last executing test programs: 4m15.475273049s ago: executing program 32 (id=8): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$phonet_pipe(0x23, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1a71d8d", 0x63}], 0x1}}], 0x1, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0xc, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) close(r0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x502, 0x98) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newchain={0x6c, 0x64, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xd}, {0xf, 0xd}, {0x4, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1d04e}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}, @filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x5317}]}}]}, 0x6c}}, 0x48010) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) fcntl$setlease(r4, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 4m5.998968594s ago: executing program 2 (id=74): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x8, @loopback, 0x2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000440)=0x1, 0x4) 4m5.165911499s ago: executing program 2 (id=77): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) 4m4.088561717s ago: executing program 2 (id=80): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0x0, @empty, @mcast2, {[], {0x4f14, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x6, 0x100}}}}}}}}}, 0x4a) 4m3.119838722s ago: executing program 3 (id=83): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x9}, 0x8) 4m2.371701088s ago: executing program 2 (id=84): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c010000190001000000000001000000fe88000000000000000000000000010100"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000009000000000000000000010200000000840005007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000e8c9e6ba28f1af2014bb000000000000000000000000000004d2330000faffffffffffffff000000000000000000000000000000000005"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 4m1.03764614s ago: executing program 2 (id=87): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) unshare(0x6a040000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/75, &(0x7f00000003c0)="6adcd3da9edb59240e8971b926407c19a8db884ccf7520c146ca6edb19f42d4968f43cd7a91f6ba3cfc2d4a4928cbf8fa0c9f5f856fa20b0f68eb27fdd7c1987a97ad1f49baa2def4f0c06178e846da8145f985c8c28e09877a6f224ff9052f2fd6ba0391e6ae51fe41d0fc111df8c4333c19c132d90d1610bb045ea7c38a353c2d06655128be785752e4518a82b52f9f2", &(0x7f0000000600), 0x4, 0xffffffffffffffff, 0x4}, 0x38) 3m59.744330103s ago: executing program 3 (id=89): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460e02f9b7ff7f000000000000020003"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) 3m58.032026347s ago: executing program 2 (id=92): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81b}}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r3, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, 0xffffffffffffffff, 0x0) 3m51.909077282s ago: executing program 3 (id=100): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54cab4978df5fff95c923dad73bbae58", @ANYRES32=r3, @ANYRES32], 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r4, 0x1) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a0000000", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r9, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e65746465767369"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a0001007175657565"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) r12 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r12, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 3m46.6429877s ago: executing program 3 (id=105): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000000)='./file1\x00') symlink(&(0x7f00000000c0)='./file1\x00', 0x0) r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r1, @ANYRESOCT, @ANYRES16=r1], 0x1, 0x150, &(0x7f0000000840)="$eJzs2r9K+1AUB/AzFPqj4290KlSioPmvddVR3HyD0OamwRtTEkHaFxAnweEuvoTgE/gIGd10EfQlItfe2iYt6lAbi9/P0i85JT29udwsR0/iyGapTrTdvz5+/p/EUbPt7nWYzTwaOSSipgxZntdo1uNHPcvJMOZ84yfN66hg/XX02doMxNElC7nvLKEtAAAAAAAAAAAAAAAAAAAAAABYBK2hQqMnogsWct+eqqaD4YnHuZ+kFbVXOa2pZriICX4j18ct1LdeiLR9mUJxkMi6VajXx2GjJ/hTeX3Ns6hvpoOhHkZe4Af+qeO4bWvHsnYd8/1eZvmO2q3qibL8zpodJ9Om5s0evjNvpp5/bS0UV+flX5s8f4TFhXxyRW6Pyvv5s+Gf2ua/pZ8VCl+eK6ti/P7r1t3WvTz/jE7Mu+riMpazwv8OAJ94CwAA//8lxDRw") setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, 0x0) 3m42.562172442s ago: executing program 33 (id=92): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81b}}, './file0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000300)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x64) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r3, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, 0xffffffffffffffff, 0x0) 3m42.379283243s ago: executing program 3 (id=110): mkdirat(0xffffffffffffff9c, 0x0, 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3m40.549811572s ago: executing program 3 (id=112): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m25.768115092s ago: executing program 4 (id=128): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c010000190001000000000001000000fe88000000000000000000000000010100000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000009000000000000000000010200000000840005007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000e8c9e6ba28f1af2014bb000000000000000000000000000004d2330000faffffffffffffff000000000000000000000000000000000005"], 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 3m24.920871044s ago: executing program 34 (id=112): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m24.698926606s ago: executing program 4 (id=131): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 3m23.295678378s ago: executing program 4 (id=132): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x882) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(0xffffffffffffffff) 3m20.348459398s ago: executing program 4 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/260, 0x104}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000002900)=""/4114, 0x1012}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}, {&(0x7f00000005c0)=""/146, 0x92}, {&(0x7f00000008c0)=""/234, 0xea}], 0x7}, 0x80000002}], 0x3, 0x0, 0x0) 3m18.249358124s ago: executing program 4 (id=139): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000009b40)="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", 0x2000, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) r2 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000001c0)={0x0, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) 3m16.816361577s ago: executing program 4 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 3m0.507389081s ago: executing program 35 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 2m38.189190386s ago: executing program 0 (id=194): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000c00)={0x34, r0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xffff8001}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040410}, 0x4000841) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m37.144560258s ago: executing program 0 (id=197): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x882) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 2m35.840392054s ago: executing program 0 (id=200): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m34.105848472s ago: executing program 0 (id=205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) mmap$binder(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xe6f2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000740)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2m33.065234281s ago: executing program 0 (id=208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(0xffffffffffffffff, &(0x7f0000000280)=""/149, 0x95) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x89, 0x0, 0x0, 0xa5, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r3, 0x40046104, &(0x7f0000000540)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000100)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30b529, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m28.756857539s ago: executing program 0 (id=214): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r3, 0x20, &(0x7f0000000040)={&(0x7f00000005c0)=""/193, 0xc1, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x2000009}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) 2m12.921739799s ago: executing program 36 (id=214): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={r3, 0x20, &(0x7f0000000040)={&(0x7f00000005c0)=""/193, 0xc1, 0x0, &(0x7f00000006c0)=""/150, 0x96}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3, 0x0, 0x0, 0x0, 0x10, 0x2000009}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000340)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mknod$loop(0x0, 0xfff, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r5, 0x8949, &(0x7f0000000000)) 1m47.244955392s ago: executing program 8 (id=287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x10000, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x30b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) 1m45.669675035s ago: executing program 8 (id=293): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed9, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="f07ca2a5ddef2d495ba3c21a71e6da3785230a40f3a5dfedbc1ec673e7334f395602b4da2aa2612d9bb0601c6a07014f12b5d7fcb2bf9321a7720d5d35edc88f5d6efa0a01b86e07ba3951267ec41fd398895774152bbf131785011d5e329f623e4a54cab4978df5fff95c923dad73bbae58", @ANYRES32=r3, @ANYRES32], 0x48) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r4, 0x1) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000008000000080000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000688158bb77c17055e0780c766aadb6d2ffbac2100ae3e4", @ANYRES32=0x0, @ANYRES32], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a0000000", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r9, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e65746465767369"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) r12 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r12, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) 1m43.138458578s ago: executing program 8 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10010, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) 1m42.216036584s ago: executing program 8 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) 1m41.29646956s ago: executing program 8 (id=306): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x5, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m39.664055985s ago: executing program 8 (id=311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0x61f2, 0x13500, 0x0, 0x147}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r5, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) 1m23.861882956s ago: executing program 37 (id=311): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_io_uring_setup(0x83, &(0x7f0000000580)={0x0, 0x61f2, 0x13500, 0x0, 0x147}, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r4 = dup(r3) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r4, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b900"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r5, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) 19.384225055s ago: executing program 1 (id=495): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x491, 0x0, 0x3}]}) 18.35437062s ago: executing program 1 (id=499): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x400}}, @addba_req={0x3, 0x0, {0x7f, {0x0, 0x0, 0x7, 0x340}, 0x6, {0x0, 0x10}}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) 16.897469574s ago: executing program 1 (id=504): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1d}, {0x7, [{0xc8, 0xd46c}, {0xc8, 0xff77}, {0xc8, 0xfff}, {0xc9, 0xffff}, {0xc9, 0xa9}, {0xc8, 0x9}, {0xc9, 0x2}]}}}, 0x20) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x11) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15.581425655s ago: executing program 1 (id=507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, 0x0, 0x0, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 13.714229677s ago: executing program 1 (id=512): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x2, @empty, 0xffffffff}, 0x1c) 12.824213612s ago: executing program 1 (id=516): r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) r1 = epoll_create1(0x0) ptrace$getenv(0x4201, r0, 0x5, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', r5, 0x0, 0x0, 0x6, 0x6, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2, {[@lsrr={0x83, 0x2b, 0xc7, [@private=0xa010102, @empty, @private=0xa010100, @rand_addr=0x64010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101]}]}}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x18000000000002a0, 0xe40, 0x2f, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014, 0x3f00}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='nsfs\x00', 0x40, &(0x7f0000000040)='syzkadler\x01/\n\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) 9.663230752s ago: executing program 5 (id=524): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002dbd7000fbdbdf25010000000900030073797a3000000000050004000104000000000000007036677265746170300000000000000900010073797a3200000000140002006e723000"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4008001}, 0x4000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x218e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000140)=0x8, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000000380)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x400c040) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48885, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r6 = socket$inet6(0xa, 0x80002, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) syz_usb_connect(0x3, 0x36, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r9], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) ioctl$SG_IO(r10, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", 0x0, 0x9, 0x0, 0x0, 0x0}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0xfb7f, 0x0, &(0x7f00007a4000/0x4000)=nil}) 8.816410941s ago: executing program 7 (id=526): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x2, @empty, 0xffffffff}, 0x1c) 8.058753701s ago: executing program 9 (id=528): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0xf) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) prlimit64(r1, 0xe, &(0x7f0000000380)={0x7, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r0, 0x409, 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 6.325442203s ago: executing program 7 (id=529): socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@multicast, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 6.105268693s ago: executing program 5 (id=530): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1d}, {0x7, [{0xc8, 0xd46c}, {0xc8, 0xff77}, {0xc8, 0xfff}, {0xc9, 0xffff}, {0xc9, 0xa9}, {0xc8, 0x9}, {0xc9, 0x2}]}}}, 0x20) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x11) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x4) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) 6.011336962s ago: executing program 6 (id=531): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x24, r1, 0x201, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x29045}, 0x8000) 5.947023195s ago: executing program 9 (id=532): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.000385649s ago: executing program 7 (id=533): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) 4.910887561s ago: executing program 5 (id=534): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYBLOB="3f9d0000000001dcdf251700000008000300", @ANYRES32=r2, @ANYBLOB="5c00308014000400dfeedc2634e7d49420f73e16e79faba03c000180300003800600010000ff0000080002000304000006000301ffff000006000300a6aa00000c562614eea84ae1aaaaaaaa0800010000000000050002"], 