last executing test programs: 23m3.789438597s ago: executing program 32 (id=13): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 21m29.175719546s ago: executing program 33 (id=217): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000ac0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) r0 = open$dir(&(0x7f0000000140)='./cgroup/../file0\x00', 0x400000, 0x110) getdents64(r0, &(0x7f0000000280)=""/161, 0xa1) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r2 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001740), 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000140)={0x5, 0x4, 0x9fc9}) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000000)={0x6, "31aeb6bf53768468d0eab6c0a4e98c88c0f69a3fe8d98bc6342595be7cce9e36b6e8662699ba3f3034110e1adfc9c447f94b68ae6d00dd5a45aacd75768b86a1", {0x8000, 0x87}}) syz_open_dev$MSR(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4008032, 0xffffffffffffffff, 0xffffe000) 20m38.655079625s ago: executing program 34 (id=300): r0 = socket(0x1a, 0x1, 0x5) sendmmsg$sock(r0, &(0x7f0000001280), 0x0, 0x20000001) connect$netlink(r0, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x3ff}, 0xfffffffffffffda7) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x1}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000002c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000854) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x20000892) socket$inet(0x2, 0x4000000000000001, 0x0) keyctl$setperm(0x5, 0x0, 0x52b242d) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000004f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', 0x0, 0x4af, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r3}, 0x38) msgctl$IPC_RMID(0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xcc30, 0x8000, 0x2, 0x300}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 20m8.560705549s ago: executing program 35 (id=352): unshare(0x68040200) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d972a440b72040155ab701020301090212"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2d, 0x0, {0x36}}, 0x14}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) 19m39.780706923s ago: executing program 36 (id=400): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, 0xffffffffffffffff, 0xffffe000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x403, 0x800000}, 0x10}, 0x94) syz_open_dev$radio(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd74) r0 = syz_io_uring_setup(0x913, &(0x7f0000000300)={0x0, 0x400600, 0x0, 0x1000001, 0xf7fffffc}, 0x0, &(0x7f0000000200)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r1, 0x40046210, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, 0x0, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000140)='7', 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x15}, 0x40000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) ioctl$sock_bt_hci(r6, 0x400448c9, 0x0) write(r5, &(0x7f0000000040)="05000000010000", 0x7) 18m17.648757829s ago: executing program 37 (id=557): mlockall(0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26}, 0x28) r0 = fsopen(0x0, 0x0) fsmount(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) 15m26.33615259s ago: executing program 38 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x9031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r4 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 14m33.82559126s ago: executing program 39 (id=1034): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000580)={{0x6, 0x5}, 'port0\x00', 0x10, 0xa0021, 0x89aa, 0x9, 0x2, 0x4, 0x8, 0x0, 0x0, 0x4}) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file1\x00', 0x1004081, &(0x7f0000000040)=ANY=[], 0x2, 0x7f4, &(0x7f0000000d80)="$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") open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newsa={0x144, 0x10, 0x1, 0x3, 0x0, {{@in=@loopback, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, {@in6=@local, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000000000}, {0x0, 0x0, 0x2000}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @offload={0xc}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000080)={0x5, @raw_data="a8d2912ddb0764dbe14b787f1bbc4a0f05ea54f0be9b1b11fe73974b7b0b018d66c2bd912f75caa796eca1d089e4fba15a53db7612b9f179cb98200b361932ead7bbb865369b33543fa204a3feea1350ff3206613ba0f85e0e9c48a6e1dbd9227c51f477eb21853b40db5a8bbc6b6315be0168318705d54d93645f0e9b6290d14b609894bfb2d32de9dcfc7c4d000e2cb46cb59ecc4c1b09ce625a7f2f68b571ff13717053cf9920c9761b4f8d12ac7ab29d6e40ad7c88651495db7936848b3fcba04076fac2a59c"}) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300), 0x0) 10m38.19819404s ago: executing program 7 (id=1623): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x202, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000480)=ANY=[], &(0x7f0000000380)='GPL\x00'}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xf9, 0x3, 0xd5, '\x00', 0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r0, 0x4010e501, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4080) sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, 0x0, 0x0) 10m37.396593773s ago: executing program 7 (id=1629): syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="7e79f4f7cc80cd6aeed02c5ba1d6dc8526886828b68d43e147992f53c82f7deed8b545583da31e3868e17e25b1f940f8904cdf6a781a9463daa9451f6ee5f06575a7d9f6061c6169111108f6ddff716e73325bc837d0e4aa74897eb67930f632"], 