last executing test programs: 15m32.732492119s ago: executing program 32 (id=51): socket$inet6(0xa, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x4, 0xc24, &(0x7f0000000d00)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040), 0x0) ioctl$I2C_PEC(0xffffffffffffffff, 0x703, 0xfffffffffffffff3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 15m29.749054238s ago: executing program 33 (id=60): r0 = syz_io_uring_setup(0x1370, &(0x7f00000000c0)={0x0, 0x49fa, 0x10, 0x0, 0x4e}, &(0x7f0000000180), &(0x7f0000000280)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' ', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x8840) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2500) mkdir(0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1e0) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4}) 15m26.769407669s ago: executing program 34 (id=65): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x574, &(0x7f00000003c0)="$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") r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e4638f863f2887a03f9aa6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x2, 0x6e2, &(0x7f0000000c80)="$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") setxattr(&(0x7f000001f640)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x1) fgetxattr(0xffffffffffffffff, &(0x7f0000000200)=@known='trusted.overlay.upper\x00', &(0x7f0000000380)=""/150, 0x96) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) fcntl$lock(r3, 0x6, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000300), 0x0, 0x0, 0x1) open_tree(0xffffffffffffff9c, 0x0, 0x89901) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x9, 0xfff3}, {}, {0x10, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f0000000380)="30573472b621739984c336124406e8a5c812ca847e3bf1b82ec91d46ab", 0x1d, 0x1) 15m22.73447618s ago: executing program 35 (id=69): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x6f}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_io_uring_setup(0x110, &(0x7f0000000480)={0x0, 0xfad6, 0x400, 0x2}, &(0x7f0000000240), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 14m8.498501242s ago: executing program 36 (id=157): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) 12m59.645138829s ago: executing program 37 (id=325): sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x189040, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 11m57.605676739s ago: executing program 38 (id=436): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x3, r0, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000000004000004}) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0xd, 0x4, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @dev, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@empty}, {@broadcast}, {@dev}]}, @end]}}}}}}}, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1bf8) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r0, r0, 0x3, 0xfffffffffffffffa, 0x3fff}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x3, 0xb, 0x1, 'queue1\x00', 0x8001}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) get_robust_list(0x0, &(0x7f0000000540)=0x0, &(0x7f0000000200)) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x1) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc}) r4 = memfd_secret(0x80000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, 0x0) 11m50.597398524s ago: executing program 39 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x204050, &(0x7f0000000540)=ANY=[], 0x1, 0x6da, &(0x7f0000002240)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0xbc8b) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="0f20d835080000000f22d836f30f09660f38808dd400000067660f38818b05800f01c9b9800000c00f3235001000000f3067660f01dfb805000000b9300000000f01d966baf80cb8759d9988ef66bafc0cb012eeb810baf2160f23c80f21f835080070000f23f8", 0x67}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11m15.698453605s ago: executing program 40 (id=497): bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'nr0\x00'}) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa, 0x8032, 0xffffffffffffffff, 0x10000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000c00)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_win95}, {@fat=@nfs}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlate}, {@numtail}, {}, {@utf8no}, {@utf8no}]}, 0x26, 0x35b, &(0x7f0000000880)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(r2, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00') 11m11.400767333s ago: executing program 41 (id=504): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) r2 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)='X', 0x1}], 0x1) splice(r3, 0x0, r2, 0x0, 0x80000001, 0x0) 10m38.651539434s ago: executing program 42 (id=522): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) lseek(0xffffffffffffffff, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000200)={0x0, 0x2, "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"}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m34.690013501s ago: executing program 43 (id=526): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bind$alg(r0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f00000001c0)={0x28, 0x2, 0x0, {0x4, 0x3, 0x40c}}, 0x28) 9m51.662138786s ago: executing program 44 (id=574): timer_create(0xfffffffd, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getsockopt(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) 9m7.554695539s ago: executing program 45 (id=666): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000005c0), 0x0, &(0x7f0000000000)) r2 = syz_open_dev$video4linux(0x0, 0x2, 0x1a1003) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3004c8d4}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8f) 8m42.89385044s ago: executing program 46 (id=713): syz_usb_connect(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8) openat$sndseq(0xffffffffffffff9c, 0x0, 0x6aa02) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 8m37.324746925s ago: executing program 47 (id=724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000200)=0x18000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80001) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x13}, 0x1, 0x4, 0x88, {}, 0x0, 0x4000ffff}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7m18.365176283s ago: executing program 48 (id=810): r0 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758", 0xe) syz_open_procfs(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_QUOTAOFF(0x22737fb13fcc605a, 0x0, r2, 0x0) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r3, &(0x7f0000000180)=""/158, 0x9e) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) 7m18.235702487s ago: executing program 49 (id=801): socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x80108907, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) ftruncate(0xffffffffffffffff, 0x8800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000d80)={0x0, &(0x7f0000000d40)}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3", 0x1c, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000340)={0x2, @vbi={0x7, 0x7, 0x6, 0x3447504d, [0x8000, 0x8], [0x3, 0x1], 0x13a}}) 6m43.30793456s ago: executing program 50 (id=834): openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) 6m25.045215391s ago: executing program 3 (id=869): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{0x0}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000002380)=""/253, 0xfd}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, &(0x7f0000003b00)}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x8, 0x2020, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup2(r3, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6m23.235765137s ago: executing program 3 (id=872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40408d1) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000001c0)={&(0x7f0000001840)=[{0x0, 0x0, 0x0, 0x0}, {0x8001, 0x10, 0x0, 0x0}], 0x2}) socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) 6m16.378803976s ago: executing program 6 (id=881): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) r1 = io_uring_setup(0x46ea, &(0x7f00000000c0)={0x0, 0xc0a6, 0x40, 0x7fc, 0x3e2}) r2 = creat(0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000001880)}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002000)=""/141, 0x8d}, 0x3ff}, {{&(0x7f00000020c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002200)=[{0x0}, {0x0}], 0x2, &(0x7f0000002240)=""/16, 0x10}, 0xb}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, 0x0, 0x0, &(0x7f0000002380)=""/253, 0xfd}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003600)=""/34, 0x22}, 0x4}, {{0x0, 0x0, &(0x7f0000003b00)}, 0x3}, {{0x0, 0x0, &(0x7f0000003f00)=[{0x0}, {0x0}, {&(0x7f0000003c80)=""/89, 0x59}, {&(0x7f0000003d00)=""/47, 0x2f}, {&(0x7f0000003d40)=""/122, 0x7a}], 0x5}, 0xb931}, {{0x0, 0x0, &(0x7f0000004400)}, 0x80000000}], 0x8, 0x2020, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup2(r3, r0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6m14.932278722s ago: executing program 6 (id=882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 6m13.352223967s ago: executing program 6 (id=883): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$sock(r0, 0x0, 0x20000000) sendto$inet(r0, &(0x7f0000000100)='o', 0x4e, 0x89a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240), 0xc) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 6m12.770254741s ago: executing program 6 (id=884): copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) close(0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) timer_create(0x0, &(0x7f0000000140)={0x0, 0x13, 0x2, @thr={&(0x7f0000000100)="2471baffd6ea423f542d58a8d3655256387cb76090a6c3362c6e18215739134da88a501df81d84a7a976d3ce19df3a4e", &(0x7f0000000280)="b3e2b364a832ebc972b7470821f4c3f9e1acaaef95e6c6cd74f94ef742a0fd8907ac76d32cf3c04a593aac7a8eef7ac0bde236bb96682215e0ab74559366fb4f0ab823d51a22db53def9993aa0e6bb6353"}}, &(0x7f0000000300)) semget(0x0, 0x1, 0x281) semget(0x0, 0x2, 0x120) vmsplice(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x14, &(0x7f00000001c0), 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, 0x0, 0x20400, 0x0) preadv(r5, &(0x7f00000008c0)=[{&(0x7f00000006c0)=""/177, 0xb1}], 0x1, 0x6, 0x7) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 6m11.74203517s ago: executing program 6 (id=885): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x5, 0x6e7, &(0x7f0000002a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m10.209879272s ago: executing program 6 (id=886): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 6m7.757642542s ago: executing program 51 (id=872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40408d1) setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f00000001c0)={&(0x7f0000001840)=[{0x0, 0x0, 0x0, 0x0}, {0x8001, 0x10, 0x0, 0x0}], 0x2}) socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x8, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x22, {0x45, 0x80}, 0xcd, 0x3}}) 6m6.305036947s ago: executing program 52 (id=875): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x0, 0xfffffff, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) 5m54.721133701s ago: executing program 53 (id=886): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0xc0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000000c0)=ANY=[], 0x8) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) 5m7.01581584s ago: executing program 4 (id=1000): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 5m6.058146432s ago: executing program 4 (id=1002): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000006c0)="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", 0x176}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a482", 0x48}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a", 0x71}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528e", 0x6c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="52c1200795785ced9271d7731e97f6ba83b9a7488c08cc478be431490c3017a7d076d747b2ff91a5", 0x28}, {&(0x7f0000000140)="b6320fd093b5ac9c5c5b77c78ebffdab874a16b30098fa6457cedc7b3573c56e40c88f6052bfb776d8d201c82788b44a97fcb7b5eff6bbd1e9b4d97a6fa970adac912dfbedbdcd97e57c9dafa68326357f94f16edb34fe14287113e29f81595a1a7747527a9edff498df115a1636c649366ac184ebc55de03f2174c92de259ea59328cf4a5e1e28d38859f253d16376c01d059d17a5b2f42c2e220e8f41bf1c4a178b4a7e78cdd67b238d3088a74a540f44914c42192c305b0c59b77084444e471bf5f7379d598de62b395cf532429", 0xcf}, {&(0x7f00000002c0)="a2295efe444f7f5a2ad997cfa7d82f3697ba9fa155cae0f0cec3e91e7b87a0d2eb5e0b652eb43503fee7ca81528aacc049e08354b345f6fd5225cb4cf11ba9f66c053fac23c8", 0x46}, {&(0x7f0000000340)="a26d200309ca7a5439d6052ac2b61f24673ced7237ffb203b0b7a47d3afb448956b6a1ad9f5991", 0x27}], 0x4}}], 0x3, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m4.623831439s ago: executing program 4 (id=1005): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x8, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x96) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20004044}, 0x48885) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5m2.92813729s ago: executing program 4 (id=1007): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x5, 0x6e7, &(0x7f0000002a00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5m1.17545363s ago: executing program 4 (id=1010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 4m59.407446499s ago: executing program 4 (id=1013): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000"], 0xf4}}, 0x10) 4m44.062938501s ago: executing program 54 (id=1013): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000"], 0xf4}}, 0x10) 4m35.603378458s ago: executing program 7 (id=1058): socket$kcm(0x29, 0x5, 0x0) memfd_secret(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x400000000010, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 4m34.331292294s ago: executing program 7 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x50) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, 0x0) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000300)={0x8}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r5}) ioctl$IOMMU_GET_HW_INFO(r3, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, 0x0, 0x1c, &(0x7f00000003c0)=""/28}) socket$nl_rdma(0x10, 0x3, 0x14) 4m29.518741609s ago: executing program 7 (id=1074): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="359a", 0x2}], 0x1}, 0x20000000) sendto$inet(r0, 0x0, 0x0, 0x89a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240), 0xc) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 4m28.86265973s ago: executing program 7 (id=1076): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x6d5f, &(0x7f0000000940)={0x0, 0x7779, 0x0, 0x100000, 0x186}, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) socket$inet6_icmp(0xa, 0x2, 0x3a) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4m28.32240586s ago: executing program 7 (id=1079): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000100000000010000000900010073797a30000000000900030073797a320000000058000000060a0104"], 0xcc}}, 0x2000c004) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m27.72110515s ago: executing program 7 (id=1082): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000800)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0xe029, 0x4, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x2}, {0x6b, 0x0, 0x8, 0x3e}], 0x1}) syz_open_dev$loop(&(0x7f0000000300), 0x65, 0x1c7c01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000880)=""/178, 0xb2}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/62, 0x3e}], 0x5, &(0x7f0000000640)=""/147, 0x93}, 0x20061) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r2 = socket(0x1d, 0x2, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000740)='wg2\x00', 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000340)={'veth0_to_batadv\x00', {0x2, 0x4e25, @rand_addr=0x64010100}}) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x3fffff, 0x0, {{}, {}, {0x8, 0x11, 0x100007}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) 4m12.404445619s ago: executing program 55 (id=1082): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000800)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, {0xe029, 0x4, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x2}, {0x6b, 0x0, 0x8, 0x3e}], 0x1}) syz_open_dev$loop(&(0x7f0000000300), 0x65, 0x1c7c01) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)=""/209, 0xd1}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000880)=""/178, 0xb2}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/62, 0x3e}], 0x5, &(0x7f0000000640)=""/147, 0x93}, 0x20061) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r2 = socket(0x1d, 0x2, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000740)='wg2\x00', 0x4) setsockopt(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f0000000340)={'veth0_to_batadv\x00', {0x2, 0x4e25, @rand_addr=0x64010100}}) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r5) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x3fffff, 0x0, {{}, {}, {0x8, 0x11, 0x100007}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) 3m49.297956881s ago: executing program 0 (id=1166): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x9) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) 3m45.919941984s ago: executing program 0 (id=1172): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m44.721870311s ago: executing program 0 (id=1176): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) add_key$user(&(0x7f00000000c0), 0x0, &(0x7f0000000180)="d3a24845fed3b644db111f6660fcd399052be391b829c18141634298ceeb56ee051e22d30dbb5f2c5ab2078c2c8cf5b9a0385ac162b836c7957ec2752acb894b12c965ca0e6ef3be0e26d7ce463ba7d45d493070046ee8bf617e890cd5321ff6387b3c061c485ebc22948c0292c94d7463", 0x71, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x0}) r4 = dup(r2) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 3m43.342383029s ago: executing program 0 (id=1178): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3, 0x0, 0x0, 0xe4}, {}, {0x0, 0x4}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 3m42.77427727s ago: executing program 0 (id=1181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 3m41.601134548s ago: executing program 0 (id=1185): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x840, 0xd5) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000d80)=ANY=[@ANYBLOB="696f636861727365743d52703836342c757466383d312c756e695f786c6174653d312c666c7573682c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030353537322c73686f72746e616d653d6d697865642c756e695f786c6174653d302c756e695f786c6174653d312c6572726f72733d72656d6f756e742d726f2c637f4265706167653d3836302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c756e695f786c6174653d302c00"], 