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) 4.906991727s ago: executing program 6 (id=535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, 0x0, 0x0, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf2501000000080002000000000005000500000000000800030001"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 4.143890386s ago: executing program 9 (id=536): socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0) 3.850626365s ago: executing program 7 (id=537): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x882) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010010905"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) 3.836957244s ago: executing program 5 (id=538): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000003080)={0x28, r1, 0xe6e964277ae08d57, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040000}, 0x90) sendmmsg$inet(r0, &(0x7f00000045c0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000031c0)="d3f5489900", 0x5}], 0x1}}], 0x1, 0x8005) 3.748631511s ago: executing program 6 (id=539): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x2, @empty, 0xffffffff}, 0x1c) 3.030948368s ago: executing program 9 (id=540): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="01012abd7000000008002b00000008000300", @ANYRES32=r1, @ANYBLOB="040046000a0034000202020202020000080026006c0900004c0051802c0000800800030005ac0f00040005000500020003000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 2.636366004s ago: executing program 6 (id=541): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xa, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 2.55867931s ago: executing program 5 (id=542): close(0xffffffffffffffff) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES8], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) r4 = dup(r0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0x1000c, 0x4, 0x23}, 0xb62d18fbf43bc210, 0xfffffffe, 0x0, 0xc, 0x0, 0x6}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) recvmmsg(r6, 0x0, 0x0, 0x10040, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001a14010002000000fcdbdf2508004b0013"], 0x38}}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8b24, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000480)=0x0) sched_setaffinity(r10, 0x8, &(0x7f0000000640)=0x8ee) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x20040011) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0xfff2}, {}, {0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8}}]}}]}, 0x40}}, 0x40000) close(r5) readv(r6, &(0x7f0000000200)=[{&(0x7f0000000000)=""/29, 0x1d}, {&(0x7f00000000c0)}, {&(0x7f00000002c0)=""/154, 0x9a}], 0x3) 2.112528609s ago: executing program 9 (id=543): socket$qrtr(0x2a, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) socket$unix(0x1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@multicast, @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x3}, 0x8, 0x3, 0x0, 0x0, "fa2b25fc66189827"}}}}, 0x0) 1.310446413s ago: executing program 6 (id=544): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x400}}, @addba_req={0x3, 0x0, {0x7f, {0x0, 0x0, 0x7, 0x340}, 0x6, {0x0, 0x10}}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) 1.017821653s ago: executing program 7 (id=545): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1d}, {0x7, [{0xc8, 0xd46c}, {0xc8, 0xff77}, {0xc8, 0xfff}, {0xc9, 0xffff}, {0xc9, 0xa9}, {0xc8, 0x9}, {0xc9, 0x2}]}}}, 0x20) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$apparmor_exec(r0, 0x0, 0x11) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10suse\x00\x00\x00\x00\x00\x00\x00dn\x00\x00\x00', 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x8040) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) 748.762656ms ago: executing program 5 (id=546): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r2, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x43, 0x0, 0xfffffffd, 0x0, 0x80000001, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000001, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x824, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0xd, 0x1000, 0x0, 0xe, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0xe, 0x0, 0x0, 0x2], [0x7, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x791, 0x0, 0x0, 0xffff, 0x83, 0xe, 0x1, 0x80000000, 0x0, 0x5, 0xfffffffc, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xbcc4, 0x2, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x8000000, 0x1000000, 0x0, 0xffffffff, 0x0, 0xc048, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x7f, 0x0, 0x3, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffff9, 0x5]}, 0x45c) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1e, &(0x7f0000000840)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @map_fd={0x18, 0x5, 0x1, 0x0, r4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) getpeername(r3, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req={0x3, 0x10004, 0x800, 0x7}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473fec988ca58e8001d75d38e0d369bd7c50580", 0x1c}, {&(0x7f0000000380)="9c74dfbf7757d9c4135f04770d5606", 0xf}], 0x2) r10 = socket$vsock_stream(0x28, 0x1, 0x0) fadvise64(r4, 0x0, 0x400, 0x2) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x2711, @host}, 0x10) connect$vsock_stream(r10, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) mmap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0, 0x20132, 0xffffffffffffffff, 0x391e1000) 320.35228ms ago: executing program 9 (id=547): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 80.744423ms ago: executing program 6 (id=548): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYBLOB="3f9d0000000001dcdf251700000008000300", @ANYRES32=r2, @ANYBLOB="5c00308014000400dfeedc2634e7d49420f73e16e79faba03c000180300003800600010000ff0000080002000304000006000301ffff000006000300a6aa00000c562614eea84ae1aaaaaaaa0800010000000000050002"], 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x48804) 0s ago: executing program 7 (id=549): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, 0x0, 0x0, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.240' (ED25519) to the list of known hosts. [ 204.295180][ T5791] cgroup: Unknown subsys name 'net' [ 204.443503][ T5791] cgroup: Unknown subsys name 'cpuset' [ 204.461898][ T5791] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 211.558706][ T5791] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 217.823190][ T5811] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 217.843031][ T5811] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.852307][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.895078][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 217.903089][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.917314][ T5818] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.927502][ T5818] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 217.936208][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.956341][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 217.972313][ T5821] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.981738][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.984166][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 217.993779][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.998021][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.006620][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 218.020746][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.026777][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.040950][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.078507][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.140591][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.153796][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.173648][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.192460][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.312941][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.360798][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.860092][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 220.082101][ T5820] Bluetooth: hci0: command tx timeout [ 220.171900][ T5820] Bluetooth: hci2: command tx timeout [ 220.177552][ T5820] Bluetooth: hci1: command tx timeout [ 220.345027][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 220.368790][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 220.432525][ T5820] Bluetooth: hci3: command tx timeout [ 220.488445][ T5820] Bluetooth: hci4: command tx timeout [ 220.798214][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 220.844545][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 221.415825][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.423727][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.431772][ T5807] bridge_slave_0: entered allmulticast mode [ 221.444137][ T5807] bridge_slave_0: entered promiscuous mode [ 221.555874][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.565825][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.573887][ T5807] bridge_slave_1: entered allmulticast mode [ 221.584229][ T5807] bridge_slave_1: entered promiscuous mode [ 222.020863][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.181847][ T5820] Bluetooth: hci0: command tx timeout [ 222.217311][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.227972][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.235777][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.243646][ T5819] bridge_slave_0: entered allmulticast mode [ 222.254067][ T5819] bridge_slave_0: entered promiscuous mode [ 222.260691][ T5820] Bluetooth: hci1: command tx timeout [ 222.267281][ T5820] Bluetooth: hci2: command tx timeout [ 222.308183][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.316159][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.324912][ T5810] bridge_slave_0: entered allmulticast mode [ 222.334677][ T5810] bridge_slave_0: entered promiscuous mode [ 222.430744][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.438572][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.446597][ T5819] bridge_slave_1: entered allmulticast mode [ 222.456605][ T5819] bridge_slave_1: entered promiscuous mode [ 222.509147][ T5820] Bluetooth: hci3: command tx timeout [ 222.558479][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.564764][ T5820] Bluetooth: hci4: command tx timeout [ 222.566811][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.579232][ T5810] bridge_slave_1: entered allmulticast mode [ 222.588202][ T5810] bridge_slave_1: entered promiscuous mode [ 222.687484][ T5807] team0: Port device team_slave_0 added [ 222.696446][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.704388][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.712209][ T5808] bridge_slave_0: entered allmulticast mode [ 222.721022][ T5808] bridge_slave_0: entered promiscuous mode [ 222.778432][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.786235][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.794311][ T5817] bridge_slave_0: entered allmulticast mode [ 222.804201][ T5817] bridge_slave_0: entered promiscuous mode [ 222.871809][ T5807] team0: Port device team_slave_1 added [ 222.882202][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.889747][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.897811][ T5808] bridge_slave_1: entered allmulticast mode [ 222.907637][ T5808] bridge_slave_1: entered promiscuous mode [ 222.963997][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.971841][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.979960][ T5817] bridge_slave_1: entered allmulticast mode [ 222.990262][ T5817] bridge_slave_1: entered promiscuous mode [ 223.010836][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.159128][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.220433][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.279466][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.287763][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.314538][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.375399][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.396709][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.503460][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.561990][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.569253][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.596673][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.619369][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.728969][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.748246][ T5819] team0: Port device team_slave_0 added [ 223.873342][ T5810] team0: Port device team_slave_0 added [ 223.890340][ T5819] team0: Port device team_slave_1 added [ 223.949014][ T5817] team0: Port device team_slave_0 added [ 223.966222][ T5808] team0: Port device team_slave_0 added [ 223.982591][ T5810] team0: Port device team_slave_1 added [ 224.085143][ T5817] team0: Port device team_slave_1 added [ 224.101678][ T5808] team0: Port device team_slave_1 added [ 224.241518][ T5820] Bluetooth: hci0: command tx timeout [ 224.329889][ T5820] Bluetooth: hci2: command tx timeout [ 224.336457][ T5812] Bluetooth: hci1: command tx timeout [ 224.384102][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.391700][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.418227][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.446934][ T5807] hsr_slave_0: entered promiscuous mode [ 224.456343][ T5807] hsr_slave_1: entered promiscuous mode [ 224.553087][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.560255][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.561965][ T5820] Bluetooth: hci3: command tx timeout [ 224.587136][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.608252][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.615687][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.642743][ T5812] Bluetooth: hci4: command tx timeout [ 224.642785][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.655345][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.666114][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.692512][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.739562][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.747092][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.773750][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.843702][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.850892][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.879610][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.963311][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.970480][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.997232][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.012977][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.020306][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.047103][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.249416][ T5819] hsr_slave_0: entered promiscuous mode [ 225.258831][ T5819] hsr_slave_1: entered promiscuous mode [ 225.268373][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 225.274422][ T5819] Cannot create hsr debugfs directory [ 225.672141][ T5817] hsr_slave_0: entered promiscuous mode [ 225.681512][ T5817] hsr_slave_1: entered promiscuous mode [ 225.690589][ T5817] debugfs: 'hsr0' already exists in 'hsr' [ 225.697194][ T5817] Cannot create hsr debugfs directory [ 225.739688][ T5810] hsr_slave_0: entered promiscuous mode [ 225.750077][ T5810] hsr_slave_1: entered promiscuous mode [ 225.758714][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 225.764681][ T5810] Cannot create hsr debugfs directory [ 225.965338][ T5808] hsr_slave_0: entered promiscuous mode [ 225.975571][ T5808] hsr_slave_1: entered promiscuous mode [ 225.983613][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 225.989481][ T5808] Cannot create hsr debugfs directory [ 226.341652][ T5820] Bluetooth: hci0: command tx timeout [ 226.401816][ T5820] Bluetooth: hci2: command tx timeout [ 226.407643][ T5820] Bluetooth: hci1: command tx timeout [ 226.642707][ T5812] Bluetooth: hci3: command tx timeout [ 226.721793][ T5812] Bluetooth: hci4: command tx timeout [ 227.195158][ T5807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.217584][ T5807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.244413][ T5807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.391765][ T5807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.611106][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 227.657482][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.709230][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.778095][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.115972][ T5817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.168455][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 228.211068][ T5817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.254891][ T5817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.294929][ T5817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.320699][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 228.418471][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 228.461015][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 228.719763][ T5808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.826290][ T5808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.862435][ T5808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.906739][ T5808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.480685][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.580681][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.834110][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.859445][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.877065][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.970149][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.978077][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.084894][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.113134][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.120709][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.137972][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.145678][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.226740][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.234475][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.343347][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.459041][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.467022][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.496770][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.504481][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.632057][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.844788][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.854497][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.025523][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.070168][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.077949][ T4057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.176623][ T5807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.247160][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.254932][ T4057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.273188][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.280769][ T4057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.306863][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.314631][ T4057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.802313][ T5810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.813371][ T5810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.875278][ T5808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.886080][ T5808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.455754][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.660871][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.858720][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.319077][ T5807] veth0_vlan: entered promiscuous mode [ 234.343730][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.430838][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.530274][ T5807] veth1_vlan: entered promiscuous mode [ 234.703606][ T5819] veth0_vlan: entered promiscuous mode [ 234.913485][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.920563][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.027647][ T5819] veth1_vlan: entered promiscuous mode [ 235.068092][ T5807] veth0_macvtap: entered promiscuous mode [ 235.096781][ T5810] veth0_vlan: entered promiscuous mode [ 235.168010][ T5807] veth1_macvtap: entered promiscuous mode [ 235.323061][ T5810] veth1_vlan: entered promiscuous mode [ 235.415607][ T5808] veth0_vlan: entered promiscuous mode [ 235.527472][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.537705][ T5819] veth0_macvtap: entered promiscuous mode [ 235.558344][ T5808] veth1_vlan: entered promiscuous mode [ 235.625975][ T5819] veth1_macvtap: entered promiscuous mode [ 235.654025][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.761048][ T3560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.798046][ T3691] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.833118][ T4057] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.884764][ T4057] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.917440][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.965522][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.067280][ T4108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.155255][ T3560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.205941][ T5810] veth0_macvtap: entered promiscuous mode [ 236.227078][ T3560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.270347][ T5808] veth0_macvtap: entered promiscuous mode [ 236.287345][ T3560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.325699][ T5810] veth1_macvtap: entered promiscuous mode [ 236.427557][ T5808] veth1_macvtap: entered promiscuous mode [ 236.589512][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.665853][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.759825][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.818464][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.919471][ T3691] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.006005][ T3691] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.103792][ T3691] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.159844][ T3691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.176070][ T5817] veth0_vlan: entered promiscuous mode [ 237.219323][ T3691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.277201][ T4108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.334043][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.351910][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.385426][ T5817] veth1_vlan: entered promiscuous mode [ 237.850581][ T5817] veth0_macvtap: entered promiscuous mode [ 237.925921][ T5817] veth1_macvtap: entered promiscuous mode [ 238.158250][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.239471][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.318084][ T4057] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.373469][ T4057] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.424945][ T4057] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.452650][ T74] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.288638][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.297205][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.556075][ T3903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.565072][ T3903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.751558][ T3710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.759844][ T3710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.073408][ T3710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.082520][ T3710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.115933][ T5807] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 245.243386][ T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.254460][ T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.654044][ T3903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.664202][ T3903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.917357][ T3710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.925877][ T3710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.240216][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 246.364947][ T4057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.376415][ T4057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.742190][ T3903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.750457][ T3903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.984704][ T6005] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 247.168846][ T3903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.178380][ T3903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.337341][ T6020] Bluetooth: MGMT ver 1.23 [ 248.628831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 248.640005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 248.686896][ T6020] process 'syz.1.8' launched './file0' with NULL argv: empty string added [ 248.732051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 248.741677][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 249.041086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 249.053914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 249.065614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.077026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 249.243697][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 249.346374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 250.050480][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11'. [ 251.280604][ T6042] Zero length message leads to an empty skb [ 251.409677][ T6040] tipc: Started in network mode [ 251.416702][ T6040] tipc: Node identity f2fe57e0d497, cluster identity 4711 [ 251.424899][ T6040] tipc: Enabled bearer , priority 0 [ 251.468550][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18'. [ 251.477649][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18'. [ 251.486863][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18'. [ 251.500478][ T6045] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18'. [ 251.576359][ T6040] syzkaller0: entered promiscuous mode [ 251.582475][ T6040] syzkaller0: entered allmulticast mode [ 251.668400][ T6038] tipc: Resetting bearer [ 251.768413][ T6038] tipc: Disabling bearer [ 253.086092][ T6061] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 253.096097][ T6061] block device autoloading is deprecated and will be removed. [ 254.041813][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 254.208924][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.26'. [ 254.281593][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 254.327252][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.342258][ T5870] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.353287][ T5870] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 254.367500][ T5870] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.584723][ T5870] usb 1-1: config 0 descriptor?? [ 254.644050][ T5870] hub 1-1:0.0: USB hub found [ 254.843639][ T5870] hub 1-1:0.0: 1 port detected [ 255.660820][ T5870] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 255.669904][ T11] usb 1-1: USB disconnect, device number 2 [ 257.280020][ T6084] tipc: Started in network mode [ 257.290843][ T6084] tipc: Node identity 366c243e04ca, cluster identity 4711 [ 257.300403][ T6084] tipc: Enabled bearer , priority 0 [ 257.313333][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.32'. [ 257.322523][ T6086] netlink: 16 bytes leftover after parsing attributes in process `syz.2.32'. [ 257.337601][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.32'. [ 257.348666][ T6086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.32'. [ 257.426991][ T6084] tipc: Resetting bearer [ 257.563613][ T6083] tipc: Disabling bearer [ 259.195599][ T6104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.38'. [ 259.215590][ T6104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.38'. [ 259.227439][ T6104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.38'. [ 259.236695][ T6104] netlink: 36 bytes leftover after parsing attributes in process `syz.4.38'. [ 261.962747][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.45'. [ 261.972973][ T6120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.45'. [ 262.114788][ T6122] tipc: Enabled bearer , priority 0 [ 262.233978][ T6122] tipc: Resetting bearer [ 262.302646][ T6121] tipc: Disabling bearer [ 262.623123][ T6126] __nla_validate_parse: 2 callbacks suppressed [ 262.623217][ T6126] netlink: 132 bytes leftover after parsing attributes in process `syz.3.47'. [ 264.512895][ T6135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.51'. [ 264.522868][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.51'. [ 264.532068][ T6135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.51'. [ 264.541272][ T6135] netlink: 36 bytes leftover after parsing attributes in process `syz.3.51'. [ 264.584124][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.631590][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.642281][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.655456][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.666759][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.718737][ T6160] netlink: 132 bytes leftover after parsing attributes in process `syz.4.60'. [ 266.735607][ T5812] Bluetooth: hci5: command tx timeout [ 266.970055][ T6161] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 267.319254][ T6141] chnl_net:caif_netlink_parms(): no params data found [ 268.821389][ T5812] Bluetooth: hci5: command tx timeout [ 270.002606][ T6186] netlink: 'syz.3.68': attribute type 13 has an invalid length. [ 270.011542][ T6186] netlink: 'syz.3.68': attribute type 17 has an invalid length. [ 270.892451][ T5812] Bluetooth: hci5: command tx timeout [ 270.997139][ T6186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 271.341800][ T6198] sctp: failed to load transform for md5: -2 [ 271.543426][ T6186] netlink: 48 bytes leftover after parsing attributes in process `syz.3.68'. [ 271.761378][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.777038][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.787704][ T6141] bridge_slave_0: entered allmulticast mode [ 271.803850][ T6141] bridge_slave_0: entered promiscuous mode [ 272.052245][ T6212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.73'. [ 272.316271][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.324227][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.332316][ T6141] bridge_slave_1: entered allmulticast mode [ 272.343567][ T6141] bridge_slave_1: entered promiscuous mode [ 272.975306][ T5812] Bluetooth: hci5: command tx timeout [ 273.575898][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.742083][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.442560][ T6141] team0: Port device team_slave_0 added [ 274.513120][ T6141] team0: Port device team_slave_1 added [ 275.195256][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.202972][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.230649][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.540150][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.541084][ T6244] loop0: detected capacity change from 0 to 24 [ 275.547679][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.586109][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.774460][ T6244] romfs: Unknown parameter '000000000000000000000041844674407370955161501777777777777777777777ÿÿ' [ 275.875488][ T5986] udevd[5986]: incorrect romfs checksum on /dev/loop0 [ 