last executing test programs: 30m36.739692777s ago: executing program 32 (id=109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) 30m16.11695597s ago: executing program 33 (id=162): sched_setscheduler(0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) getrusage(0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) 29m48.574202293s ago: executing program 34 (id=200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$packet(0x11, 0x2, 0x300) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) userfaultfd(0x801) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef) 25m10.687894551s ago: executing program 4 (id=628): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) socket(0x10, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 25m5.203359376s ago: executing program 4 (id=637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp\x00') pread64(r4, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 24m49.007425099s ago: executing program 35 (id=637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='net/udp\x00') pread64(r4, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) 22m12.940314061s ago: executing program 5 (id=900): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="09000000060000"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r1, 0x0, 0x100000000000000}, 0x38) 22m8.441554921s ago: executing program 5 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000100000011000300686173683a6e65742c6e6574000000000c0007800800124000000002050005000a00000005000100060000008a7df18ee897e5f9647defadfc0774e16f8fd1fe46bbef34ac65d50913ae730e6fadb47420b4da11db5478cbcc47ae43280a4a66c522855b6778449d187cb2d55e2404e0f569972e3c00feb6fb4b84c1ee199af772bbe9db57fc0958bfa3bb6ceab93969c82577004ea57dde21ae26acf2e6d1e122d31a757f85b5962d51719a2ebaedae9059714f1b4d745093f0884b0217e1"], 0x58}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 22m6.098653167s ago: executing program 36 (id=888): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1805000085f11c4ef89a4d7e0000000000850000007a00000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000010) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000100)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000000)=0x7fffffff) 22m1.126252145s ago: executing program 5 (id=917): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x67d, &(0x7f0000000780)="$eJzs3c1vXFfdB/DvnUzsTNonddOkzYMq1WokQFgkfpELZkNACHlRQVUWrK3EaayM02K7lVsh6vC67aJ/QFl4g1ghsY9UWLCBXXfI7CohsekGsxo013fG4/FLxm3jccrnE905595zz7m/87tz77xY0QT4nzU/kfqDFJmfeHm9vb61OdPc2pxZ7tSTjCbZSOpJakmKf7darQ+TG0nRHaboK/d5f2nu1Y8+2fp4Z61eLeX+taP69an22+jbvNHZNp7kTFV+BnvGu/mZxyu6kd9IcrUqYejOJmnt8ZO/PNlt6dE4qPe5E4kReLSKndfNVK/HXWPJ+epCb78P6Lzy1k4+wsGMDrhf/zsIAAAAeNwM8hn4qe1sZ724cALhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBfCxu7v/xfVUuvUx1N0fv9/pNqWqn66vHC83R88qjgAAAAAAAAA4ET8o3x8YTvbWc+FztZWUf7N/8Vy5VL5+ETezGoWs5JrWc9C1rKWlUwlGesZbmR9YW1tZWqAntMH9px+SLijVdn4POYOAAAAAAAAAF84P8/87t//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNCiSMztFivs9m8dSqyc5l2SkvWEj+Vun/jh7MOwAAAAA4AQ8tZ3trOdCZ71V5FKSZ8vvAM7lzdzLWpaylmYWc6v8XmDnU39ta3OmubU5s7z1w4PG/c6/jhVGOWJ2vns4+MhXyj0auf1Wp8/NvJ5mbqVW9my7UsazOdPZY3nvQe63Yyq+XRkwsltV2Z75e1W5z7vHmuxhjvllyliZkbO5naUyR5NVbO1sPF1lorvs7XrMs9N/pKnUusFe6jtS3yQ+Vc7PV2V7Pr8+LOdD0Z+J6Z5n37NH5zz5yh9//+PJqn56pjSYM1XZKh8b+zMx05OJ5wbJxJ3mvbt3bq9OPG6Z2GeyzMTl7vp8vp8fZSLjeSUrWcpbWchaFjOe75W1herkFz2X/CGZurFn7ZWHRTJSPUN3TtbxYnqx7HshS/lBXs+tLOal8t90pvKNzGY2cz1n+PLRZ7i86muHXPWt/zsw+KtfrSqNJL+pygMd2vCotPP6dE9ee++5Y2Vb75bdLF0cIEvHvDfWv1RV2sf4RVWeDv2ZmOrJxDNHZ+K35W1ltXnv7sqdhTcGO9zF93qO+6tTdUttP18utk9Wubb32dFue6a75958tdsudfvV9rVd7raVV2pRP/RKHanew+0fabpse+7Atpmy7UpPW6Pbdq37fguAU+/8186PNP7Z+Gvjg8YvG3caL5/77ug3R58fydk/nf1WffLMl2vPF3/IB/nZ7ud/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg01t9+527C83m4kpfpdVqvXtI00lX6g8JdV8l439/ot2hs6WVblPn58xOcBb//2Qy9BwOvfKfVqtVbSkO2ed3fz41iWpVTkXqhlQZ3j0JOBnX15bfuL769jtfX1peeG3xtcV7c7Ozc5Nzsy/NXL+91Fyc3HkcdpTAo7D7oj/sSAAAAAAAAAAAAIBBncR/Jxj2HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH2/xE6g9SZGry2mR7fWtzptleOvXdPetJakmKnybFh8mN7CwZ6xmuOOw47y/NvfrRJ1sf745V7+xfO6rfYDaqJeNJzuyU9z+v8W5W5ZGKo6ZQdGfYTtjVTuJg2P4bAAD//8o1Bh8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008000000"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffff", @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400137b1af8ff00000000bfa10000000052eba44144f0a2caffffb702000008000000b70409000000000085000061a700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) 21m59.596120699s ago: executing program 5 (id=919): read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xf) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x400448e6, &(0x7f0000000080)="ce") ioctl$sock_bt_hci(r4, 0x400448e7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x87) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x100000, &(0x7f00000000c0), 0x9c, 0x4a3, &(0x7f0000000980)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x6000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) 21m58.249313429s ago: executing program 5 (id=921): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8001, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r7 = syz_clone(0x20100, &(0x7f0000001540)="50019918a5f8bc00cafd349052ecc716a69a3ac9ea8fc7e88859b8c48b6647c5f3b8a753f23860866b25d1713309a5f8de7a2689fda4c4d0c011618927107aed399bdd361fe05e75b2fd4317cc22c0a3d6da42a5a55f386e0447dc9f91a07d0bbbd7d475ff644b3a6a25c2b80ca707edd2aeb39b5e7aebb27ea0605f54ebba80789a48d14f34105ab23c560db02c5154923b4c91f2d3bb90c72c66deb0eecf4963ebc315", 0xa4, &(0x7f0000000080), 0x0, &(0x7f0000001600)="c544a67d35a98389bc5444890e730689cf735466a5e3c9edda170345c5a1ed2062d4709147aa044b82885789780fbb238a978b25a48bb41079dc17f96164ddbb247a5ef3ec6d2a81ef0c8df60ddfbc74a88355d911808aa040e89b2f213b185ccb4a272d4544f8018893c92f439c0152e330f1a7d3521be88cf5886f335845dd629963e6620fd2669d9d3c4bef10b0114befc763c06f80c97178c1c214c6bad791d9140398adedfa7bdf3703495ce1481b478d11b998a8dd5d3bf2a8103e77f0c219d850ed08fc9204451ae0ebb0b19de1d99c638ed61e979bdf2b40249b") move_pages(r7, 0x2, &(0x7f0000000240)=[&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil], 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x6) sendfile(r6, r5, 0x0, 0x6) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r2, 0x1, 0x0, 0x0, 0x2}) 21m57.797212387s ago: executing program 5 (id=922): unshare(0x40000000) 21m42.564790224s ago: executing program 37 (id=922): unshare(0x40000000) 17m59.430158487s ago: executing program 6 (id=1192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="03000000000300", 0x7}, {&(0x7f0000000600)="17dbe6799e1770", 0x7}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10000000031404449839fad8f71b3f2e"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES8=r9, @ANYRESDEC=r6, @ANYBLOB="00020000203f00001c0012800b00010062726964676500000c000280080002000900efa26205255e6462a02e548aadf8149d000008000a00", @ANYRES16=0x0, @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 17m49.693875739s ago: executing program 6 (id=1203): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x24042, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e17ff850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x14, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc87}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000e80)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x2c) ioctl$FS_IOC_SETFLAGS(r0, 0x80086c41, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f00000001c0)) 17m47.975213016s ago: executing program 6 (id=1208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000007a40)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000140)="36c9c4b840b7d7655fcc9d18f16dadef61bc0cab604507d1be6216038b1eea701e30", 0x22}, {&(0x7f0000000380)="4f23d6632f81868298a83f1edca601941ddce6f5cc8f088f3b64cbf07836a191a40df2972f35607817026e738b5c325fa3d412ed3bb7b8afc5fdd3156056c10c5679eda2b82955a122453c6e6d51f165a28a45f43473b23ec051ccf9de4d2367985c88a1961ae19c999d5ce2d158782daa1641b6bbd9dc7b956b3c9f3ab0f8cd88e064b8ee3512655c59523bdd13a95e245e05895e4d8ed01301b3a938a1ecbbb46dbc1e43a28f26db5ceb79c47ca2d45b2c2838a34b0e7b339fd1f758459b6fa3ec215f06e8555afa5fd48c3fc5255e37afa498eca19904816edd1ed27e62d0424a3df0b59d163b715e", 0xea}, {&(0x7f0000000800)="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", 0x2f4}], 0x3}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001d40)="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", 0x1000}, {&(0x7f0000004240)="d6", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000036c0)=[{&(0x7f0000003280)="00cd77dd2d5e", 0x6}], 0x1}}], 0x3, 0x4080) sendmmsg$inet(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f00000001c0)="5a93f8b25eabafa3997fcf0068bfdf4b6db2997a52846a38dac5a545e912cd6b4ced1fedd92c1fa0afab1c4ee981049fde0806bb84989a69b540d6910ca212cb9b5e65f99979c194938a9b13f2f5adf765d69aca3eb5a439537d7333352252c8b35a6361182331ce07c70ec53d713563d033d0de532272a01e00"/139, 0x8b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="0000585195c18b846c30882ada03476b025b0800000000000000fa6303d4808d2b4955ecd0cfe25cd6425819161e305a8f387300895f1a75f5b7116d1e3ad0", 0x3f}], 0x1}}], 0x3, 0x60cd894) 17m46.748196605s ago: executing program 6 (id=1209): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x77c8, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 17m45.682298841s ago: executing program 6 (id=1211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="03000000000300", 0x7}, {&(0x7f0000000600)="17dbe6799e1770", 0x7}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10000000031404449839fad8f71b3f2e"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES8=r9, @ANYRESDEC=r6, @ANYBLOB="00020000203f00001c0012800b00010062726964676500000c000280080002000900efa26205255e6462a02e548aadf8149d000008000a00", @ANYRES16=0x0, @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 17m35.693255987s ago: executing program 6 (id=1218): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) userfaultfd(0x80800) socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x52) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 17m20.582800632s ago: executing program 38 (id=1218): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r0, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) userfaultfd(0x80800) socket(0x1e, 0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, 0x0, 0x52) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 11m33.970292075s ago: executing program 8 (id=1632): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x8c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x3a, 0xb, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m30.47862514s ago: executing program 8 (id=1636): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20000014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000380)={@private=0xa010102, @local, 0xffffffffffffffff, "26dd607c550ac2228d4edde2b91f8b2adf4622fbf1d062c1c7d20dff177cc6d9", 0x9, 0x200, 0x468, 0x7}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000580)=""/245, 0x4000, 0x1800, 0x401, 0x2}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r7 = fsopen(&(0x7f0000000000)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendfile(r4, r4, 0x0, 0x40008) 11m21.329126962s ago: executing program 8 (id=1646): r0 = fanotify_init(0x8, 0x40000) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r0, 0x1, 0x100018, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = fanotify_init(0x4, 0x80000) fanotify_mark(r3, 0x1, 0x8100011, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_pages(r4, 0x5, &(0x7f0000001440)=[&(0x7f0000608000/0x3000)=nil, &(0x7f0000aea000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000098f000/0x4000)=nil, &(0x7f00006ce000/0x2000)=nil], 0x0, &(0x7f0000001400)=[0x0], 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"/466, @ANYRES8=r5, @ANYRES8=r2, @ANYRESOCT=r6], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000380)=0x600000) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r8, 0x402c542d, &(0x7f00000000c0)={0x6, 0x88, 0x6, 0x9f9e, 0xcb, "09c7f9ffffff02000800ffe4ab5b00300600", 0x5, 0x9}) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000280), 0x13f, 0xf}}, 0x20) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x6, @local, 0x21e}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 11m19.776224266s ago: executing program 8 (id=1647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="03000000000300", 0x7}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10000000031404449839fad8f71b3f2e"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES8=r9, @ANYRESDEC=r6, @ANYBLOB="00020000203f00001c0012800b00010062726964676500000c000280080002000900efa26205255e6462a02e548aadf8149d000008000a00", @ANYRES16=0x0, @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 11m12.643596358s ago: executing program 8 (id=1653): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000040)="03000000000300", 0x7}, {0x0}], 0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10000000031404449839fad8f71b3f2e"], 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r4, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYRES8=r9, @ANYRESDEC=r6, @ANYBLOB="00020000203f00001c0012800b00010062726964676500000c000280080002000900efa26205255e6462a02e548aadf8149d000008000a00", @ANYRES16=0x0, @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x40488c5}, 0x40000) socket$inet_smc(0x2b, 0x1, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 11m8.389200884s ago: executing program 8 (id=1655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20000014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000380)={@private=0xa010102, @local, 0xffffffffffffffff, "26dd607c550ac2228d4edde2b91f8b2adf4622fbf1d062c1c7d20dff177cc6d9", 0x9, 0x200, 0x468, 0x7}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000580)=""/245, 0x4000, 0x1800, 0x401, 0x2}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r7 = fsopen(&(0x7f0000000000)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) sendfile(r4, r4, 0x0, 0x40008) 10m52.819274907s ago: executing program 39 (id=1655): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20000014) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000380)={@private=0xa010102, @local, 0xffffffffffffffff, "26dd607c550ac2228d4edde2b91f8b2adf4622fbf1d062c1c7d20dff177cc6d9", 0x9, 0x200, 0x468, 0x7}, 0x3c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000580)=""/245, 0x4000, 0x1800, 0x401, 0x2}, 0x1c) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r7 = fsopen(&(0x7f0000000000)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', 0x0, 0x0) sendfile(r4, r4, 0x0, 0x40008) 5m44.63847223s ago: executing program 3 (id=2321): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1008, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 5m44.03033065s ago: executing program 3 (id=2323): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 5m43.702588175s ago: executing program 3 (id=2324): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x5859, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 5m42.358246535s ago: executing program 3 (id=2326): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) 5m42.02204599s ago: executing program 3 (id=2330): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) sendfile(r0, r1, 0x0, 0x201f00) 5m35.258053466s ago: executing program 3 (id=2346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/148, 0x94}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040), 0xe) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x9}}, 0x8, 0x4, 0x1, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpgid(0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x490}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5m20.012933323s ago: executing program 40 (id=2346): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/148, 0x94}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040), 0xe) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x9}}, 0x8, 0x4, 0x1, 0x3}}, 0x26) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpgid(0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x490}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m41.649637818s ago: executing program 4 (id=2373): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x5eda, 0x10100, 0x4, 0x25d, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 4m39.469038472s ago: executing program 4 (id=2458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 4m38.558356826s ago: executing program 4 (id=2461): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000890}, 0x0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) r7 = dup2(r6, r6) read$FUSE(r7, &(0x7f0000002fc0)={0x2020}, 0x2020) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet(0x2, 0x4, 0x6) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x0, 'bridge_slave_0\x00', {}, 0x1ff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000200)={@local, @empty, @loopback}, &(0x7f0000000240)=0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000140)={0x14, r11, 0xf1aad47e89fb43b5}, 0x14}}, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x3b8, 0x0, 0xffffffff, 0xffffffff, 0x3e4, 0xffffffff, 0x3e4, 0xffffffff, 0xffffffff, 0x3e4, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc, 0x60030000, {0x0, 0xff000000}}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0x5, 0x86f58a9dba0f84f5}}}}, {{@uncond, 0x0, 0x1bc, 0x224, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x1, 0x0, 'syz1\x00'}}, @inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x414) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0xf0, r11, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xaaa2}, {0x6, 0x11, 0xfffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4d}, {0x6, 0x11, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x400}, {0x6, 0x11, 0x1b}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24000051}, 0x20000880) 4m37.152574948s ago: executing program 4 (id=2464): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000040c0)={'wlan1\x00'}) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 4m21.325080203s ago: executing program 41 (id=2464): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000040c0)={'wlan1\x00'}) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) 15.596742398s ago: executing program 9 (id=3098): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x3f, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 15.434495041s ago: executing program 1 (id=3100): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000), &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0}) 15.274057963s ago: executing program 1 (id=3101): shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f00000003c0)=@nfc_llcp, 0x80, &(0x7f0000000f00)}, 0x7}, {{&(0x7f0000000600)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000780)=""/12, 0xc}], 0x1, &(0x7f0000000800)=""/178, 0xb2}, 0x9}, {{&(0x7f00000004c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000008c0)}, 0x5b12}, {{&(0x7f0000000a80)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000c00)=""/128, 0x83}, {&(0x7f0000000540)=""/162, 0xfffffffffffffd80}], 0x2}, 0x80000001}], 0x4, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000680)=""/191, 0xbf) 14.062480202s ago: executing program 1 (id=3104): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) bind$netrom(r0, 0x0, 0x0) 13.892675905s ago: executing program 1 (id=3105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x55) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x301, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x20000010}, 0x0) 13.255056965s ago: executing program 2 (id=3108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x14, 0x4, 0x8, 0x101}, 0x14}}, 0x8810) 12.714459263s ago: executing program 2 (id=3110): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) ioctl$DMA_BUF_SET_NAME_A(r5, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x8) 11.741521718s ago: executing program 2 (id=3111): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x3, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0}) 11.351165504s ago: executing program 9 (id=3114): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000680)=""/191, 0xbf) 11.307664345s ago: executing program 2 (id=3115): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r3, 0x0, 0x0) connect$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r8 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 10.96227188s ago: executing program 9 (id=3118): ioperm(0x284, 0x7f, 0xe3) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) ptrace$pokeuser(0x6, r4, 0x118, 0x4) r6 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0xd2cf, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x44}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000200)={r8, 0xf45}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(xchacha12-arm)\x00'}, 