0x3, 0x36b, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000000)={[{@dmode={'dmode', 0x3d, 0xffe}}, {@unhide}, {@gid}, {@uid_forget}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x2}}, {@longad}, {@bs={'bs', 0x3d, 0x3e8}}, {@shortad}, {@undelete}]}, 0xfc, 0xc44, &(0x7f0000002dc0)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') connect$inet(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x4000000) utime(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x8, 0x6}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014", @ANYRES64=0x0, @ANYRESDEC], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x210000, &(0x7f0000000380)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@init_itable}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") 3m26.081847711s ago: executing program 56 (id=1185): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x840, 0xd5) epoll_create1(0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000d80)=ANY=[@ANYBLOB="696f636861727365743d52703836342c757466383d312c756e695f786c6174653d312c666c7573682c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030353537322c73686f72746e616d653d6d697865642c756e695f786c6174653d302c756e695f786c6174653d312c6572726f72733d72656d6f756e742d726f2c637f4265706167653d3836302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c73686f72746e616d653d6d697865642c756e695f786c6174653d302c00"], 0x3, 0x36b, &(0x7f0000000500)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000000)={[{@dmode={'dmode', 0x3d, 0xffe}}, {@unhide}, {@gid}, {@uid_forget}, {@mode={'mode', 0x3d, 0x7}}, {@umask={'umask', 0x3d, 0x2}}, {@longad}, {@bs={'bs', 0x3d, 0x3e8}}, {@shortad}, {@undelete}]}, 0xfc, 0xc44, &(0x7f0000002dc0)="$eJzs3UFsHNd9B+D/Gy3Fld1UTJyodhu3m7ZIZcVyZUkxFatwVzXNNoAsC6GYWwCuxJW6MEUSJNXIRtowvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKdgi5l9Ky4pyaJNkaKs77Op3+7sezPvvaFmKEFvXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/3yrkTz6cH3QoAYC9dmPjKiZPu/wDwSLlU/fnfDwAAAAAAAAAAAAAAALCPpSjiiUgxf2E9TVXve+rnO7M3bk6Ojd+52qFU1TxQlS+/6s+fPHX6iy+MnunnB9e/356K1yYunWu8PHd9fqG9uNiebkzOdq7MTbe3vYed1t/qWDUAjeuv35i+enWxcfK5U5s+vjny/vDjR0bOjj5z/Ol+2cmx8fGJgTK1oY989NvcbYLHwSjieKR49ns/Sa2IKGLnY3GP753ddqjqxLGqE5Nj41VHZjqt2aXyw4v9gSgiGgOVmv0x2oNzsSPNiOWy+WWDj5Xdm5hvLbQuz7QbF1sLS52lztzsxdRrbdmfRhRxJkWsRMTa8O27G4oiapHiO4fX0+WIONAfhy9UE4Pv3o5iF/u4DWU7G0MRK8VDcM72seEo4tVI8dN3irhSjln+is9HvFrmDyLeKvOliGqW2OmI9+7wfcTDqRZF/Hl5/s+up+mI6B7ubR9vnP9q48uzV+cGyvavKw/9/WEv7fNrUz2KaFVX/PX00X/YAQAAAAAAAAAAAAAAAOB+OxRFPBUpXvn3P6rmFUc1L/3w2dHfH/nE4JzxJ++xn7LscxGxXGxvTu7BPIX4YrqY0gOeS/woq0cRf5zn/33rQTcGAAAAAAAAAAAAAAAAAADgkVbEjyPFi+8eTSsxuKZ4Z/Za41Lr8kxvVdj+2r/9NdO73W63kXrZzDmVcznnSs7VnGs5o8j1czZzTuVczrmSczXnWs44kOvnbOacyrmccyXnas61nFHL9XM2c07lXM65knM151rO2Cdr9wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfJwUUcTPI8W3v76eIkVEM2Iqerk63C8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADxIw6mI70eKxh80b22rRUSq/u85Wv5yOpoHy/xUNEfLfCma53K2qqw1v3XPo6Vd6QMf3VAq4keRYrj+9q2zk8//UO/dxjl76xsb73651ssD/Q9H3h9+/Mjhs6Pjv/rk3V5XdYe2NODY+c7sjZuNybHx8YmBzbVc7lMD20bycYv8/hP3ZwgeaYtvvPl6a2amveDFo/Gi1ntRi33Snr16ka9XsV/as/VFc380Y+PFA74wsSfK+/97keK33/2PW7fmfP//hd67W3f4+NmfbNz/X9y6o+3e/7e6x/3/iYFtL+afRoZqEfWl6/NDRyLqi2+8ebxzvXWtfa09e/rEiS+Njn7p1ImhgxH1q52Z9sCrHQ8VAAAAAAAAAAAAAAAAwN5KRfxupGj9aD01IuJmNV9r5OzoM8efPhAHqvlWm+ZtvTZx6Vzj5bnr8wvtxcX2dGNytnNlbrq93cPVq+lek2Pju9KZezq0y+0/VH95bv6Nhc61P1y64+eP1c9dXlxaaF2588dxKIqI5uCWY1WDJ8fGq0bPdFqzVdWL9+lRCkOpiP+MFFdON9Ln8rY8/2/rDP9N8/+Xt+5o+/P/hjfVu8f8v08ObCuPmVIRP4sUv/UXT8bnqnY+FreNWS73N5Hi2JnP5nJxsCzXb3/vuQK9mYFl2f+NFP/w881l+/Mhn9go+/yHGtyHQHn+D0eK7//Zd+PX87bNz3+48/l/bOuOdmn+56cHtj226XkFO+46+fwfjxQvPfF2/Ebe9kHP/yii2+1+M+JoLnzr+Ry7dP4/M7BtJHrH/c37130AAAAAAAAAAICH1lAq4m8jxdPjtfRC3radf/83vXVHu/Tvv35pYNv0Hq1XtONBBQAAAIB9YigV8eNIcW3p7VtzqDfP/x6Y//k7G2uvj6Utn1Z/z/eL1XMD7uff/w0ayced2nm3AQAAAAAAAAAAAAAAAAAAYF9JqYgX8nrqU/dYT301Urzy38/mculIWa6/DvxI9Wv9wtzs8XMzM3NXWkutyzPtxsR860q7rPvpSLH+15/NdYtqffX+evO9Nd7r3f5a7AuRYvzv+mV7a7H31ybvrQfeW4u9LPvJSPFff7+5bH8d689slD1Zlv2rSPG1f7pz2SMbZU+VZb8bKX74tUa/7GNl2f7zUXvPJK3XYqb93JW5mdsehQoAAAAAAAAAAAAAAAAAAAAf1lAq4k8jxf9cX4nlPO0/r//fX4G/1i/71jcG1vvf4ma1zv9Itf7/3V5/lPX/R+5bTwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OGRoog3I8X8hfW0Oly+76mf78zeuDk5Nn7naodSVfNAVb78qj9/8tTpL74weqafH1z/fnsqXpu4dK7x8tz1+YX24mJ7ujE527kyN93e9h52Wn9j6HqOVQPQuP76jemrVxcbJ587tenjmyPvDz9+ZOTs6DPHn+6XnRwbH58YKFMb+hBH/1CN23AwivjLSPHs936S/nk4ooh7jUW32+1+8LHu8b2z2w5VnThWdWJybLzqyEynNbtUfnixPxBFRGOgUrM/RntwLnakGbFcNr9s8LGyexPzrYXW5Zl242JrYamz1JmbvZh6rS3704gizqSIlYhYG759d0NRxOuR4juH19O/DJe/o/M4fOHCxFdOnLx7O4pd7OM2lO1sDEWsFBvnrL5fz9k+NhxF/GOk+Ok7R+NfhyNq0fuKz0e8WuYPIt4q86WIlCK634x47w7fRzycalHE/5Xn/+x6eme4vB70ryvnv9r48uzVuYGy/evKtu6Vv3b3Yz7w+8Ne2uf3k3oU8cPqir+e/s3vawAAAAAAAAAAAAAAAIB9pIhfiRQvvns0VfODb80p7sxea1xqXZ7pTevrz/3rz5nudrvdRuplM+dUzuWcKzlXc67ljCLXz9nMOZVzOedKztWcaznjQK6fs5lzKufygYO9+vn9as61nFHL9XM2c07lXM65knM151rO2Cdz9wAAAAAAAAAAAAAAAAAAgI+Xovovxbe/vp66w731paeil6vWA/3Y+/8AAAD//yotAps=") r2 = syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00') connect$inet(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x4000000) utime(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={0x8, 0x6}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf250000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014", @ANYRES64=0x0, @ANYRESDEC], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x210000, &(0x7f0000000380)={[{@data_err_abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@init_itable}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") 2m44.763660132s ago: executing program 3 (id=1213): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) fstat(r0, 0x0) fchown(r0, 0x0, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x300, 0x8, 0x2, 0x1}, 0x8) 2m43.963711442s ago: executing program 3 (id=1306): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") pipe2$9p(0x0, 0x800) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe, 0x204031, 0xffffffffffffffff, 0x54766000) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754bab1cb61212bb07a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209bc45b4064028eb7fafaa8b125736e00"}, 0xd8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x2, 0xa6e5, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {0x0, 0x0, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) 2m41.883529498s ago: executing program 3 (id=1312): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000006c0)="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", 0x176}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a482", 0x48}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a", 0x71}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528e", 0x6c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="52c1200795785ced9271d7731e97f6ba83b9a7488c08cc478be431490c3017a7d076d747b2ff91a5", 0x28}, {&(0x7f0000000140)="b6320fd093b5ac9c5c5b77c78ebffdab874a16b30098fa6457cedc7b3573c56e40c88f6052bfb776d8d201c82788b44a97fcb7b5eff6bbd1e9b4d97a6fa970adac912dfbedbdcd97e57c9dafa68326357f94f16edb34fe14287113e29f81595a1a7747527a9edff498df115a1636c649366ac184ebc55de03f2174c92de259ea59328cf4a5e1e28d38859f253d16376c01d059d17a5b2f42c2e220e8f41bf1c4a178b4a7e78cdd67b238d3088a74a540f44914c42192c305b0c59b77084444e471bf5f7379d598de62b395cf532429", 0xcf}, {&(0x7f00000002c0)="a2295efe444f7f5a2ad997cfa7d82f3697ba9fa155cae0f0cec3e91e7b87a0d2eb5e0b652eb43503fee7ca81528aacc049e08354b345f6fd5225cb4cf11ba9f66c053fac23c8", 0x46}, {&(0x7f0000000340)="a26d200309ca7a5439d6052ac2b61f24673ced7237ffb203b0b7a47d3afb448956b6a1ad9f5991", 0x27}], 0x4}}], 0x3, 0x2090) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2m40.529773404s ago: executing program 3 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2m25.146445994s ago: executing program 57 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 8.499960226s ago: executing program 5 (id=1710): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x8, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x96) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 7.511102403s ago: executing program 5 (id=1713): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.757798924s ago: executing program 5 (id=1715): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 6.071706778s ago: executing program 5 (id=1717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5.338887696s ago: executing program 8 (id=1720): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40202, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x1000000) 5.299473524s ago: executing program 5 (id=1721): bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000e40), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x428, 0x428, 0x1c0, 0x1c0, 0x0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x6, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x100, 0x128, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) socket$inet_tcp(0x2, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r4, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/161, 0xa1}], 0x1, 0x0, 0x100) 5.158878283s ago: executing program 9 (id=1722): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x183) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 4.619762251s ago: executing program 8 (id=1723): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x8, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x96) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.270049339s ago: executing program 9 (id=1724): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.79401788s ago: executing program 8 (id=1725): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff2424852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff0e0b5a293e3877adc1660edbc9a0307a25720a70e419dc44febf7ddc73fd4a5a0b6c28667f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000010c0)={@random="c60000a17f07", @local, @val={@val={0x88a8, 0x7, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x44}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x29, 0x14, 0x68, 0x0, 0x40, 0x21, 0x0, @rand_addr=0x64010100, @broadcast}}}}}, 0x0) 3.558951357s ago: executing program 1 (id=1726): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x800080, &(0x7f0000000100)=ANY=[], 0x9, 0x234, &(0x7f0000000900)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) fspick(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) userfaultfd(0x80001) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 3.469375986s ago: executing program 2 (id=1727): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="850000009e000000620a00ff0000000071080804000000009500000000000000181000006bab74add5d66d7f338cf0d55b025bb30a18e028fe7591f238d0cf85e0e07f8eb7186279f9489e92831438f9b21aceb681400d5cb24ede3812e41dbabe645a4044c3", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) 3.469211741s ago: executing program 9 (id=1728): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000010000000000000000000000711822000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.269267521s ago: executing program 8 (id=1729): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008bcc0d8cb1453dac7058258d8"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.905785382s ago: executing program 1 (id=1730): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)="9082", 0x2}], 0x1}}], 0x1, 0x20008000) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) 2.84927451s ago: executing program 2 (id=1731): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2.849124189s ago: executing program 9 (id=1732): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r0 = io_uring_setup(0xa71, &(0x7f0000000240)={0x0, 0x86a1, 0x8, 0x3, 0x377}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.729119154s ago: executing program 8 (id=1733): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, 0x0, 0x40202, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x1000000) 2.358805453s ago: executing program 1 (id=1734): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) getpid() r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x30000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x7f) flock(0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) 2.317117752s ago: executing program 2 (id=1735): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x8, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') socket$key(0xf, 0x3, 0x2) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x96) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004044}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.253061929s ago: executing program 9 (id=1736): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.113232885s ago: executing program 8 (id=1737): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x64c546c48307211d) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x206001, 0x0) openat(r2, 0x0, 0x101000, 0xbe86b31890335afc) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x4) syz_emit_vhci(0x0, 0x7) sched_setscheduler(0x0, 0x4, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x6}) socket$inet_udplite(0x2, 0x2, 0x88) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x10980900, 0x1}) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) 1.710957779s ago: executing program 9 (id=1738): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xd, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x10, 0x803, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0) 1.577545259s ago: executing program 2 (id=1739): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0x10, 0xffffff7f, 0x40000000}, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1.53257636s ago: executing program 1 (id=1740): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='.\x02\x00', 0x800080, &(0x7f0000000100)=ANY=[], 0x9, 0x234, &(0x7f0000000900)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) fspick(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='mountstats\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) userfaultfd(0x80001) close_range(r1, 0xffffffffffffffff, 0x200000000000000) 828.626109ms ago: executing program 1 (id=1741): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x3, 0x0, 0x6, 0x2, 0xa, 0x0, 0xf1}]}, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x82, &(0x7f0000000240)=""/130, 0x41000, 0x20}, 0x94) 706.995111ms ago: executing program 2 (id=1742): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071104c000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 118.488928ms ago: executing program 2 (id=1743): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x4b}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000180)="7c0031fc9356b5b10006000081001a89", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.7948ms ago: executing program 1 (id=1744): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)="9082", 0x2}], 0x1}}], 0x1, 0x20008000) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 0s ago: executing program 5 (id=1745): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x0, 0x2e9}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) kernel console output (not intermixed with test programs): p1: detected capacity change from 0 to 32768 [ 680.037617][ T9519] veth0_vlan: entered promiscuous mode [ 680.367589][ T9494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.483049][ T9519] veth1_vlan: entered promiscuous mode [ 681.737330][ T9519] veth0_macvtap: entered promiscuous mode [ 681.929002][ T9519] veth1_macvtap: entered promiscuous mode [ 682.249485][ T9494] veth0_vlan: entered promiscuous mode [ 682.319727][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.371991][ T9519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.639431][ T1070] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.722216][ T9494] veth1_vlan: entered promiscuous mode [ 682.785491][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.852747][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.881842][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.916382][ T9646] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 683.034325][ T9646] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 683.086121][ T9646] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 683.128682][ T9646] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 683.194763][ T9699] loop1: detected capacity change from 0 to 8192 [ 683.236940][ T9598] loop1: p1 < > p2 p4 < p5 > [ 683.257224][ T9598] loop1: partition table partially beyond EOD, truncated [ 683.294030][ T9598] loop1: p1 start 134217728 is beyond EOD, truncated [ 683.305578][ T9598] loop1: p2 size 591360 extends beyond EOD, truncated [ 683.323048][ T9598] loop1: p5 size 591360 extends beyond EOD, truncated [ 683.416187][ T9699] loop1: p1 < > p2 p4 < p5 > [ 683.432052][ T9699] loop1: partition table partially beyond EOD, truncated [ 683.444331][ T9699] loop1: p1 start 134217728 is beyond EOD, truncated [ 683.451226][ T9699] loop1: p2 size 591360 extends beyond EOD, truncated [ 683.505894][ T9494] veth0_macvtap: entered promiscuous mode [ 683.519793][ T9699] loop1: p5 size 591360 extends beyond EOD, truncated [ 683.724985][ T9494] veth1_macvtap: entered promiscuous mode [ 684.116544][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.258857][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.476586][ T7472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.521959][ T7472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.541990][ T7472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.617193][ T9499] udevd[9499]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 684.623877][ T9598] udevd[9598]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 684.642408][ T9486] udevd[9486]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 684.673139][ T7472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.817263][ T9598] udevd[9598]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 684.846123][ T9499] udevd[9499]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 684.848281][ T9486] udevd[9486]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 685.371294][ T9646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.774095][ T9646] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.882157][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.889511][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.014956][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.022499][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.260570][ T9646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.682107][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.717171][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.966143][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.019824][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.608691][ T9778] Bluetooth: MGMT ver 1.23 [ 690.621949][ T9778] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 691.121067][ T9646] veth0_vlan: entered promiscuous mode [ 691.664753][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.678694][ T9646] veth1_vlan: entered promiscuous mode [ 691.689070][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.967115][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.006332][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.356373][ T9646] veth0_macvtap: entered promiscuous mode [ 692.392390][ T8856] Bluetooth: hci1: command 0x0406 tx timeout [ 692.448568][ T9646] veth1_macvtap: entered promiscuous mode [ 692.847980][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.055717][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.350718][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.563328][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.572531][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.583597][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.615316][ T9802] loop7: detected capacity change from 0 to 256 [ 693.973231][ T9802] exfat: Deprecated parameter 'namecase' [ 694.684440][ T9802] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 694.924853][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 694.942544][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 694.953409][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 694.966904][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 694.978768][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 695.469536][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.479055][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.051578][ T8856] Bluetooth: hci2: command tx timeout [ 697.357662][ T9811] chnl_net:caif_netlink_parms(): no params data found [ 697.794773][ T9835] loop5: detected capacity change from 0 to 7 [ 697.863055][ T9835] Dev loop5: unable to read RDB block 7 [ 697.868772][ T9835] loop5: AHDI p1 p2 p3 [ 698.048417][ T9835] loop5: partition table partially beyond EOD, truncated [ 698.287692][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.341783][ T9835] loop5: p1 start 1818582900 is beyond EOD, truncated [ 698.428191][ T9835] loop5: p3 start 335544320 is beyond EOD, truncated [ 698.662647][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.114787][ T8856] Bluetooth: hci2: command tx timeout [ 699.176382][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 699.706830][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.160033][ T9811] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.196620][ T9811] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.244549][ T9811] bridge_slave_0: entered allmulticast mode [ 700.263478][ T9853] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 700.285229][ T9811] bridge_slave_0: entered promiscuous mode [ 700.367284][ T9811] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.399868][ T9811] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.435226][ T9811] bridge_slave_1: entered allmulticast mode [ 700.483224][ T9811] bridge_slave_1: entered promiscuous mode [ 701.096757][ T9811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.201810][ T8856] Bluetooth: hci2: command tx timeout [ 701.305670][ T9811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.606431][ T9869] loop7: detected capacity change from 0 to 512 [ 701.631977][ T12] bridge_slave_1: left allmulticast mode [ 701.689480][ T12] bridge_slave_1: left promiscuous mode [ 701.720838][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.796319][ T12] bridge_slave_0: left allmulticast mode [ 701.805175][ T9869] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 701.833623][ T12] bridge_slave_0: left promiscuous mode [ 701.839853][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.027503][ T9869] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 702.132116][ T9869] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 702.152607][ T9869] EXT4-fs (loop7): 1 truncate cleaned up [ 702.160282][ T9869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.093910][ T8891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.273410][ T8856] Bluetooth: hci2: command tx timeout [ 704.049903][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.136476][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.183169][ T12] bond0 (unregistering): Released all slaves [ 704.240442][ T9811] team0: Port device team_slave_0 added [ 704.435261][ T9811] team0: Port device team_slave_1 added [ 705.290079][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.298285][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.380150][ T9811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.857852][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.880009][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.890183][ T9811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.934443][ T9811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.978429][ T9811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 706.129436][ T9905] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 706.393876][ T12] hsr_slave_0: left promiscuous mode [ 706.448023][ T12] hsr_slave_1: left promiscuous mode [ 706.502184][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.509746][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.584753][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.621499][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.729235][ T12] veth1_macvtap: left promiscuous mode [ 706.738423][ T12] veth0_macvtap: left promiscuous mode [ 706.752291][ T12] veth1_vlan: left promiscuous mode [ 706.761021][ T12] veth0_vlan: left promiscuous mode [ 708.959607][ T12] team0 (unregistering): Port device team_slave_1 removed [ 709.143021][ T12] team0 (unregistering): Port device team_slave_0 removed [ 710.786433][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.872732][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.950661][ T9811] hsr_slave_0: entered promiscuous mode [ 711.035088][ T9811] hsr_slave_1: entered promiscuous mode [ 711.075836][ T9811] debugfs: 'hsr0' already exists in 'hsr' [ 711.092167][ T9811] Cannot create hsr debugfs directory [ 711.885274][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.240191][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.486063][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.824230][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.206092][ T12] bridge_slave_1: left allmulticast mode [ 714.227691][ T12] bridge_slave_1: left promiscuous mode [ 714.286426][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.351164][ T12] bridge_slave_0: left allmulticast mode [ 714.357214][ T12] bridge_slave_0: left promiscuous mode [ 714.402685][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.762909][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.843000][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.887032][ T12] bond0 (unregistering): Released all slaves [ 716.725814][ T12] hsr_slave_0: left promiscuous mode [ 716.756468][ T12] hsr_slave_1: left promiscuous mode [ 716.773760][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.784442][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.808225][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.818914][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.893083][ T12] veth1_macvtap: left promiscuous mode [ 716.907346][ T12] veth0_macvtap: left promiscuous mode [ 716.942091][ T12] veth1_vlan: left promiscuous mode [ 716.947646][ T12] veth0_vlan: left promiscuous mode [ 718.015833][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 718.029115][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 718.040518][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 718.092863][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 718.106652][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 718.276688][ T8856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 718.290020][ T8856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 718.300209][ T8856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 718.321476][ T8856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 718.352357][ T8856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 718.886871][ T12] team0 (unregistering): Port device team_slave_1 removed [ 718.926178][ T12] team0 (unregistering): Port device team_slave_0 removed [ 719.989292][ T9811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 720.130780][ T9811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 720.175641][ T9811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 720.231815][ T8856] Bluetooth: hci1: command tx timeout [ 720.254510][ T9811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 720.393382][ T8856] Bluetooth: hci3: command tx timeout [ 720.435717][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.615243][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.879148][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.157425][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.312424][ T8856] Bluetooth: hci1: command tx timeout [ 722.393338][ T9976] chnl_net:caif_netlink_parms(): no params data found [ 722.475905][ T8856] Bluetooth: hci3: command tx timeout [ 722.507235][ T12] bridge_slave_1: left allmulticast mode [ 722.513497][ T12] bridge_slave_1: left promiscuous mode [ 722.520329][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.553931][ T12] bridge_slave_0: left allmulticast mode [ 722.570504][ T12] bridge_slave_0: left promiscuous mode [ 722.578603][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.590700][T10008] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 723.249451][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 723.267476][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 723.299430][ T12] bond0 (unregistering): Released all slaves [ 723.502260][ T9980] chnl_net:caif_netlink_parms(): no params data found [ 724.395179][ T8856] Bluetooth: hci1: command tx timeout [ 724.412038][ T12] hsr_slave_0: left promiscuous mode [ 724.432488][ T12] hsr_slave_1: left promiscuous mode [ 724.441838][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.472007][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.493273][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.500738][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.553173][ T8856] Bluetooth: hci3: command tx timeout [ 724.584022][ T12] veth1_macvtap: left promiscuous mode [ 724.621850][ T12] veth0_macvtap: left promiscuous mode [ 724.627696][ T12] veth1_vlan: left promiscuous mode [ 724.663542][ T12] veth0_vlan: left promiscuous mode [ 726.159279][ T12] team0 (unregistering): Port device team_slave_1 removed [ 726.220087][ T12] team0 (unregistering): Port device team_slave_0 removed [ 726.471537][ T8856] Bluetooth: hci1: command tx timeout [ 726.633296][ T8856] Bluetooth: hci3: command tx timeout [ 727.251818][ T9976] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.259278][ T9976] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.302675][ T9976] bridge_slave_0: entered allmulticast mode [ 727.362651][ T9976] bridge_slave_0: entered promiscuous mode [ 727.406701][ T9976] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.441906][ T9976] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.449389][ T9976] bridge_slave_1: entered allmulticast mode [ 727.538564][ T9976] bridge_slave_1: entered promiscuous mode [ 727.599858][ T9811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.971486][ T9980] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.991828][ T9980] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.999351][ T9980] bridge_slave_0: entered allmulticast mode [ 728.053008][ T9980] bridge_slave_0: entered promiscuous mode [ 728.249339][ T9976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.334119][ T9976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.386198][ T9980] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.404340][ T9980] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.434000][ T9980] bridge_slave_1: entered allmulticast mode [ 728.464988][ T9980] bridge_slave_1: entered promiscuous mode [ 728.793730][ T9976] team0: Port device team_slave_0 added [ 728.885356][ T9976] team0: Port device team_slave_1 added [ 728.973184][ T9980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.016246][ T9980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.110792][ T9811] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.246540][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.274161][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.366601][ T9976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.416216][ T9976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.442000][ T9976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.512977][ T9976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.611212][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.618750][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.703570][ T9980] team0: Port device team_slave_0 added [ 729.738572][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.746250][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.772375][ T9980] team0: Port device team_slave_1 added [ 730.088335][T10067] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 730.247970][ T9976] hsr_slave_0: entered promiscuous mode [ 730.285728][ T9976] hsr_slave_1: entered promiscuous mode [ 730.310914][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.335998][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.385301][T10051] loop6: detected capacity change from 0 to 32768 [ 730.391629][ T9980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.421043][ T9980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.430134][ T9980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.469501][T10051] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.821 (10051) [ 730.524966][ T9980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.576475][T10051] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 730.591595][T10051] BTRFS info (device loop6): using blake2b checksum algorithm [ 730.897144][T10051] BTRFS info (device loop6 state E): enabling ssd optimizations [ 730.933838][T10051] BTRFS info (device loop6 state E): using spread ssd allocation scheme [ 731.001577][T10051] BTRFS info (device loop6 state E): enabling free space tree [ 731.009252][T10051] BTRFS info (device loop6 state E): enabling auto defrag [ 731.061616][T10051] BTRFS info (device loop6 state E): ignoring bad roots [ 731.068808][T10051] BTRFS info (device loop6 state E): force zlib compression, level 3 [ 731.367668][T10096] loop1: detected capacity change from 0 to 256 [ 731.462192][ T9646] BTRFS info (device loop6 state E): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 731.477188][T10096] exFAT-fs (loop1): failed to load upcase table (idx : 0x00002e7f, chksum : 0xe2a79b0f, utbl_chksum : 0xe619d30d) [ 731.860529][ T9980] hsr_slave_0: entered promiscuous mode [ 731.915498][ T9980] hsr_slave_1: entered promiscuous mode [ 731.935727][ T9980] debugfs: 'hsr0' already exists in 'hsr' [ 731.961524][ T9980] Cannot create hsr debugfs directory [ 734.443602][ T9976] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 734.488805][ T9976] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 734.536390][ T9976] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 734.783096][ T9976] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 735.081898][T10125] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 735.235327][ T9811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.211713][ T9980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 736.281167][ T9980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 736.365681][ T9980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 736.600252][ T9980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 736.816867][ T9811] veth0_vlan: entered promiscuous mode [ 736.882707][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 736.919884][T10148] netlink: 60 bytes leftover after parsing attributes in process `syz.1.834'. [ 736.932420][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.834'. [ 736.955981][T10148] netlink: 60 bytes leftover after parsing attributes in process `syz.1.834'. [ 736.982148][T10148] netlink: 104 bytes leftover after parsing attributes in process `syz.1.834'. [ 737.137112][ T9976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.165300][ T9811] veth1_vlan: entered promiscuous mode [ 737.609400][ T9976] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.769260][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.776643][ T7214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.958570][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.965973][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.246019][ T9811] veth0_macvtap: entered promiscuous mode [ 738.337780][ T9811] veth1_macvtap: entered promiscuous mode [ 738.745230][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.814631][ T9811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 739.048756][ T188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.086515][ T188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.191865][ T188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.210586][ T9980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.273961][ T188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 739.819146][ T9980] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.073758][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.081285][ T7214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.314154][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.321657][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.512711][ T9976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.499441][ T9980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 744.362340][ T9980] veth0_vlan: entered promiscuous mode [ 744.664498][ T9976] veth0_vlan: entered promiscuous mode [ 744.711000][ T9980] veth1_vlan: entered promiscuous mode [ 744.922423][ T9976] veth1_vlan: entered promiscuous mode [ 745.433490][ T9980] veth0_macvtap: entered promiscuous mode [ 745.641130][ T9980] veth1_macvtap: entered promiscuous mode [ 745.778956][ T9976] veth0_macvtap: entered promiscuous mode [ 745.876237][ T9976] veth1_macvtap: entered promiscuous mode [ 746.168835][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.295989][ T9976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.416035][ T9980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.587479][ T9976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.672903][T10226] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 746.807813][ T188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.851260][ T188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.860355][ T188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.909799][ T188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.198900][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.233632][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.364680][ T188] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.415954][ T188] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.456758][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.503224][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.892999][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.933259][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.339981][T10271] loop2: detected capacity change from 0 to 4096 [ 751.610369][T10277] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 751.852491][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'. [ 753.455088][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 753.465961][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 753.484536][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 753.505983][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 753.517313][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 754.882680][T10301] syzkaller0: entered promiscuous mode [ 755.671806][ T5790] Bluetooth: hci4: command tx timeout [ 755.938588][ T1079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.209086][ T1079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.311981][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.330545][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.457141][ T1079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.780739][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.865000][ T1079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.902700][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.910321][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.014005][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.705383][ T7214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.732163][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.753203][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.755001][ T5790] Bluetooth: hci4: command tx timeout [ 757.789626][ T7214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.296072][T10293] chnl_net:caif_netlink_parms(): no params data found [ 758.473141][ T1079] bridge_slave_1: left allmulticast mode [ 758.510147][ T1079] bridge_slave_1: left promiscuous mode [ 758.531572][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.614370][ T1079] bridge_slave_0: left allmulticast mode [ 758.657114][ T1079] bridge_slave_0: left promiscuous mode [ 758.668152][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.770803][T10345] loop6: detected capacity change from 0 to 4096 [ 758.804494][T10346] loop2: detected capacity change from 0 to 4096 [ 759.008944][T10353] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 759.024751][T10354] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 759.277231][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'. [ 759.842482][ T5790] Bluetooth: hci4: command tx timeout [ 760.767795][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 760.934946][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.020914][ T1079] bond0 (unregistering): Released all slaves [ 761.547958][T10377] loop8: detected capacity change from 0 to 1024 [ 761.913876][ T5790] Bluetooth: hci4: command tx timeout [ 762.660764][ T53] hfsplus: b-tree write err: -5, ino 3 [ 763.081658][ T1079] hsr_slave_0: left promiscuous mode [ 763.131452][ T1079] hsr_slave_1: left promiscuous mode [ 763.166482][T10389] loop3: detected capacity change from 0 to 512 [ 763.192080][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.199630][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.303336][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.333590][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.365859][T10389] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.859: corrupted inode contents [ 763.379996][ T1079] veth1_macvtap: left promiscuous mode [ 763.390096][ T1079] veth0_macvtap: left promiscuous mode [ 763.396938][ T1079] veth1_vlan: left promiscuous mode [ 763.403349][ T1079] veth0_vlan: left promiscuous mode [ 763.414150][T10389] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 763.421440][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 763.437430][ C0] EXT4-fs (loop3): initial error at time 1774295156: ext4_do_update_inode:5569: inode 3 [ 763.447531][ C0] EXT4-fs (loop3): last error at time 1774295156: ext4_do_update_inode:5569: inode 3 [ 763.468893][T10389] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #3: comm syz.3.859: mark_inode_dirty error [ 763.541992][T10389] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 763.572000][T10389] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #3: comm syz.3.859: corrupted inode contents [ 763.612324][T10389] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 763.676827][T10389] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.859: mark_inode_dirty error [ 763.705430][T10389] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 763.708107][T10389] Quota error (device loop3): write_blk: dquota write failed [ 763.727982][T10389] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 763.743244][T10389] EXT4-fs error (device loop3): ext4_acquire_dquot:7001: comm syz.3.859: Failed to acquire dquot type 0 [ 763.756430][T10389] loop3: lost filesystem error report for type 5 error -117 [ 763.820895][T10389] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.859: corrupted inode contents [ 763.820994][T10389] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 763.822904][T10389] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #16: comm syz.3.859: mark_inode_dirty error [ 763.822993][T10389] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 763.824080][T10389] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.859: corrupted inode contents [ 763.824165][T10389] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 763.828539][T10389] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.859: mark_inode_dirty error [ 763.828673][T10389] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 763.844376][T10389] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.859: corrupted inode contents [ 763.844469][T10389] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 763.882396][T10389] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 763.882510][T10389] loop3: lost filesystem error report for type 5 error -117 [ 764.029965][T10389] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #16: comm syz.3.859: corrupted inode contents [ 764.030113][T10389] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 764.031558][T10389] EXT4-fs error (device loop3): ext4_truncate:4587: inode #16: comm syz.3.859: mark_inode_dirty error [ 764.033949][T10389] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 764.034043][T10389] loop3: lost filesystem error report for type 5 error -117 [ 764.042520][T10389] EXT4-fs (loop3): 1 truncate cleaned up [ 764.043946][T10389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.044204][T10389] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 765.279285][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 766.381809][T10293] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.425976][T10293] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.460469][T10293] bridge_slave_0: entered allmulticast mode [ 766.507428][ T9980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.553073][T10293] bridge_slave_0: entered promiscuous mode [ 766.682051][T10293] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.732385][T10293] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.740067][T10293] bridge_slave_1: entered allmulticast mode [ 766.814990][T10293] bridge_slave_1: entered promiscuous mode [ 766.913492][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.8.863'. [ 767.239252][T10414] loop3: detected capacity change from 0 to 4096 [ 767.407526][T10421] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 767.452300][T10293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.536597][T10293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.665825][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 768.498655][T10293] team0: Port device team_slave_0 added [ 768.674671][T10293] team0: Port device team_slave_1 added [ 769.097604][T10293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.171754][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.337843][T10293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.420460][T10293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.487501][T10293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 769.601720][T10293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 770.373270][T10293] hsr_slave_0: entered promiscuous mode [ 770.426035][T10293] hsr_slave_1: entered promiscuous mode [ 770.477291][T10293] debugfs: 'hsr0' already exists in 'hsr' [ 770.528517][T10293] Cannot create hsr debugfs directory [ 771.210507][T10443] loop6: detected capacity change from 0 to 1024 [ 772.363117][ T7472] hfsplus: b-tree write err: -5, ino 3 [ 774.062727][T10293] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 774.334032][T10293] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 774.538399][T10293] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 774.752808][T10293] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 776.220939][T10293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.437495][T10293] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.576184][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.583670][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.709823][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.717215][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.667454][T10483] loop6: detected capacity change from 0 to 4096 [ 778.009941][T10493] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 778.355311][T10483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.878'. [ 779.265439][T10293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 781.766075][T10293] veth0_vlan: entered promiscuous mode [ 782.087305][T10293] veth1_vlan: entered promiscuous mode [ 782.753704][T10293] veth0_macvtap: entered promiscuous mode [ 782.798645][T10293] veth1_macvtap: entered promiscuous mode [ 782.995368][T10293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.116611][T10293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.234691][ T1070] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.269968][ T1070] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.320949][ T1070] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.385377][ T1070] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.947385][T10537] loop6: detected capacity change from 0 to 1024 [ 784.965513][ T53] hfsplus: b-tree write err: -5, ino 3 [ 788.532027][ T8856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 788.540996][ T8856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 788.559097][ T8856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 788.602642][ T8856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 788.619988][ T8856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 790.649457][T10569] chnl_net:caif_netlink_parms(): no params data found [ 790.712127][ T5790] Bluetooth: hci5: command tx timeout [ 791.272524][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 791.293312][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.438371][ T8856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 791.454030][ T8856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 791.475769][ T8856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 791.584976][ T8856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 791.612206][ T8856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 792.523163][T10603] syzkaller0: entered promiscuous mode [ 792.613977][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 792.680945][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 792.791662][ T5790] Bluetooth: hci5: command tx timeout [ 793.671989][ T5790] Bluetooth: hci6: command tx timeout [ 794.424126][T10569] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.456325][T10569] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.486784][T10569] bridge_slave_0: entered allmulticast mode [ 794.496695][T10569] bridge_slave_0: entered promiscuous mode [ 794.525916][T10569] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.540190][T10569] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.548228][T10569] bridge_slave_1: entered allmulticast mode [ 794.561960][T10569] bridge_slave_1: entered promiscuous mode [ 794.791668][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 794.875352][ T8856] Bluetooth: hci5: command tx timeout [ 794.957505][T10569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.179172][T10569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.757859][ T8856] Bluetooth: hci6: command tx timeout [ 796.116415][T10569] team0: Port device team_slave_0 added [ 796.252073][T10569] team0: Port device team_slave_1 added [ 796.534237][T10627] loop5: detected capacity change from 0 to 1024 [ 796.951600][ T8856] Bluetooth: hci5: command tx timeout [ 797.267517][T10569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.353077][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.538858][T10569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.599959][T10593] chnl_net:caif_netlink_parms(): no params data found [ 797.623718][ T53] hfsplus: b-tree write err: -5, ino 3 [ 797.823383][T10569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.830495][T10569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.871689][ T8856] Bluetooth: hci6: command tx timeout [ 798.043542][T10569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.950765][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.263487][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.612946][T10569] hsr_slave_0: entered promiscuous mode [ 799.670120][T10569] hsr_slave_1: entered promiscuous mode [ 799.761854][T10569] debugfs: 'hsr0' already exists in 'hsr' [ 799.767755][T10569] Cannot create hsr debugfs directory [ 799.883602][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.916670][ T5790] Bluetooth: hci6: command tx timeout [ 800.127519][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.014160][T10593] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.051992][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.059797][T10593] bridge_slave_0: entered allmulticast mode [ 801.135262][T10593] bridge_slave_0: entered promiscuous mode [ 801.595799][T10593] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.630255][T10593] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.679563][T10593] bridge_slave_1: entered allmulticast mode [ 801.763697][ T8856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 801.792582][T10593] bridge_slave_1: entered promiscuous mode [ 801.792602][ T8856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 801.807093][ T8856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 801.838946][ T8856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 801.868134][ T8856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 802.449670][T10674] loop5: detected capacity change from 0 to 64 [ 802.672871][T10674] minix: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙1844674407370955161501777777777777777777777˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 802.831090][ T53] bridge_slave_1: left allmulticast mode [ 802.831158][ T53] bridge_slave_1: left promiscuous mode [ 802.831906][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.857729][ T53] bridge_slave_0: left allmulticast mode [ 802.857825][ T53] bridge_slave_0: left promiscuous mode [ 802.866693][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.911799][ T5790] Bluetooth: hci2: command tx timeout [ 803.954107][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.004335][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.027426][ T53] bond0 (unregistering): Released all slaves [ 804.073757][T10593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.321101][T10593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.111002][T10593] team0: Port device team_slave_0 added [ 805.171717][T10593] team0: Port device team_slave_1 added [ 805.772562][ T53] hsr_slave_0: left promiscuous mode [ 805.808043][ T53] hsr_slave_1: left promiscuous mode [ 805.829420][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.883526][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.898980][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.921555][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.926358][T10710] loop8: detected capacity change from 0 to 4096 [ 805.987938][ T53] veth1_macvtap: left promiscuous mode [ 806.001620][ T5790] Bluetooth: hci2: command tx timeout [ 806.026574][ T53] veth0_macvtap: left promiscuous mode [ 806.061784][ T53] veth1_vlan: left promiscuous mode [ 806.067317][ T53] veth0_vlan: left promiscuous mode [ 806.353261][T10710] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 807.193181][T10719] loop8: detected capacity change from 0 to 1024 [ 807.414294][ T53] team0 (unregistering): Port device team_slave_1 removed [ 807.490684][ T53] team0 (unregistering): Port device team_slave_0 removed [ 807.668548][ T1070] hfsplus: b-tree write err: -5, ino 3 [ 808.013787][T10593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.058730][T10725] loop8: detected capacity change from 0 to 2048 [ 808.064659][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.110306][ T5790] Bluetooth: hci2: command tx timeout [ 