276.410440][ T6253] netlink: 132 bytes leftover after parsing attributes in process `syz.2.84'. [ 276.652182][ T6141] hsr_slave_0: entered promiscuous mode [ 276.663500][ T6141] hsr_slave_1: entered promiscuous mode [ 276.673172][ T6141] debugfs: 'hsr0' already exists in 'hsr' [ 276.679128][ T6141] Cannot create hsr debugfs directory [ 276.997726][ T6248] sctp: failed to load transform for md5: -2 [ 277.357038][ T6262] netlink: 'syz.0.85': attribute type 13 has an invalid length. [ 277.365396][ T6262] netlink: 'syz.0.85': attribute type 17 has an invalid length. [ 278.332316][ T6262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 278.584107][ T6262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.85'. [ 278.647141][ T6276] binder_alloc: 6275: binder_alloc_buf, no vma [ 281.149441][ T6141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 281.284124][ T6141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 281.483675][ T6141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 281.530970][ T6301] loop0: detected capacity change from 0 to 24 [ 281.764622][ T6141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 281.834763][ T6301] romfs: Unknown parameter '000000000000000000000041844674407370955161501777777777777777777777ÿÿ' [ 281.914857][ T5986] udevd[5986]: incorrect romfs checksum on /dev/loop0 [ 284.052300][ T6311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.96'. [ 284.227597][ T6141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.413467][ T6141] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.525484][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.533178][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.752067][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.759653][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.333072][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.429639][ T6315] sctp: failed to load transform for md5: -2 [ 286.558582][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.919180][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.964229][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 287.172366][ T6330] netlink: 'syz.3.100': attribute type 13 has an invalid length. [ 287.180676][ T6330] netlink: 'syz.3.100': attribute type 17 has an invalid length. [ 287.189676][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 287.213404][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.284287][ T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 287.293444][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 287.303618][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 287.313967][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 287.324944][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 287.343457][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 287.355097][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.995067][ T6330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 288.323064][ T9] usb 5-1: usb_control_msg returned -32 [ 288.329319][ T9] usbtmc 5-1:16.0: can't read capabilities [ 288.840493][ T9] usb 5-1: USB disconnect, device number 2 [ 288.922809][ T6325] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 289.009244][ T36] bridge_slave_1: left allmulticast mode [ 289.016145][ T36] bridge_slave_1: left promiscuous mode [ 289.023379][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.158158][ T6330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.100'. [ 289.167873][ T6330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.100'. [ 289.474685][ T36] bridge_slave_0: left allmulticast mode [ 289.480818][ T36] bridge_slave_0: left promiscuous mode [ 289.492473][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.339995][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.464078][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.551661][ T36] bond0 (unregistering): Released all slaves [ 291.304434][ T6141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.776459][ T36] hsr_slave_0: left promiscuous mode [ 291.847435][ T36] hsr_slave_1: left promiscuous mode [ 291.856469][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.864436][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.035196][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.048422][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.289199][ T36] veth1_macvtap: left promiscuous mode [ 292.295087][ T36] veth0_macvtap: left promiscuous mode [ 292.301313][ T36] veth1_vlan: left promiscuous mode [ 292.306980][ T36] veth0_vlan: left promiscuous mode [ 293.328880][ T6367] loop3: detected capacity change from 0 to 24 [ 293.443208][ T5986] udevd[5986]: incorrect romfs checksum on /dev/loop3 [ 293.544702][ T6367] romfs: Unknown parameter '000000000000000000000041844674407370955161501777777777777777777777ÿÿ' [ 294.065219][ T36] team0 (unregistering): Port device team_slave_1 removed [ 294.152165][ T36] team0 (unregistering): Port device team_slave_0 removed [ 295.842887][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.107'. [ 295.960779][ T11] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 296.215594][ T11] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.229705][ T11] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 296.241092][ T11] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.256344][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.395150][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.402650][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.519473][ T6379] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 296.660657][ T11] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.063846][ T11] usb 1-1: USB disconnect, device number 3 [ 297.541044][ T6348] udevd[6348]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 298.513396][ T6141] veth0_vlan: entered promiscuous mode [ 298.554869][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.576089][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.593884][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.615590][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.629112][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.798175][ T6141] veth1_vlan: entered promiscuous mode [ 299.428850][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 299.438468][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.114'. [ 299.829886][ T6141] veth0_macvtap: entered promiscuous mode [ 299.909907][ T6141] veth1_macvtap: entered promiscuous mode [ 300.313122][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.619841][ T6141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.821571][ T5812] Bluetooth: hci0: command tx timeout [ 300.913525][ T4057] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.004453][ T4057] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.092541][ T4057] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.152660][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 301.448164][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.722726][ T5870] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 302.883725][ T5812] Bluetooth: hci0: command tx timeout [ 302.972206][ T5870] usb 5-1: Using ep0 maxpacket: 32 [ 303.050457][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.062192][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.072654][ T5870] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.082442][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.378428][ T5870] usb 5-1: config 0 descriptor?? [ 303.467891][ T5870] hub 5-1:0.0: USB hub found [ 303.678316][ T5870] hub 5-1:0.0: 1 port detected [ 303.748199][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.882948][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 304.393470][ T24] usb 5-1: USB disconnect, device number 3 [ 304.399796][ T5870] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 304.468881][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.595365][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.603260][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.611665][ T6398] bridge_slave_0: entered allmulticast mode [ 304.621768][ T6398] bridge_slave_0: entered promiscuous mode [ 304.777537][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.878940][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.888084][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.896095][ T6398] bridge_slave_1: entered allmulticast mode [ 304.905191][ T6398] bridge_slave_1: entered promiscuous mode [ 304.962659][ T5812] Bluetooth: hci0: command tx timeout [ 305.011888][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.365878][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.780747][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.154814][ T57] bridge_slave_1: left allmulticast mode [ 306.160848][ T57] bridge_slave_1: left promiscuous mode [ 306.170707][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.187396][ T5870] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 306.293519][ T57] bridge_slave_0: left allmulticast mode [ 306.299423][ T57] bridge_slave_0: left promiscuous mode [ 306.306944][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.439818][ T5870] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.451610][ T5870] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 306.463633][ T5870] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.474384][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.754588][ T6452] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 307.041951][ T5812] Bluetooth: hci0: command tx timeout [ 307.162955][ T5870] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 307.434045][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.561942][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.575152][ T5870] usb 5-1: USB disconnect, device number 4 [ 307.696293][ T57] bond0 (unregistering): Released all slaves [ 308.058483][ T6398] team0: Port device team_slave_0 added [ 308.137940][ T57] tipc: Left network mode [ 308.181973][ T6398] team0: Port device team_slave_1 added [ 308.592521][ T6465] netlink: 'syz.4.124': attribute type 13 has an invalid length. [ 308.600590][ T6465] netlink: 'syz.4.124': attribute type 17 has an invalid length. [ 308.757666][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.766444][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.794108][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.056286][ T6471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.124'. [ 309.066317][ T6471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.124'. [ 309.562096][ T6465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.609048][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.616875][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.644062][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.781849][ T57] hsr_slave_0: left promiscuous mode [ 309.813200][ T57] hsr_slave_1: left promiscuous mode [ 309.820673][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.828689][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.886371][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.894397][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.995038][ T57] veth1_macvtap: left promiscuous mode [ 310.000935][ T57] veth0_macvtap: left promiscuous mode [ 310.007479][ T57] veth1_vlan: left promiscuous mode [ 310.013488][ T57] veth0_vlan: left promiscuous mode [ 310.873021][ T57] team0 (unregistering): Port device team_slave_1 removed [ 310.914442][ T57] team0 (unregistering): Port device team_slave_0 removed [ 311.971562][ T6398] hsr_slave_0: entered promiscuous mode [ 311.982576][ T6398] hsr_slave_1: entered promiscuous mode [ 312.723588][ T6489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 313.731842][ T11] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 313.961693][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 314.022027][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.033716][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.043983][ T11] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 314.053992][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.338478][ T6398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 314.345904][ T11] usb 1-1: config 0 descriptor?? [ 314.375181][ T11] hub 1-1:0.0: USB hub found [ 314.594424][ T6398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 314.662622][ T11] hub 1-1:0.0: 1 port detected [ 314.738435][ T6398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 315.009502][ T6398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 315.280500][ T4057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.292209][ T4057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.416314][ T11] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 315.420901][ T5875] usb 1-1: USB disconnect, device number 4 [ 315.675237][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 315.713633][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 315.724484][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 315.729345][ T4108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.740657][ T4108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.751595][ T11] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 315.824722][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 315.840479][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 315.968234][ T11] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 315.980227][ T11] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 315.990891][ T11] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 316.000472][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.302500][ T6505] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 316.428125][ T11] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.919632][ T11] usb 5-1: USB disconnect, device number 5 [ 317.135322][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.48'. [ 317.450178][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.582504][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.929902][ T5820] Bluetooth: hci1: command tx timeout [ 318.266256][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.358511][ T4787] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.366238][ T4787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.479500][ T6525] netlink: 'syz.5.135': attribute type 13 has an invalid length. [ 318.487922][ T6525] netlink: 'syz.5.135': attribute type 17 has an invalid length. [ 319.173946][ T6525] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 319.237083][ T4787] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.245061][ T4787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.402535][ T6507] chnl_net:caif_netlink_parms(): no params data found [ 319.625928][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.135'. [ 320.004196][ T5820] Bluetooth: hci1: command tx timeout [ 320.288528][ T6539] netlink: 124 bytes leftover after parsing attributes in process `syz.0.138'. [ 322.100506][ T5820] Bluetooth: hci1: command tx timeout [ 322.826611][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.834547][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.842683][ T6507] bridge_slave_0: entered allmulticast mode [ 322.851707][ T6507] bridge_slave_0: entered promiscuous mode [ 323.099191][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.106898][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.114725][ T6507] bridge_slave_1: entered allmulticast mode [ 323.124048][ T6507] bridge_slave_1: entered promiscuous mode [ 323.388784][ T6567] loop5: detected capacity change from 0 to 24 [ 323.468846][ T6567] romfs: Unknown parameter '000000000000000000000041844674407370955161501777777777777777777777ÿÿ' [ 323.587413][ T5986] udevd[5986]: incorrect romfs checksum on /dev/loop5 [ 323.873286][ T6507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.086427][ T6507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.188194][ T5820] Bluetooth: hci1: command tx timeout [ 324.217574][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.554732][ T6507] team0: Port device team_slave_0 added [ 324.575285][ T6507] team0: Port device team_slave_1 added [ 324.948292][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.955975][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.985166][ T6507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.252687][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.260040][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.287585][ T6507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.170874][ T6507] hsr_slave_0: entered promiscuous mode [ 326.182264][ T6507] hsr_slave_1: entered promiscuous mode [ 326.191846][ T6507] debugfs: 'hsr0' already exists in 'hsr' [ 326.198243][ T6507] Cannot create hsr debugfs directory [ 326.830936][ T6591] netlink: 'syz.5.148': attribute type 13 has an invalid length. [ 326.840689][ T6591] netlink: 'syz.5.148': attribute type 17 has an invalid length. [ 326.998131][ T6591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 327.509388][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz.5.148'. [ 327.887420][ T6603] netlink: 124 bytes leftover after parsing attributes in process `syz.0.149'. [ 329.280707][ T6507] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 329.532404][ T6507] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 329.687101][ T6398] veth0_vlan: entered promiscuous mode [ 329.742914][ T6507] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 329.939877][ T6507] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 330.038632][ T6398] veth1_vlan: entered promiscuous mode [ 330.816098][ T6398] veth0_macvtap: entered promiscuous mode [ 330.911236][ T6398] veth1_macvtap: entered promiscuous mode [ 331.147999][ T6622] loop5: detected capacity change from 0 to 24 [ 331.331689][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.435322][ T6398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.524563][ T5986] udevd[5986]: incorrect romfs checksum on /dev/loop5 [ 331.553708][ T6507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.665898][ T4108] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.762064][ T4057] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.838224][ T4057] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.906981][ T4057] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.075830][ T6507] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.275074][ T3903] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.283064][ T3903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.449490][ T3903] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.457201][ T3903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.505845][ T754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.753653][ T754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.039448][ T754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.323541][ T754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.513873][ T6644] netlink: 'syz.0.158': attribute type 13 has an invalid length. [ 334.522177][ T6644] netlink: 'syz.0.158': attribute type 17 has an invalid length. [ 335.102321][ T6644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.384858][ T6644] netlink: 16 bytes leftover after parsing attributes in process `syz.0.158'. [ 335.433540][ T754] bridge_slave_1: left allmulticast mode [ 335.439458][ T754] bridge_slave_1: left promiscuous mode [ 335.446765][ T754] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.552977][ T754] bridge_slave_0: left allmulticast mode [ 335.559129][ T754] bridge_slave_0: left promiscuous mode [ 335.573490][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.703581][ T6659] netlink: 124 bytes leftover after parsing attributes in process `syz.5.159'. [ 336.775942][ T754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.823750][ T754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.850316][ T754] bond0 (unregistering): Released all slaves [ 337.241708][ T6507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.173636][ T754] hsr_slave_0: left promiscuous mode [ 338.224254][ T754] hsr_slave_1: left promiscuous mode [ 338.236973][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.246159][ T754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.346839][ T754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.356412][ T754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.485177][ T754] veth1_macvtap: left promiscuous mode [ 338.490977][ T754] veth0_macvtap: left promiscuous mode [ 338.497488][ T754] veth1_vlan: left promiscuous mode [ 338.503054][ T754] veth0_vlan: left promiscuous mode [ 339.036744][ T6682] loop5: detected capacity change from 0 to 24 [ 339.226889][ T5986] udevd[5986]: incorrect romfs checksum on /dev/loop5 [ 339.596495][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.636057][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.655289][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.759843][ T754] team0 (unregistering): Port device team_slave_1 removed [ 339.780687][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.824009][ T754] team0 (unregistering): Port device team_slave_0 removed [ 339.868103][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.916731][ T6702] netlink: 132 bytes leftover after parsing attributes in process `syz.5.168'. [ 342.021953][ T5812] Bluetooth: hci4: command tx timeout [ 342.774011][ T6711] netlink: 'syz.0.169': attribute type 13 has an invalid length. [ 342.782215][ T6711] netlink: 'syz.0.169': attribute type 17 has an invalid length. [ 343.004287][ T6711] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.337835][ T6711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.169'. [ 343.559114][ T6507] veth0_vlan: entered promiscuous mode [ 343.714461][ T6683] chnl_net:caif_netlink_parms(): no params data found [ 343.794484][ T6507] veth1_vlan: entered promiscuous mode [ 344.040747][ T6726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.171'. [ 344.051363][ T6726] netlink: 16 bytes leftover after parsing attributes in process `syz.5.171'. [ 344.064812][ T6726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.171'. [ 344.075520][ T6726] netlink: 36 bytes leftover after parsing attributes in process `syz.5.171'. [ 344.092073][ T49] Bluetooth: hci4: command tx timeout [ 344.490337][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 344.500406][ T49] Bluetooth: hci3: command 0x0406 tx timeout [ 344.546923][ T6507] veth0_macvtap: entered promiscuous mode [ 344.649817][ T6507] veth1_macvtap: entered promiscuous mode [ 344.978830][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.096726][ T6733] loop0: detected capacity change from 0 to 24 [ 345.352031][ T6019] udevd[6019]: incorrect romfs checksum on /dev/loop0 [ 345.418537][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.593087][ T4787] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.710151][ T3560] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.827538][ T4787] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.980427][ T3560] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.098007][ T4787] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.165146][ T49] Bluetooth: hci4: command tx timeout [ 346.292426][ T3560] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.388660][ T4787] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.713896][ T3560] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.219346][ T6683] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.227473][ T6683] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.240141][ T6683] bridge_slave_0: entered allmulticast mode [ 347.250515][ T6683] bridge_slave_0: entered promiscuous mode [ 347.373533][ T3710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.381798][ T3710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.528756][ T6683] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.536718][ T6683] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.550021][ T6683] bridge_slave_1: entered allmulticast mode [ 347.560900][ T6683] bridge_slave_1: entered promiscuous mode [ 347.788005][ T4787] bridge_slave_1: left allmulticast mode [ 347.794645][ T4787] bridge_slave_1: left promiscuous mode [ 347.801730][ T4787] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.914633][ T4787] bridge_slave_0: left allmulticast mode [ 347.920557][ T4787] bridge_slave_0: left promiscuous mode [ 347.922215][ T6760] netlink: 132 bytes leftover after parsing attributes in process `syz.5.177'. [ 347.927777][ T4787] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.251434][ T49] Bluetooth: hci4: command tx timeout [ 348.885046][ T4787] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.943405][ T4787] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.964026][ T6767] netlink: 'syz.5.179': attribute type 13 has an invalid length. [ 348.973322][ T6767] netlink: 'syz.5.179': attribute type 17 has an invalid length. [ 348.999526][ T4787] bond0 (unregistering): Released all slaves [ 349.330771][ T6683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.383871][ T6683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.466092][ T6768] netlink: 16 bytes leftover after parsing attributes in process `syz.5.179'. [ 349.628406][ T6767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.850482][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.858722][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.266857][ T6683] team0: Port device team_slave_0 added [ 350.415949][ T4787] hsr_slave_0: left promiscuous mode [ 350.453674][ T4787] hsr_slave_1: left promiscuous mode [ 350.462794][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.470591][ T4787] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.525671][ T4787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.533492][ T4787] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.582701][ T4787] veth1_macvtap: left promiscuous mode [ 350.588631][ T4787] veth0_macvtap: left promiscuous mode [ 350.595100][ T4787] veth1_vlan: left promiscuous mode [ 350.600698][ T4787] veth0_vlan: left promiscuous mode [ 351.427821][ T4787] team0 (unregistering): Port device team_slave_1 removed [ 351.480771][ T4787] team0 (unregistering): Port device team_slave_0 removed [ 351.850077][ T6683] team0: Port device team_slave_1 added [ 352.217568][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.225228][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.252071][ T6683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.539902][ T6683] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.547299][ T6683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.578680][ T6683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.067371][ T6794] lo speed is unknown, defaulting to 1000 [ 353.067589][ T6794] lo speed is unknown, defaulting to 1000 [ 353.068852][ T6794] lo speed is unknown, defaulting to 1000 [ 353.091272][ T6794] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 353.128506][ T6794] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 353.608909][ T6794] lo speed is unknown, defaulting to 1000 [ 353.612188][ T6794] lo speed is unknown, defaulting to 1000 [ 353.615252][ T6794] lo speed is unknown, defaulting to 1000 [ 353.618250][ T6794] lo speed is unknown, defaulting to 1000 [ 353.621424][ T6794] lo speed is unknown, defaulting to 1000 [ 354.601438][ T6683] hsr_slave_0: entered promiscuous mode [ 354.666994][ T6683] hsr_slave_1: entered promiscuous mode [ 354.670464][ T6683] debugfs: 'hsr0' already exists in 'hsr' [ 354.670555][ T6683] Cannot create hsr debugfs directory [ 356.090014][ T6815] netlink: 132 bytes leftover after parsing attributes in process `syz.0.186'. [ 356.719464][ T6822] netlink: 'syz.6.187': attribute type 13 has an invalid length. [ 356.729118][ T6822] netlink: 'syz.6.187': attribute type 17 has an invalid length. [ 357.241552][ T6829] netlink: 16 bytes leftover after parsing attributes in process `syz.6.187'. [ 357.633532][ T6822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 357.649879][ T11] lo speed is unknown, defaulting to 1000 [ 357.666307][ T6683] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 357.748868][ T6683] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 357.796661][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.803915][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.960701][ T6683] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 358.053018][ T6683] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 359.839103][ T6683] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.136603][ T6683] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.257792][ T4057] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.265965][ T4057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.517731][ T4057] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.525468][ T4057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.580887][ T4108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.590630][ T4108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.883088][ T4057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.891401][ T4057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.499252][ T6874] md2: using deprecated bitmap file support [ 362.502646][ T6879] netlink: 'syz.5.199': attribute type 13 has an invalid length. [ 362.514859][ T6879] netlink: 'syz.5.199': attribute type 17 has an invalid length. [ 362.667722][ T6879] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 363.186890][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.199'. [ 364.459951][ T6683] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.567918][ T6907] binder: 6905:6907 ioctl c0306201 200000000240 returned -11 [ 368.957404][ T6938] netlink: 'syz.5.212': attribute type 13 has an invalid length. [ 368.966041][ T6938] netlink: 'syz.5.212': attribute type 17 has an invalid length. [ 369.471950][ T6938] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.004262][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.212'. [ 371.021645][ T5870] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 371.253365][ T5870] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 371.265255][ T5870] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 371.275841][ T5870] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 371.285568][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.378026][ T6964] binder: 6961:6964 ioctl c0306201 200000000240 returned -11 [ 371.539812][ T6960] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 371.625361][ T5870] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 371.847026][ T6683] veth0_vlan: entered promiscuous mode [ 372.149461][ T6683] veth1_vlan: entered promiscuous mode [ 372.667909][ T5870] usb 7-1: USB disconnect, device number 2 [ 373.023407][ T6683] veth0_macvtap: entered promiscuous mode [ 373.268612][ T6683] veth1_macvtap: entered promiscuous mode [ 373.750579][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.904988][ T6683] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 374.132867][ T4787] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.222549][ T4787] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.331419][ T4787] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.340678][ T4787] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.503287][ T6980] lo speed is unknown, defaulting to 1000 [ 375.478540][ T6986] overlay: Bad value for 'workdir' [ 380.581878][ T7006] netlink: 'syz.5.226': attribute type 13 has an invalid length. [ 380.589856][ T7006] netlink: 'syz.5.226': attribute type 17 has an invalid length. [ 380.820172][ T7006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 381.026181][ T7015] binder: 7011:7015 ioctl c0306201 200000000240 returned -11 [ 381.305170][ T7006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.226'. [ 382.433189][ T5876] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 382.716047][ T5876] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.728661][ T5876] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 382.739129][ T5876] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 382.748615][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.905378][ T7028] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 383.020638][ T5876] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.870217][ T5870] usb 7-1: USB disconnect, device number 3 [ 384.146885][ T7041] lo speed is unknown, defaulting to 1000 [ 386.094431][ T5870] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 386.323179][ T5870] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 386.331992][ T5870] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 386.343740][ T5870] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 386.359285][ T5870] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 386.372200][ T5870] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 386.386401][ T5870] usb 6-1: config 0 interface 0 has no altsetting 0 [ 386.500053][ T5870] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 386.512832][ T5870] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 386.521575][ T5870] usb 6-1: Product: syz [ 386.525857][ T5870] usb 6-1: Manufacturer: syz [ 386.530608][ T5870] usb 6-1: SerialNumber: syz [ 386.710166][ T5870] usb 6-1: config 0 descriptor?? [ 386.725144][ T7050] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 386.892146][ T5870] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 386.999314][ T7060] netlink: 'syz.7.240': attribute type 13 has an invalid length. [ 387.007835][ T7060] netlink: 'syz.7.240': attribute type 17 has an invalid length. [ 387.138754][ T5870] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 387.162306][ T7061] binder: 7059:7061 ioctl c0306201 200000000240 returned -11 [ 387.613674][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 387.625619][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 387.635645][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 387.651890][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 387.664342][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.318025][ T5876] usb 6-1: USB disconnect, device number 2 [ 388.332550][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.7.240'. [ 388.355508][ T5876] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 388.386640][ T7060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 388.933889][ T7070] lo speed is unknown, defaulting to 1000 [ 389.812270][ T49] Bluetooth: hci3: command tx timeout [ 390.562052][ T49] Bluetooth: hci5: command 0x0406 tx timeout [ 390.616313][ T7070] chnl_net:caif_netlink_parms(): no params data found [ 391.252195][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 391.556552][ T5876] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.568699][ T5876] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 391.581832][ T5876] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.592266][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.855877][ T7094] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 391.856328][ T5812] Bluetooth: hci3: command tx timeout [ 392.004071][ T5876] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.608924][ T754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.617320][ T754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.029630][ T6990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.038708][ T6990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.230379][ T5870] usb 6-1: USB disconnect, device number 3 [ 393.921742][ T5812] Bluetooth: hci3: command tx timeout [ 394.716467][ T3710] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.104220][ T3710] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.214329][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.221831][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.229566][ T7070] bridge_slave_0: entered allmulticast mode [ 395.238265][ T7070] bridge_slave_0: entered promiscuous mode [ 395.376205][ T3710] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.520660][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.531469][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.539351][ T7070] bridge_slave_1: entered allmulticast mode [ 395.549543][ T7070] bridge_slave_1: entered promiscuous mode [ 395.699926][ T3710] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.003889][ T5812] Bluetooth: hci3: command tx timeout [ 396.232196][ T11] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 396.275873][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.458944][ T11] usb 9-1: device descriptor read/64, error -71 [ 396.522936][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.577984][ T7126] netlink: 8 bytes leftover after parsing attributes in process `syz.5.252'. [ 396.722349][ T11] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 396.951447][ T11] usb 9-1: device descriptor read/64, error -71 [ 397.001435][ T3710] bridge_slave_1: left allmulticast mode [ 397.016168][ T3710] bridge_slave_1: left promiscuous mode [ 397.022691][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.109784][ T11] usb usb9-port1: attempt power cycle [ 397.123619][ T3710] bridge_slave_0: left allmulticast mode [ 397.129717][ T3710] bridge_slave_0: left promiscuous mode [ 397.136885][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.471991][ T5876] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 397.612910][ T11] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 397.734248][ T11] usb 9-1: device descriptor read/8, error -71 [ 397.769088][ T5876] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 397.781301][ T5876] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 397.786699][ T7145] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 397.791774][ T5876] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 397.791939][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.883417][ T7136] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 398.032588][ T11] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 398.058195][ T5876] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 398.170008][ T11] usb 9-1: device descriptor read/8, error -71 [ 398.295241][ T11] usb usb9-port1: unable to enumerate USB device [ 398.785806][ T5876] usb 7-1: USB disconnect, device number 4 [ 398.973261][ T3710] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.105543][ T3710] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.202071][ T3710] bond0 (unregistering): Released all slaves [ 399.571232][ T7139] tipc: Started in network mode [ 399.576548][ T7139] tipc: Node identity 42ba8c4101f1, cluster identity 4711 [ 399.584938][ T7139] tipc: Enabled bearer , priority 0 [ 399.609307][ T7070] team0: Port device team_slave_0 added [ 399.630499][ T7138] tipc: Disabling bearer [ 399.776099][ T7070] team0: Port device team_slave_1 added [ 399.802103][ T3710] tipc: Left network mode [ 400.715259][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.723104][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.750643][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.802976][ T7163] netlink: 'syz.7.261': attribute type 4 has an invalid length. [ 401.061476][ T3710] hsr_slave_0: left promiscuous mode [ 401.091901][ T3710] hsr_slave_1: left promiscuous mode [ 401.107935][ T3710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.116216][ T3710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.196001][ T3710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.210658][ T3710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.422807][ T3710] veth1_macvtap: left promiscuous mode [ 401.428608][ T3710] veth0_macvtap: left promiscuous mode [ 401.435139][ T3710] veth1_vlan: left promiscuous mode [ 401.440849][ T3710] veth0_vlan: left promiscuous mode [ 402.264418][ T7175] netlink: 'syz.6.266': attribute type 13 has an invalid length. [ 402.273004][ T7175] netlink: 'syz.6.266': attribute type 17 has an invalid length. [ 402.803468][ T3710] team0 (unregistering): Port device team_slave_1 removed [ 402.925029][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.266'. [ 403.019988][ T3710] team0 (unregistering): Port device team_slave_0 removed [ 403.569469][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.577047][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.604181][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.791851][ T7175] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.382555][ T5876] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 404.624109][ T5876] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 404.636150][ T5876] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 404.646947][ T5876] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 404.656442][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.702965][ T7070] hsr_slave_0: entered promiscuous mode [ 404.714709][ T7070] hsr_slave_1: entered promiscuous mode [ 404.724200][ T7070] debugfs: 'hsr0' already exists in 'hsr' [ 404.730304][ T7070] Cannot create hsr debugfs directory [ 404.862144][ T7196] tipc: Started in network mode [ 404.867435][ T7196] tipc: Node identity ca2fe4ee434a, cluster identity 4711 [ 404.876187][ T7196] tipc: Enabled bearer , priority 0 [ 404.926134][ T7191] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 405.015618][ T5876] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 405.412344][ T7194] tipc: Disabling bearer [ 405.650257][ T31] usb 9-1: USB disconnect, device number 6 [ 405.848799][ T5996] udevd[5996]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.746079][ T7224] netlink: 'syz.5.279': attribute type 13 has an invalid length. [ 407.759620][ T7224] netlink: 'syz.5.279': attribute type 17 has an invalid length. [ 407.902370][ T7224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 408.048734][ T7070] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 408.291283][ T7070] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 408.467855][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.279'. [ 408.488182][ T7070] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 408.632143][ T7236] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 408.642888][ T7236] block device autoloading is deprecated and will be removed. [ 408.707109][ T7070] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 410.490301][ T7247] syzkaller0: entered promiscuous mode [ 410.496311][ T7247] syzkaller0: entered allmulticast mode [ 411.310596][ T7070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.656845][ T7070] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.724502][ T7259] fuse: Unknown parameter 'grou00000000000000000000' [ 411.840784][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.848573][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.964922][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.972769][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.913837][ T7271] netlink: 'syz.8.293': attribute type 13 has an invalid length. [ 412.913943][ T7271] netlink: 'syz.8.293': attribute type 17 has an invalid length. [ 413.764987][ T7271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 414.132391][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.8.293'. [ 415.170438][ T7294] syzkaller0: entered promiscuous mode [ 415.176374][ T7294] syzkaller0: entered allmulticast mode [ 415.535056][ T7302] fuse: Unknown parameter 'grou00000000000000000000' [ 415.867770][ T7070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.262473][ T5876] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 416.472131][ T5876] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 416.480853][ T5876] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 416.496329][ T5876] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 416.508055][ T5876] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 416.519715][ T5876] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 416.533838][ T5876] usb 8-1: config 0 interface 0 has no altsetting 0 [ 416.817199][ T5876] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 416.827084][ T5876] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 416.836230][ T5876] usb 8-1: Product: syz [ 416.840703][ T5876] usb 8-1: Manufacturer: syz [ 416.845800][ T5876] usb 8-1: SerialNumber: syz [ 417.065249][ T5876] usb 8-1: config 0 descriptor?? [ 417.078504][ T7308] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 417.160541][ T5876] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 417.289785][ T5876] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 418.138232][ T7333] netlink: 'syz.6.309': attribute type 13 has an invalid length. [ 418.154622][ T7333] netlink: 'syz.6.309': attribute type 17 has an invalid length. [ 418.281631][ T7333] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.536420][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.309'. [ 419.249486][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.257108][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.495865][ T5876] usb 8-1: USB disconnect, device number 2 [ 419.604284][ T5876] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 419.804912][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.312'. [ 419.816573][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.312'. [ 419.826361][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.312'. [ 419.835966][ T7355] netlink: 36 bytes leftover after parsing attributes in process `syz.5.312'. [ 420.237580][ T7359] syzkaller0: entered promiscuous mode [ 420.245444][ T7359] syzkaller0: entered allmulticast mode [ 420.285387][ T7070] veth0_vlan: entered promiscuous mode [ 420.467146][ T7070] veth1_vlan: entered promiscuous mode [ 421.097657][ T7070] veth0_macvtap: entered promiscuous mode [ 421.209350][ T7070] veth1_macvtap: entered promiscuous mode [ 421.361627][ T5812] Bluetooth: hci0: command 0x0406 tx timeout [ 421.750605][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.920700][ T7070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.562626][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.647017][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.736624][ T6990] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.782299][ T6990] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.299872][ T7388] netlink: 'syz.7.322': attribute type 13 has an invalid length. [ 424.309385][ T7388] netlink: 'syz.7.322': attribute type 17 has an invalid length. [ 424.555377][ T7388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.872021][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.7.322'. [ 424.952915][ T5876] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 425.182850][ T5876] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 425.191963][ T5876] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 425.203543][ T5876] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 425.215124][ T5876] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 425.226972][ T5876] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 425.240670][ T5876] usb 6-1: config 0 interface 0 has no altsetting 0 [ 425.492404][ T5876] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 425.502264][ T5876] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 425.510961][ T5876] usb 6-1: Product: syz [ 425.515662][ T5876] usb 6-1: Manufacturer: syz [ 425.520647][ T5876] usb 6-1: SerialNumber: syz [ 425.697688][ T5876] usb 6-1: config 0 descriptor?? [ 425.706661][ T7391] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 425.712394][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.325'. [ 425.724960][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.325'. [ 425.734296][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.325'. [ 425.743641][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.6.325'. [ 425.804765][ T5876] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 425.910039][ T5876] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 426.683284][ T5870] usb 6-1: USB disconnect, device number 4 [ 426.766724][ T5870] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 426.937808][ T7416] syzkaller0: entered promiscuous mode [ 426.943950][ T7416] syzkaller0: entered allmulticast mode [ 427.872124][ T30] audit: type=1326 audit(1756204378.742:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.7.