0x1, 0x228, &(0x7f0000000300)="$eJzKKC4sZmdgYPj7sSb5Pz8DGLAwiDBcYGBkYAFxFCBiH5kg9FQofRNKszFC6CtQ2hcq3g6l/5pXRUQxMDBmKt0zYzognqLIKMDAI/L11AOGZAb+WAbLed5rLgVlTrkq9HbpfpB6r9DKTQyM6in8i+ZsmOA0kxdsLGNkFLI5zAdkZnGADGJgYJj8J+LeAxZJBhEks0Q5/omdalm+yqzzPsOMjmlpDIwGszgYGBj0jujOtDPg7WaCmllcWZWdmJOTWlR8hgHV/MmM+5kUGUHqzvy9GvyA0Y6hO5aBkUFug7/a4m9/pCo3bqqPnF4VUTO1u+nm0vVxDNv0/14xkXo/MSPs/4NDgloWefkf5skofd/cMOdDTd0TE8fORuW5/K2X/757H1NbnKDG9Fi8q5CNP8FNq+aTs5Ob5eO56dXtW4oVF2SluUw8NvXi34TjaxkYJl94Yqtfc+ZQvGIMp5Rb5dyYu27xglzL1M/XvWFgOBj1eSID43LG/UwMDDPDdu5B9ld5AzQyGJgZGBhUGBgYmBhYGNIyc1INPBgYGZihHEMWqCqYaiYGDrCEXnJ+Tko7AyM4CYC1LWdggZth+JiBFc4xQuYYWzRATWJoh9IqUNoDSi+H0o+htDxasmEBm9AP5Wk0MDCwMVQklpQUGbIxMEBZcDEjuJiRANxmJqitc5lQPXeciWEUjIJRMApGwSgYBaNgFIyCUTAKRjIABAAA//+uZrr5") socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) syz_io_uring_setup(0x6ae9, &(0x7f0000000340)={0x0, 0x40000000, 0x4000}, 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r5, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) 10m36.009187463s ago: executing program 7 (id=1633): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x138) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x10, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000000, 0x0, 0x0, 0x8000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800}, 0x50) r6 = semget(0x1, 0x1, 0x789) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) 10m34.774982523s ago: executing program 7 (id=1636): r0 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r0, 0x0, 0x0) 10m34.565074906s ago: executing program 7 (id=1637): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) socket(0x2, 0x80805, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0xf4240, 0x7}) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r2, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x24004059) close(r2) 10m33.722691218s ago: executing program 7 (id=1639): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 10m18.377198582s ago: executing program 40 (id=1639): sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, 0x0, 0x2400, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f04000000000000000000850000000f000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 10m9.743134124s ago: executing program 2 (id=1701): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000281f3d909b2fae0c7870f73b000000000000000000b9ad7e0000000000", @ANYRES32=r5, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r6, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x1, 0x5002) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) 10m8.759625328s ago: executing program 2 (id=1705): syz_open_dev$cec(0x0, 0x0, 0x81) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000084008dbc334de7f973645a3c8d9e7f035a00"], 0x10}}], 0x1, 0x400c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40) open_tree(0xffffffffffffffff, 0x0, 0x89101) 10m7.054967765s ago: executing program 2 (id=1707): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x40205668, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0xfef85154c7902b6e) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) memfd_create(&(0x7f00000003c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e/\x85c\xae\x9c\xe9\xc4\xd2\xf3\x9f\n-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\x12\x00\x00\x00\x00\x00\x00\x00[\xf9\r\t\xef{h\xb0\xc0\x00\x00\x00\x00\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8Fb\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5O\x8fI\x00\xf0\xc9%\n\xa7\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2N\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92\xaf(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\x9d\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5pe,\xdfN\x0f\x00\x01\x00\x00_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x84\xe38\xac>\xbbqJ\x8f\x8cmu\x12\x1d\x9a\xd7\x1c}\x8a]1\x8a\x84\xedo\t*77\xbb0\x8b\xe5R\xc8\t\x94\xbc\x95\xc0\x92\xfc^e\x15\x10\x96\x18\'\xfa\x8e\x81\x03)3\xbf\xa6|\x88\x1f\xfb\xf0\xa3\xd2\x99\x06\xb1\x15\xc4\xe9\x80\xfb\xcfD\xe3\xff\xc1V\x00\xc4\xd1\xa1\xa6\xba\x9a\x91\xdb\x0f\xb6\xb9&\xf5\x05\x9b_\xde\xc6\xc4P\xf9,\xab\x13\xd0+*\xa3\x002\x19Z\x0e\xa7\xb9\xf2\xed\xd7#\b0\xba\xaa\x93\xf6\xef-\x1fL\xc6\xdc\xa7?\xf9\xbcdI\xca_\xa3\xbd\xe6,\xe6\x87$\xe8W8\xa6Zb\x1a7\xd7\x86\xe5\v\xa5\xaf\x8b\xd8t\x9fk\xee#\"\xa4\x96\xd5m\xdb\xb0\xdf\xa8\xb9{\xca\xea\nD|+;\x14\xc4\xe5\x9c\xebDJ\xf4\x19PFi\xce\xd6E9\x18\x1d~\x17\x06\xe9iDu:ou\a<\xaf\x8f0v\x81\xb1HC\xf3\x96\x96]bp\a\xdf7\xcb\x10x\xff\x17L\xde\xff\b\fm\a\x1b\x13\xe2[\xea,\xfc\x8ep<\xa4gq\xf4\xb4\xd7\x1d\'\xd6\xb5\xa3\x90\xf9\xf2\x1a\xaa\xb0\b\x7f\x89\xf7\x9e\x89\x85O\xe6U\x9fO\xa5\x8dfO\x11S\x00\xb6\x809\r\x96\xf2\xb8,\xe1N\xa1\xfd\xaa\x99\xe9\xb4\t\xf1(>\xf8fLBQ\xcf\x9c\xd4\x88\x96\xbc\xf0\xa4\xeb\x92\xd7\xc1\xef\x13\xc7U\x9b\xa8r\xc1_\x11<\x19?)