808.186821][T10593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.209017][T10725] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.232315][T10593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.265771][T10593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.333115][T10593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.502590][T10725] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.917: bg 0: block 234: padding at end of block bitmap is not set [ 808.560108][T10725] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 174 with error 28 [ 808.652359][T10725] EXT4-fs (loop8): This should not happen!! Data will be lost [ 808.652359][T10725] [ 808.689214][T10725] EXT4-fs (loop8): Total free blocks count 0 [ 808.697100][T10725] EXT4-fs (loop8): Free/Dirty block details [ 808.724966][T10725] EXT4-fs (loop8): free_blocks=0 [ 808.732306][T10725] EXT4-fs (loop8): dirty_blocks=176 [ 808.782061][T10725] EXT4-fs (loop8): Block reservation details [ 808.801818][T10725] EXT4-fs (loop8): i_reserved_data_blocks=11 [ 808.887481][T10593] hsr_slave_0: entered promiscuous mode [ 808.919751][T10593] hsr_slave_1: entered promiscuous mode [ 808.958659][T10593] debugfs: 'hsr0' already exists in 'hsr' [ 808.965009][T10593] Cannot create hsr debugfs directory [ 809.078357][ T9976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.134664][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.919'. [ 809.184749][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.919'. [ 809.225086][T10738] netlink: 104 bytes leftover after parsing attributes in process `syz.5.919'. [ 809.241619][T10738] netlink: 104 bytes leftover after parsing attributes in process `syz.5.919'. [ 809.589907][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.676973][T10569] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 809.760699][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.027184][T10569] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 810.248243][ T5790] Bluetooth: hci2: command tx timeout [ 810.520756][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.820541][T10569] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 810.988347][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.127885][T10569] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 811.195327][T10667] chnl_net:caif_netlink_parms(): no params data found [ 812.559510][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.759624][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.109941][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.177445][T10667] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.201820][T10667] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.209472][T10667] bridge_slave_0: entered allmulticast mode [ 813.247805][T10667] bridge_slave_0: entered promiscuous mode [ 813.407948][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.453265][T10667] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.476345][T10667] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.500229][T10667] bridge_slave_1: entered allmulticast mode [ 813.528391][T10667] bridge_slave_1: entered promiscuous mode [ 813.946527][T10667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.017465][T10667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.125702][T10593] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 814.377477][T10593] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 814.439330][T10593] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 814.552404][T10667] team0: Port device team_slave_0 added [ 814.590750][T10667] team0: Port device team_slave_1 added [ 814.600317][T10593] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 814.812582][ T53] bridge_slave_1: left allmulticast mode [ 814.818433][ T53] bridge_slave_1: left promiscuous mode [ 814.852447][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.910115][ T53] bridge_slave_0: left allmulticast mode [ 814.921738][ T53] bridge_slave_0: left promiscuous mode [ 814.928212][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.968792][ T53] bridge_slave_1: left allmulticast mode [ 814.985426][ T53] bridge_slave_1: left promiscuous mode [ 815.018699][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.039827][ T53] bridge_slave_0: left allmulticast mode [ 815.046356][ T53] bridge_slave_0: left promiscuous mode [ 815.092506][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.033090][T10800] fuse: Bad value for 'fd' [ 816.178886][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.226935][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.270959][ T53] bond0 (unregistering): Released all slaves [ 816.512476][T10807] netlink: 12 bytes leftover after parsing attributes in process `syz.5.937'. [ 816.612673][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.630423][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.651825][ T53] bond0 (unregistering): Released all slaves [ 816.700050][T10667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 816.709709][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.753187][T10667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.835470][T10667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.871772][T10667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.900231][T10667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.077002][T10569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.513956][T10667] hsr_slave_0: entered promiscuous mode [ 817.536309][T10667] hsr_slave_1: entered promiscuous mode [ 817.557328][T10667] debugfs: 'hsr0' already exists in 'hsr' [ 817.571727][T10667] Cannot create hsr debugfs directory [ 817.640404][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.939'. [ 817.693895][T10569] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.068357][T10815] loop8: detected capacity change from 0 to 1024 [ 818.334866][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.342580][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.353928][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.360442][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.510549][ T1070] hfsplus: b-tree write err: -5, ino 3 [ 818.530744][ T53] hsr_slave_0: left promiscuous mode [ 818.552055][ T53] hsr_slave_1: left promiscuous mode [ 818.573007][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.585004][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.619793][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.639890][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.648518][T10820] fuse: Bad value for 'fd' [ 818.684157][ T53] hsr_slave_0: left promiscuous mode [ 818.717072][ T53] hsr_slave_1: left promiscuous mode [ 818.733011][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.740553][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 818.764687][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.801534][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.850068][ T53] veth1_macvtap: left promiscuous mode [ 818.880564][ T53] veth0_macvtap: left promiscuous mode [ 818.895411][ T53] veth1_vlan: left promiscuous mode [ 818.918333][ T53] veth0_vlan: left promiscuous mode [ 818.929343][ T53] veth1_macvtap: left promiscuous mode [ 818.942793][ T53] veth0_macvtap: left promiscuous mode [ 818.948616][ T53] veth1_vlan: left promiscuous mode [ 818.956555][ T53] veth0_vlan: left promiscuous mode [ 819.159412][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.8.946'. [ 820.131209][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.5.949'. [ 820.142565][ T53] team0 (unregistering): Port device team_slave_1 removed [ 820.185767][ T53] team0 (unregistering): Port device team_slave_0 removed [ 820.887850][ T53] team0 (unregistering): Port device team_slave_1 removed [ 820.913900][ T53] team0 (unregistering): Port device team_slave_0 removed [ 820.996624][T10839] fuse: Bad value for 'fd' [ 821.214820][T10841] fuse: Bad value for 'fd' [ 821.269530][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.277220][ T7214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.317097][T10593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.609603][T10593] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.658176][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.665825][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.667628][T10849] loop8: detected capacity change from 0 to 4096 [ 822.802180][T10852] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 822.837133][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.844697][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.874102][T10849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.957'. [ 823.510847][T10667] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 823.560223][T10667] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 823.600747][T10858] loop8: detected capacity change from 0 to 1024 [ 823.645133][T10667] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 823.714597][T10667] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 823.996670][ T7214] hfsplus: b-tree write err: -5, ino 3 [ 824.042157][T10862] netlink: 72 bytes leftover after parsing attributes in process `syz.5.960'. [ 824.051217][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.5.960'. [ 824.124286][T10862] netlink: 40 bytes leftover after parsing attributes in process `syz.5.960'. [ 824.321026][T10569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.410312][T10865] fuse: Bad value for 'fd' [ 824.728699][T10870] netlink: 12 bytes leftover after parsing attributes in process `syz.5.962'. [ 825.253340][T10667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 825.495076][T10667] 8021q: adding VLAN 0 to HW filter on device team0 [ 825.594445][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 825.601960][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 825.665764][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.673276][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.861796][T10784] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 826.034899][T10784] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 826.059601][T10784] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 826.076311][T10784] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 826.086823][T10784] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 826.097159][T10593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.101190][T10784] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 826.124166][T10784] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 826.161659][T10784] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 826.179660][T10784] usb 9-1: Product: syz [ 826.192113][T10784] usb 9-1: Manufacturer: syz [ 826.234229][T10784] cdc_wdm 9-1:1.0: skipping garbage [ 826.239632][T10784] cdc_wdm 9-1:1.0: skipping garbage [ 826.288274][T10784] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 826.326905][T10784] cdc_wdm 9-1:1.0: Unknown control protocol [ 826.424706][T10887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.966'. [ 826.508229][ T7335] usb 9-1: USB disconnect, device number 6 [ 826.646783][T10569] veth0_vlan: entered promiscuous mode [ 826.969049][T10569] veth1_vlan: entered promiscuous mode [ 827.261921][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 827.473598][ T9] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 827.537393][ T9] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 827.543855][T10569] veth0_macvtap: entered promiscuous mode [ 827.585274][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 827.642479][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 827.674980][T10569] veth1_macvtap: entered promiscuous mode [ 827.712322][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 827.778514][ T9] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 827.858110][ T9] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 827.866821][ T9] usb 9-1: Product: syz [ 827.871171][ T9] usb 9-1: Manufacturer: syz [ 827.937288][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 827.952000][ T9] cdc_wdm 9-1:1.0: skipping garbage [ 827.974534][ T9] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 827.980628][ T9] cdc_wdm 9-1:1.0: Unknown control protocol [ 828.059720][T10569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.136502][T10569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.162143][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.244267][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.311577][ T188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.324982][T10881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.365232][T10881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.426183][ T188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.437643][ T188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.506170][ T188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.668211][T10667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.013559][T10593] veth0_vlan: entered promiscuous mode [ 829.109858][T10593] veth1_vlan: entered promiscuous mode [ 829.514121][ T5837] usb 9-1: USB disconnect, device number 7 [ 829.555294][T10593] veth0_macvtap: entered promiscuous mode [ 829.622601][T10593] veth1_macvtap: entered promiscuous mode [ 829.882300][T10912] fuse: Bad value for 'fd' [ 829.890435][T10593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.005751][T10593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 830.192256][ T53] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.214689][ T53] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.312000][ T53] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.326216][ T1070] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 830.589208][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.8.971'. [ 830.686914][T10919] vlan2: entered promiscuous mode [ 830.692859][T10919] ip6gretap0: entered promiscuous mode [ 831.267483][T10667] veth0_vlan: entered promiscuous mode [ 831.410949][T10667] veth1_vlan: entered promiscuous mode [ 831.818278][T10667] veth0_macvtap: entered promiscuous mode [ 832.040681][T10667] veth1_macvtap: entered promiscuous mode [ 832.336202][T10667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.428969][T10667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.750834][ T77] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.761810][ T77] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.827780][ T77] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.851732][ T77] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 833.392149][T10946] loop8: detected capacity change from 0 to 4096 [ 833.540638][T10960] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 833.745151][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.8.974'. [ 834.583513][ T7472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.629241][ T7472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.726496][T10974] loop8: detected capacity change from 0 to 1024 [ 834.920457][ T7472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.969343][ T7472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.264643][ T1079] hfsplus: b-tree write err: -5, ino 3 [ 836.830639][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.878350][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.176806][ T7214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.210741][ T7214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.104162][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.160248][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.487083][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 840.554590][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 840.871756][ T8856] Bluetooth: hci1: command 0x0406 tx timeout [ 841.102165][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.983'. [ 841.437008][T11038] loop4: detected capacity change from 0 to 1024 [ 842.186405][ T77] hfsplus: b-tree write err: -5, ino 3 [ 842.294439][T11045] syzkaller0: entered promiscuous mode [ 844.890707][T11067] loop9: detected capacity change from 0 to 1024 [ 845.786781][ T7472] hfsplus: b-tree write err: -5, ino 3 [ 846.801107][T11083] loop9: detected capacity change from 0 to 1024 [ 847.519342][T11088] syzkaller0: entered promiscuous mode [ 847.560715][ T7472] hfsplus: b-tree write err: -5, ino 3 [ 848.657075][T11099] loop7: detected capacity change from 0 to 64 [ 848.704739][T11098] binder: 11096:11098 ioctl c0306201 0 returned -14 [ 848.717455][T11094] loop9: detected capacity change from 0 to 4096 [ 849.061688][T11101] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 850.111623][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 850.382657][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 850.454092][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 850.512130][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 850.576610][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 850.697239][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 850.821520][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 850.874289][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 850.964439][ T9] usb 8-1: Product: syz [ 850.992279][ T9] usb 8-1: Manufacturer: syz [ 851.075793][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 851.091057][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 851.132946][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 851.175266][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 851.298019][ T9] usb 8-1: USB disconnect, device number 2 [ 851.971580][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 852.204930][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 852.237212][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 852.309279][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 852.360464][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 852.432023][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 852.580096][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 852.602997][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 852.658831][ T9] usb 8-1: Product: syz [ 852.704227][ T9] usb 8-1: Manufacturer: syz [ 852.817063][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 852.832271][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 852.879821][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 852.941072][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 853.054210][ T7335] usb 8-1: USB disconnect, device number 3 [ 853.173003][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 853.201737][T11130] loop4: detected capacity change from 0 to 