0x58) ptrace$pokeuser(0x6, r4, 0x80118, 0x60000043) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f0000000100)='./file0\x00') 10.906324621s ago: executing program 7 (id=3119): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10000, 0x2, 0xe1}, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0) 8.198748293s ago: executing program 1 (id=3121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000600)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x50}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB]) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x6, @local}, 0x10) socket(0x11, 0x80a, 0x1) syz_clone(0x10020000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f0000000500)="d1bc900d8a00c336af2a52816b757b56260c0944c4f341e9c85c040cff9c5cb201188344ec2fc3fffae0c36426d9228eba2b3c8b42a11f14833b25ea6bd3247a6b565adec5c3a506f5018d06d35efdbb76355936726d1060e638d7e8038ab2e6a23d5c4e1d00d5e8e0b94a252398a320916396ce6999aa2c04557443ff35fd4f7b6a2a2c4717dd2840936d0c43556b3e98f3cb949293cae52be2488aad3b51be28d5751ffa75c3e2fd85e7044b798fe8cb4c4d14f11f4465acc5507d1e3176218958d23fff776ff00f0afb37cd50d13dbf57db8b0d743b59779a6f8008c1e0d354d666417953545575356d5618b956117d1314e5") 6.642168608s ago: executing program 9 (id=3123): pipe2(&(0x7f0000000080), 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r4, 0x0, 0xa002a0}, 0x38) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xffffffffffffff2b) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x3, @empty, 0xd}}, 0x24) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000027000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) 6.45432944s ago: executing program 1 (id=3124): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x35, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000000)=0x3f, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 6.425934561s ago: executing program 7 (id=3125): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x3, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0}) 6.198184904s ago: executing program 0 (id=3126): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="081500000005110400000000000000000100000554"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x14, 0x0, 0x9, 0x305, 0x0, 0x0, {0x0, 0x0, 0x100}}, 0x14}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @window={0x3, 0xe, 0x7ff}, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002200)='net/ip_vs_stats\x00') read$FUSE(r3, &(0x7f0000000080)={0x2020}, 0x2020) openat$cgroup_freezer_state(r3, &(0x7f0000000280), 0x2, 0x0) 6.177571684s ago: executing program 7 (id=3127): openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) r1 = getpid() r2 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x9, 0x7, 0x0, 0x0, 0x5, 0x3, 0xfffffffffffffffc, 0x800000]}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b8970000000f23c80f21f866350c00a0000f23f89d0f326635000400000f302e8dcc0f23742e3b5753baf80466b8f494f78e66efbafc0c66b83ac80000666fda6509", 0x46}], 0x1, 0x1a, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xffe0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) socket$inet6_tcp(0xa, 0x1, 0x0) 4.890409754s ago: executing program 0 (id=3128): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000680)=""/191, 0xbf) 4.738324877s ago: executing program 7 (id=3129): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x4, 0x2}, 0x0, [0x3, 0x3, 0x3ff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0xffffffff, 0x6c7d, 0x0, 0x4, 0x0, 0x0, 0x3, 0x2, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfffffffe, 0x5, 0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x6, 0x3, 0x0, 0x3, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0xa0000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0xef7, 0x0, 0x10800000, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x4], [0xffffffff, 0x7f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x3, 0xffffffff, 0x1ffffffe, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0xfffffffd], [0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x6507, 0x0, 0x0, 0x0, 0x8000001, 0x3, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r0}, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"]) r1 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xfffffffffffffffe, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) 4.639754959s ago: executing program 2 (id=3130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioperm(0x284, 0x7f, 0xe3) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x6, 0x1], 0xd5d5c004, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.53173581s ago: executing program 0 (id=3131): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x80000) r2 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') sendmsg$key(r2, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x40408c0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, r6) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000000) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x54, 0x93d, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x6, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x86dd}}}]}, 0x38}}, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.194306306s ago: executing program 7 (id=3132): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x55) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_getvlan={0x20, 0x72, 0x301, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x20000010}, 0x0) 4.193768295s ago: executing program 2 (id=3133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) r3 = socket(0x10, 0x3, 0x4) setuid(0xee01) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0x7e}}, {0x3}}, {{0x1c, 0x1, {0x6, 0xc, 0x18, 0xd, 0x1, 0x8, 0x2}}, {0x4}}]}]}, 0x68}}, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) dup(0xffffffffffffffff) 1.31696698s ago: executing program 0 (id=3134): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 890.545797ms ago: executing program 7 (id=3135): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 372.647755ms ago: executing program 9 (id=3136): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r1}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a22"], 0x1d) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = open(0x0, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r3, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(r3, 0x0, 0x40000020) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000400)}, {&(0x7f0000000100)}], 0x2) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 202.586657ms ago: executing program 0 (id=3137): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x3, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513", &(0x7f0000002240)=""/4103, 0x0, 0x0, 0x0, 0x0}) 22.7538ms ago: executing program 0 (id=3138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x80000000, 0x9, 0x31363553, 0x0, 0xa, [{0x2, 0x5}, {0x6, 0x7f36}, {0x200, 0x70}, {0x3, 0xf}, {0xa, 0x100}, {0x6, 0x589}, {0x8, 0x7}, {0x10001, 0x8}], 0x10, 0x8, 0x2, 0x2, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0xd) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$I2C(0x0, 0x0, 0x0) 0s ago: executing program 9 (id=3139): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000002640)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000002240)=ANY=[@ANYBLOB="1808000060000000000000000000000018110000f670b7fe132d10e316559220dbf7e14f5969cfbd9783b29a4a23138ed52d22583ca87973a149de5aa58ac4ddd32cdd1b1f9a22f8c49ef18f05d562dfb6c662b181844f957fac1ddf50b04abd845f250e9b1fd9f57b68586084f2c2cfe1569a33185a39a033f075a2ca35e0e8ad0b68", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): Pv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1231.679040][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1231.688205][T10630] usb 47-1: new high-speed USB device number 18 using vhci_hcd [ 1231.710989][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1231.722264][T12558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1231.756639][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1534'. [ 1234.705339][T12861] vhci_hcd: connection reset by peer [ 1234.761466][ T4340] vhci_hcd: stop threads [ 1234.778892][ T4340] vhci_hcd: release socket [ 1234.793671][ T4340] vhci_hcd: disconnect device [ 1236.672477][T12910] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 1236.837626][T12912] netlink: 'syz.7.1541': attribute type 1 has an invalid length. [ 1236.845857][T12912] netlink: 'syz.7.1541': attribute type 7 has an invalid length. [ 1236.854418][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1541'. [ 1238.473430][T10630] vhci_hcd: vhci_device speed not set [ 1238.493845][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1238.501367][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1238.760470][T12558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1240.947045][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1545'. [ 1241.643666][T12953] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1241.650261][T12953] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1241.681047][T12953] vhci_hcd vhci_hcd.0: Device attached [ 1241.964458][ T5051] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 1242.068642][T12959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1548'. [ 1243.806989][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.813773][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.911166][T12954] vhci_hcd: connection reset by peer [ 1244.918033][ T6464] vhci_hcd: stop threads [ 1244.922357][ T6464] vhci_hcd: release socket [ 1244.970543][ T6464] vhci_hcd: disconnect device [ 1244.976246][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1244.987559][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1244.995985][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1245.010257][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1245.031578][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1245.044056][ T4262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1247.093731][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 1247.173508][ T5051] vhci_hcd: vhci_device speed not set [ 1247.274084][T12975] chnl_net:caif_netlink_parms(): no params data found [ 1249.364284][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 1251.440531][T13036] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 1251.447128][T13036] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1251.482702][T13036] vhci_hcd vhci_hcd.0: Device attached [ 1251.615642][T12975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.622794][T12975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.863767][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 1252.593714][ T4242] usb 49-1: new high-speed USB device number 12 using vhci_hcd [ 1252.697390][T12975] device bridge_slave_0 entered promiscuous mode [ 1253.883435][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 1258.591954][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1561'. [ 1258.684400][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.692062][T12975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.703988][T12975] device bridge_slave_1 entered promiscuous mode [ 1259.061642][T13037] vhci_hcd: connection reset by peer [ 1259.067250][ T9180] vhci_hcd: stop threads [ 1259.072717][ T9180] vhci_hcd: release socket [ 1260.825888][ T9180] vhci_hcd: disconnect device [ 1261.306785][T13080] netlink: 'syz.7.1567': attribute type 1 has an invalid length. [ 1263.633443][T12371] device hsr_slave_0 left promiscuous mode [ 1263.737312][T12371] device hsr_slave_1 left promiscuous mode [ 1263.766918][T12371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1263.947011][T12371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1266.884248][T12371] device bridge_slave_1 left promiscuous mode [ 1266.958708][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 1267.172890][T12371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.205929][T12371] device bridge_slave_0 left promiscuous mode [ 1268.212159][T12371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.579407][T13129] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1268.587042][T13129] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1268.700162][T13129] vhci_hcd vhci_hcd.0: Device attached [ 1269.653549][ T4242] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 1273.270045][T13130] vhci_hcd: connection reset by peer [ 1273.277342][ T6101] vhci_hcd: stop threads [ 1273.281706][ T6101] vhci_hcd: release socket [ 1273.374861][ T6101] vhci_hcd: disconnect device [ 1274.027711][T12371] team0 (unregistering): Port device team_slave_1 removed [ 1274.179379][T12371] team0 (unregistering): Port device team_slave_0 removed [ 1274.690245][T12371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1275.524332][T12371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1275.973414][ T126] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1276.124611][ T4242] vhci_hcd: vhci_device speed not set [ 1276.142033][T12371] bond0 (unregistering): Released all slaves [ 1276.165274][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1276.179006][ T126] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1276.189302][ T126] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1276.199668][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.212682][ T126] usb 4-1: config 0 descriptor?? [ 1276.244314][T12975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.265809][T12975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.275617][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1578'. [ 1276.566083][T12975] team0: Port device team_slave_0 added [ 1276.648195][ T126] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1276.780942][T12975] team0: Port device team_slave_1 added [ 1276.790234][ T126] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1276.807601][ T126] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1276.837322][ T126] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1276.846154][ T126] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 1277.998408][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'. [ 1278.010938][T13177] netlink: 'syz.0.1585': attribute type 1 has an invalid length. [ 1278.019761][T13177] netlink: 'syz.0.1585': attribute type 7 has an invalid length. [ 1278.027835][T13177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 1280.668268][ T126] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 1280.701355][T13175] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1583'. [ 1280.953509][T12975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1280.960744][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1280.987761][T12975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.000982][T12975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.008423][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.035144][T12975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.087566][T12975] device hsr_slave_0 entered promiscuous mode [ 1281.095329][T12975] device hsr_slave_1 entered promiscuous mode [ 1281.102592][T12975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1281.110518][T12975] Cannot create hsr debugfs directory [ 1282.093496][ T126] playstation 0003:054C:0DF2.0008: Failed to retrieve feature with reportID 9: -71 [ 1282.137906][ T126] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -71 [ 1282.173456][ T126] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 1282.182318][ T126] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 1282.332782][ T126] playstation: probe of 0003:054C:0DF2.0008 failed with error -71 [ 1282.551331][ T126] usb 4-1: USB disconnect, device number 3 [ 1283.772483][T13208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1591'. [ 1284.616895][T13215] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1284.623578][T13215] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1284.647332][T13215] vhci_hcd vhci_hcd.0: Device attached [ 1284.950230][ T4399] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 1286.323155][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 1287.855583][T12975] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1287.867563][T13221] fido_id[13221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1287.886292][T12975] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1288.080814][T12975] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1288.087726][T13216] vhci_hcd: connection reset by peer [ 1288.095517][ T4335] vhci_hcd: stop threads [ 1288.100224][ T4335] vhci_hcd: release socket [ 1289.024899][ T4335] vhci_hcd: disconnect device [ 1289.066659][T13237] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1595'. [ 1289.080192][T13237] device vlan2 entered promiscuous mode [ 1289.086003][T13237] device bridge0 entered promiscuous mode [ 1289.092634][T12975] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1290.811030][T12975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.961381][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1290.970147][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1291.021005][T12975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.096616][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1291.120303][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1291.179413][T12371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.186629][T12371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.247797][ T4399] vhci_hcd: vhci_device speed not set [ 1291.278188][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1291.319571][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1291.358131][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1291.401019][T12371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.408268][T12371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.463877][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1291.547186][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1291.588218][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1291.642198][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1291.689083][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1291.718674][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1291.786366][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1291.820526][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1292.202258][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1292.204286][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1292.229837][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1292.235474][T12975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1292.922564][T13262] netlink: 'syz.8.1598': attribute type 1 has an invalid length. [ 1296.108183][T13305] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 1297.584305][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1297.591902][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1297.642410][T12975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1298.967237][T13333] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1298.973810][T13333] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1299.010472][T13333] vhci_hcd vhci_hcd.0: Device attached [ 1299.190446][T13341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1608'. [ 1299.273608][T10629] usb 39-1: new high-speed USB device number 5 using vhci_hcd [ 1302.240531][T13335] vhci_hcd: connection reset by peer [ 1302.681084][ T4717] vhci_hcd: stop threads [ 1302.937671][ T4717] vhci_hcd: release socket [ 1302.943393][ T4717] vhci_hcd: disconnect device [ 1304.340919][T13354] netlink: 'syz.0.1612': attribute type 1 has an invalid length. [ 1305.251639][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.258865][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.233763][T10629] vhci_hcd: vhci_device speed not set [ 1307.333563][T13367] ubi: mtd0 is already attached to ubi31 [ 1313.280553][ T4266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1313.291838][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1313.300902][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1313.314844][ T4266] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1313.322711][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1313.330578][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1314.907699][T13419] netlink: 'syz.8.1623': attribute type 1 has an invalid length. [ 1315.583113][ T4262] Bluetooth: hci4: command 0x0409 tx timeout [ 1315.873001][T13408] chnl_net:caif_netlink_parms(): no params data found [ 1317.345183][T13446] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1317.351787][T13446] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1317.536654][T13408] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.644996][ T4262] Bluetooth: hci4: command 0x041b tx timeout [ 1317.814720][T13446] vhci_hcd vhci_hcd.0: Device attached [ 1317.831494][T13408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.848664][T13408] device bridge_slave_0 entered promiscuous mode [ 1318.093501][ T126] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 1318.734306][T13408] bridge0: port 2(bridge_slave_1) entered blocking state [ 1318.774103][T13408] bridge0: port 2(bridge_slave_1) entered disabled state [ 1318.945874][T13408] device bridge_slave_1 entered promiscuous mode [ 1319.134031][T13463] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 1319.733552][ T4262] Bluetooth: hci4: command 0x040f tx timeout [ 1321.402164][T13449] vhci_hcd: connection reset by peer [ 1321.410846][T13408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.436897][ T4477] vhci_hcd: stop threads [ 1321.441290][ T4477] vhci_hcd: release socket [ 1321.479268][ T4477] vhci_hcd: disconnect device [ 1321.504463][T13408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.723318][T13487] ubi: mtd0 is already attached to ubi31 [ 1321.804401][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 1321.940943][T13487] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1633'. [ 1322.231386][T13408] team0: Port device team_slave_0 added [ 1322.267487][T13408] team0: Port device team_slave_1 added [ 1322.424850][T13408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1322.466393][T13408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1322.556901][T13408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1323.644429][ T126] vhci_hcd: vhci_device speed not set [ 1323.671435][T13408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.696227][T13408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.722255][ C1] vkms_vblank_simulate: vblank timer overrun [ 1324.089710][T13408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1324.137046][T13503] netlink: 'syz.0.1634': attribute type 1 has an invalid length. [ 1324.550608][T13408] device hsr_slave_0 entered promiscuous mode [ 1327.191964][T13408] device hsr_slave_1 entered promiscuous mode [ 1327.307747][T13408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1327.436544][T13408] Cannot create hsr debugfs directory [ 1327.557754][T13515] netlink: 'syz.0.1637': attribute type 1 has an invalid length. [ 1328.543526][T13530] netlink: 'syz.7.1640': attribute type 3 has an invalid length. [ 1328.634061][T13530] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1640'. [ 1329.610641][T13543] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1329.617260][T13543] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1329.625674][T13543] vhci_hcd vhci_hcd.0: Device attached [ 1329.913560][T10629] usb 33-1: new high-speed USB device number 8 using vhci_hcd [ 1331.299831][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1643'. [ 1332.898475][T13544] vhci_hcd: connection reset by peer [ 1332.913726][T11795] vhci_hcd: stop threads [ 1332.918019][T11795] vhci_hcd: release socket [ 1333.045578][T11795] vhci_hcd: disconnect device [ 1333.119686][ T4335] device hsr_slave_0 left promiscuous mode [ 1333.148733][ T4335] device hsr_slave_1 left promiscuous mode [ 1333.196631][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1333.267340][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1333.303212][ T4335] device bridge_slave_1 left promiscuous mode [ 1333.333678][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1333.356867][ T4335] device bridge_slave_0 left promiscuous mode [ 1333.363165][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1339.019557][T10629] vhci_hcd: vhci_device speed not set [ 1339.306564][T13590] ubi: mtd0 is already attached to ubi31 [ 1339.471120][T13590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1649'. [ 1340.112677][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 1340.199263][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 1340.273973][ T126] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1340.290761][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.361501][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1340.462294][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1340.473536][ T126] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1340.489855][ T126] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1340.499167][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.511495][ T126] usb 1-1: config 0 descriptor?? [ 1340.936187][ T126] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1340.955015][ T126] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1340.962493][ T126] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1340.972402][ T126] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1340.990248][ T126] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 1341.011451][ T126] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0 [ 1341.046130][ T4335] bond0 (unregistering): Released all slaves [ 1341.266703][ T126] playstation 0003:054C:0DF2.0009: Invalid byte count transferred, expected 20 got 0 [ 1341.286159][ T126] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -22 [ 1341.327347][ T126] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 1341.359304][ T126] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 1341.416890][ T126] playstation: probe of 0003:054C:0DF2.0009 failed with error -22 [ 1341.657348][T13572] netlink: 'syz.3.1645': attribute type 1 has an invalid length. [ 1341.666116][T13578] netlink: 'syz.8.1647': attribute type 1 has an invalid length. [ 1341.757573][T13582] netlink: 'syz.7.1648': attribute type 1 has an invalid length. [ 1341.870778][T13605] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1650'. [ 1343.956671][T13620] netlink: 'syz.7.1651': attribute type 1 has an invalid length. [ 1345.973995][T13626] netlink: 'syz.8.1653': attribute type 1 has an invalid length. [ 1346.464968][T13408] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1346.532873][ T6450] usb 1-1: USB disconnect, device number 4 [ 1346.572004][T13408] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1347.315979][T13408] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1347.348504][T13408] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1347.413486][T13643] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1347.420066][T13643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1347.616718][T13643] vhci_hcd vhci_hcd.0: Device attached [ 1347.914736][ T6450] usb 47-1: new high-speed USB device number 19 using vhci_hcd [ 1349.066155][T13653] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1658'. [ 1351.105786][T13644] vhci_hcd: connection reset by peer [ 1351.111861][ T4378] vhci_hcd: stop threads [ 1351.117955][ T4378] vhci_hcd: release socket [ 1351.135635][ T4378] vhci_hcd: disconnect device [ 1352.753901][T13408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1352.778578][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1352.854002][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1352.906803][T13408] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.980423][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1353.004009][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1353.238767][ T4373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.245982][ T4373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1355.583918][ T6450] vhci_hcd: vhci_device speed not set [ 1356.336053][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1356.349494][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1356.468469][ T4373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.475727][ T4373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1356.516609][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1358.099169][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1358.116322][T13697] ubi: mtd0 is already attached to ubi31 [ 1358.141638][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1359.830750][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1359.908027][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1359.944096][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1359.964495][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1360.093109][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1360.121277][T13408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1361.833305][T13408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1361.896629][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1361.906397][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1361.924779][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1361.949699][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1362.057580][T13715] netlink: 'syz.7.1667': attribute type 1 has an invalid length. [ 1362.146298][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1362.393516][T13724] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 1362.400188][T13724] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1362.453438][T13724] vhci_hcd vhci_hcd.0: Device attached [ 1363.353393][ T4399] usb 47-1: new high-speed USB device number 20 using vhci_hcd [ 1364.073862][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1671'. [ 1366.697023][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.703509][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.729151][T13725] vhci_hcd: connection reset by peer [ 1366.767958][ T4335] vhci_hcd: stop threads [ 1366.940976][ T4335] vhci_hcd: release socket [ 1367.060920][ T4335] vhci_hcd: disconnect device [ 1367.435578][T13744] netlink: 'syz.3.1672': attribute type 3 has an invalid length. [ 1367.483818][T13744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1672'. [ 1367.784301][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1367.796360][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1367.804734][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1367.814961][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1367.835522][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1367.843585][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1368.086802][ T4373] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.210970][ T4373] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.358528][ T4373] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.693425][ T4399] vhci_hcd: vhci_device speed not set [ 1369.883463][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 1370.127110][ T4373] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.967504][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 1373.816875][T13750] chnl_net:caif_netlink_parms(): no params data found [ 1374.043506][ T4270] Bluetooth: hci1: command 0x040f tx timeout [ 1374.292114][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1374.339935][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1374.349361][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1374.363219][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1374.371527][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1374.381112][ T4266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1376.209344][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 1376.701713][T13750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.800179][T13750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.831680][T13750] device bridge_slave_0 entered promiscuous mode [ 1376.865930][T13789] netlink: 'syz.3.1678': attribute type 1 has an invalid length. [ 1376.923156][T13820] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1376.929846][T13820] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1377.014920][T13820] vhci_hcd vhci_hcd.0: Device attached [ 1377.200040][T13750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1377.226691][T13750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.293601][ T4242] usb 33-1: new high-speed USB device number 9 using vhci_hcd [ 1377.395543][T13750] device bridge_slave_1 entered promiscuous mode [ 1377.543008][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1683'. [ 1378.283728][ T4266] Bluetooth: hci4: command 0x0409 tx timeout [ 1378.700563][T13750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.029875][T13750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.082433][T13822] vhci_hcd: connection reset by peer [ 1380.092485][ T4717] vhci_hcd: stop threads [ 1380.102671][T13750] team0: Port device team_slave_0 added [ 1380.129114][ T4717] vhci_hcd: release socket [ 1380.185645][ T4717] vhci_hcd: disconnect device [ 1380.248612][T13750] team0: Port device team_slave_1 added [ 1380.346349][T13750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.363719][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1380.389669][ C0] vkms_vblank_simulate: vblank timer overrun [ 1380.403394][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 1380.949877][T13750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.286660][T13750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.313711][T13750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.390454][T13750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1382.588391][T13750] device hsr_slave_0 entered promiscuous mode [ 1382.675027][T13750] device hsr_slave_1 entered promiscuous mode [ 1382.738814][ T4270] Bluetooth: hci4: command 0x040f tx timeout [ 1382.740080][ T4242] vhci_hcd: vhci_device speed not set [ 1382.781323][T13750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1382.817328][T13750] Cannot create hsr debugfs directory [ 1384.687068][T13801] chnl_net:caif_netlink_parms(): no params data found [ 1384.773471][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 1384.802337][ T4373] device hsr_slave_0 left promiscuous mode [ 1384.822384][ T4373] device hsr_slave_1 left promiscuous mode [ 1384.825184][T13876] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1384.834807][T13876] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1384.852432][T13876] vhci_hcd vhci_hcd.0: Device attached [ 1386.073388][ T4242] usb 39-1: new high-speed USB device number 6 using vhci_hcd [ 1386.397626][ T4373] device veth1_macvtap left promiscuous mode [ 1386.489038][ T4373] device veth0_macvtap left promiscuous mode [ 1386.581878][ T4373] device veth1_vlan left promiscuous mode [ 1386.671077][ T4373] device veth0_vlan left promiscuous mode [ 1388.026368][ T4373] bond4 (unregistering): Released all slaves [ 1388.050451][ T4373] bond3 (unregistering): Released all slaves [ 1388.150675][ T4373] bond2 (unregistering): Released all slaves [ 1388.206097][ T4373] bond1 (unregistering): Released all slaves [ 1393.160687][ T4373] bond0 (unregistering): Released all slaves [ 1393.260328][T13886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 1393.274355][T13912] netlink: 'syz.7.1695': attribute type 1 has an invalid length. [ 1393.502448][T13877] vhci_hcd: connection reset by peer [ 1393.511102][ T9] vhci_hcd: stop threads [ 1393.523326][ T9] vhci_hcd: release socket [ 1393.528091][ T9] vhci_hcd: disconnect device [ 1393.603463][ T4242] vhci_hcd: vhci_device speed not set [ 1397.787562][T13801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.833901][T13801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.842411][T13801] device bridge_slave_0 entered promiscuous mode [ 1397.881644][T13801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.892654][T13801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.915858][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 1398.042986][T13801] device bridge_slave_1 entered promiscuous mode [ 1398.274528][ T27] audit: type=1326 audit(1751230576.468:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1398.444476][ T27] audit: type=1326 audit(1751230576.528:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1398.634616][ T27] audit: type=1326 audit(1751230576.538:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1398.832861][ T27] audit: type=1326 audit(1751230576.568:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1398.964978][ T27] audit: type=1326 audit(1751230576.578:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1399.003490][ T27] audit: type=1326 audit(1751230576.588:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1399.095434][T13801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.268305][ T27] audit: type=1326 audit(1751230576.588:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1400.784927][ T27] audit: type=1326 audit(1751230576.598:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1401.086620][ T27] audit: type=1326 audit(1751230576.598:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1401.122023][ T27] audit: type=1326 audit(1751230576.608:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13974 comm="syz.7.1704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1401.235610][T13801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1401.380597][T13801] team0: Port device team_slave_0 added [ 1402.037595][T13801] team0: Port device team_slave_1 added [ 1403.510018][T13801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1403.660637][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.686633][ C1] vkms_vblank_simulate: vblank timer overrun [ 1403.701560][T13801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1403.815055][T13801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1403.822322][T13801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1403.849958][T13801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1403.961959][T13801] device hsr_slave_0 entered promiscuous mode [ 1403.995260][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1716'. [ 1404.037573][T13801] device hsr_slave_1 entered promiscuous mode [ 1404.052526][T13801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1404.060936][T13801] Cannot create hsr debugfs directory [ 1405.961579][T13750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1406.043215][T13750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1406.275890][T13750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1406.355112][T13750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1411.513421][T13750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1411.565435][T14081] binder: 14080:14081 ioctl c0046209 0 returned -22 [ 1411.814344][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1724'. [ 1411.902750][T14085] device vlan2 entered promiscuous mode [ 1412.638316][T14085] device bridge0 entered promiscuous mode [ 1412.665827][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1412.684009][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1412.726403][T13750] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.816451][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1412.825427][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1412.835412][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1412.843042][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1412.850872][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1412.858624][T14091] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1414.046764][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1414.116966][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1414.479128][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1414.486382][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1414.494795][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1414.504024][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1414.513675][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 1414.520805][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1414.529137][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1415.386508][T14111] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1415.397835][T14111] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1416.333846][ T4373] device hsr_slave_0 left promiscuous mode [ 1416.413554][ T4373] device hsr_slave_1 left promiscuous mode [ 1416.433633][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.463743][ T4373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.571112][ T4373] device bridge_slave_1 left promiscuous mode [ 1416.597931][ T4373] bridge0: port 2(bridge_slave_1) entered disabled state [ 1416.641488][ T4373] device bridge_slave_0 left promiscuous mode [ 1416.738168][ T4373] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.960155][ T4373] team0 (unregistering): Port device team_slave_1 removed [ 1419.102761][ T4373] team0 (unregistering): Port device team_slave_0 removed [ 1419.219277][ T4373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1419.297836][ T4373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1419.832804][ T4373] bond0 (unregistering): Released all slaves [ 1419.927345][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1419.936576][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1419.953872][T14126] netlink: 'syz.3.1732': attribute type 1 has an invalid length. [ 