\xb3\xfdf\xc3\xba\x1e\xbaY\xea|~^\x00\x1e\xea/\x1e\xd2&1Z@\xa50\x06s\xf2PP\xf9\xdcv\xc6\xaf\x12M\x8b\x12\xdbf\xb2r\x1a\x84\b\xde\b5\xdb[ruJ\xa0\xa9Nj\xd5<\xcc\xdeA4|1Ye\xd7\xf3\x1b\xedq)\xab_\xc1\aR\xef%\xfb\x9c\x18<\xa3\x133T\x89\xff\x99S\xb7n\xe3%\x05g*X\xe5\xfc\x97\x01\xec\xeb\xd6\rf\xbdl\xee\xca\x1c\xa2{\x98v\xcc\x8a\xcc\xa1\xf1\xb4\xf6\xe1\xc0\x96\xc8\x1c\x05C\x93\x1c\x89e\xc1~\xf3\xc8\xe8\xe6]S\xbd\xbe\xb3M\xc1\x9b\x05\x12\xe9C\x11\xbb\x03U\x80KRd\x14c3I\xa0\xc7\x8a\xba9\xfeH\x94\xb2\xe7h\xb1\x02\xf6\x0f\x02\xb0\xc3\xd8\x02\r\v\xfa\xc7\xbdE\xf6b\xde\xbeJ\x9509\xe8\x18\x05\x15zi\xba\tf7\x9b,\xa3\xa5\xa1\xc1|\xd2:D3z\x8f\x19\xa8\xe1d\xedk\xe8\xa2/\x95`$\x81\xc2g\x04u\x16\xbc{\xb7\x90\xbe\xeb\x85 \f ^I\xd5\x0e\r\xdf4\xd0\x95d\xe4\xaf\x83\x88\xd8l\xae\"\xef\xe5\xfc\x01\x15\xb5\x99U\x1c\xb1\x9c \xe7\xa6\x8fv\xfe\xea\x9a\x11\xe2-', 0x4) socket$inet_tcp(0x2, 0x1, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x80013, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 10m6.159323968s ago: executing program 2 (id=1709): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 10m5.907323012s ago: executing program 2 (id=1710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "7f00ef", 0x14, 0x2c, 0x0, @remote, @mcast2, {[@hopopts={0x89}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002840)={0x14, 0x1e, 0x201}, 0x14}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r5, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x620b}, 0x0) 10m4.901357397s ago: executing program 2 (id=1713): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x1) unshare(0x42000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 9m48.96296222s ago: executing program 41 (id=1713): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000140)=0x1) unshare(0x42000000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 7m26.583238117s ago: executing program 3 (id=2079): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) iopl(0x3) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x10, 0x3) ptrace$ARCH_SET_GS(0x1e, r0, &(0x7f0000000400), 0x1001) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) 7m25.510174993s ago: executing program 3 (id=2082): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, r0, 0x0, 0x417}, 0x18) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) 7m18.817040875s ago: executing program 3 (id=2106): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaa", @ANYBLOB='\\'], 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7m18.799796315s ago: executing program 3 (id=2107): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, r1, 0xb03}, 0x14}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) 7m18.647149018s ago: executing program 3 (id=2109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000110000000000000000000000850000000f000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfbf00000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) 7m17.945126728s ago: executing program 3 (id=2110): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x3) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 7m2.517238483s ago: executing program 42 (id=2110): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x3) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0xe54aef35e9c2845d, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) 3m55.506528579s ago: executing program 9 (id=2619): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x5, 0x5}) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x20000007}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) 3m54.815436809s ago: executing program 9 (id=2621): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) epoll_create1(0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 3m51.061991556s ago: executing program 9 (id=2630): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x138) openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x10, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x8000000, 0x0, 0x0, 0x8000001}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800}, 0x50) r5 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r5, 0x0, 0x0) 3m48.335622098s ago: executing program 9 (id=2634): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ppoll(&(0x7f0000000500)=[{r0, 0x2040}, {r3, 0x2020}, {r3, 0x489}], 0x3, &(0x7f0000000540)={0x0, 0x3938700}, &(0x7f0000000580)={[0x2]}, 0x8) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x10000}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3m48.080701291s ago: executing program 9 (id=2636): socket(0x10, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$tipc(0x1e, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000003c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, 0x0, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 3m46.24225743s ago: executing program 9 (id=2639): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r9 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10c}}, 0x40) keyctl$read(0xb, r9, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r10, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x10000, 0x0, 0xcb6}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x3a, 0x1c, 0x65, 0x0, 0x7, 0x1, 0x0, @remote, @local}, "884a66c6d153b786"}}}}, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x2, 0x80, 0x6, 0x0, 0x8}) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000500)={0x0, "9ac67699685a384f2b9a42d156dba03146c22981302ce8f5b7b51ecb7a1f990dbd3bfe00b48769bdef7a815a42ddc860b0312c03039e6be3c49654801ecfd06f", 0x30}, 0x48, r9) 3m30.822104374s ago: executing program 43 (id=2639): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r9 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10c}}, 0x40) keyctl$read(0xb, r9, 