1024 [ 853.391938][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 853.485095][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 853.589447][ T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 853.641156][ T9] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 853.705493][ T9] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 853.771844][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.823089][ T9] usb 10-1: config 0 descriptor?? [ 854.004523][ T7214] hfsplus: b-tree write err: -5, ino 3 [ 854.121330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 854.285945][ T9] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 854.330612][ T9] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 854.840564][T11140] syzkaller0: entered promiscuous mode [ 855.026868][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0001/input/input8 [ 855.240731][ T9] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 855.403852][ T9] usb 10-1: USB disconnect, device number 2 [ 856.390237][T11149] fido_id[11149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 856.513927][T11157] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1013'. [ 858.003040][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 858.667633][T11171] loop9: detected capacity change from 0 to 4096 [ 858.884400][T11181] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 859.783893][T11187] loop7: detected capacity change from 0 to 1024 [ 860.705870][ T188] hfsplus: bad catalog file entry [ 860.749104][ T188] hfsplus: b-tree write err: -5, ino 3 [ 861.887850][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 862.083931][ T9] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 862.131693][ T9] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 862.175677][ T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 862.215023][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 862.260564][ T9] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 862.387005][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 862.429332][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 862.483313][ T9] usb 8-1: Product: syz [ 862.523800][ T9] usb 8-1: Manufacturer: syz [ 862.618519][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 862.647193][ T9] cdc_wdm 8-1:1.0: skipping garbage [ 862.704945][ T9] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 862.754098][ T9] cdc_wdm 8-1:1.0: Unknown control protocol [ 862.891071][ T9] usb 8-1: USB disconnect, device number 4 [ 863.488489][T11202] syzkaller0: entered promiscuous mode [ 863.581678][ T5837] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 863.842059][ T5837] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 863.850898][ T5837] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 863.894468][ T5837] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 863.964953][ T5837] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 864.003234][ T5837] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 864.094851][ T5837] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 864.137715][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 864.172116][ T5837] usb 8-1: Product: syz [ 864.176996][ T5837] usb 8-1: Manufacturer: syz [ 864.278864][ T5837] cdc_wdm 8-1:1.0: skipping garbage [ 864.355736][ T5837] cdc_wdm 8-1:1.0: skipping garbage [ 864.422780][ T5837] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 864.428883][ T5837] cdc_wdm 8-1:1.0: Unknown control protocol [ 864.466048][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.510549][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.609195][T11192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 864.702827][T11192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 864.753873][ T5837] usb 8-1: USB disconnect, device number 5 [ 866.836572][T11224] loop9: detected capacity change from 0 to 4096 [ 867.580922][T11241] loop8: detected capacity change from 0 to 512 [ 867.705213][T11241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 867.827430][T11241] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 868.798288][ T9976] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.104552][T11253] syzkaller0: entered promiscuous mode [ 869.433166][ T5837] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 869.667332][ T5837] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 869.707051][ T5837] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 869.795659][ T5837] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 869.828966][ T5837] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.907433][ T5837] usb 10-1: config 0 descriptor?? [ 870.046794][ T5837] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 872.379803][ T9] usb 10-1: USB disconnect, device number 3 [ 872.662017][ T8856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 872.675307][ T8856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 872.701730][ T8856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 872.741984][ T8856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 872.779821][ T8856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 873.310328][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1046'. [ 873.478531][T11294] vlan2: entered promiscuous mode [ 873.506052][T11294] ip6gretap0: entered promiscuous mode [ 874.183541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 874.885605][ T5790] Bluetooth: hci0: command tx timeout [ 875.211734][T11306] 9pnet_fd: Insufficient options for proto=fd [ 875.266207][T11301] loop7: detected capacity change from 0 to 4096 [ 875.506975][T11307] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 875.746717][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1048'. [ 876.633119][T11315] syzkaller0: entered promiscuous mode [ 876.714834][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 876.798716][T11288] chnl_net:caif_netlink_parms(): no params data found [ 876.960613][ T8856] Bluetooth: hci0: command tx timeout [ 878.769802][T11337] Bluetooth: MGMT ver 1.23 [ 878.779145][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.830015][T11337] Bluetooth: hci0: unsupported parameter 255 [ 878.877673][T11337] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 879.031885][ T8856] Bluetooth: hci0: command tx timeout [ 879.141028][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.489149][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.744142][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.773883][T11288] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.783887][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.790469][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.835504][T11288] bridge_slave_0: entered allmulticast mode [ 879.847661][T11288] bridge_slave_0: entered promiscuous mode [ 879.919891][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1058'. [ 879.974509][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.047874][T11288] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.090074][T11288] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.114610][T11288] bridge_slave_1: entered allmulticast mode [ 880.147770][T11288] bridge_slave_1: entered promiscuous mode [ 880.208936][T11352] vlan2: entered promiscuous mode [ 880.234562][T11352] ip6gretap0: entered promiscuous mode [ 880.557169][T11288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.628933][T11288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.111841][T11288] team0: Port device team_slave_0 added [ 881.121999][ T8856] Bluetooth: hci0: command tx timeout [ 881.229674][T11288] team0: Port device team_slave_1 added [ 881.665217][T11288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.700896][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.771720][T11366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1060'. [ 881.821135][T11288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.895136][T11288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.919521][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.008339][T11288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.085739][ T53] bridge_slave_1: left allmulticast mode [ 882.101883][ T53] bridge_slave_1: left promiscuous mode [ 882.121092][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.180540][ T53] bridge_slave_0: left allmulticast mode [ 882.189623][ T53] bridge_slave_0: left promiscuous mode [ 882.214332][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.450605][T11382] Bluetooth: hci0: unsupported parameter 255 [ 883.465158][T11382] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 883.516824][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 883.580844][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 883.638247][ T53] bond0 (unregistering): Released all slaves [ 884.212874][T11288] hsr_slave_0: entered promiscuous mode [ 884.269781][T11288] hsr_slave_1: entered promiscuous mode [ 884.286913][T11393] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 884.303480][T11288] debugfs: 'hsr0' already exists in 'hsr' [ 884.309363][T11288] Cannot create hsr debugfs directory [ 884.986761][ T53] hsr_slave_0: left promiscuous mode [ 885.003226][ T53] hsr_slave_1: left promiscuous mode [ 885.011092][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.043895][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.094047][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.111870][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.173960][ T53] veth1_macvtap: left promiscuous mode [ 885.179645][ T53] veth0_macvtap: left promiscuous mode [ 885.211665][ T53] veth1_vlan: left promiscuous mode [ 885.217193][ T53] veth0_vlan: left promiscuous mode [ 886.170997][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1072'. [ 886.611449][T11410] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 886.684521][T11412] Bluetooth: hci0: unsupported parameter 255 [ 886.690713][T11412] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 887.143220][T11417] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1079'. [ 887.352396][ T53] team0 (unregistering): Port device team_slave_1 removed [ 887.427903][T11419] loop8: detected capacity change from 0 to 1024 [ 887.428159][ T53] team0 (unregistering): Port device team_slave_0 removed [ 888.708388][T11428] tipc: Started in network mode [ 888.776071][T11428] tipc: Node identity 100007, cluster identity 4711 [ 888.786254][T11428] tipc: Node number set to 1048583 [ 890.977325][T11443] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 891.080172][T11288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 891.196407][T11288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 891.327222][T11288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 891.366975][T11447] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 891.479129][T11288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 892.519142][ T5837] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 892.749936][ T5837] usb 10-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 892.802539][ T5837] usb 10-1: config 0 interface 0 has no altsetting 0 [ 892.850747][ T5837] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 892.893430][ T5837] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 892.925869][ T5837] usb 10-1: Product: syz [ 892.934802][ T5837] usb 10-1: Manufacturer: syz [ 892.939681][ T5837] usb 10-1: SerialNumber: syz [ 892.997582][ T5837] usb 10-1: config 0 descriptor?? [ 893.057602][T11455] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 893.216838][ T5837] usb 10-1: selecting invalid altsetting 0 [ 893.447180][T11288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.689537][T11288] 8021q: adding VLAN 0 to HW filter on device team0 [ 893.800502][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.807897][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 893.977744][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.985298][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.007637][ T5837] usb 10-1: USB disconnect, device number 4 [ 894.678556][T10460] udevd[10460]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 895.010326][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1098'. [ 895.066544][T11479] 8021q: VLANs not supported on ip6gre0 [ 895.959907][T11483] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 897.098980][T11288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.970245][T11288] veth0_vlan: entered promiscuous mode [ 898.129471][T11288] veth1_vlan: entered promiscuous mode [ 898.854352][T11288] veth0_macvtap: entered promiscuous mode [ 899.006876][T11288] veth1_macvtap: entered promiscuous mode [ 899.411961][T11288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.422981][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1111'. [ 899.593237][T11288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.848885][T11534] vlan2: entered promiscuous mode [ 900.444528][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.504429][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.577347][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.620488][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.522653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 902.732180][T11556] loop9: detected capacity change from 0 to 4096 [ 902.948926][T11569] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 904.169870][T11580] sctp: [Deprecated]: syz.5.1120 (pid 11580) Use of int in max_burst socket option. [ 904.169870][T11580] Use struct sctp_assoc_value instead [ 904.411858][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 904.431132][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 904.452419][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 904.504001][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 904.515522][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 904.803279][T11588] syzkaller0: entered promiscuous mode [ 905.252771][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1123'. [ 905.503418][T11594] vlan2: entered promiscuous mode [ 905.562012][T11594] syz_tun: entered promiscuous mode [ 906.581074][T11606] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 906.644868][ T5790] Bluetooth: hci3: command tx timeout [ 907.975986][T11582] chnl_net:caif_netlink_parms(): no params data found [ 908.226229][ T53] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.528000][ T53] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.711879][ T8856] Bluetooth: hci3: command tx timeout [ 908.831094][ T53] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.139510][ T53] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 909.230081][T11641] loop9: detected capacity change from 0 to 4096 [ 909.503411][T11649] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 909.878681][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1129'. [ 910.286640][ T53] bridge_slave_1: left allmulticast mode [ 910.318649][ T53] bridge_slave_1: left promiscuous mode [ 910.349963][T11655] loop8: detected capacity change from 0 to 2048 [ 910.362521][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.477875][ T53] bridge_slave_0: left allmulticast mode [ 910.487245][ T53] bridge_slave_0: left promiscuous mode [ 910.509584][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.584195][T11655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 910.791651][ T8856] Bluetooth: hci3: command tx timeout [ 911.025792][T11655] UDF-fs: warning (device loop8): udf_truncate_tail_extent: Too long extent after EOF in inode 1415: i_size: 67493888 lbcount: 67497984 extent 129+112640 [ 911.768407][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1134'. [ 912.230768][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.303049][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.342815][T11669] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 912.447474][ T53] bond0 (unregistering): Released all slaves [ 912.712238][T11665] vlan2: entered promiscuous mode [ 912.833749][ T7472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.881540][ T8856] Bluetooth: hci3: command tx timeout [ 912.912626][ T7472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 913.011669][ T53] tipc: Left network mode [ 913.073070][T11582] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.110083][T11582] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.127861][T11582] bridge_slave_0: entered allmulticast mode [ 913.149695][T11582] bridge_slave_0: entered promiscuous mode [ 913.458033][T11582] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.517352][T11582] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.533345][T11582] bridge_slave_1: entered allmulticast mode [ 913.571451][T11582] bridge_slave_1: entered promiscuous mode [ 914.085660][T11582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.106277][ T7472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.153446][T11582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.163096][ T7472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.349188][T11690] loop8: detected capacity change from 0 to 4096 [ 914.374005][ T53] hsr_slave_0: left promiscuous mode [ 914.451930][ T53] hsr_slave_1: left promiscuous mode [ 914.470055][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.481118][T11693] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 914.512483][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.556590][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.576610][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.640416][ T53] veth1_macvtap: left promiscuous mode [ 914.659452][ T5837] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 914.683152][ T53] veth0_macvtap: left promiscuous mode [ 914.698815][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1141'. [ 914.707964][ T53] veth1_vlan: left promiscuous mode [ 914.708189][ T53] veth0_vlan: left promiscuous mode [ 914.749527][ T5837] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 914.931458][ T10] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 915.137937][ T10] usb 10-1: config 0 has no interfaces? [ 915.165449][ T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 915.201489][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 915.230830][ T10] usb 10-1: SerialNumber: syz [ 915.264061][ T10] usb 10-1: config 0 descriptor?? [ 915.675047][T11702] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 916.061089][ T53] team0 (unregistering): Port device team_slave_1 removed [ 916.152691][ T53] team0 (unregistering): Port device team_slave_0 removed [ 916.244871][T11705] loop8: detected capacity