1420.085678][T14138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1420.150261][T14138] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1420.160595][T14138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1420.178362][T14138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1420.192310][T14138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1420.223125][T14138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1420.483547][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1420.493151][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1420.541124][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1420.605843][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1420.640929][T13750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1420.818407][T13750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1421.589712][T13801] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1421.621932][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1421.626962][T14150] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1421.634237][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1423.103961][T14150] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1423.322894][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1423.323916][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1423.324402][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1423.324934][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1423.330275][T13801] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1423.337440][T13801] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1423.349350][T13801] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1426.683462][ T4266] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1426.694065][ T4262] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1426.703065][ T4266] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1426.711418][ T4266] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1426.733462][ T4266] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1426.740829][ T4266] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1428.126273][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.132916][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.856656][T14213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1428.867854][T14213] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1429.586990][ T4270] Bluetooth: hci5: command 0x0409 tx timeout [ 1429.929665][T14190] chnl_net:caif_netlink_parms(): no params data found [ 1430.484739][T14190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1430.503398][T14190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.511745][T14190] device bridge_slave_0 entered promiscuous mode [ 1430.577945][T14190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.588447][T14190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.612485][T14190] device bridge_slave_1 entered promiscuous mode [ 1430.691868][T14190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1430.740442][T14190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1430.890997][T14190] team0: Port device team_slave_0 added [ 1430.928060][T14190] team0: Port device team_slave_1 added [ 1432.104512][ T4270] Bluetooth: hci5: command 0x041b tx timeout [ 1432.865998][T14190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.873086][T14190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.901450][T14190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1433.085504][T14190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1433.092659][T14190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1433.453635][T14256] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1433.465347][T14256] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1434.092881][T14190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1434.126504][ T4266] Bluetooth: hci5: command 0x040f tx timeout [ 1434.852413][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1434.873692][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1434.882659][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1434.894223][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1434.903988][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1434.911351][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1436.691509][ T4266] Bluetooth: hci5: command 0x0419 tx timeout [ 1437.038085][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 1437.102714][T14190] device hsr_slave_0 entered promiscuous mode [ 1437.128764][T14190] device hsr_slave_1 entered promiscuous mode [ 1437.205073][T14286] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1437.216809][T14286] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1437.484289][T14190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1437.865217][T14190] Cannot create hsr debugfs directory [ 1439.537033][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 1439.945945][T14301] netlink: 'syz.0.1758': attribute type 1 has an invalid length. [ 1440.112269][T14309] netlink: 'syz.7.1760': attribute type 1 has an invalid length. [ 1441.624975][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 1443.943324][T14336] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1443.957042][T14336] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1445.185824][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 1447.311086][T14265] chnl_net:caif_netlink_parms(): no params data found [ 1447.889319][ T6101] device hsr_slave_0 left promiscuous mode [ 1448.797605][ T6101] device hsr_slave_1 left promiscuous mode [ 1448.817592][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1448.842727][ T6101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1448.865729][ T6101] device bridge_slave_1 left promiscuous mode [ 1448.871982][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.888859][ T6101] device bridge_slave_0 left promiscuous mode [ 1448.906505][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.561136][ T6101] team0 (unregistering): Port device team_slave_1 removed [ 1450.871416][ T6101] team0 (unregistering): Port device team_slave_0 removed [ 1450.963793][ T6101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.997306][T14368] binder: 14367:14368 ioctl c0046209 0 returned -22 [ 1451.037249][ T6101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1452.266851][ T6101] bond0 (unregistering): Released all slaves [ 1452.384071][T14265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.391230][T14265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.400586][T14265] device bridge_slave_0 entered promiscuous mode [ 1452.409724][T14265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.417165][T14265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.426284][T14265] device bridge_slave_1 entered promiscuous mode [ 1452.457139][T14265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.499876][T14370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1452.509076][T14370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1452.516688][T14370] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1452.605957][T14265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.364483][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1774'. [ 1454.448821][T14265] team0: Port device team_slave_0 added [ 1454.507286][T14265] team0: Port device team_slave_1 added [ 1454.688191][T14265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.709176][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.771778][T14265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.882629][T14265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.903646][T14265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.973287][T14265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.181273][T14265] device hsr_slave_0 entered promiscuous mode [ 1455.204012][T14265] device hsr_slave_1 entered promiscuous mode [ 1455.220499][T14265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1455.374530][T14265] Cannot create hsr debugfs directory [ 1457.727716][T14190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1457.802087][T14190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1457.851230][T14190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1457.902499][T14190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1458.260317][T14190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1458.305180][T14190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1458.402153][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1458.411487][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1458.420233][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1458.429531][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1458.446127][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.453375][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1458.670945][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1458.823191][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1459.001196][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.008458][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1459.113100][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1459.134519][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1459.347587][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1459.356736][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1459.366207][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1459.374772][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1459.425631][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1460.352042][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1460.595463][T14190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1460.628969][T14190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1460.752704][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1460.775927][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1460.814972][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1460.826449][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1460.835159][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1467.657052][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1467.682266][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1467.748602][T14190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.840466][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1468.851351][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1471.101603][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1471.102449][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1471.113048][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1471.149787][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1471.187049][T14190] device veth0_vlan entered promiscuous mode [ 1471.248435][T14190] device veth1_vlan entered promiscuous mode [ 1471.787443][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1471.804808][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1472.189623][T14190] device veth0_macvtap entered promiscuous mode [ 1472.285465][ T4312] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 1472.472986][T14548] netlink: 'syz.3.1800': attribute type 1 has an invalid length. [ 1472.689002][ T4312] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1472.713542][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.766933][T14190] device veth1_macvtap entered promiscuous mode [ 1472.771144][ T4312] usb 1-1: config 0 descriptor?? [ 1473.030121][T14190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.057060][T14190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.280177][T14190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.118921][ T4312] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1474.215565][T14265] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1474.241065][T14265] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1474.630025][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1474.657467][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1474.700929][T14265] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1475.394552][ T4312] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1476.268988][T14571] netlink: 'syz.7.1806': attribute type 1 has an invalid length. [ 1476.298108][T14265] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1476.305531][ T4312] asix: probe of 1-1:0.0 failed with error -61 [ 1476.322464][ T4312] usb 1-1: USB disconnect, device number 5 [ 1477.237720][ T11] device hsr_slave_0 left promiscuous mode [ 1477.876630][ T11] device hsr_slave_1 left promiscuous mode [ 1477.888587][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1478.676045][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1478.801169][T14599] binder: 14598:14599 ioctl c0046209 0 returned -22 [ 1478.811644][ T11] device bridge_slave_1 left promiscuous mode [ 1478.831313][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.853028][ T11] device bridge_slave_0 left promiscuous mode [ 1478.893925][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.372356][T14608] 9pnet_virtio: no channels available for device syz [ 1480.097173][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1480.163728][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1480.234518][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.302875][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.526647][ T11] bond0 (unregistering): Released all slaves [ 1480.636488][T14190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1480.653307][T14190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1480.672584][T14190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1480.694950][T14607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1480.703596][T14607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1480.711144][T14607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1480.855299][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1480.896690][T14622] binder: 14621:14622 ioctl c0046209 0 returned -22 [ 1480.907452][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1480.971150][T14190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.012096][T14190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.130840][T14190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.157394][T14190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.764600][T14635] 9pnet_virtio: no channels available for device syz [ 1481.789506][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1481.798102][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1481.805755][T14622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1482.097539][ T4477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.134559][T14265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1482.141469][ T4477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.199558][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1482.250845][T14265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1482.277352][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1482.294506][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1482.330065][ T6101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1482.340796][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1482.354706][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1482.370215][ T6101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1482.383985][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1482.391218][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1482.415163][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1482.434391][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1482.463019][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1482.470365][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1482.484337][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1482.493932][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1482.502241][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1482.555571][T14643] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1815'. [ 1482.603484][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1482.634486][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1482.672427][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1482.694438][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1482.707931][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1482.723844][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1482.767933][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1482.801335][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1483.005250][T14265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1483.021178][T14265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1483.031870][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1483.062146][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1483.858386][T14657] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 1486.957376][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1486.965557][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1486.980219][T14265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1487.103821][T14686] binder: 14685:14686 ioctl c0046209 0 returned -22 [ 1487.498731][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1487.507024][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1487.526890][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1487.536353][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1487.545287][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1487.553513][T14689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1487.852425][T14689] 9pnet_virtio: no channels available for device syz [ 1488.541802][T14699] capability: warning: `syz.1.1827' uses deprecated v2 capabilities in a way that may be insecure [ 1489.595875][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.613413][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.190902][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1490.264167][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1490.358638][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1490.416211][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1490.477966][T14730] syz.7.1835 uses obsolete (PF_INET,SOCK_PACKET) [ 1490.503372][T14265] device veth0_vlan entered promiscuous mode [ 1490.529917][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1490.554718][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1490.617259][T14265] device veth1_vlan entered promiscuous mode [ 1490.713795][ T4332] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1490.731240][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1490.750656][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1490.774681][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1490.800447][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1490.852057][T14265] device veth0_macvtap entered promiscuous mode [ 1490.888247][T14265] device veth1_macvtap entered promiscuous mode [ 1490.925471][ T4332] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1490.938942][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1490.953299][ T4332] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1490.982005][ T4332] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1490.991580][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.022346][ T4332] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1491.067904][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1491.079720][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.092010][T14265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1491.102803][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.114795][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1491.163388][T14265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1491.185919][ T4332] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1491.201692][ T4332] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1491.210979][ T4332] usb 1-1: Product: syz [ 1491.215375][ T4332] usb 1-1: Manufacturer: syz [ 1492.158293][ T4332] cdc_wdm 1-1:1.0: skipping garbage [ 1492.764037][T14265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1492.781391][T14265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1492.787038][ T4332] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 1492.947275][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1492.984290][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1493.030504][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1493.071693][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1493.103703][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1493.152822][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1495.005672][T14755] 9pnet_virtio: no channels available for device syz [ 