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_CREATE_OPEN(r10, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x10000, 0x0, 0xcb6}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x3a, 0x1c, 0x65, 0x0, 0x7, 0x1, 0x0, @remote, @local}, "884a66c6d153b786"}}}}, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x2, 0x80, 0x6, 0x0, 0x8}) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000003c0)={'fscrypt:', @desc1}, &(0x7f0000000500)={0x0, "9ac67699685a384f2b9a42d156dba03146c22981302ce8f5b7b51ecb7a1f990dbd3bfe00b48769bdef7a815a42ddc860b0312c03039e6be3c49654801ecfd06f", 0x30}, 0x48, r9) 3m20.806787967s ago: executing program 0 (id=2698): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) sendfile(r1, r2, 0x0, 0x80001d00c0d1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = socket$netlink(0x10, 0x3, 0x6) recvmmsg(r3, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10100, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) 3m17.173900782s ago: executing program 0 (id=2706): unshare(0x68040200) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, 0x0, 0x0) bind$netlink(r1, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, &(0x7f00000001c0)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000001380)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) socket(0x10, 0x3, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x4000) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000100)=0xffffbffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x6000, @fd=r4, 0x49c1, 0x5, 0x80000401, 0x28, 0x1, {0x2}}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 3m16.154551308s ago: executing program 0 (id=2708): setreuid(0xffffffffffffffff, 0xee00) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m16.035817439s ago: executing program 0 (id=2709): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x2}, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x40}}) 3m15.924461411s ago: executing program 0 (id=2710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x3, 0x804, 0x4, 0xc, 0x120000, 0xff, 0xffffffffffffffff, 0x9, 0xffff, 0x4, 0x0, 0x105, 0x400000000000006, 0x9], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000480)=[@cstype0={0x4, 0x9}, @cstype0={0x4, 0x9}], 0x2) 3m15.259268741s ago: executing program 0 (id=2712): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x840) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1008, 0x10000001, 0xfffffff8, 0x7]}, &(0x7f0000000080)=0x54) 2m59.872697693s ago: executing program 44 (id=2712): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x840) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1008, 0x10000001, 0xfffffff8, 0x7]}, &(0x7f0000000080)=0x54) 33.018325168s ago: executing program 6 (id=3142): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xff7fffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000000004"]) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000600)={0x1, 0x10, 0xfa00, {&(0x7f00000002c0), r5}}, 0x18) 31.566249s ago: executing program 6 (id=3153): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000002080)=0x64, 0x23b) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x141083, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x408e41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r5}]}, 0x40}}, 0x24000840) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 30.413263577s ago: executing program 6 (id=3155): socket$unix(0x1, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0xfec9, 0x10000, 0x0, 0xa}, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 29.965109774s ago: executing program 6 (id=3160): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000400000000000000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x80, @none, 0x0, 0x1}, 0xe) 29.815190747s ago: executing program 6 (id=3163): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a4639", 0x49}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234ac", 0x1f}], 0x2}}], 0x1, 0x8058) 29.131067357s ago: executing program 6 (id=3164): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x11, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 11.498503295s ago: executing program 45 (id=3164): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x11, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 6.213114906s ago: executing program 8 (id=3263): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000002740)="1e", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa0000000090a05000000000000000000050000090900020073797a31000000000900020073797a31000000000c0010400000000000000004080005400000002d080006400000000058000980100002800c00018008000140000000093c00028034000180080001400000008c080001400000ffff080001400000000a0800014000000009080001400000004008000140ffffefc50400018008000140000000071c000000120a01010000000000000000050000050800034000000009140000001100010000000000000000000a00000a"], 0xe4}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x1ff}], 0x18, 0x40}, 0x40008d0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001b40)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x40000043, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.975676129s ago: executing program 8 (id=3264): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x138) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800}, 0x50) r6 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r6, 