change from 0 to 2048 [ 916.356853][T11705] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 916.556950][T11705] UDF-fs: error (device loop8): udf_verify_fi: directory (ino 1408) has entry at pos 0 with incorrect tag 10a [ 916.618428][T11705] UDF-fs: error (device loop8): udf_rename: failed to find renamed entry again in directory (ino 1408) [ 917.054719][T11582] team0: Port device team_slave_0 added [ 917.108571][T11582] team0: Port device team_slave_1 added [ 917.426066][T11582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.457674][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1146'. [ 917.471633][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.555608][T11582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.575941][T11582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 917.585658][T11582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.625837][T11582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.675681][ T5790] Bluetooth: hci6: command 0x0406 tx timeout [ 917.747111][T11708] vlan2: entered promiscuous mode [ 917.795377][ T5837] usb 10-1: USB disconnect, device number 5 [ 918.475354][T11582] hsr_slave_0: entered promiscuous mode [ 918.533992][T11582] hsr_slave_1: entered promiscuous mode [ 918.577779][T11582] debugfs: 'hsr0' already exists in 'hsr' [ 918.611521][T11582] Cannot create hsr debugfs directory [ 919.067872][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1153'. [ 921.316146][T11582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 921.419242][T11582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 921.486492][T11582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 921.556881][T11582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 922.610309][T11582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.747493][T11582] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.755866][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1160'. [ 922.836305][T11771] vlan2: entered promiscuous mode [ 922.965358][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.973034][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 923.038364][T11775] binder: BINDER_SET_CONTEXT_MGR already set [ 923.074055][T11775] binder: 11773:11775 ioctl 4018620d 80004a80 returned -16 [ 923.141906][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 923.149349][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 923.728256][T11582] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 923.761671][T11780] loop8: detected capacity change from 0 to 128 [ 923.895247][T11780] EXT4-fs (loop8): Test dummy encryption mode enabled [ 923.949742][T11780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042] [ 923.962504][T11780] System zones: 1-3, 19-19, 35-36 [ 923.974945][T11780] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 924.027007][T11780] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 926.763980][T11792] fscrypt (loop8): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 927.456810][ T9976] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 928.001121][T11582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 928.102336][T11811] warning: `syz.8.1168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 928.750236][T11582] veth0_vlan: entered promiscuous mode [ 928.938122][T11582] veth1_vlan: entered promiscuous mode [ 928.957249][ T8856] Bluetooth: hci4: connection err: -111 [ 929.196658][ T5837] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 929.436925][ T5837] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 929.485787][ T5837] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 929.520903][ T5837] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 929.533183][T11582] veth0_macvtap: entered promiscuous mode [ 929.548175][ T5837] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 929.621701][ T5837] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 929.638201][T11582] veth1_macvtap: entered promiscuous mode [ 929.722419][ T5837] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 929.750407][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 929.761593][ T5837] usb 9-1: Product: syz [ 929.766213][ T5837] usb 9-1: Manufacturer: syz [ 929.826779][ T5837] cdc_wdm 9-1:1.0: skipping garbage [ 929.838507][ T5837] cdc_wdm 9-1:1.0: skipping garbage [ 929.865511][ T5837] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 929.872008][ T5837] cdc_wdm 9-1:1.0: Unknown control protocol [ 930.032067][T11582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.077803][ T5837] usb 9-1: USB disconnect, device number 8 [ 930.146906][T11582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.282527][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.353735][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.452264][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.520089][T11793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.533059][T11835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1173'. [ 930.765943][ T5837] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 930.970426][ T5837] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 931.036674][ T5837] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 931.052484][ T5837] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 931.063502][ T5837] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 931.076251][ T5837] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 931.095529][ T5837] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 931.120468][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 931.142391][ T5837] usb 9-1: Product: syz [ 931.146760][ T5837] usb 9-1: Manufacturer: syz [ 931.213401][ T5837] cdc_wdm 9-1:1.0: skipping garbage [ 931.224257][ T5837] cdc_wdm 9-1:1.0: skipping garbage [ 931.233620][ T5837] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 931.239711][ T5837] cdc_wdm 9-1:1.0: Unknown control protocol [ 931.430447][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 931.492727][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 931.550725][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.556636][ C1] cdc_wdm 9-1:1.0: Cannot schedule work [ 931.563503][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.569351][ C1] cdc_wdm 9-1:1.0: Cannot schedule work [ 931.576278][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.582127][ C1] cdc_wdm 9-1:1.0: Cannot schedule work [ 931.588691][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.598807][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.606265][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.612408][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.618533][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.624328][ C1] cdc_wdm 9-1:1.0: Cannot schedule work [ 931.633185][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.639049][ C1] cdc_wdm 9-1:1.0: Cannot schedule work [ 931.647435][ C1] cdc_wdm 9-1:1.0: Stall on int endpoint [ 931.653306][ C1] cdc_wdm 9-1:1.0: Cannot schedule work [ 931.659275][ C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 931.711684][ T9] usb 9-1: USB disconnect, device number 9 [ 932.923010][T11861] syzkaller0: entered promiscuous mode [ 934.092566][T11879] loop0: detected capacity change from 0 to 256 [ 934.142170][T11879] vfat: Unknown parameter 'cBepage' [ 934.405890][T11879] loop0: detected capacity change from 0 to 2048 [ 934.591084][T11879] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 934.719623][T11879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 939.405972][T11934] syzkaller0: entered promiscuous mode [ 940.370435][ T188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.461587][ T188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.510985][T11942] loop9: detected capacity change from 0 to 64 [ 940.715758][ T7214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.766452][ T7214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.996908][T11942] minix: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙1844674407370955161501777777777777777777777˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 941.217222][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.226255][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 945.634001][T11986] syzkaller0: entered promiscuous mode [ 946.810514][T11997] loop1: detected capacity change from 0 to 64 [ 946.979817][T11997] minix: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙1844674407370955161501777777777777777777777˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 950.573240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 950.997460][T12035] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 951.042739][T12035] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 951.070509][T12035] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 951.103939][T12035] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 951.131182][T12035] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 952.077396][ T5837] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 952.277584][ T5837] usb 9-1: Using ep0 maxpacket: 8 [ 952.349416][ T5837] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.447928][ T5837] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 952.564718][ T5837] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 952.651416][ T5837] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.745679][ T5837] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 952.836433][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.864163][T12034] chnl_net:caif_netlink_parms(): no params data found [ 953.196105][ T8856] Bluetooth: hci2: command tx timeout [ 953.223013][ T5837] usb 9-1: usb_control_msg returned -71 [ 953.321960][ T5837] usbtmc 9-1:16.0: can't read capabilities [ 953.510568][ T5837] usb 9-1: USB disconnect, device number 10 [ 955.275060][ T8856] Bluetooth: hci2: command tx timeout [ 955.337349][T12034] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.402473][T12034] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.410247][T12034] bridge_slave_0: entered allmulticast mode [ 955.484613][T12034] bridge_slave_0: entered promiscuous mode [ 955.631612][T12034] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.661641][T12034] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.669419][T12034] bridge_slave_1: entered allmulticast mode [ 955.764616][T12034] bridge_slave_1: entered promiscuous mode [ 956.296308][T12034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.459790][T12034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.894827][T12034] team0: Port device team_slave_0 added [ 956.988562][T12034] team0: Port device team_slave_1 added [ 957.351590][ T8856] Bluetooth: hci2: command tx timeout [ 957.410034][T12034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.421641][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.467477][T12034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.563863][T12034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.570909][T12034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.751635][T12034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.692268][T12034] hsr_slave_0: entered promiscuous mode [ 958.752735][T12034] hsr_slave_1: entered promiscuous mode [ 958.830441][T12034] debugfs: 'hsr0' already exists in 'hsr' [ 958.903766][T12034] Cannot create hsr debugfs directory [ 959.393770][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.444610][ T8856] Bluetooth: hci2: command tx timeout [ 960.006515][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.162521][T12124] loop1: detected capacity change from 0 to 64 [ 960.312558][T12124] minix: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙1844674407370955161501777777777777777777777˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 960.484708][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.013671][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 962.051944][ T5837] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 962.272194][ T5837] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 962.331565][ T5837] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 962.354494][ T5837] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.424991][ T5837] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 964.062433][ T5837] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 964.081928][ T57] bridge_slave_1: left allmulticast mode [ 964.111928][ T5837] stv0680 9-1:4.0: STV(e): camera ping failed!! [ 964.148105][ T57] bridge_slave_1: left promiscuous mode [ 964.150246][ T5837] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -32 [ 964.201137][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.252460][ T5837] stv0680 9-1:4.0: last error: 0, command = 0x0 [ 964.334502][ T57] bridge_slave_0: left allmulticast mode [ 964.363085][ T57] bridge_slave_0: left promiscuous mode [ 964.378462][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.674138][ T9] usb 9-1: USB disconnect, device number 11 [ 967.688466][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.793973][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.846850][ T57] bond0 (unregistering): Released all slaves [ 969.756444][ T57] hsr_slave_0: left promiscuous mode [ 969.783075][ T57] hsr_slave_1: left promiscuous mode [ 969.815370][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 969.861507][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 969.900461][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 969.952364][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.075062][ T57] veth1_macvtap: left promiscuous mode [ 970.080766][ T57] veth0_macvtap: left promiscuous mode [ 970.140744][ T57] veth1_vlan: left promiscuous mode [ 970.159871][ T57] veth0_vlan: left promiscuous mode [ 970.537599][ T8856] Bluetooth: hci4: connection err: -111 [ 973.017639][ T57] team0 (unregistering): Port device team_slave_1 removed [ 973.206827][ T57] team0 (unregistering): Port device team_slave_0 removed [ 973.637326][T12247] fuse: Unknown parameter '0xffffffffffffffff' [ 974.013196][ T8856] Bluetooth: hci4: connection err: -111 [ 974.616115][T12034] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 974.789610][T12034] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 974.993814][T12034] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 975.094446][T12034] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 976.157972][T12034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.358085][T12034] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.528601][ T188] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.536242][ T188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.705823][ T188] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.713390][ T188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.083016][T12286] fuse: Unknown parameter '0x0000000000000003' [ 979.156335][T12302] syzkaller0: entered promiscuous mode [ 979.800970][T12034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.340971][T12034] veth0_vlan: entered promiscuous mode [ 980.730986][T12034] veth1_vlan: entered promiscuous mode [ 981.107577][T12034] veth0_macvtap: entered promiscuous mode [ 981.342692][T12034] veth1_macvtap: entered promiscuous mode [ 981.674606][T12034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.829035][T12034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.980012][ T34] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.011976][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.020974][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.093092][T12337] fuse: Unknown parameter '0x0000000000000003' [ 982.137321][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.660084][T12366] loop1: detected capacity change from 0 to 4096 [ 984.836947][T12378] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 985.062845][T12382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1290'. [ 986.378447][T12402] fuse: Unknown parameter '0x0000000000000003' [ 987.761606][ T38] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 988.025071][ T38] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 988.079767][ T38] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 988.113948][ T38] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 988.164698][ T38] usb 9-1: Product: syz [ 988.169061][ T38] usb 9-1: Manufacturer: syz [ 988.207675][ T38] usb 9-1: SerialNumber: syz [ 988.513284][ T38] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 988.648672][ T38] usb 9-1: USB disconnect, device number 12 [ 988.715711][ T38] usblp0: removed [ 989.264534][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.331642][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.708693][ T188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.754802][ T188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.072180][T12455] loop3: detected capacity change from 0 to 4096 [ 992.121103][T12457] fuse: Unknown parameter '0x0000000000000003' [ 992.252709][T12462] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 992.527112][T12466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1306'. [ 996.466867][T12507] fuse: Unknown parameter 'fd0x0000000000000003' [ 997.987252][T12510] loop8: detected capacity change from 0 to 4096 [ 998.246997][T12518] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 998.565077][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1322'. [ 1002.650731][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.669503][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.824070][T12552] fuse: Unknown parameter 'fd0x0000000000000003' [ 1003.922811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1004.429954][T12566] 9pnet_fd: Insufficient options for proto=fd [ 1005.303134][T12574] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1336'. [ 1008.292460][T12593] 8021q: VLANs not supported on ip6gre0 [ 1009.007235][T12599] fuse: Unknown parameter 'fd0x0000000000000003' [ 1011.138175][T12035] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1011.154056][T12035] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1011.173236][T12035] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1011.185369][T12035] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1011.200682][T12035] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1013.271733][T12035] Bluetooth: hci0: command tx timeout [ 1013.378060][T12618] chnl_net:caif_netlink_parms(): no params data found [ 1015.361454][T12035] Bluetooth: hci0: command tx timeout [ 