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46a0f8ebe9 code=0x7fc00000 [ 430.522115][ T30] audit: type=1326 audit(1756204381.412:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7422 comm="syz.7.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46a0f2ade9 code=0x7fc00000 [ 430.985200][ T7454] netlink: 'syz.5.335': attribute type 13 has an invalid length. [ 430.993454][ T7454] netlink: 'syz.5.335': attribute type 17 has an invalid length. [ 431.160602][ T7454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 431.619397][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.5.335'. [ 432.531506][ T5876] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 432.722866][ T5876] usb 7-1: device descriptor read/64, error -71 [ 432.991837][ T5876] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 433.162634][ T5876] usb 7-1: device descriptor read/64, error -71 [ 433.341857][ T5876] usb usb7-port1: attempt power cycle [ 433.652549][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.666804][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.791470][ T5876] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 433.836334][ T5876] usb 7-1: device descriptor read/8, error -71 [ 434.140954][ T6990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.141586][ T5876] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 434.149868][ T6990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.287931][ T5876] usb 7-1: device descriptor read/8, error -71 [ 434.462689][ T5876] usb usb7-port1: unable to enumerate USB device [ 436.792610][ T7510] netlink: 'syz.5.349': attribute type 13 has an invalid length. [ 436.800593][ T7510] netlink: 'syz.5.349': attribute type 17 has an invalid length. [ 437.018485][ T7510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 437.173943][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 437.231598][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 437.260152][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 437.309699][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 437.325533][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 437.498722][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.5.349'. [ 437.718516][ T7511] lo speed is unknown, defaulting to 1000 [ 438.011141][ C1] hrtimer: interrupt took 309211 ns [ 439.195093][ T5876] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 439.437450][ T5876] usb 7-1: device descriptor read/64, error -71 [ 439.453056][ T49] Bluetooth: hci2: command tx timeout [ 439.731724][ T5876] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 439.932589][ T5876] usb 7-1: device descriptor read/64, error -71 [ 440.065113][ T5876] usb usb7-port1: attempt power cycle [ 440.347701][ T7511] chnl_net:caif_netlink_parms(): no params data found [ 440.462330][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 440.509149][ T5876] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 440.611547][ T5876] usb 7-1: device descriptor read/8, error -71 [ 440.667759][ T31] usb 8-1: device descriptor read/64, error -71 [ 440.897351][ T5876] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 440.952356][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 441.003329][ T5876] usb 7-1: device descriptor read/8, error -71 [ 441.122920][ T5876] usb usb7-port1: unable to enumerate USB device [ 441.146700][ T31] usb 8-1: device descriptor read/64, error -71 [ 441.283127][ T31] usb usb8-port1: attempt power cycle [ 441.522580][ T5812] Bluetooth: hci2: command tx timeout [ 441.688173][ T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 441.744546][ T31] usb 8-1: device descriptor read/8, error -71 [ 441.769108][ T5812] Bluetooth: hci1: command 0x0406 tx timeout [ 441.782340][ T57] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.011807][ T57] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.066195][ T31] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 442.169662][ T31] usb 8-1: device descriptor read/8, error -71 [ 442.216728][ T57] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.285326][ T31] usb usb8-port1: unable to enumerate USB device [ 442.508525][ T57] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.958667][ T7561] netlink: 'syz.6.361': attribute type 13 has an invalid length. [ 442.967656][ T7561] netlink: 'syz.6.361': attribute type 17 has an invalid length. [ 443.402059][ T7561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 443.425604][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.433283][ T7511] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.441011][ T7511] bridge_slave_0: entered allmulticast mode [ 443.451856][ T7511] bridge_slave_0: entered promiscuous mode [ 443.604091][ T49] Bluetooth: hci2: command tx timeout [ 443.892252][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.6.361'. [ 443.956045][ T7511] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.964250][ T7511] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.972457][ T7511] bridge_slave_1: entered allmulticast mode [ 444.044731][ T7511] bridge_slave_1: entered promiscuous mode [ 444.452475][ T57] bridge_slave_1: left allmulticast mode [ 444.458584][ T57] bridge_slave_1: left promiscuous mode [ 444.465574][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.669479][ T57] bridge_slave_0: left allmulticast mode [ 444.680556][ T57] bridge_slave_0: left promiscuous mode [ 444.687746][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.681506][ T49] Bluetooth: hci2: command tx timeout [ 445.986920][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013d2a200: rx timeout, send abort [ 446.049047][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.139527][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.204398][ T57] bond0 (unregistering): Released all slaves [ 446.475859][ T7511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.487875][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045994600: rx timeout, send abort [ 446.497229][ C0] vcan0: j1939_tp_rxtimer: 0xffff888013d2a200: abort rx timeout. Force session deactivation [ 446.513367][ T31] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 446.773503][ T31] usb 10-1: device descriptor read/64, error -71 [ 446.924156][ T7511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.996888][ C0] vcan0: j1939_tp_rxtimer: 0xffff888045994600: abort rx timeout. Force session deactivation [ 447.069653][ T31] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 447.330006][ T31] usb 10-1: device descriptor read/64, error -71 [ 447.443524][ T31] usb usb10-port1: attempt power cycle [ 447.570208][ T7511] team0: Port device team_slave_0 added [ 447.681910][ T7511] team0: Port device team_slave_1 added [ 447.841797][ T31] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 447.903245][ T57] hsr_slave_0: left promiscuous mode [ 447.952215][ T31] usb 10-1: device descriptor read/8, error -71 [ 447.967643][ T57] hsr_slave_1: left promiscuous mode [ 447.978071][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.985961][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.045130][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.053214][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.144977][ T57] veth1_macvtap: left promiscuous mode [ 448.151000][ T57] veth0_macvtap: left promiscuous mode [ 448.157321][ T57] veth1_vlan: left promiscuous mode [ 448.163665][ T57] veth0_vlan: left promiscuous mode [ 448.227467][ T31] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 448.316800][ T31] usb 10-1: device descriptor read/8, error -71 [ 448.453333][ T31] usb usb10-port1: unable to enumerate USB device [ 448.751493][ T7612] netlink: 'syz.5.376': attribute type 13 has an invalid length. [ 448.759984][ T7612] netlink: 'syz.5.376': attribute type 17 has an invalid length. [ 449.325250][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.5.376'. [ 449.512995][ T57] team0 (unregistering): Port device team_slave_1 removed [ 449.572376][ T57] team0 (unregistering): Port device team_slave_0 removed [ 450.529793][ T7612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 451.535301][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.543019][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.569746][ T7511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.656570][ T7642] binder: BINDER_SET_CONTEXT_MGR already set [ 451.664087][ T7642] binder: 7640:7642 ioctl 4018620d 200000000040 returned -16 [ 451.735256][ T7642] binder: 7640:7642 ioctl c0306201 200000000240 returned -11 [ 451.941622][ T7511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.948893][ T7511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.975557][ T7511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.670446][ T7511] hsr_slave_0: entered promiscuous mode [ 452.681938][ T7511] hsr_slave_1: entered promiscuous mode [ 452.691746][ T7511] debugfs: 'hsr0' already exists in 'hsr' [ 452.697906][ T7511] Cannot create hsr debugfs directory [ 452.798797][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f5a5400: rx timeout, send abort [ 453.009302][ T7656] 9pnet_virtio: no channels available for device syz [ 453.299716][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f5a5800: rx timeout, send abort [ 453.309384][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f5a5400: abort rx timeout. Force session deactivation [ 453.808518][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804f5a5800: abort rx timeout. Force session deactivation [ 453.967728][ T31] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 454.280824][ T31] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 454.292189][ T31] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 454.301973][ T31] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 454.311695][ T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.482585][ T7671] netlink: 'syz.7.390': attribute type 13 has an invalid length. [ 454.490798][ T7671] netlink: 'syz.7.390': attribute type 17 has an invalid length. [ 454.857073][ T9] usb 10-1: USB disconnect, device number 6 [ 454.925249][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.7.390'. [ 454.972583][ T7671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 455.081846][ T7685] fuse: Bad value for 'fd' [ 455.977835][ T7689] binder: BINDER_SET_CONTEXT_MGR already set [ 455.988999][ T7689] binder: 7687:7689 ioctl 4018620d 200000000040 returned -16 [ 456.068810][ T7689] binder: 7687:7689 ioctl c0306201 200000000240 returned -11 [ 456.310442][ T7511] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 456.382893][ T7511] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 456.478131][ T7511] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 456.557992][ T7697] syzkaller0: entered promiscuous mode [ 456.564109][ T7697] syzkaller0: entered allmulticast mode [ 456.629310][ T7511] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.976676][ T7721] netlink: 'syz.5.405': attribute type 13 has an invalid length. [ 458.985850][ T7721] netlink: 'syz.5.405': attribute type 17 has an invalid length. [ 459.066871][ T31] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 459.109803][ T7721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 459.280903][ T7511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.294886][ T31] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 459.305754][ T31] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 459.315381][ T31] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 459.324982][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.448973][ T7511] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.541324][ T7724] binder: 7722:7724 ioctl c0306201 200000000240 returned -11 [ 459.558634][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.566689][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.610063][ T7721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.405'. [ 459.757124][ T31] usb 8-1: USB disconnect, device number 7 [ 459.800461][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.808194][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.108890][ T7739] syzkaller0: entered promiscuous mode [ 461.115064][ T7739] syzkaller0: entered allmulticast mode [ 462.156555][ T30] audit: type=1326 audit(1756204413.032:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4c18ebe9 code=0x7ffc0000 [ 462.180865][ T30] audit: type=1326 audit(1756204413.032:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4c18ebe9 code=0x7ffc0000 [ 462.354856][ T30] audit: type=1326 audit(1756204413.152:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.6.412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbf4c18ebe9 code=0x7ffc0000 [ 462.378547][ T30] audit: type=1326 audit(1756204413.192:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7750 comm="syz.6.412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf4c18ebe9 code=0x0 [ 463.271421][ T7511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.923410][ T7773] binder: 7771:7773 ioctl c0306201 200000000240 returned -11 [ 464.048715][ T7511] veth0_vlan: entered promiscuous mode [ 464.263581][ T7511] veth1_vlan: entered promiscuous mode [ 464.332477][ T7777] netlink: 'syz.9.419': attribute type 13 has an invalid length. [ 464.340635][ T7777] netlink: 'syz.9.419': attribute type 17 has an invalid length. [ 464.731737][ T11] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 465.055416][ T11] usb 8-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 465.066998][ T11] usb 8-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 465.076534][ T11] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 465.086340][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.130383][ T7777] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 465.246127][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.9.419'. [ 465.544705][ T11] usb 8-1: USB disconnect, device number 8 [ 465.805681][ T7511] veth0_macvtap: entered promiscuous mode [ 465.999109][ T7511] veth1_macvtap: entered promiscuous mode [ 466.078248][ T7793] syzkaller0: entered promiscuous mode [ 466.084270][ T7793] syzkaller0: entered allmulticast mode [ 466.239364][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.510732][ T7511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.649506][ T754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.777192][ T754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.844261][ T6990] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.916617][ T3710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.091441][ T49] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 468.596084][ T7817] binder: 7816:7817 ioctl c0306201 200000000240 returned -11 [ 469.129120][ T7827] netlink: 'syz.7.434': attribute type 13 has an invalid length. [ 469.137589][ T7827] netlink: 'syz.7.434': attribute type 17 has an invalid length. [ 469.287145][ T7827] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 469.723995][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.7.434'. [ 469.974872][ T7839] syzkaller0: entered promiscuous mode [ 469.980613][ T7839] syzkaller0: entered allmulticast mode [ 470.003446][ T5870] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 470.274381][ T5870] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 470.285077][ T5870] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 