0x0, 0x0) 5.526352646s ago: executing program 1 (id=3266): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) sendmmsg$inet(r0, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000140)="2efdc7ab6366432cf961b7fc1972eb39694340120dfbaa9cee6aa0f3c618acb03958df115a4a7380b4c64f24fc8c3dc86480682444ca3d9b692611220b50699b31621424c8bff9200668cc6fb3521733475c64d5ff88de859e21350b75fb550f", 0x60}, {0x0}], 0x3}}, {{&(0x7f0000000580)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x881) 5.179177312s ago: executing program 8 (id=3267): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$inet(0x2, 0x3, 0x8d) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.425043973s ago: executing program 8 (id=3269): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x2, {0xd, @pix_mp={0x0, 0x3, 0x20303159, 0x0, 0xb, [{}, {}, {0x5}, {0xfffffffd}, {}, {}, {0x100000, 0x8000002}, {0x3ff}], 0x4, 0x0, 0x4, 0x0, 0x3}}}) 4.047045099s ago: executing program 8 (id=3270): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ppoll(&(0x7f0000000500)=[{r3, 0x2020}, {r3, 0x489}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x10000}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 3.778123773s ago: executing program 1 (id=3271): sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x408d4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000300), 0x0}, 0x20) 3.685521395s ago: executing program 5 (id=3272): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x788}], 0x1}}], 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r3, &(0x7f0000000400)={@val={0x1c}, @void, @llc={@llc={0xfe, 0xbc, '\x00'}}}, 0x7) socket$packet(0x11, 0x2, 0x300) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180), 0x0, 0x45, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xef, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r4 = accept(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xed, "8ce9f7bb941747acf20984f4e16023a11149ad8acd3dc578d3eabab4a9ffc539e8ad9d82dc92ec7e49c2e8adcd3337945cbe277c7a85a43270bdfab8c91b35e53f8704b566a6a40e035268175547cff1a5f34daf5d0aad936ae8732214c810432970fa79325512febc11c6949eb05e648191e65aee4c04701f601c7f730c18b0911b73953ce031a9177ec5c3a829e5656c6efc9f9ed8196fa94b4d52fe5e9e9dadf4810aadaa9ccc9b937fda1be440a15737cb077e265f6c55b60745009263cf5ca60ccb661385892edc1b84ad04b8f187da004da6216619904357a706ad2e33666b5f22ca25902cd68058b303"}, &(0x7f00000002c0)=0xf5) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000300)={r5, 0x5, 0x10}, 0xc) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r4, 0x4, 0x1, 0xd12, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@map, 0xffffffffffffffff, 0x25, 0x2008, 0x0, @value, @void, @void, @void, r6}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.367894289s ago: executing program 8 (id=3274): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001580)=[{}]}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0xf5, 0x0, 0x0) 3.268245611s ago: executing program 1 (id=3275): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) sendfile(r1, r2, 0x0, 0x80001d00c0d1) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$netlink(0x10, 0x3, 0x6) recvmmsg(r3, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10100, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) 2.697662189s ago: executing program 5 (id=3276): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x138) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, 0x0, 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800}, 0x50) r6 = semget(0x1, 0x1, 0x789) semctl$IPC_RMID(r6, 0x0, 0x0) 2.63130455s ago: executing program 4 (id=3277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.331145145s ago: executing program 4 (id=3278): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x1150bdc9068b6e6, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="b008", 0x2}], 0x1}, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 2.313289855s ago: executing program 1 (id=3279): openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc800) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0xfffffffc, 0x40002, 0x2, {0xd, @pix_mp={0x0, 0x3, 0x20303159, 0x0, 0xb, [{}, {}, {0x5}, {0xfffffffd}, {}, {}, {0x100000, 0x8000002}, {0x3ff}], 0x4, 0x0, 0x4, 0x0, 0x3}}}) 2.244038876s ago: executing program 4 (id=3280): r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1}}, 0x18) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000780)="8af83b42e304bd", 0x7}], 0x2}, 0x0) 2.037241109s ago: executing program 1 (id=3281): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x58, r3, 0x809, 0x70bd2d, 0x0, {}, [{{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{}, {}, {0x0, 0x4, 0x4}}}]}}, {{0x0, 0x1, r2}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @enabled={{}, {0x0, 0x6, r2}}}]}}, {{}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @enabled={{}, {0x0, 0x6, r2}}}, {0x0, 0x1, @priority={{{}, {}, {0x0, 0x4, 0x1000}}, {0x0, 0x6, r2}}}, {0x0, 0x1, @lb_stats_refresh_interval={{}, {}, {0x0, 0x4, 0x2}}}, {0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0x3, 0xb3, 0x7, 0x6}, {0x9, 0xf, 0x40, 0x2}, {0x41, 0x7, 0x6, 0x8}]}}}, {0x0, 0x1, @lb_hash_stats={{{}, {}, {0x0, 0x4, 0x2}}}}, {0x0, 0x1, @lb_tx_hash_to_port_mapping={{{}, {}, {0x0, 0x4, r2}}}}, {0x0, 0x1, @notify_peers_count={{}, {}, {0x0, 0x4, 