1015.842239][T12618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.871643][T12618] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.944803][T12618] bridge_slave_0: entered allmulticast mode [ 1016.021146][T12618] bridge_slave_0: entered promiscuous mode [ 1016.122637][T12618] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.171782][T12618] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.179584][T12618] bridge_slave_1: entered allmulticast mode [ 1016.269959][T12618] bridge_slave_1: entered promiscuous mode [ 1016.655089][T12618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.752798][T12618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.210662][T12618] team0: Port device team_slave_0 added [ 1017.407204][T12618] team0: Port device team_slave_1 added [ 1017.442593][T12035] Bluetooth: hci0: command tx timeout [ 1017.767466][T12618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.808651][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1017.941132][T12618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.134516][ T34] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.215420][T12618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.265348][T12618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.404904][T12618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.632823][ T34] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.017070][ T34] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.235389][ T34] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.389831][T12618] hsr_slave_0: entered promiscuous mode [ 1019.430294][T12618] hsr_slave_1: entered promiscuous mode [ 1019.447791][T12618] debugfs: 'hsr0' already exists in 'hsr' [ 1019.457059][T12618] Cannot create hsr debugfs directory [ 1019.511802][T12035] Bluetooth: hci0: command tx timeout [ 1020.464460][ T34] bridge_slave_1: left allmulticast mode [ 1020.487611][ T34] bridge_slave_1: left promiscuous mode [ 1020.502728][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.569171][ T34] bridge_slave_0: left allmulticast mode [ 1020.594116][ T34] bridge_slave_0: left promiscuous mode [ 1020.616116][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.783698][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.857973][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.935529][ T34] bond0 (unregistering): Released all slaves [ 1023.495218][ T34] hsr_slave_0: left promiscuous mode [ 1023.572245][ T34] hsr_slave_1: left promiscuous mode [ 1023.594323][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.625977][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.694467][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.731836][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.833270][ T34] veth1_macvtap: left promiscuous mode [ 1023.838969][ T34] veth0_macvtap: left promiscuous mode [ 1023.884982][ T34] veth1_vlan: left promiscuous mode [ 1023.931999][ T34] veth0_vlan: left promiscuous mode [ 1025.978044][ T34] team0 (unregistering): Port device team_slave_1 removed [ 1026.103505][ T34] team0 (unregistering): Port device team_slave_0 removed [ 1027.746285][T12618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1027.887159][T12618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1028.036892][T12618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1028.135669][T12618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1029.563546][T12618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.805436][T12618] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.915949][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.923470][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.061125][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.068631][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.313355][ T8856] Bluetooth: hci3: command 0x0406 tx timeout [ 1033.332270][T12618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.999179][T12618] veth0_vlan: entered promiscuous mode [ 1034.139321][T12618] veth1_vlan: entered promiscuous mode [ 1034.728081][T12618] veth0_macvtap: entered promiscuous mode [ 1034.904592][T12618] veth1_macvtap: entered promiscuous mode [ 1035.222715][T12618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1035.354079][T12618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1035.677378][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.732506][T11801] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.848052][T11801] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.950412][T11801] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.916461][T11801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.975331][T11801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.469148][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.509343][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.580114][T13027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1454'. [ 1061.727536][T13027] vlan2: entered promiscuous mode [ 1061.795404][T13027] ip6gretap0: entered promiscuous mode [ 1064.130742][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.147365][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1068.150563][ T29] audit: type=1326 audit(1774295461.174:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13076 comm="syz.1.1468" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70aef6c code=0x0 [ 1075.526113][T13151] fuse: Unknown parameter 'group_i00000000000000000000' [ 1077.834265][T13176] netlink: 'syz.1.1501': attribute type 1 has an invalid length. [ 1079.100896][T13188] fuse: Unknown parameter 'group_i00000000000000000000' [ 1081.792688][T13224] fuse: Unknown parameter 'group_i00000000000000000000' [ 1086.140067][T13264] bridge1: entered promiscuous mode [ 1086.203336][T13264] bridge1: entered allmulticast mode [ 1086.331837][T13264] team0: Port device bridge1 added [ 1086.372504][T13265] bridge0: port 3(team0) entered blocking state [ 1086.379151][T13265] bridge0: port 3(team0) entered disabled state [ 1086.441611][T13265] team0: entered allmulticast mode [ 1086.478083][T13265] team_slave_0: entered allmulticast mode [ 1086.506272][T13265] team_slave_1: entered allmulticast mode [ 1086.571882][T13265] team0: entered promiscuous mode [ 1086.602821][T13265] team_slave_0: entered promiscuous mode [ 1086.630685][T13265] team_slave_1: entered promiscuous mode [ 1086.712725][T13265] bridge0: port 3(team0) entered blocking state [ 1086.719494][T13265] bridge0: port 3(team0) entered forwarding state [ 1087.660438][T13273] overlayfs: missing 'workdir' [ 1089.245560][T13285] fuse: Unknown parameter 'group_id00000000000000000000' [ 1091.709719][T13307] overlayfs: failed to clone upperpath [ 1092.215255][T13322] fuse: Unknown parameter 'group_id00000000000000000000' [ 1092.949508][ T5837] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 1093.080460][ T5837] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1093.261723][ T38] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1093.514097][ T38] usb 3-1: config 0 has no interfaces? [ 1093.551448][ T38] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1093.603080][ T38] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1093.653610][ T38] usb 3-1: SerialNumber: syz [ 1093.742040][ T38] usb 3-1: config 0 descriptor?? [ 1094.037729][ T38] usb 3-1: USB disconnect, device number 2 [ 1094.236410][T13343] fido_id[13343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1101.322871][T13407] loop1: detected capacity change from 0 to 4096 [ 1101.569556][T13418] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1101.760800][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1569'. [ 1110.129503][T13505] overlayfs: failed to clone upperpath [ 1114.008381][ T29] audit: type=1326 audit(1774295507.014:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13550 comm="syz.8.1609" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f73f6c code=0x0 [ 1115.239543][T13560] syz.8.1613 (13560) used greatest stack depth: 2280 bytes left [ 1117.983838][ T38] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1118.196149][ T38] usb 3-1: config 0 has no interfaces? [ 1118.259637][ T38] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1118.320578][ T38] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1118.355465][ T38] usb 3-1: SerialNumber: syz [ 1118.389842][ T38] usb 3-1: config 0 descriptor?? [ 1118.659883][ T10] usb 3-1: USB disconnect, device number 3 [ 1118.861788][ T29] audit: type=1800 audit(1774295511.894:8): pid=13603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1623" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1121.898351][T13642] Bluetooth: MGMT ver 1.23 [ 1121.928312][T13642] Bluetooth: hci0: unsupported parameter 255 [ 1121.966026][T13642] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1124.097264][T13662] fuse: Bad value for 'fd' [ 1124.466037][T13670] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1642'. [ 1124.799165][T13674] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1643'. [ 1124.945142][T13683] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1643'. [ 1125.543411][T13682] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1125.546825][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.561347][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1125.614077][T13682] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1137.673294][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1685'. [ 1137.831642][ T8856] Bluetooth: hci0: command 0x0406 tx timeout [ 1155.332291][T14000] ===================================================== [ 1155.340010][T14000] BUG: KMSAN: uninit-value in erspan_build_header+0x167/0x2f0 [ 1155.347886][T14000] erspan_build_header+0x167/0x2f0 [ 1155.353256][T14000] erspan_xmit+0x12e8/0x1ed0 [ 1155.358023][T14000] dev_hard_start_xmit+0x24e/0xad0 [ 1155.363552][T14000] sch_direct_xmit+0x3b2/0xcf0 [ 1155.368586][T14000] __dev_queue_xmit+0x301d/0x5980 [ 1155.373840][T14000] __bpf_redirect+0x162e/0x1760 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1155.378904][T14000] bpf_clone_redirect+0x4a6/0x6c0 [ 1155.384181][T14000] ___bpf_prog_run+0x13e8/0xea90 [ 1155.389377][T14000] __bpf_prog_run512+0xc5/0x100 [ 1155.394573][T14000] bpf_test_run+0x493/0xdf0 [ 1155.399297][T14000] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1155.404988][T14000] bpf_prog_test_run+0x5bb/0x9f0 [ 1155.410089][T14000] __sys_bpf+0x925/0xee0 [ 1155.414606][T14000] __ia32_sys_bpf+0xa4/0xf0 [ 1155.419240][T14000] ia32_sys_call+0x33e7/0x4360 [ 1155.424316][T14000] __do_fast_syscall_32+0x17f/0x3f0 [ 1155.429800][T14000] do_fast_syscall_32+0x37/0x80 [ 1155.434902][T14000] do_SYSENTER_32+0x1f/0x30 [ 1155.439561][T14000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1155.446158][T14000] [ 1155.448544][T14000] Uninit was created at: [ 1155.453132][T14000] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 1155.459266][T14000] pskb_expand_head+0x2ef/0x1fb0 [ 1155.464495][T14000] erspan_xmit+0x9c3/0x1ed0 [ 1155.469170][T14000] dev_hard_start_xmit+0x24e/0xad0 [ 1155.474508][T14000] sch_direct_xmit+0x3b2/0xcf0 [ 1155.479456][T14000] __dev_queue_xmit+0x301d/0x5980 [ 1155.484700][T14000] __bpf_redirect+0x162e/0x1760 [ 1155.489706][T14000] bpf_clone_redirect+0x4a6/0x6c0 [ 1155.495055][T14000] ___bpf_prog_run+0x13e8/0xea90 [ 1155.500140][T14000] __bpf_prog_run512+0xc5/0x100 [ 1155.505217][T14000] bpf_test_run+0x493/0xdf0 [ 1155.509862][T14000] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1155.515547][T14000] bpf_prog_test_run+0x5bb/0x9f0 [ 1155.520633][T14000] __sys_bpf+0x925/0xee0 [ 1155.525100][T14000] __ia32_sys_bpf+0xa4/0xf0 [ 1155.529733][T14000] ia32_sys_call+0x33e7/0x4360 [ 1155.534714][T14000] __do_fast_syscall_32+0x17f/0x3f0 [ 1155.540088][T14000] do_fast_syscall_32+0x37/0x80 [ 1155.545174][T14000] do_SYSENTER_32+0x1f/0x30 [ 1155.549839][T14000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1155.556415][T14000] [ 1155.558858][T14000] CPU: 0 UID: 0 PID: 14000 Comm: syz.2.1743 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.570041][T14000] Tainted: [L]=SOFTLOCKUP [ 1155.574520][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1155.584770][T14000] ===================================================== [ 1155.591858][T14000] Disabling lock debugging due to kernel taint [ 1155.598111][T14000] Kernel panic - not syncing: kmsan.panic set ... [ 1155.604648][T14000] CPU: 0 UID: 0 PID: 14000 Comm: syz.2.1743 Tainted: G B L syzkaller #0 PREEMPT(full) [ 1155.615775][T14000] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1155.621409][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1155.631580][T14000] Call Trace: [ 1155.634943][T14000] [ 1155.637947][T14000] __dump_stack+0x26/0x30 [ 1155.642450][T14000] dump_stack_lvl+0x50/0x1c0 [ 1155.647199][T14000] ? dump_stack+0x12/0x25 [ 1155.651694][T14000] dump_stack+0x1e/0x25 [ 1155.656013][T14000] vpanic+0x7b4/0x1430 [ 1155.660270][T14000] panic+0x15d/0x160 [ 1155.664391][T14000] kmsan_report+0x31a/0x320 [ 1155.669089][T14000] ? __msan_warning+0x1b/0x30 [ 1155.673933][T14000] ? erspan_build_header+0x167/0x2f0 [ 1155.679398][T14000] ? erspan_xmit+0x12e8/0x1ed0 [ 1155.684331][T14000] ? dev_hard_start_xmit+0x24e/0xad0 [ 1155.689788][T14000] ? sch_direct_xmit+0x3b2/0xcf0 [ 1155.694912][T14000] ? __dev_queue_xmit+0x301d/0x5980 [ 1155.700269][T14000] ? __bpf_redirect+0x162e/0x1760 [ 1155.705455][T14000] ? bpf_clone_redirect+0x4a6/0x6c0 [ 1155.710807][T14000] ? ___bpf_prog_run+0x13e8/0xea90 [ 1155.716068][T14000] ? __bpf_prog_run512+0xc5/0x100 [ 1155.721244][T14000] ? bpf_test_run+0x493/0xdf0 [ 1155.726069][T14000] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 1155.731851][T14000] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1155.737121][T14000] ? __sys_bpf+0x925/0xee0 [ 1155.741673][T14000] ? __ia32_sys_bpf+0xa4/0xf0 [ 1155.746483][T14000] ? ia32_sys_call+0x33e7/0x4360 [ 1155.751551][T14000] ? __do_fast_syscall_32+0x17f/0x3f0 [ 1155.757094][T14000] ? do_fast_syscall_32+0x37/0x80 [ 1155.762287][T14000] ? do_SYSENTER_32+0x1f/0x30 [ 1155.767138][T14000] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1155.773825][T14000] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1155.780091][T14000] ? kfree+0x793/0x1130 [ 1155.784367][T14000] ? pskb_expand_head+0x823/0x1fb0 [ 1155.789642][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1155.794948][T14000] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1155.800970][T14000] ? pskb_expand_head+0x1ce4/0x1fb0 [ 1155.806336][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1155.811658][T14000] __msan_warning+0x1b/0x30 [ 1155.816346][T14000] erspan_build_header+0x167/0x2f0 [ 1155.821661][T14000] erspan_xmit+0x12e8/0x1ed0 [ 1155.826456][T14000] ? __pfx_erspan_xmit+0x10/0x10 [ 1155.831573][T14000] dev_hard_start_xmit+0x24e/0xad0 [ 1155.836858][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1155.842178][T14000] sch_direct_xmit+0x3b2/0xcf0 [ 1155.847132][T14000] ? kmsan_get_metadata+0x146/0x160 [ 1155.852532][T14000] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1155.859075][T14000] __dev_queue_xmit+0x301d/0x5980 [ 1155.864259][T14000] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1155.870706][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1155.876015][T14000] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1155.882030][T14000] ? __dev_queue_xmit+0x27a/0x5980 [ 1155.887339][T14000] __bpf_redirect+0x162e/0x1760 [ 1155.892358][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1155.897678][T14000] bpf_clone_redirect+0x4a6/0x6c0 [ 1155.902883][T14000] ___bpf_prog_run+0x13e8/0xea90 [ 1155.907995][T14000] __bpf_prog_run512+0xc5/0x100 [ 1155.913016][T14000] ? kmsan_internal_poison_memory+0x78/0x90 [ 1155.919070][T14000] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1155.925115][T14000] ? kmsan_slab_alloc+0xdc/0x160 [ 1155.930206][T14000] ? kmem_cache_alloc_noprof+0x37b/0x1270 [ 1155.936057][T14000] ? slab_build_skb+0x5c/0x5b0 [ 1155.941067][T14000] ? bpf_prog_test_run_skb+0x74d/0x3050 [ 1155.946752][T14000] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1155.952004][T14000] ? __sys_bpf+0x925/0xee0 [ 1155.956546][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1155.961834][T14000] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1155.967832][T14000] ? bpf_test_run+0xb1/0xdf0 [ 1155.972555][T14000] ? filter_irq_stacks+0x49/0x190 [ 1155.977848][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1155.983131][T14000] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1155.989118][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1155.994410][T14000] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1156.000912][T14000] ? kmsan_get_metadata+0x146/0x160 [ 1156.006281][T14000] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.012267][T14000] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1156.017882][T14000] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1156.023480][T14000] bpf_test_run+0x493/0xdf0 [ 1156.028112][T14000] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.034099][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1156.039390][T14000] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.045385][T14000] ? bpf_test_run+0x2f4/0xdf0 [ 1156.050206][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1156.055500][T14000] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1156.061493][T14000] bpf_prog_test_run_skb+0x22a5/0x3050 [ 1156.067091][T14000] ? kmsan_get_metadata+0xf1/0x160 [ 1156.072427][T14000] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1156.078364][T14000] bpf_prog_test_run+0x5bb/0x9f0 [ 1156.083460][T14000] __sys_bpf+0x925/0xee0 [ 1156.087872][T14000] __ia32_sys_bpf+0xa4/0xf0 [ 1156.092515][T14000] ia32_sys_call+0x33e7/0x4360 [ 1156.097402][T14000] __do_fast_syscall_32+0x17f/0x3f0 [ 1156.102770][T14000] do_fast_syscall_32+0x37/0x80 [ 1156.107769][T14000] do_SYSENTER_32+0x1f/0x30 [ 1156.112414][T14000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1156.118916][T14000] RIP: 0023:0xf6feef6c [ 1156.123085][T14000] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1156.142833][T14000] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1156.151378][T14000] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000900 [ 1156.159452][T14000] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1156.167513][T14000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1156.175570][T14000] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1156.183635][T14000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1156.191732][T14000] [ 1156.194987][T14000] Kernel Offset: disabled [ 1156.199352][T14000] Rebooting in 86400 seconds..