1497.130045][T14760] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1497.156477][T14760] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1497.192252][T14760] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1497.213539][T14760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1497.230483][T14760] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1497.722081][T14760] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1497.730169][T14760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1497.743575][T14760] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1497.765548][T14760] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1497.778580][T14760] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1497.792997][T14760] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1497.810338][T14760] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 1497.904299][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1497.917549][ T4266] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1497.926344][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1497.945672][ T7] usb 1-1: USB disconnect, device number 6 [ 1497.953150][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1497.962706][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1497.970568][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1498.113444][ T4312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1498.342134][ T4312] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1498.375931][ T4312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1498.420263][ T4312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1498.440496][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.500184][ T4312] usb 4-1: config 0 descriptor?? [ 1498.517584][ T4312] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1498.909998][T14766] chnl_net:caif_netlink_parms(): no params data found [ 1499.163566][ T4262] Bluetooth: hci0: command 0x0c1a tx timeout [ 1499.243679][ T4270] Bluetooth: hci3: command 0x0c1a tx timeout [ 1499.342271][T14766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1499.357196][T14766] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.390625][T14766] device bridge_slave_0 entered promiscuous mode [ 1499.531769][ T4270] Bluetooth: hci0: Ignoring connect complete event for invalid link type [ 1499.743819][T14766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.750994][T14766] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.768653][T14766] device bridge_slave_1 entered promiscuous mode [ 1499.804604][ T4270] Bluetooth: hci5: command 0x0c1a tx timeout [ 1499.810792][ T4270] Bluetooth: hci2: command 0x0c1a tx timeout [ 1500.048415][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 1501.149399][T14766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.253997][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 1501.262138][ T4312] usb 4-1: USB disconnect, device number 4 [ 1501.323380][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 1501.496831][T14766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1501.738281][T14766] team0: Port device team_slave_0 added [ 1501.884139][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 1501.890388][ T4270] Bluetooth: hci5: command 0x0406 tx timeout [ 1501.903755][T14847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 1501.914219][T14766] team0: Port device team_slave_1 added [ 1503.635000][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 1503.665443][T14864] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1861'. [ 1504.277864][T14766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1504.293289][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1504.385705][T14766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1504.506465][T14766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1504.521305][T14766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1504.651673][T14888] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1866'. [ 1504.734202][T14766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.556890][T12371] device hsr_slave_0 left promiscuous mode [ 1505.585436][T12371] device hsr_slave_1 left promiscuous mode [ 1505.653392][ T4262] Bluetooth: hci1: command 0x040f tx timeout [ 1505.661777][T12371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1505.731860][T12371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1505.740710][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1870'. [ 1505.764216][T12371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1505.771719][T12371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1505.800509][T12371] device bridge_slave_1 left promiscuous mode [ 1505.948852][T12371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.976725][T12371] device bridge_slave_0 left promiscuous mode [ 1505.983674][T12371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.019364][T12371] device veth1_macvtap left promiscuous mode [ 1506.026209][T12371] device veth0_macvtap left promiscuous mode [ 1506.032568][T12371] device veth1_vlan left promiscuous mode [ 1506.044055][T12371] device veth0_vlan left promiscuous mode [ 1507.075436][ T27] kauditd_printk_skb: 11 callbacks suppressed [ 1507.075452][ T27] audit: type=1326 audit(1751230685.278:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1507.133509][ T27] audit: type=1326 audit(1751230685.278:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1507.205051][ T27] audit: type=1326 audit(1751230685.278:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1507.252548][ T27] audit: type=1326 audit(1751230685.278:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1507.321392][ T27] audit: type=1326 audit(1751230685.278:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1507.723344][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 1508.758043][ T27] audit: type=1326 audit(1751230685.278:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1508.843554][ T27] audit: type=1326 audit(1751230685.278:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1508.921550][ T27] audit: type=1326 audit(1751230685.278:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1508.996537][ T27] audit: type=1326 audit(1751230685.278:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1509.019849][ T27] audit: type=1326 audit(1751230685.278:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.0.1877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25438e929 code=0x7ffc0000 [ 1509.382261][T12371] team0 (unregistering): Port device team_slave_1 removed [ 1509.447061][T12371] team0 (unregistering): Port device team_slave_0 removed [ 1509.504778][T12371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.571633][T12371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1510.575855][T12371] bond0 (unregistering): Released all slaves [ 1510.704315][T14915] netlink: 'syz.7.1875': attribute type 4 has an invalid length. [ 1511.185522][T14766] device hsr_slave_0 entered promiscuous mode [ 1511.303643][T14766] device hsr_slave_1 entered promiscuous mode [ 1511.525718][T14766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1511.544283][T14766] Cannot create hsr debugfs directory [ 1512.790537][T14958] tmpfs: Unknown parameter 'grpquota' [ 1514.009097][T14971] device vlan2 entered promiscuous mode [ 1514.053393][T14971] device bridge0 entered promiscuous mode [ 1515.339163][T14766] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1515.464471][T14766] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1515.538985][T14766] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1515.596484][T14766] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1515.753471][ T8823] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1515.955310][ T8823] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1515.999587][ T8823] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1516.101552][ T8823] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1516.140333][ T8823] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.187293][ T8823] usb 8-1: config 0 descriptor?? [ 1516.247720][ T8823] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1516.430922][T14766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.537514][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1516.549405][T15003] netdevsim netdevsim3: Direct firmware load for . [ 1516.549405][T15003] failed with error -2 [ 1516.582751][T12371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1516.657274][T14766] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.684106][T15003] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1516.684106][T15003] [ 1516.732938][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1516.760344][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1516.776888][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.784104][ T4437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1516.854338][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1516.892598][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1516.950355][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1516.989781][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.996971][ T4437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.202221][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1518.866567][T15017] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1896'. [ 1518.893354][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1518.912624][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1518.956896][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1518.976259][ T4312] usb 8-1: USB disconnect, device number 13 [ 1518.981388][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1519.065019][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1519.101081][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1519.131022][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1519.155674][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1519.193385][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1519.222527][ T6464] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1519.266883][T14766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1519.428801][T15034] tipc: Enabling of bearer rejected, media not registered [ 1519.957153][ T4262] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 1520.417693][T15056] lo speed is unknown, defaulting to 1000 [ 1520.564963][T15056] lo speed is unknown, defaulting to 1000 [ 1520.615125][T15056] lo speed is unknown, defaulting to 1000 [ 1520.784269][T15056] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1520.846677][T15061] netlink: 'syz.1.1905': attribute type 8 has an invalid length. [ 1520.968288][T15056] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1520.997746][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1521.028074][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1521.134571][T14766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.230895][T15066] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1521.323624][ T4262] Bluetooth: hci1: command 0x0405 tx timeout [ 1521.420745][T15056] lo speed is unknown, defaulting to 1000 [ 1522.695295][T15056] lo speed is unknown, defaulting to 1000 [ 1522.760329][T15056] lo speed is unknown, defaulting to 1000 [ 1522.833457][T15056] lo speed is unknown, defaulting to 1000 [ 1522.895168][T15056] lo speed is unknown, defaulting to 1000 [ 1523.966059][ T4262] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1523.974782][ T4262] Bluetooth: hci5: Injecting HCI hardware error event [ 1523.984442][ T4270] Bluetooth: hci5: hardware error 0x00 [ 1524.243555][T10629] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1524.445992][T10629] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1524.473262][T10629] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1524.524785][T10629] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1524.553280][T10629] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1524.615125][T10629] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1524.679072][T10629] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1524.711283][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1524.733366][T10629] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1524.752597][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1524.774192][T10629] usb 2-1: Product: syz [ 1524.792383][T10629] usb 2-1: Manufacturer: syz [ 1524.865717][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1524.899478][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1524.913948][T10629] cdc_wdm 2-1:1.0: skipping garbage [ 1524.919222][T10629] cdc_wdm 2-1:1.0: skipping garbage [ 1524.966508][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1524.974162][T10629] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1524.980144][T10629] cdc_wdm 2-1:1.0: Unknown control protocol [ 1525.014219][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1525.048862][T14766] device veth0_vlan entered promiscuous mode [ 1525.140662][T10629] usb 2-1: USB disconnect, device number 2 [ 1525.142388][T14766] device veth1_vlan entered promiscuous mode [ 1525.203100][T15096] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1525.210032][T15096] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1525.218828][T15096] vhci_hcd vhci_hcd.0: Device attached [ 1526.044991][ T4270] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1526.615649][T15103] netlink: 'syz.0.1909': attribute type 10 has an invalid length. [ 1526.624425][T15104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1909'. [ 1526.635370][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1526.738310][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1526.983588][ T8052] usb 33-1: new high-speed USB device number 10 using vhci_hcd [ 1527.270245][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1527.339738][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1527.485624][T14766] device veth0_macvtap entered promiscuous mode [ 1527.644269][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1527.757006][T14766] device veth1_macvtap entered promiscuous mode [ 1528.225362][T14766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.296071][T14766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.306267][T14766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1528.316998][T14766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.328735][T14766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1528.342177][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1528.369058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1528.393998][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1910'. [ 1528.437199][T14766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1528.465355][T14766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.490786][T15110] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1910'. [ 1528.516872][T14766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1528.541057][T14766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1528.573418][T14766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1528.598793][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1528.625595][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1528.652133][T15097] vhci_hcd: connection reset by peer [ 1528.662474][T11795] vhci_hcd: stop threads [ 1528.667992][T11795] vhci_hcd: release socket [ 1528.689880][T14766] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.707937][T11795] vhci_hcd: disconnect device [ 1528.722680][T14766] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.751593][T14766] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.783374][T14766] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.123080][T15127] can0: slcan on pty34. [ 1529.349214][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.378527][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.436055][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1529.532180][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.589958][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.640407][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1531.615970][T15126] can0 (unregistered): slcan off pty34. [ 1532.133437][ T8052] vhci_hcd: vhci_device speed not set [ 1534.235123][T15176] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1922'. [ 1534.258473][T15176] device gtp0 entered promiscuous mode [ 1534.572006][T15184] 9pnet_virtio: no channels available for device syz [ 1538.090514][T15212] netlink: 'syz.1.1928': attribute type 4 has an invalid length. [ 1543.783387][T15294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'. [ 1546.883483][ T5051] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1547.102468][T15324] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 1547.109059][T15324] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1548.183922][T15324] vhci_hcd vhci_hcd.0: Device attached [ 1549.460186][T15326] vhci_hcd: connection closed [ 1549.624752][ T4442] vhci_hcd: stop threads [ 1550.018065][ T4442] vhci_hcd: release socket [ 1550.022587][ T4442] vhci_hcd: disconnect device [ 1550.239788][ T5051] usb 10-1: device descriptor read/all, error -71 [ 1550.603414][ T4270] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1550.612449][ T4270] Bluetooth: hci1: Injecting HCI hardware error event [ 1550.626181][ T4262] Bluetooth: hci1: hardware error 0x00 [ 1550.852052][T15353] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1550.858644][T15353] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1550.874680][T15353] vhci_hcd vhci_hcd.0: Device attached [ 1550.954022][T15358] vhci_hcd: connection closed [ 1550.972089][ T46] vhci_hcd: stop threads [ 1551.007865][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.016302][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.036566][ T46] vhci_hcd: release socket [ 1551.048133][ T46] vhci_hcd: disconnect device [ 1551.093391][ T22] vhci_hcd: vhci_device speed not set [ 1552.873823][ T4262] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1558.823405][T15424] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1558.829992][T15424] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1558.880117][T15424] vhci_hcd vhci_hcd.0: Device attached [ 1558.923447][T15430] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1559.115506][T15425] vhci_hcd: connection closed [ 1559.116057][ T4378] vhci_hcd: stop threads [ 1559.165494][ T4378] vhci_hcd: release socket [ 1559.186056][ T4378] vhci_hcd: disconnect device [ 1559.193521][T15106] usb 36-1: enqueue for inactive port 0 [ 1559.446682][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1970'. [ 1559.701101][T15450] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1973'. [ 1559.714945][T15106] usb usb36-port1: attempt power cycle [ 1560.392427][T15106] usb usb36-port1: unable to enumerate USB device [ 1562.598692][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1562.598709][ T27] audit: type=1800 audit(1751230740.798:67): pid=15464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1975" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1563.081897][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1973'. [ 1563.121714][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1975'. [ 1564.928384][ T5051] libceph: connect (1)[c::]:6789 error -101 [ 1564.975841][ T5051] libceph: mon0 (1)[c::]:6789 connect error [ 1564.997414][T15477] ceph: No mds server is up or the cluster is laggy [ 1565.018306][ T5051] libceph: connect (1)[c::]:6789 error -101 [ 1565.049258][ T5051] libceph: mon0 (1)[c::]:6789 connect error [ 1565.335734][T14769] libceph: connect (1)[c::]:6789 error -101 [ 1565.341787][T14769] libceph: mon0 (1)[c::]:6789 connect error [ 1566.414724][T15515] lo speed is unknown, defaulting to 1000 [ 1577.398211][T15627] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1577.404815][T15627] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1577.425032][T15627] vhci_hcd vhci_hcd.0: Device attached [ 1577.607995][T15633] fuse: Unknown parameter '0x00000000000000030000000000000000000000000000000000000000' [ 1577.617658][T15635] netlink: 'syz.7.2008': attribute type 10 has an invalid length. [ 1577.617934][T15635] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2008'. [ 1577.693441][T14769] usb 47-1: new high-speed USB device number 21 using vhci_hcd [ 1577.768506][T15633] netlink: 'syz.3.2009': attribute type 3 has an invalid length. [ 1577.863500][T15633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2009'. [ 1579.244453][T15629] vhci_hcd: connection reset by peer [ 1579.253453][ T4477] vhci_hcd: stop threads [ 1579.257768][ T4477] vhci_hcd: release socket [ 1579.303017][ T4477] vhci_hcd: disconnect device [ 1579.669130][T15661] 9pnet_virtio: no channels available for device syz [ 1582.574060][T15683] 9pnet_virtio: no channels available for device syz [ 1582.729159][ T8823] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1583.691139][T14769] vhci_hcd: vhci_device speed not set [ 1583.793364][ T8823] usb 10-1: Using ep0 maxpacket: 8 [ 1585.251397][ T8823] usb 10-1: device descriptor read/all, error -71 [ 1586.323384][T15712] IPVS: set_ctl: invalid protocol: 180 0.0.0.0:0 [ 1589.203052][T15757] lo speed is unknown, defaulting to 1000 [ 1589.406112][T15766] device syzkaller1 entered promiscuous mode [ 1593.383463][T14769] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1593.583375][T14769] usb 1-1: Using ep0 maxpacket: 8 [ 1593.595087][T14769] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1593.675431][T14769] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1593.746572][T14769] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1593.787238][T14769] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1593.838045][T14769] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1593.883772][T14769] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1593.947546][T14769] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.187241][T14769] usb 1-1: GET_CAPABILITIES returned 0 [ 1594.192901][T14769] usbtmc 1-1:16.0: can't read capabilities [ 1594.500676][T15821] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 1594.508008][T14769] usb 1-1: USB disconnect, device number 7 [ 1595.256019][T15854] 9pnet_virtio: no channels available for device syz [ 1595.484424][T15868] 9pnet_virtio: no channels available for device syz [ 1597.783298][T15911] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2078'. [ 1600.032920][T15930] lo speed is unknown, defaulting to 1000 [ 1601.863452][T15965] syz.7.2093 sent an empty control message without MSG_MORE. [ 1605.244468][T16010] vxcan1: MTU too low for tipc bearer [ 1605.306289][T16010] tipc: Enabling of bearer rejected, failed to enable media [ 1605.622915][T16011] Process accounting resumed [ 1606.160254][T16032] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2109'. [ 1607.365882][T16043] 9pnet_virtio: no channels available for device syz [ 1607.842060][T16058] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2116'. [ 1610.816347][T16081] lo speed is unknown, defaulting to 1000 [ 1612.447359][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.322201][ T27] audit: type=1326 audit(1751230792.514:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1614.558496][ T27] audit: type=1326 audit(1751230792.514:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1615.603344][ T27] audit: type=1326 audit(1751230792.514:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1615.763244][ T27] audit: type=1326 audit(1751230792.514:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1615.785528][ C1] vkms_vblank_simulate: vblank timer overrun [ 1615.893933][ T27] audit: type=1326 audit(1751230792.524:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1615.916232][ C1] vkms_vblank_simulate: vblank timer overrun [ 1616.002387][ T27] audit: type=1326 audit(1751230792.524:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1616.117157][ T4262] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 1616.143282][ T27] audit: type=1326 audit(1751230792.524:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1616.166803][ T27] audit: type=1326 audit(1751230792.524:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1616.189594][ T27] audit: type=1326 audit(1751230792.524:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1616.216076][ T27] audit: type=1326 audit(1751230792.524:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16110 comm="syz.7.2130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fddf7b8e929 code=0x7ffc0000 [ 1617.463954][T16173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1621.714138][T16199] block device autoloading is deprecated and will be removed. [ 1623.454502][T16234] can0: slcan on pty22. [ 1626.905429][T16279] lo speed is unknown, defaulting to 1000 [ 1627.076363][T16284] device bridge0 entered promiscuous mode [ 1627.121342][T16284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 1627.170065][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap1: link becomes ready [ 1627.354920][T16289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2173'. [ 1628.075103][T16233] can0 (unregistered): slcan off pty22. [ 1629.164589][T16305] lo speed is unknown, defaulting to 1000 [ 1631.438645][T16334] 9pnet_virtio: no channels available for device syz [ 1633.302356][T16360] input: syz1 as /devices/virtual/input/input5 [ 1634.622023][T16387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1634.634778][T16387] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1641.210045][T16444] autofs4:pid:16444:autofs_fill_super: called with bogus options [ 1641.236785][T16445] netlink: 'syz.1.2212': attribute type 8 has an invalid length. [ 1641.246666][T16445] netlink: 'syz.1.2212': attribute type 1 has an invalid length. [ 1641.353288][T10629] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 1641.528168][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2217'. [ 1641.544742][T10629] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1641.580425][T10629] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1641.616477][T10629] usb 8-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1641.627496][T10629] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1641.638301][T10629] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.669249][T16441] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1641.712407][T10629] hub 8-1:1.0: bad descriptor, ignoring hub [ 1641.739480][T10629] hub: probe of 8-1:1.0 failed with error -5 [ 1641.757482][T10629] cdc_wdm 8-1:1.0: skipping garbage [ 1641.772258][T10629] cdc_wdm 8-1:1.0: skipping garbage [ 1641.820477][T10629] cdc_wdm: probe of 8-1:1.0 failed with error -22 [ 1642.042132][T15106] usb 8-1: USB disconnect, device number 14 [ 1642.393258][T15106] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1642.563241][T15106] usb 8-1: device descriptor read/64, error -71 [ 1642.833269][T15106] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1642.993337][T15106] usb 8-1: device descriptor read/64, error -71 [ 1643.000969][T16482] input: syz1 as /devices/virtual/input/input6 [ 1643.143521][T15106] usb usb8-port1: attempt power cycle [ 1643.653409][T15106] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1643.698106][T15106] usb 8-1: device descriptor read/8, error -71 [ 1643.983351][T15106] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1644.044806][T15106] usb 8-1: device descriptor read/8, error -71 [ 1644.163456][T15106] usb usb8-port1: unable to enumerate USB device [ 1645.869441][T16537] capability: warning: `syz.7.2239' uses 32-bit capabilities (legacy support in use) [ 1648.503449][ T7] kernel write not supported for file /bluetooth/6lowpan_control (pid: 7 comm: kworker/0:0) [ 1649.122617][T16594] lo speed is unknown, defaulting to 1000 [ 1656.465694][T16686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2275'. [ 1656.518226][T16683] 9pnet_virtio: no channels available for device syz [ 1660.241088][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 1660.374465][ T126] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1660.593457][ T126] usb 4-1: Using ep0 maxpacket: 8 [ 1660.601907][ T126] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1660.743400][ T126] usb 4-1: config 0 has no interface number 0 [ 1660.820792][ T126] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1660.932266][ T126] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 1660.986544][ T126] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1661.253348][ T126] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1661.298615][ T126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.352817][ T126] usb 4-1: config 0 descriptor?? [ 1661.391887][ T126] ldusb 4-1:0.55: Interrupt in endpoint not found [ 1661.593019][ T7] usb 4-1: USB disconnect, device number 5 [ 1662.974228][T16748] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2289'. [ 1664.189438][T16757] netlink: 'syz.7.2292': attribute type 1 has an invalid length. [ 1664.205416][T16757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1664.213351][T16757] IPv6: NLM_F_CREATE should be set when creating new route [ 1664.273436][T16760] netlink: 'syz.7.2292': attribute type 1 has an invalid length. [ 1664.291585][T16760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1666.692515][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 1666.692532][ T27] audit: type=1326 audit(1751231073.882:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.7.2304" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x0 [ 1668.971549][T16842] 9pnet_virtio: no channels available for device syz [ 1673.942803][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1676.199221][T16934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2337'. [ 1677.773341][ T5051] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1678.043488][ T5051] usb 1-1: Using ep0 maxpacket: 16 [ 1678.062247][ T5051] usb 1-1: config 0 has no interfaces? [ 1678.110687][ T5051] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1678.150595][ T5051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.195728][ T5051] usb 1-1: Product: syz [ 1678.200032][ T5051] usb 1-1: Manufacturer: syz [ 1678.282771][ T5051] usb 1-1: SerialNumber: syz [ 1678.533926][ T5051] usb 1-1: config 0 descriptor?? [ 1678.878965][ T4262] Bluetooth: hci3: Unknown advertising packet type: 0x4b00 [ 1678.879056][ T4262] Bluetooth: hci3: adv larger than maximum supported [ 1678.887079][ T4262] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1678.901455][ T5051] usb 1-1: USB disconnect, device number 8 [ 1686.017314][T17028] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1686.412059][T17028] overlayfs: missing 'lowerdir' [ 1686.843405][ T4309] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1687.044755][ T4309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1687.077850][ T4309] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.132081][ T4309] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1687.152305][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.189140][ T4309] usb 1-1: config 0 descriptor?? [ 1687.654506][ T4309] usbhid 1-1:0.0: can't add hid device: -71 [ 1687.660514][ T4309] usbhid: probe of 1-1:0.0 failed with error -71 [ 1687.748583][ T4309] usb 1-1: USB disconnect, device number 9 [ 1694.922087][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2372'. [ 1698.313496][ T6450] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1698.503316][ T6450] usb 2-1: Using ep0 maxpacket: 32 [ 1698.510779][ T6450] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1698.541759][ T4441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.566541][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1698.566860][ T6450] usb 2-1: config 0 has no interface number 0 [ 1698.604145][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1698.626443][ T6450] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1698.637247][ T6450] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.645624][ T6450] usb 2-1: Product: syz [ 1698.649840][ T6450] usb 2-1: Manufacturer: syz [ 1698.655147][ T6450] usb 2-1: SerialNumber: syz [ 1698.678900][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1698.689716][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1698.699511][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1698.706929][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1698.722002][ T6450] usb 2-1: config 0 descriptor?? [ 1698.779489][ T6450] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1698.840071][ T6450] usb 2-1: selecting invalid altsetting 1 [ 1698.875375][ T6450] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1698.921379][ T4441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.073235][ T6450] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1699.094101][ T6450] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1699.104354][ T6450] usb 2-1: media controller created [ 1699.158027][ T6450] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1699.308728][ T4441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1699.316533][ T6450] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1699.336023][ T6450] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1699.349211][ T6450] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1699.384508][T17130] lo speed is unknown, defaulting to 1000 [ 1699.449373][ T6450] usb 2-1: USB disconnect, device number 3 [ 1699.521814][ T4441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.368104][T17130] chnl_net:caif_netlink_parms(): no params data found [ 1701.705537][ T4262] Bluetooth: hci2: command 0x0409 tx timeout [ 1701.850941][T17169] Illegal XDP return value 733126080 on prog (id 206) dev N/A, expect packet loss! [ 1702.912747][T17130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.928125][T17130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1702.959484][T17130] device bridge_slave_0 entered promiscuous mode [ 1703.044993][T17130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.054691][T17130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.084873][T17130] device bridge_slave_1 entered promiscuous mode [ 1703.299192][T17130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.314253][T17186] lo speed is unknown, defaulting to 1000 [ 1703.329400][T17130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.624220][T17130] team0: Port device team_slave_0 added [ 1703.719375][T17130] team0: Port device team_slave_1 added [ 1703.725691][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 1705.635974][T17130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1705.665674][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1705.742793][T17130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1705.781173][ T4441] device hsr_slave_0 left promiscuous mode [ 1705.802612][ T4441] device hsr_slave_1 left promiscuous mode [ 1705.809714][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 1705.869515][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.908088][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.950385][ T4441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.980701][ T4441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.004663][ T4441] device bridge_slave_1 left promiscuous mode [ 1706.031481][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.100783][ T4441] device bridge_slave_0 left promiscuous mode [ 1706.126315][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.270181][ T4441] device veth1_macvtap left promiscuous mode [ 1706.292726][ T4441] device veth0_macvtap left promiscuous mode [ 1706.311752][ T4441] device veth1_vlan left promiscuous mode [ 1706.346358][ T4441] device veth0_vlan left promiscuous mode [ 1706.841489][ T4441] bond2 (unregistering): Released all slaves [ 1706.898013][ T4441] bond1 (unregistering): Released all slaves [ 1707.836588][ T9180] Bluetooth: hci4: Frame reassembly failed (-84) [ 1707.883720][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 1708.255578][T17241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1709.645009][ T4266] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1709.651698][ T4262] Bluetooth: hci4: command 0x1003 tx timeout [ 1710.811097][T17251] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2403'. [ 1711.953211][T10626] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1712.150417][T10626] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1712.188780][T10626] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1712.217362][T10626] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1712.247042][T10626] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.313660][T17254] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1712.592794][ T4441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.860843][ T4441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.942417][T10626] usb 10-1: USB disconnect, device number 6 [ 1713.343444][ T4309] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1713.413267][ T8052] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1713.564433][ T4309] usb 1-1: Using ep0 maxpacket: 8 [ 1713.579282][ T4309] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1713.591767][ T4309] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1713.608412][ T4309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1713.619495][ T8052] usb 2-1: Using ep0 maxpacket: 32 [ 1713.633599][ T4309] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1713.651679][ T4309] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1713.651896][ T8052] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1713.676050][ T4309] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1713.690997][ T8052] usb 2-1: config 0 has no interface number 0 [ 1713.697312][ T4309] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1713.707343][ T4309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.881738][ T8052] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1713.895986][ T4309] usbtmc: probe of 1-1:16.0 failed with error -22 [ 1713.902987][ T8052] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.920311][ T8052] usb 2-1: Product: syz [ 1713.924656][ T8052] usb 2-1: Manufacturer: syz [ 1713.929745][ T8052] usb 2-1: SerialNumber: syz [ 1713.943874][ T8052] usb 2-1: config 0 descriptor?? [ 1713.966229][ T8052] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1713.975157][ T8052] usb 2-1: selecting invalid altsetting 1 [ 1713.980929][ T8052] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1713.992356][ T4441] bond0 (unregistering): Released all slaves [ 1713.993064][ T8052] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1714.009877][ T8052] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1714.018606][ T8052] usb 2-1: media controller created [ 1714.039213][ T8052] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1714.134499][T17130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.141540][T17130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1714.168310][T17130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1714.182841][ T8052] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1714.211711][ T8052] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1714.251328][ T8052] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1714.288178][T17130] device hsr_slave_0 entered promiscuous mode [ 1714.313022][T17130] device hsr_slave_1 entered promiscuous mode [ 1714.374398][ T8052] usb 2-1: USB disconnect, device number 4 [ 1716.058216][ T8052] usb 1-1: USB disconnect, device number 10 [ 1717.674374][T17322] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2419'. [ 1718.629291][T17330] netlink: 'syz.1.2421': attribute type 1 has an invalid length. [ 1719.646541][T17130] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1719.723279][T17130] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1719.774522][T17130] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1719.829806][T17130] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1720.206918][ T27] audit: type=1326 audit(1720.164:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17340 comm="syz.7.2422" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddf7b8e929 code=0x0 [ 1720.389603][T17130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1720.468658][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1720.489446][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1720.537345][T17130] 8021q: adding VLAN 0 to HW filter on device team0 [ 1720.579158][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1720.597076][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1720.639400][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1720.646646][ T4441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1720.696759][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1720.766694][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1720.794205][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1720.823581][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1720.830812][ T9180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1720.924382][T17253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1720.950526][T17253] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1720.980854][T17253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1721.013242][ T126] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1721.072000][T17253] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1721.082470][T17253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1721.118364][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1721.131215][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 