave_1 added [ 715.139861][ T8879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.147774][ T8879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.180533][ T8879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.485649][ T8879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.494352][ T8879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.521113][ T8879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.774462][ T30] kauditd_printk_skb: 384 callbacks suppressed [ 715.774568][ T30] audit: type=1326 audit(1746739464.075:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 715.807821][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.869286][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 715.876940][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 715.903066][ T30] audit: type=1326 audit(1746739464.155:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 715.925083][ C0] vkms_vblank_simulate: vblank timer overrun [ 715.932135][ T30] audit: type=1326 audit(1746739464.205:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 715.956034][ T30] audit: type=1326 audit(1746739464.205:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 715.978579][ T30] audit: type=1326 audit(1746739464.205:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 716.006158][ T30] audit: type=1326 audit(1746739464.265:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 716.030156][ T30] audit: type=1326 audit(1746739464.265:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 716.052701][ T30] audit: type=1326 audit(1746739464.265:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 716.074717][ C0] vkms_vblank_simulate: vblank timer overrun [ 716.081597][ T30] audit: type=1326 audit(1746739464.285:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 716.110522][ T30] audit: type=1326 audit(1746739464.305:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8983 comm="syz.9.489" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x7ffc0000 [ 716.740617][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz.9.489'. [ 717.184566][ T1791] hsr_slave_0: left promiscuous mode [ 717.195506][ T1791] hsr_slave_1: left promiscuous mode [ 717.203567][ T1791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.211429][ T1791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.227258][ T1791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.235272][ T1791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.457152][ T1791] veth1_macvtap: left promiscuous mode [ 717.463393][ T1791] veth0_macvtap: left promiscuous mode [ 717.469518][ T1791] veth1_vlan: left promiscuous mode [ 717.475389][ T1791] veth0_vlan: left promiscuous mode [ 719.404577][ T1791] team0 (unregistering): Port device team_slave_1 removed [ 719.442813][ T1791] team0 (unregistering): Port device team_slave_0 removed [ 720.271661][ T8879] hsr_slave_0: entered promiscuous mode [ 720.281951][ T8879] hsr_slave_1: entered promiscuous mode [ 720.298242][ T8879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.306255][ T8879] Cannot create hsr debugfs directory [ 722.524633][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 722.991987][ T5798] Bluetooth: hci4: command 0x0406 tx timeout [ 724.570118][ T8879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 724.823110][ T8879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 725.111458][ T8879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 725.364086][ T8879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 726.829225][ T8879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.076836][ T8879] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.169174][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.176915][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.278700][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.286560][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 728.117225][ T5798] Bluetooth: hci5: command 0x0406 tx timeout [ 729.006719][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.9.516'. [ 729.750672][ T8879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.534202][ T8879] veth0_vlan: entered promiscuous mode [ 730.664617][ T8879] veth1_vlan: entered promiscuous mode [ 731.113433][ T8879] veth0_macvtap: entered promiscuous mode [ 731.305578][ T8879] veth1_macvtap: entered promiscuous mode [ 731.630489][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.643820][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.658891][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.670925][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.681137][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.691929][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.702079][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.713152][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.723340][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 731.734175][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 731.750100][ T8879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.145607][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.157513][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.171538][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.183283][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.194288][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.205088][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.215316][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.226550][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.236691][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.247463][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.262655][ T8879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.845932][ T8879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.855107][ T8879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.864246][ T8879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.873434][ T8879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.073569][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.8.529'. [ 734.295369][ T9178] random: crng reseeded on system resumption [ 737.304744][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.9.542'. [ 738.995478][ T9246] random: crng reseeded on system resumption [ 741.568081][ T8246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.576329][ T8246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.977566][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.985933][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.590604][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.554'. [ 744.611664][ T9300] batadv_slave_1: entered promiscuous mode [ 748.909512][ T9297] batadv_slave_1: left promiscuous mode [ 748.919925][ T9316] orangefs_mount: mount request failed with -4 [ 749.481369][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 752.321010][ T5793] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 752.536063][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.569'. [ 754.438966][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 759.825652][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.583'. [ 763.221752][ T5878] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 763.434688][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 763.492107][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.508832][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.524200][ T5878] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 763.533805][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.714545][ T5878] usb 3-1: config 0 descriptor?? [ 763.792415][ T5878] gspca_main: spca501-2.14.0 probing 0000:0000 [ 764.075633][ T9453] ===================================================== [ 764.082950][ T9453] BUG: KMSAN: uninit-value in do_output_route4+0x466/0x510 [ 764.090556][ T9453] do_output_route4+0x466/0x510 [ 764.095856][ T9453] __ip_vs_get_out_rt+0x496/0x2100 [ 764.101279][ T9453] ip_vs_tunnel_xmit+0x1ff/0x23b0 [ 764.106519][ T9453] ip_vs_in_hook+0x1c4e/0x36e0 [ 764.111602][ T9453] nf_hook_slow+0xde/0x3d0 [ 764.116209][ T9453] __ip_local_out+0x756/0x7f0 [ 764.121169][ T9453] ip_send_skb+0x6a/0x3e0 [ 764.125741][ T9453] udp_send_skb+0x1375/0x1cb0 [ 764.130605][ T9453] udp_sendmsg+0x2ef6/0x3480 [ 764.135538][ T9453] inet_sendmsg+0x1ef/0x2a0 [ 764.140267][ T9453] __sock_sendmsg+0x278/0x3d0 [ 764.145236][ T9453] ____sys_sendmsg+0x893/0xd80 [ 764.150176][ T9453] ___sys_sendmsg+0x271/0x3b0 [ 764.155178][ T9453] __sys_sendmmsg+0x3c2/0x7d0 [ 764.160024][ T9453] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 764.166078][ T9453] ia32_sys_call+0x3a66/0x42c0 [ 764.171115][ T9453] __do_fast_syscall_32+0xb0/0x110 [ 764.176429][ T9453] do_fast_syscall_32+0x38/0x80 [ 764.181578][ T9453] do_SYSENTER_32+0x1f/0x30 [ 764.186303][ T9453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 764.192999][ T9453] [ 764.195426][ T9453] Uninit was created at: [ 764.199913][ T9453] __kmalloc_cache_noprof+0x7f7/0xed0 [ 764.205664][ T9453] __ip_vs_get_out_rt+0x3fc/0x2100 [ 764.211076][ T9453] ip_vs_tunnel_xmit+0x1ff/0x23b0 [ 764.216307][ T9453] ip_vs_in_hook+0x1c4e/0x36e0 [ 764.221445][ T9453] nf_hook_slow+0xde/0x3d0 [ 764.226042][ T9453] __ip_local_out+0x756/0x7f0 [ 764.230959][ T9453] ip_send_skb+0x6a/0x3e0 [ 764.235468][ T9453] udp_send_skb+0x1375/0x1cb0 [ 764.240327][ T9453] udp_sendmsg+0x2ef6/0x3480 [ 764.245247][ T9453] inet_sendmsg+0x1ef/0x2a0 [ 764.249976][ T9453] __sock_sendmsg+0x278/0x3d0 [ 764.255140][ T9453] ____sys_sendmsg+0x893/0xd80 [ 764.260081][ T9453] ___sys_sendmsg+0x271/0x3b0 [ 764.265128][ T9453] __sys_sendmmsg+0x3c2/0x7d0 [ 764.269989][ T9453] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 764.275972][ T9453] ia32_sys_call+0x3a66/0x42c0 [ 764.281043][ T9453] __do_fast_syscall_32+0xb0/0x110 [ 764.286392][ T9453] do_fast_syscall_32+0x38/0x80 [ 764.291610][ T9453] do_SYSENTER_32+0x1f/0x30 [ 764.296328][ T9453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 764.302991][ T9453] [ 764.305512][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: syz.2.594 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 764.317881][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 764.328243][ T9453] ===================================================== [ 764.335395][ T9453] Disabling lock debugging due to kernel taint [ 764.341866][ T9453] Kernel panic - not syncing: kmsan.panic set ... [ 764.348435][ T9453] CPU: 0 UID: 0 PID: 9453 Comm: syz.2.594 Tainted: G B 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(undef) [ 764.362172][ T9453] Tainted: [B]=BAD_PAGE [ 764.366417][ T9453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 764.376609][ T9453] Call Trace: [ 764.379999][ T9453] [ 764.383025][ T9453] __dump_stack+0x26/0x30 [ 764.387535][ T9453] dump_stack_lvl+0x53/0x270 [ 764.392316][ T9453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 764.398337][ T9453] dump_stack+0x1e/0x25 [ 764.402659][ T9453] panic+0x4bd/0xd50 [ 764.406772][ T9453] kmsan_report+0x29d/0x2a0 [ 764.411472][ T9453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 764.417458][ T9453] ? __msan_warning+0x96/0x120 [ 764.422397][ T9453] ? do_output_route4+0x466/0x510 [ 764.427628][ T9453] ? __ip_vs_get_out_rt+0x496/0x2100 [ 764.433106][ T9453] ? ip_vs_tunnel_xmit+0x1ff/0x23b0 [ 764.438477][ T9453] ? ip_vs_in_hook+0x1c4e/0x36e0 [ 764.443600][ T9453] ? nf_hook_slow+0xde/0x3d0 [ 764.448372][ T9453] ? __ip_local_out+0x756/0x7f0 [ 764.453374][ T9453] ? ip_send_skb+0x6a/0x3e0 [ 764.458046][ T9453] ? udp_send_skb+0x1375/0x1cb0 [ 764.463051][ T9453] ? udp_sendmsg+0x2ef6/0x3480 [ 764.467945][ T9453] ? inet_sendmsg+0x1ef/0x2a0 [ 764.472842][ T9453] ? __sock_sendmsg+0x278/0x3d0 [ 764.477945][ T9453] ? ____sys_sendmsg+0x893/0xd80 [ 764.483030][ T9453] ? ___sys_sendmsg+0x271/0x3b0 [ 764.488026][ T9453] ? __sys_sendmmsg+0x3c2/0x7d0 [ 764.493027][ T9453] ? __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 764.499085][ T9453] ? ia32_sys_call+0x3a66/0x42c0 [ 764.504180][ T9453] ? __do_fast_syscall_32+0xb0/0x110 [ 764.509665][ T9453] ? do_fast_syscall_32+0x38/0x80 [ 764.514866][ T9453] ? do_SYSENTER_32+0x1f/0x30 [ 764.519739][ T9453] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 764.526426][ T9453] ? ip_route_output_key_hash_rcu+0x316a/0x3bb0 [ 764.532866][ T9453] ? kmsan_get_metadata+0x105/0x1b0 [ 764.538254][ T9453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 764.544264][ T9453] ? kmsan_get_metadata+0x105/0x1b0 [ 764.549642][ T9453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 764.555655][ T9453] ? ip_route_output_flow+0x236/0x2b0 [ 764.561199][ T9453] ? kmsan_get_metadata+0x105/0x1b0 [ 764.566586][ T9453] __msan_warning+0x96/0x120 [ 764.571353][ T9453] do_output_route4+0x466/0x510 [ 764.576433][ T9453] __ip_vs_get_out_rt+0x496/0x2100 [ 764.581728][ T9453] ? kmsan_get_metadata+0x105/0x1b0 [ 764.587134][ T9453] ip_vs_tunnel_xmit+0x1ff/0x23b0 [ 764.592355][ T9453] ? kmsan_get_metadata+0x105/0x1b0 [ 764.597796][ T9453] ? __pfx_ip_vs_tunnel_xmit+0x10/0x10 [ 764.603495][ T9453] ip_vs_in_hook+0x1c4e/0x36e0 [ 764.608498][ T9453] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 764.613808][ T9453] nf_hook_slow+0xde/0x3d0 [ 764.618439][ T9453] __ip_local_out+0x756/0x7f0 [ 764.623283][ T9453] ? __pfx_dst_output+0x10/0x10 [ 764.628327][ T9453] ip_send_skb+0x6a/0x3e0 [ 764.632833][ T9453] udp_send_skb+0x1375/0x1cb0 [ 764.637737][ T9453] udp_sendmsg+0x2ef6/0x3480 [ 764.642498][ T9453] ? aa_label_sk_perm+0x6f0/0x7b0 [ 764.647744][ T9453] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 764.653519][ T9453] ? __pfx_udp_sendmsg+0x10/0x10 [ 764.658617][ T9453] inet_sendmsg+0x1ef/0x2a0 [ 764.663326][ T9453] __sock_sendmsg+0x278/0x3d0 [ 764.668189][ T9453] ____sys_sendmsg+0x893/0xd80 [ 764.673141][ T9453] ___sys_sendmsg+0x271/0x3b0 [ 764.678005][ T9453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 764.684032][ T9453] ? __rcu_read_unlock+0x6d/0xd0 [ 764.689158][ T9453] ? __fget_files+0x3b4/0x4a0 [ 764.694015][ T9453] ? __fget_files+0x3b9/0x4a0 [ 764.698867][ T9453] ? kmsan_get_metadata+0x105/0x1b0 [ 764.704260][ T9453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 764.710271][ T9453] __sys_sendmmsg+0x3c2/0x7d0 [ 764.715129][ T9453] ? kmsan_get_metadata+0x105/0x1b0 [ 764.720518][ T9453] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 764.726620][ T9453] __ia32_compat_sys_sendmmsg+0xd2/0x160 [ 764.732538][ T9453] ia32_sys_call+0x3a66/0x42c0 [ 764.737466][ T9453] __do_fast_syscall_32+0xb0/0x110 [ 764.742777][ T9453] do_fast_syscall_32+0x38/0x80 [ 764.747812][ T9453] do_SYSENTER_32+0x1f/0x30 [ 764.752492][ T9453] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 764.759023][ T9453] RIP: 0023:0xf7f88539 [ 764.763216][ T9453] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 764.783004][ T9453] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 764.791585][ T9453] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080002680 [ 764.799709][ T9453] RDX: 0000000000000011 RSI: 0000000020000000 RDI: 0000000000000000 [ 764.807814][ T9453] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 764.815910][ T9453] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 764.824005][ T9453] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 764.832132][ T9453] [ 764.835863][ T9453] Kernel Offset: disabled [ 764.840277][ T9453] Rebooting in 86400 seconds..