470.296521][ T5870] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 470.309952][ T5870] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 470.320327][ T5870] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.364393][ T5870] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.335366][ T5870] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 472.572287][ T5870] usb 6-1: USB disconnect, device number 5 [ 473.135382][ T31] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 473.412270][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 473.563233][ T31] usb 8-1: config 44 has an invalid descriptor of length 0, skipping remainder of the config [ 473.574461][ T31] usb 8-1: config 44 has 0 interfaces, different from the descriptor's value: 1 [ 474.035294][ T31] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 474.045116][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.053675][ T31] usb 8-1: Product: syz [ 474.058052][ T31] usb 8-1: Manufacturer: syz [ 474.063049][ T31] usb 8-1: SerialNumber: syz [ 474.195062][ T6019] udevd[6019]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 474.675608][ T7857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.686352][ T7857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.797155][ T7868] binder: 7867:7868 ioctl c0306201 200000000240 returned -11 [ 474.955933][ T7873] warning: `syz.7.441' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 475.184709][ T31] usb 8-1: USB disconnect, device number 9 [ 476.147865][ T7883] netlink: 'syz.6.448': attribute type 13 has an invalid length. [ 476.156331][ T7883] netlink: 'syz.6.448': attribute type 17 has an invalid length. [ 476.653492][ T7888] siw: device registration error -23 [ 477.338166][ T7883] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.142769][ T7883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.448'. [ 479.305044][ T11] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 479.554079][ T11] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 479.565506][ T11] usb 10-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 479.578365][ T11] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.592175][ T11] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.601949][ T11] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.923298][ T11] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.938190][ T7917] binder: 7916:7917 ioctl c018620c 200000000280 returned -22 [ 479.985125][ T7920] binder: 7916:7920 ioctl 4068aea3 0 returned -22 [ 480.260811][ T11] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 480.367729][ T11] usb 10-1: USB disconnect, device number 7 [ 480.432218][ T7923] binder: BINDER_SET_CONTEXT_MGR already set [ 480.438508][ T7923] binder: 7922:7923 ioctl 4018620d 200000000040 returned -16 [ 480.509317][ T7923] binder: 7922:7923 ioctl c0306201 200000000240 returned -11 [ 480.649278][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.705741][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 480.712642][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.828320][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.836612][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.050362][ T7940] netlink: 'syz.7.462': attribute type 13 has an invalid length. [ 482.058625][ T7940] netlink: 'syz.7.462': attribute type 17 has an invalid length. [ 482.284223][ T7940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 482.347162][ T4108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.357630][ T4108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.718463][ T7948] syzkaller0: entered promiscuous mode [ 482.724906][ T7948] syzkaller0: entered allmulticast mode [ 482.769589][ T7940] netlink: 8 bytes leftover after parsing attributes in process `syz.7.462'. [ 484.564652][ T7971] binder: BINDER_SET_CONTEXT_MGR already set [ 484.570924][ T7971] binder: 7969:7971 ioctl 4018620d 200000000040 returned -16 [ 484.692839][ T7971] binder: 7969:7971 ioctl c0306201 200000000240 returned -11 [ 485.441774][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 485.660565][ T9] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 485.672001][ T9] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.686052][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 485.700073][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.709659][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.974081][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 486.151388][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 486.359647][ T9] usb 2-1: USB disconnect, device number 2 [ 486.506258][ T5986] udevd[5986]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 486.843469][ T7986] netlink: 108 bytes leftover after parsing attributes in process `syz.9.473'. [ 491.191751][ T7995] netlink: 'syz.5.476': attribute type 13 has an invalid length. [ 491.199814][ T7995] netlink: 'syz.5.476': attribute type 17 has an invalid length. [ 491.392731][ T7995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.804309][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.5.476'. [ 492.932117][ T8015] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 492.938309][ T8015] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 493.133069][ T8015] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 493.139278][ T8015] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 493.272999][ T8015] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 493.279348][ T8015] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 493.341521][ T8015] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.347914][ T8015] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 493.451927][ T9] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 493.594041][ T8015] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 493.600486][ T8015] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 493.676546][ T9] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 493.687625][ T9] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 493.699305][ T9] usb 10-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 493.713428][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 493.723107][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.144952][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 494.154163][ T9] usb 10-1: invalid MIDI out EP 0 [ 494.766246][ T9] snd-usb-audio 10-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 494.883341][ T9] usb 10-1: USB disconnect, device number 8 [ 495.567016][ T8033] udevd[8033]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.316101][ T8053] kernel profiling enabled (shift: 3) [ 496.560256][ T8057] netlink: 12 bytes leftover after parsing attributes in process `syz.5.491'. [ 500.552346][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 501.107103][ T8090] md2: using deprecated bitmap file support [ 501.114167][ T8090] md2: error: failed to get bitmap file [ 501.601943][ T31] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 501.613100][ T31] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 501.625208][ T31] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 501.639250][ T31] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 501.649365][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.977987][ T31] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.987241][ T31] usb 6-1: invalid MIDI out EP 0 [ 502.309421][ T31] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 502.488109][ T31] usb 6-1: USB disconnect, device number 6 [ 503.818157][ T8104] netlink: 88 bytes leftover after parsing attributes in process `syz.1.507'. [ 504.372916][ T8116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.509'. [ 506.376238][ T8003] udevd[8003]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.471794][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 507.497799][ T8158] netlink: 88 bytes leftover after parsing attributes in process `syz.9.522'. [ 507.777411][ T9] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 507.788632][ T9] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.803425][ T9] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 507.817553][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 507.827319][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.300853][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.309940][ T9] usb 7-1: invalid MIDI out EP 0 [ 509.105559][ T9] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 509.330373][ T9] usb 7-1: USB disconnect, device number 13 [ 509.511366][ T8174] capability: warning: `syz.5.524' uses deprecated v2 capabilities in a way that may be insecure [ 509.798190][ T8164] udevd[8164]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.252498][ T8170] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 513.787020][ T8198] netlink: 88 bytes leftover after parsing attributes in process `syz.6.535'. [ 515.032080][ T31] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 515.284363][ T31] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 515.296572][ T31] usb 8-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 515.308043][ T31] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 515.317498][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.586143][ T31] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.596051][ T31] usb 8-1: invalid MIDI out EP 0 [ 516.172220][ T31] snd-usb-audio 8-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 516.241583][ T31] usb 8-1: USB disconnect, device number 10 [ 516.854791][ T8164] udevd[8164]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 518.539065][ T8237] tipc: Started in network mode [ 518.544504][ T8237] tipc: Node identity 62b4095ca69a, cluster identity 4711 [ 518.557690][ T8237] tipc: Enabled bearer , priority 0 [ 518.647286][ T8237] ===================================================== [ 518.654658][ T8237] BUG: KMSAN: uninit-value in tipc_rcv+0x17fa/0x1ea0 [ 518.661812][ T8237] tipc_rcv+0x17fa/0x1ea0 [ 518.666334][ T8237] tipc_l2_rcv_msg+0x213/0x320 [ 518.671457][ T8237] __netif_receive_skb_list_core+0x133b/0x16b0 [ 518.677948][ T8237] netif_receive_skb_list_internal+0xee7/0x1530 [ 518.684741][ T8237] napi_complete_done+0x3fb/0x7d0 [ 518.690029][ T8237] tun_get_user+0x4c0d/0x6ca0 [ 518.695156][ T8237] tun_chr_write_iter+0x3e9/0x5c0 [ 518.700390][ T8237] do_iter_readv_writev+0x9cd/0xc00 [ 518.706098][ T8237] vfs_writev+0x52a/0x1500 [ 518.710789][ T8237] do_writev+0x1b5/0x580 [ 518.715387][ T8237] __x64_sys_writev+0x99/0xf0 [ 518.720387][ T8237] x64_sys_call+0x24b1/0x3e20 [ 518.725440][ T8237] do_syscall_64+0xd9/0x210 [ 518.730260][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.736505][ T8237] [ 518.739016][ T8237] Uninit was created at: [ 518.743798][ T8237] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 518.750032][ T8237] kmalloc_reserve+0x13c/0x4b0 [ 518.755214][ T8237] __alloc_skb+0x347/0x7d0 [ 518.759822][ T8237] napi_alloc_skb+0xc1/0x740 [ 518.764755][ T8237] napi_get_frags+0xab/0x250 [ 518.770017][ T8237] tun_get_user+0x134f/0x6ca0 [ 518.775149][ T8237] tun_chr_write_iter+0x3e9/0x5c0 [ 518.780381][ T8237] do_iter_readv_writev+0x9cd/0xc00 [ 518.785947][ T8237] vfs_writev+0x52a/0x1500 [ 518.790541][ T8237] do_writev+0x1b5/0x580 [ 518.795070][ T8237] __x64_sys_writev+0x99/0xf0 [ 518.799986][ T8237] x64_sys_call+0x24b1/0x3e20 [ 518.805025][ T8237] do_syscall_64+0xd9/0x210 [ 518.809937][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.816461][ T8237] [ 518.818916][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.5.546 Not tainted syzkaller #0 PREEMPT(none) [ 518.828478][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.838833][ T8237] ===================================================== [ 518.845996][ T8237] Disabling lock debugging due to kernel taint [ 518.852473][ T8237] Kernel panic - not syncing: kmsan.panic set ... [ 518.859054][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.5.546 Tainted: G B syzkaller #0 PREEMPT(none) [ 518.870766][ T8237] Tainted: [B]=BAD_PAGE [ 518.875139][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.885369][ T8237] Call Trace: [ 518.888759][ T8237] [ 518.891751][ T8237] __dump_stack+0x26/0x30 [ 518.896239][ T8237] dump_stack_lvl+0x53/0x270 [ 518.900999][ T8237] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 518.907209][ T8237] dump_stack+0x1e/0x25 [ 518.911522][ T8237] vpanic+0x361/0xc50 [ 518.915721][ T8237] panic+0x15d/0x160 [ 518.919804][ T8237] kmsan_report+0x31c/0x320 [ 518.924464][ T8237] ? __msan_warning+0x1b/0x30 [ 518.929397][ T8237] ? tipc_rcv+0x17fa/0x1ea0 [ 518.934008][ T8237] ? tipc_l2_rcv_msg+0x213/0x320 [ 518.939218][ T8237] ? __netif_receive_skb_list_core+0x133b/0x16b0 [ 518.945908][ T8237] ? netif_receive_skb_list_internal+0xee7/0x1530 [ 518.952648][ T8237] ? napi_complete_done+0x3fb/0x7d0 [ 518.958038][ T8237] ? tun_get_user+0x4c0d/0x6ca0 [ 518.963085][ T8237] ? tun_chr_write_iter+0x3e9/0x5c0 [ 518.968575][ T8237] ? do_iter_readv_writev+0x9cd/0xc00 [ 518.974209][ T8237] ? vfs_writev+0x52a/0x1500 [ 518.979007][ T8237] ? do_writev+0x1b5/0x580 [ 518.983668][ T8237] ? __x64_sys_writev+0x99/0xf0 [ 518.988673][ T8237] ? x64_sys_call+0x24b1/0x3e20 [ 518.993683][ T8237] ? do_syscall_64+0xd9/0x210 [ 518.998532][ T8237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.004941][ T8237] ? __pskb_pull_tail+0x1779/0x2660 [ 519.010468][ T8237] ? __pskb_pull_tail+0x1779/0x2660 [ 519.016104][ T8237] ? kmsan_get_metadata+0xfb/0x160 [ 519.021413][ T8237] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 519.027566][ T8237] ? tipc_msg_validate+0x80b/0xb70 [ 519.032840][ T8237] ? kmsan_get_metadata+0xfb/0x160 [ 519.038101][ T8237] __msan_warning+0x1b/0x30 [ 519.042719][ T8237] tipc_rcv+0x17fa/0x1ea0 [ 519.047206][ T8237] tipc_l2_rcv_msg+0x213/0x320 [ 519.052147][ T8237] __netif_receive_skb_list_core+0x133b/0x16b0 [ 519.058485][ T8237] ? __pfx_tipc_l2_rcv_msg+0x10/0x10 [ 519.063961][ T8237] netif_receive_skb_list_internal+0xee7/0x1530 [ 519.070734][ T8237] napi_complete_done+0x3fb/0x7d0 [ 519.075925][ T8237] ? tun_get_user+0x4bcc/0x6ca0 [ 519.081000][ T8237] tun_get_user+0x4c0d/0x6ca0 [ 519.085873][ T8237] ? stack_depot_save_flags+0x35/0x7b0 [ 519.091547][ T8237] ? kmsan_get_metadata+0xfb/0x160 [ 519.096831][ T8237] ? kmsan_get_metadata+0xfb/0x160 [ 519.102080][ T8237] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 519.108902][ T8237] tun_chr_write_iter+0x3e9/0x5c0 [ 519.114196][ T8237] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 519.119875][ T8237] do_iter_readv_writev+0x9cd/0xc00 [ 519.125340][ T8237] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 519.131387][ T8237] vfs_writev+0x52a/0x1500 [ 519.136001][ T8237] ? stack_depot_save_flags+0x35/0x7b0 [ 519.141728][ T8237] ? kmsan_get_metadata+0xfb/0x160 [ 519.146980][ T8237] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 519.153043][ T8237] do_writev+0x1b5/0x580 [ 519.157589][ T8237] __x64_sys_writev+0x99/0xf0 [ 519.162460][ T8237] x64_sys_call+0x24b1/0x3e20 [ 519.167487][ T8237] do_syscall_64+0xd9/0x210 [ 519.173719][ T8237] ? irqentry_exit+0x16/0x60 [ 519.178444][ T8237] ? clear_bhb_loop+0x40/0x90 [ 519.183249][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.189264][ T8237] RIP: 0033:0x7fb441b8ebe9 [ 519.193846][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.213666][ T8237] RSP: 002b:00007fb442975038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 519.222570][ T8237] RAX: ffffffffffffffda RBX: 00007fb441db5fa0 RCX: 00007fb441b8ebe9 [ 519.230888][ T8237] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000007 [ 519.239192][ T8237] RBP: 00007fb441c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 519.247277][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.255352][ T8237] R13: 00007fb441db6038 R14: 00007fb441db5fa0 R15: 00007fff957999c8 [ 519.263567][ T8237] [ 519.267055][ T8237] Kernel Offset: disabled [ 519.271454][ T8237] Rebooting in 86400 seconds..