0x8}}}, {0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0xc, 0x39, 0x6}, {0x8, 0xf, 0x7, 0x4}, {0xffe0, 0x7, 0x0, 0xfffffffa}, {0xe4c, 0x6, 0x0, 0x1e}, {0x8, 0xf, 0xfa, 0x4}]}}}]}}, {{}, {0x0, 0x2, 0x0, 0x1, [{0x0, 0x1, @mcast_rejoin_count={{}, {}, {0x0, 0x4, 0x8}}}, {0x0, 0x1, @user_linkup_enabled}, {0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0x1ff, 0x62, 0xb7, 0x2}, {0x401, 0x6, 0x9, 0x5}, {0x2, 0x81, 0xd, 0x10}, {0x9, 0x20, 0x2b, 0x10}, {0x2, 0x1, 0x81, 0xd048}]}}}, {0x0, 0x1, @activeport}, {0x0, 0x1, @activeport}, {0x0, 0x1, @enabled}, {0x0, 0x1, @user_linkup}, {0x0, 0x1, @bpf_hash_func={{}, {}, {0x0, 0x4, [{0xab8, 0x9, 0x80, 0x7f}, {0xd, 0x9, 0xa, 0x9}, {0x80, 0x4, 0x2, 0x4}, {0x4, 0x10, 0x40, 0x1}]}}}]}}]}, 0x58}}, 0x40010) 1.946866721s ago: executing program 4 (id=3282): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x138) r1 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@socket3={{0x24}, 0x7}, @common=@inet=@set4={{0x50}, {{}, {}, {{}, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xc8, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x36c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r4, 0x5441, 0x8) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800}, 0x50) semget(0x1, 0x1, 0x789) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000780)='./file0/../file0\x00', 0x144) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xffff}}}, 0x24}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 912.540867ms ago: executing program 5 (id=3283): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ppoll(&(0x7f0000000500)=[{r3, 0x2020}, {r3, 0x489}], 0x2, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x10000}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x28, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 842.858538ms ago: executing program 4 (id=3284): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 751.323309ms ago: executing program 5 (id=3285): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800490400000000000014000a100000000000000100000008001e0001000000"], 0x24}}, 0x0) 123.300668ms ago: executing program 1 (id=3286): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) 122.653979ms ago: executing program 5 (id=3287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) 33.57064ms ago: executing program 4 (id=3288): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x4) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = dup(r0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) sendfile(r1, r2, 0x0, 0x80001d00c0d1) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$netlink(0x10, 0x3, 0x6) recvmmsg(r3, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x10100, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) 0s ago: executing program 5 (id=3289): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x1150bdc9068b6e6, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="b008", 0x2}], 0x1}, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) kernel console output (not intermixed with test programs): [ 875.435711][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.456519][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.495856][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.525878][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.555807][T12697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.588831][T12697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.618695][T12697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.672931][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 875.705126][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 875.748745][T12697] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.795528][T12697] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.825764][ T4308] Bluetooth: hci4: command 0x041b tx timeout [ 875.834468][T12697] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.863692][T12697] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.918987][T13016] team0: Port device team_slave_0 added [ 875.950157][T13016] team0: Port device team_slave_1 added [ 876.079772][T13016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.101937][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.183971][T13016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.252321][T13016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.265139][T13016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.330887][T13016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.371925][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.426540][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.478246][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.498955][T13016] device hsr_slave_0 entered promiscuous mode [ 876.520726][T13016] device hsr_slave_1 entered promiscuous mode [ 876.527277][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.548894][T13016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 876.579540][T13016] Cannot create hsr debugfs directory [ 876.612007][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 876.631993][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 878.732823][ T4218] Bluetooth: hci4: command 0x040f tx timeout [ 881.572020][ T4218] Bluetooth: hci4: command 0x0419 tx timeout [ 881.937520][T13134] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 