1721.146763][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1721.166766][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1721.189069][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1721.235798][T17130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1721.256545][ T126] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1721.264639][T17130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1721.289185][ T126] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 1721.311033][ T126] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1721.316232][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1721.337438][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1723.561903][ T126] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1723.561940][ T126] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.604431][T17356] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1723.652094][T17366] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2430'. [ 1723.652441][T17366] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1724.079489][T17366] 9pnet_virtio: no channels available for device syz [ 1724.082720][ T126] usb 10-1: USB disconnect, device number 7 [ 1724.672931][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1724.692091][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1724.716653][T17130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1727.404560][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1727.487300][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1727.531308][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1727.578642][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1727.633394][T17130] device veth0_vlan entered promiscuous mode [ 1727.648301][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1727.686103][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1727.737134][T17130] device veth1_vlan entered promiscuous mode [ 1727.845466][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1727.876599][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1727.891857][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1727.932322][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1727.973891][T17130] device veth0_macvtap entered promiscuous mode [ 1728.012811][T17130] device veth1_macvtap entered promiscuous mode [ 1728.215036][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1728.410655][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.931589][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1729.943013][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.955646][T17130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1729.969198][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1729.980431][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1729.993614][T17130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1730.004513][T17130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1730.018718][T17130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1730.027751][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1730.148483][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1730.189194][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1730.245223][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1730.275341][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1730.304825][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1730.353595][T17130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.385564][T17130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.414825][T17130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.469046][T17130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1730.743261][ T4378] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1730.792579][ T4378] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1730.977652][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1730.989887][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1731.001665][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1732.615457][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1732.954723][T17473] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 1732.962283][T17473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1733.016344][T17473] vhci_hcd vhci_hcd.0: Device attached [ 1733.220328][T17480] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 1733.227007][T17480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1733.242000][T17490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1733.299523][T17473] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 1733.306196][T17473] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1733.333335][T10626] usb 41-1: new low-speed USB device number 7 using vhci_hcd [ 1733.349776][T17480] vhci_hcd vhci_hcd.0: Device attached [ 1733.503513][T17473] vhci_hcd vhci_hcd.0: Device attached [ 1733.583282][T17490] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 1733.589948][T17490] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1733.813355][T17490] vhci_hcd vhci_hcd.0: Device attached [ 1733.829753][T17473] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1733.915443][T17480] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1733.956056][T17500] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(16) [ 1733.962739][T17500] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1734.093885][T17490] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1734.248826][T17500] vhci_hcd vhci_hcd.0: Device attached [ 1734.331152][T17473] vhci_hcd vhci_hcd.0: port 0 already used [ 1734.385535][T17494] vhci_hcd: connection closed [ 1734.385917][ T4335] vhci_hcd: stop threads [ 1734.386136][T17475] vhci_hcd: connection reset by peer [ 1734.390650][ T4335] vhci_hcd: release socket [ 1734.395382][T17501] vhci_hcd: connection closed [ 1734.400442][T17487] vhci_hcd: connection closed [ 1734.409806][T17484] vhci_hcd: connection closed [ 1734.492608][ T4335] vhci_hcd: disconnect device [ 1734.567123][ T4335] vhci_hcd: stop threads [ 1734.623237][ T4335] vhci_hcd: release socket [ 1734.655187][ T4335] vhci_hcd: disconnect device [ 1734.714853][ T4335] vhci_hcd: stop threads [ 1734.823730][ T4335] vhci_hcd: release socket [ 1734.869913][T17522] netdevsim netdevsim7: Direct firmware load for ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ failed with error -2 [ 1734.882999][T17522] netdevsim netdevsim7: Falling back to sysfs fallback for: ö×0”©ÛPq•ä…õD"€2ðNÿktT·Wj«³%¼Nµ§ [ 1734.897755][ T4335] vhci_hcd: disconnect device [ 1734.902791][ T4335] vhci_hcd: stop threads [ 1734.907303][ T4335] vhci_hcd: release socket [ 1734.911950][ T4335] vhci_hcd: disconnect device [ 1734.930987][ T4335] vhci_hcd: stop threads [ 1735.023476][ T4335] vhci_hcd: release socket [ 1735.075825][ T4335] vhci_hcd: disconnect device [ 1735.183754][ T27] audit: type=1107 audit(1735.134:112): pid=17523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1735.335793][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.642970][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'. [ 1737.198442][T17556] 9pnet_virtio: no channels available for device syz [ 1738.623301][T10626] vhci_hcd: vhci_device speed not set [ 1741.494573][ T4332] usb usb42-port1: attempt power cycle [ 1741.913843][T17595] fuse: Bad value for 'fd' [ 1742.234072][ T4332] usb usb42-port1: unable to enumerate USB device [ 1742.492720][ T4332] libceph: connect (1)[c::]:6789 error -101 [ 1742.499522][ T4332] libceph: mon0 (1)[c::]:6789 connect error [ 1742.521468][T17602] ceph: No mds server is up or the cluster is laggy [ 1742.599336][T17611] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2474'. [ 1742.767855][ T4332] libceph: connect (1)[c::]:6789 error -101 [ 1743.464340][ T4332] libceph: mon0 (1)[c::]:6789 connect error [ 1744.256460][T17629] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2488'. [ 1747.706307][T17658] lo speed is unknown, defaulting to 1000 [ 1750.353638][T17661] device vlan2 entered promiscuous mode [ 1750.403334][T17661] device bridge0 entered promiscuous mode [ 1751.952567][T17680] netlink: 5280 bytes leftover after parsing attributes in process `syz.9.2489'. [ 1756.736497][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1756.748788][ T4262] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1757.638932][ T4262] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1757.681736][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1757.689752][ T4262] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1757.697484][ T4270] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1758.028614][T17734] lo speed is unknown, defaulting to 1000 [ 1758.953268][ T5051] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1759.171335][ T5051] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1759.258410][ T5051] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1759.493300][ T5051] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1759.502847][ T5051] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1759.609935][ T5051] usb 10-1: config 0 descriptor?? [ 1759.659122][T17734] chnl_net:caif_netlink_parms(): no params data found [ 1759.675393][ T5051] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1759.822174][ T4270] Bluetooth: hci4: command 0x0409 tx timeout [ 1760.164258][T17734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1760.171674][T17734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.184413][T17734] device bridge_slave_0 entered promiscuous mode [ 1760.204781][T17734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1760.269501][T17774] random: crng reseeded on system resumption [ 1761.080540][T17734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.089189][T17734] device bridge_slave_1 entered promiscuous mode [ 1761.191034][T17734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1761.228649][T17734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1761.468735][T17734] team0: Port device team_slave_0 added [ 1761.522371][T17734] team0: Port device team_slave_1 added [ 1761.832313][T17734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1761.883370][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 1761.892143][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.119601][T17734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1762.196308][T17734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1762.216927][ T4438] usb 10-1: USB disconnect, device number 8 [ 1762.307012][T17734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1762.659184][T17734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1763.963246][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 1764.930902][T17734] device hsr_slave_0 entered promiscuous mode [ 1764.997118][T17734] device hsr_slave_1 entered promiscuous mode [ 1765.044468][T17734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1765.181746][T17734] Cannot create hsr debugfs directory [ 1766.044253][ T4266] Bluetooth: hci4: command 0x0419 tx timeout [ 1768.768922][ T4335] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.460780][ T4335] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.421969][ T4335] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.857474][ T4335] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1776.207311][T17734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1776.322078][T17734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1776.436859][T17734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1776.545019][T17883] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2537'. [ 1777.354488][T17734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1779.593506][T17902] netlink: 'syz.1.2539': attribute type 1 has an invalid length. [ 1779.748890][T17902] device bond1 entered promiscuous mode [ 1779.779619][T17902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1780.535800][T17896] bond1: (slave veth3): making interface the new active one [ 1780.573475][T17896] device veth3 entered promiscuous mode [ 1780.643782][T17896] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1780.729845][ T6101] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1781.388934][T17734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1781.489464][T17935] device batadv_slave_0 entered promiscuous mode [ 1781.523275][T17875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1781.754353][T17875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1781.816851][T17734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1782.094436][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1782.144361][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1782.331984][ T4437] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.339192][ T4437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.520125][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1782.807149][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1783.044232][ T4437] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.051362][ T4437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1783.252816][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1783.649187][T17934] device batadv_slave_0 left promiscuous mode [ 1783.671298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1784.093863][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1784.579516][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1784.647317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1784.697595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1784.720136][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1784.835338][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1784.860125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1784.983901][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1785.101040][T17734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1785.165481][T17734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1787.489237][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1787.513589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1787.614945][ T4335] device hsr_slave_0 left promiscuous mode [ 1787.632503][ T4335] device hsr_slave_1 left promiscuous mode [ 1787.650547][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1787.681279][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.720170][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1788.163240][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.206812][ T4335] device bridge_slave_1 left promiscuous mode [ 1788.257875][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.325093][ T4335] device bridge_slave_0 left promiscuous mode [ 1788.331417][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.609830][ T4335] device veth1_macvtap left promiscuous mode [ 1788.619481][ T4335] device veth0_macvtap left promiscuous mode [ 1788.634381][ T4335] device veth1_vlan left promiscuous mode [ 1788.655460][ T4335] device veth0_vlan left promiscuous mode [ 1790.448568][T18010] input: syz1 as /devices/virtual/input/input7 [ 1792.835765][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 1793.158089][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 1793.525829][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.793442][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1794.868827][T18048] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2566'. [ 1796.635639][ T4335] bond0 (unregistering): Released all slaves [ 1796.766543][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.788751][T17970] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1796.798299][T17970] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1796.807205][T17970] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1796.816110][T17970] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1796.824978][T17970] device geneve2 entered promiscuous mode [ 1796.864189][T18012] netlink: 'syz.9.2560': attribute type 4 has an invalid length. [ 1796.904280][T18019] device batadv_slave_0 entered promiscuous mode [ 1796.910806][T18019] device batadv_slave_0 left promiscuous mode [ 1797.461339][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1797.487669][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1797.520059][T17734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1797.620419][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1797.655465][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1797.862907][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1798.013461][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1798.030753][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1798.097235][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1798.204853][T17734] device veth0_vlan entered promiscuous mode [ 1799.817409][T17734] device veth1_vlan entered promiscuous mode [ 1800.127739][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1800.148112][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1800.220056][T17734] device veth0_macvtap entered promiscuous mode [ 1800.267529][T17734] device veth1_macvtap entered promiscuous mode [ 1800.344211][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.373226][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.392128][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1800.419605][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.450979][T17734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1800.469750][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1800.504148][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1800.513843][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1800.524118][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1800.566588][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.585462][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.614901][T17734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1800.640899][T17734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1800.684170][T17734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1800.710148][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1800.750501][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1800.800402][T17734] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.840466][T17734] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.863147][T17734] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.924208][T17734] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1801.198762][T18117] netlink: 'syz.7.2581': attribute type 1 has an invalid length. [ 1801.388321][T18117] device bond4 entered promiscuous mode [ 1801.423246][T18117] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1801.534244][ T4441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.579974][ T4441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.843632][T18132] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2583'. [ 1802.725505][T18121] bond4: (slave veth3): making interface the new active one [ 1802.732881][T18121] device veth3 entered promiscuous mode [ 1802.843562][T18121] bond4: (slave veth3): Enslaving as an active interface with an up link [ 1802.852214][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 1802.910666][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1803.570485][T16427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.653238][T16427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.707512][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1803.917165][T18154] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 1803.923770][T18154] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1803.985912][T18154] vhci_hcd vhci_hcd.0: Device attached [ 1804.253216][ T4399] usb 47-1: new high-speed USB device number 22 using vhci_hcd [ 1804.851703][T18155] vhci_hcd: connection reset by peer [ 1804.910324][ T4437] vhci_hcd: stop threads [ 1805.365427][ T4437] vhci_hcd: release socket [ 1805.369983][ T4437] vhci_hcd: disconnect device [ 1807.663444][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1807.675136][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1807.694627][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1807.702719][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1807.712363][ T4262] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1807.719812][ T4262] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1808.435869][ T4441] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.538792][T18196] lo speed is unknown, defaulting to 1000 [ 1808.673208][ T4441] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.886909][ T4441] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1809.150591][T18210] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2597'. [ 1809.419492][ T4399] vhci_hcd: vhci_device speed not set [ 1809.803288][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 1809.968610][ T4441] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.578343][T18196] chnl_net:caif_netlink_parms(): no