883.214981][T13016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 883.282171][T13016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 883.366251][T13016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 883.386274][T13016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 883.728838][T13172] xt_TPROXY: Can be used only with -p tcp or -p udp [ 883.962911][T13016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.041956][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 884.059714][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 884.090669][T13016] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.106030][T13173] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 884.142402][T13173] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 884.162023][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 884.211975][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 884.237358][T13181] loop6: detected capacity change from 0 to 8 [ 884.247894][ T4307] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.255025][ T4307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.277340][T13181] squashfs: Unknown parameter '~yô÷Ì€ÍjîÐ' [ 884.334107][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 884.371529][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 884.406231][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.413381][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.472047][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 884.586369][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 884.616158][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 884.728104][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 884.836829][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 885.211858][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 885.220958][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 885.229776][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 885.254104][T13016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 885.362844][T13016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 886.329593][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 886.413268][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 886.432050][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 886.744295][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 886.754811][T13209] xt_HMARK: proto mask must be zero with L3 mode [ 886.770956][T13209] netlink: 'syz.5.1769': attribute type 2 has an invalid length. [ 886.778749][T13209] netlink: 'syz.5.1769': attribute type 1 has an invalid length. [ 886.862015][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 888.069410][T13219] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.241363][T13219] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.558973][T13219] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.643036][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 888.658086][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 888.678385][T13016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.736746][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 888.763401][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 888.854240][T13219] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.942620][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 889.118044][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 889.237553][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 889.292568][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 889.533065][T13016] device veth0_vlan entered promiscuous mode [ 889.823065][T13016] device veth1_vlan entered promiscuous mode [ 890.337068][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 890.345298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 890.533474][T13016] device veth0_macvtap entered promiscuous mode [ 890.579044][T13219] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.605417][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 890.621044][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 890.699397][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 890.719185][T13016] device veth1_macvtap entered promiscuous mode [ 890.870171][T13219] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 890.931931][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 890.996789][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.075510][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.140050][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.150705][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.161266][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.185710][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.205687][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.216389][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 891.226906][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.238381][T13016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.249910][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.260422][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.270352][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.280868][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.290762][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.301366][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.311267][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.321757][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.331960][T13016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 