params data found [ 1811.141769][T18196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.153510][T18196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.176629][T18196] device bridge_slave_0 entered promiscuous mode [ 1811.240632][T18249] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.2609'. [ 1811.586715][T18196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.613015][T18196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.810034][T18196] device bridge_slave_1 entered promiscuous mode [ 1811.883514][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 1812.306177][T18196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1812.351378][T18196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1812.720123][T18196] team0: Port device team_slave_0 added [ 1812.810910][T18196] team0: Port device team_slave_1 added [ 1812.917473][T18196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1812.945464][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.359324][T18196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1813.671879][T18196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1813.723296][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.832399][T18196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1813.963294][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 1814.205514][T18196] device hsr_slave_0 entered promiscuous mode [ 1814.236610][T18196] device hsr_slave_1 entered promiscuous mode [ 1814.832976][ T4441] device hsr_slave_0 left promiscuous mode [ 1814.907765][ T4441] device hsr_slave_1 left promiscuous mode [ 1815.334285][ T4441] device veth1_macvtap left promiscuous mode [ 1815.358802][ T4441] device veth0_macvtap left promiscuous mode [ 1815.393957][ T4441] device veth1_vlan left promiscuous mode [ 1815.415194][ T4441] device veth0_vlan left promiscuous mode [ 1816.043289][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 1816.179798][ T4441] bond4 (unregistering): (slave veth3): Releasing backup interface [ 1816.191736][ T4441] device veth3 left promiscuous mode [ 1817.342351][ T4441] bond4 (unregistering): Released all slaves [ 1817.692192][ T4441] bond3 (unregistering): Released all slaves [ 1817.729286][ T4441] bond2 (unregistering): Released all slaves [ 1817.815726][ T4441] bond1 (unregistering): Released all slaves [ 1818.669363][T18335] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2624'. [ 1821.549117][ T4441] bond0 (unregistering): Released all slaves [ 1821.689485][T18325] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2622'. [ 1822.203982][T18355] netlink: 5280 bytes leftover after parsing attributes in process `syz.9.2630'. [ 1824.618560][T18385] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2636'. [ 1826.010822][T18394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2635'. [ 1826.051885][T18394] device bridge_slave_1 left promiscuous mode [ 1826.106539][T18394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.144300][T18394] device bridge_slave_0 left promiscuous mode [ 1826.150745][T18394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.952359][T18196] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1827.050852][T18196] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1827.118175][T18196] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1827.170982][T18196] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1827.853611][T18196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.893460][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1827.943999][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1827.964394][T18196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.047874][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1828.098213][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1828.159136][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.166356][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1828.233958][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1828.264496][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1828.306380][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1828.354056][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.361211][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1828.441374][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1828.479316][T18438] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.2646'. [ 1828.558281][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1828.662595][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1828.780931][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1828.866525][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1828.921394][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1828.935960][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1828.954909][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1828.974211][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1828.991675][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1829.022880][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1829.240494][T18196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1829.508689][T18453] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2648'. [ 1831.365586][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1831.374427][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1831.388836][T18196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1833.411065][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1833.462320][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1833.566602][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1833.585489][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1833.624606][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1833.661598][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1833.700609][T18196] device veth0_vlan entered promiscuous mode [ 1833.758247][T18196] device veth1_vlan entered promiscuous mode [ 1834.097591][T18519] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2659'. [ 1835.156898][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1835.179266][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1835.190857][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1835.212395][ T6316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1835.247334][T18196] device veth0_macvtap entered promiscuous mode [ 1835.308131][T18515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 1835.320208][T18515] device bridge_slave_1 left promiscuous mode [ 1835.341288][T18515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.471025][T18515] device bridge_slave_0 left promiscuous mode [ 1835.489348][T18515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1836.343695][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1836.384458][T18196] device veth1_macvtap entered promiscuous mode [ 1836.444453][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1836.624086][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1836.715637][T18550] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2663'. [ 1837.416984][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1837.514620][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.613260][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1837.708122][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1837.784768][T18196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1837.792924][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1837.884061][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1837.940210][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1837.978988][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1838.023535][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1838.063181][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1838.109338][T18196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1838.153586][T18196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1838.204693][T18196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1838.212745][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1838.255822][T16427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1838.332615][T18196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.382746][T18196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.417204][T18196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1838.510924][T18196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1839.851407][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.880823][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.103932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1840.137010][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1840.223456][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.272725][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1841.563743][T18604] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2675'. [ 1842.689490][T18614] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2677'. [ 1847.999507][T18669] netlink: 5280 bytes leftover after parsing attributes in process `syz.9.2691'. [ 1849.015543][T18676] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2692'. [ 1853.570742][T18726] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2707'. [ 1855.082480][T18733] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2708'. [ 1858.208525][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1859.700501][T18773] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2721'. [ 1860.646759][T18779] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2723'. [ 1868.211853][T18812] fuse: Bad value for 'fd' [ 1868.590532][T18822] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2734'. [ 1870.217691][T18831] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.2737'. [ 1871.596810][T18844] lo speed is unknown, defaulting to 1000 [ 1873.015482][T18866] fuse: Bad value for 'fd' [ 1873.349690][T18869] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2748'. [ 1873.497940][T18876] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.2751'. [ 1877.181282][T18910] fuse: Bad value for 'fd' [ 1877.268081][T18914] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2761'. [ 1878.905815][T18932] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.2766'. [ 1880.763529][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 1882.905742][T18966] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2775'. [ 1884.210876][T18982] netlink: 5280 bytes leftover after parsing attributes in process `syz.9.2780'. [ 1886.866112][T19020] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2790'. [ 1889.977849][T19037] netlink: 5280 bytes leftover after parsing attributes in process `syz.9.2796'. [ 1891.881665][T19048] lo speed is unknown, defaulting to 1000 [ 1892.160306][T19062] netlink: 4768 bytes leftover after parsing attributes in process `syz.9.2803'. [ 1899.528667][T19092] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2812'. [ 1900.982178][T19110] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2817'. [ 1902.524338][T19133] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2824'. [ 1904.507937][T19125] lo speed is unknown, defaulting to 1000 [ 1905.878536][T19170] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2830'. [ 1907.708706][T19190] netlink: 5280 bytes leftover after parsing attributes in process `syz.9.2838'. [ 1911.200064][T19238] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2851'. [ 1913.170593][T19255] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2855'. [ 1913.573738][T19259] fuse: Bad value for 'fd' [ 1914.909190][T19262] lo speed is unknown, defaulting to 1000 [ 1916.262987][T19299] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2866'. [ 1917.364616][T19303] fuse: Bad value for 'fd' [ 1917.939738][T19316] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2870'. [ 1919.650659][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.433516][T19347] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2880'. [ 1921.700285][T19354] fuse: Bad value for 'fd' [ 1922.130259][T19363] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.2886'. [ 1923.347430][T19370] lo speed is unknown, defaulting to 1000 [ 1923.713289][T19387] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2892'. [ 1924.871756][T19398] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2897'. [ 1928.725739][T19444] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.2908'. [ 1929.637769][T19446] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2909'. [ 1931.963288][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 1932.352609][T19488] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2920'. [ 1933.250586][T19491] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.2922'. [ 1935.422051][T19515] lo speed is unknown, defaulting to 1000 [ 1937.141974][T19548] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2936'. [ 1937.462458][T19549] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2935'. [ 1942.173520][T19617] netlink: 5280 bytes leftover after parsing attributes in process `syz.9.2950'. [ 1942.997780][T19609] lo speed is unknown, defaulting to 1000 [ 1943.298841][T19628] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2954'. [ 1946.514573][T19673] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2965'. [ 1948.240399][T19700] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2972'. [ 1950.884037][T19718] lo speed is unknown, defaulting to 1000 [ 1951.121032][T19729] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.2977'. [ 1954.960826][T19778] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.2993'. [ 1956.571899][T19793] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1956.590854][T19793] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1956.609841][T19793] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1956.790804][T19793] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1956.805745][T19793] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1956.818062][T19793] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1956.867069][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.882474][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.895258][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.918980][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.932143][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.944107][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.956161][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.968151][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.980225][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1956.994251][T19795] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1957.102605][T19793] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1959.263427][T19822] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2999'. [ 1962.083470][T19846] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3005'. [ 1966.181989][T19899] sp0: Synchronizing with TNC [ 1967.330433][T19909] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3018'. [ 1970.438166][T19948] 9pnet_virtio: no channels available for device syz [ 1970.541634][T19949] 9pnet_virtio: no channels available for device syz [ 1972.039576][T19975] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3031'. [ 1973.040433][T19984] netlink: 128 bytes leftover after parsing attributes in process `syz.7.3030'. [ 1973.070999][T19984] netlink: 'syz.7.3030': attribute type 5 has an invalid length. [ 1976.210842][ T27] audit: type=1326 audit(1976.164:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1976.246554][T20021] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3043'. [ 1976.261231][ T27] audit: type=1326 audit(1976.194:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1976.429916][ T27] audit: type=1326 audit(1976.194:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1977.553110][ T27] audit: type=1326 audit(1976.194:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1977.685885][T20028] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.3044'. [ 1978.538289][ T27] audit: type=1326 audit(1976.194:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1978.701946][ T27] audit: type=1326 audit(1976.194:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1978.791558][ T27] audit: type=1326 audit(1976.194:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1978.899025][ T27] audit: type=1326 audit(1976.194:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1978.997733][ T27] audit: type=1326 audit(1976.194:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1980.063506][ T27] audit: type=1326 audit(1976.194:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20019 comm="syz.9.3043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f711058e929 code=0x7ffc0000 [ 1981.439292][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 1982.285095][T20071] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3056'. [ 1983.263893][T20078] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3059'. [ 1983.285683][T20078] netlink: 'syz.2.3059': attribute type 5 has an invalid length. [ 1985.386292][T20095] block device autoloading is deprecated and will be removed. [ 1986.012135][T20117] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3068'. [ 1986.960920][T20123] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.3071'. [ 1988.473115][ T7] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1988.665226][ T7] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1988.693815][ T7] usb 10-1: not running at top speed; connect to a high speed hub [ 1988.743755][ T7] usb 10-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1988.911446][ T7] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1988.968050][ T7] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1989.001527][ T7] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.023137][ T7] usb 10-1: Product: syz [ 1989.027442][ T7] usb 10-1: Manufacturer: syz [ 1989.042594][ T7] usb 10-1: SerialNumber: syz [ 1989.345640][T20161] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3078'. [ 1991.238183][ T7] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 1991.393191][ T7] usb 10-1: USB disconnect, device number 9 [ 1991.433337][ T7] usblp0: removed [ 1992.268608][T20193] input: syz0 as /devices/virtual/input/input8 [ 1992.618371][ T4266] Bluetooth: min 9 > max 0 [ 1993.532844][T20219] netlink: 5280 bytes leftover after parsing attributes in process `syz.2.3089'. [ 1994.402631][T20200] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 1994.683248][ T4266] Bluetooth: hci0: command 0x2021 tx timeout [ 1995.680088][T20238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3094'. [ 1995.738667][T20238] device hsr_slave_0 left promiscuous mode [ 1995.756853][T20238] device hsr_slave_1 left promiscuous mode [ 2002.194121][T20318] netlink: 5280 bytes leftover after parsing attributes in process `syz.7.3103'. [ 2006.301294][T20358] 9pnet_virtio: no channels available for device syz [ 2006.469001][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3121'. [ 2006.530690][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3121'. [ 2008.489082][T20385] netlink: 5280 bytes leftover after parsing attributes in process `syz.0.3126'. [ 2010.337192][T20401] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3123'. [ 2010.557721][T20401] netlink: 'syz.9.3123': attribute type 5 has an invalid length. [ 2010.797529][T20401] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3123'. [ 2011.535754][T20401] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 2011.738099][T20401] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 2011.776764][T20401] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 2011.787751][T20401] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 2011.889579][T20401] device geneve2 entered promiscuous mode [ 2011.922831][T20407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3131'. [ 2013.391197][T20435] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2015.453042][T20465] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 2015.628789][T20466] __sock_release: fasync list not empty! [ 2015.972901][T20479] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 2015.979515][T20479] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2015.988121][T20479] vhci_hcd vhci_hcd.0: Device attached [ 2016.034903][T20480] vhci_hcd: connection closed [ 2016.036382][ T4373] vhci_hcd: stop threads [ 2016.101292][ T4373] vhci_hcd: release socket [ 2016.178544][ T4373] vhci_hcd: disconnect device [ 2042.537935][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.968518][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.416644][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.851864][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.287438][ T1270] ieee802154 phy0 wpan0: encryption failed: -22