891.342847][T13016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 891.367704][T13016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.392013][T13219] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.426021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 891.446078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 891.467379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 891.487870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 891.503742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 891.640188][T13016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.662610][T13016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.755169][T13016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.764169][T13016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.791191][T13219] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.973685][ T4310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.005703][ T4310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.041167][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 892.082320][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.137942][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.928610][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 894.410851][T13293] binder_alloc: 13291: binder_alloc_buf, no vma [ 894.535766][T12694] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 895.781074][T13308] autofs4:pid:13308:autofs_fill_super: called with bogus options [ 896.705340][T12694] usb 7-1: not running at top speed; connect to a high speed hub [ 896.826001][T12694] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 896.839553][T12694] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 896.868869][T13317] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.944880][T12694] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 897.198290][T13317] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.461761][T13322] syz.0.1794 (13322): drop_caches: 2 [ 897.487716][T13317] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.598567][T12694] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.613807][T12694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.621988][T12694] usb 7-1: Product: syz [ 897.626305][T12694] usb 7-1: Manufacturer: syz [ 897.630921][T12694] usb 7-1: SerialNumber: syz [ 897.702677][T13317] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.826185][T12694] usb 7-1: can't set config #1, error -71 [ 897.880280][T12694] usb 7-1: USB disconnect, device number 3 [ 897.963898][T13317] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.982537][T13317] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.022192][T13317] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.040672][T13317] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.056421][ T1481] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.130564][T13349] loop6: detected capacity change from 0 to 8 [ 898.169361][T13349] squashfs: Unknown parameter '~yô÷Ì€ÍjîÐ' [ 898.188357][ T1481] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.352934][T13352] xt_hashlimit: size too large, truncated to 1048576 [ 899.091950][ T1111] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 899.100244][T13355] netlink: 'syz.3.1802': attribute type 33 has an invalid length. [ 899.140870][T13355] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1802'. [ 899.374067][ T1111] usb 9-1: Using ep0 maxpacket: 16 [ 899.766819][ T1111] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.877195][ T1111] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 899.900557][ T1111] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 899.917788][ T1111] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.375524][ T1111] usb 9-1: config 0 descriptor?? [ 900.796652][ T1111] usbhid 9-1:0.0: can't add hid device: -71 [ 900.809123][ T1111] usbhid: probe of 9-1:0.0 failed with error -71 [ 903.529494][ T4218] usb 9-1: USB disconnect, device number 8 [ 903.638290][ T1481] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.800824][T13405] xt_HMARK: proto mask must be zero with L3 mode [ 904.614671][ T1481] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.873061][T13424] qrtr: Invalid version 6 [ 904.925308][T13426] netlink: 'syz.5.1816': attribute type 8 has an invalid length. [ 906.602305][T13452] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 906.621062][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.943876][T13459] netlink: 'syz.0.1826': attribute type 2 has an invalid length. [ 906.951718][T13459] netlink: 'syz.0.1826': attribute type 1 has an invalid length. [ 906.959770][T13459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 908.145687][T13473] overlayfs: failed to clone upperpath [ 913.899878][T13512] netlink: 'syz.8.1839': attribute type 2 has an invalid length. [ 913.907797][T13512] netlink: 'syz.8.1839': attribute type 1 has an invalid length. [ 913.915727][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1839'. [ 914.697567][T13523] qrtr: Invalid version 6 [ 917.965934][T13549] binder: BINDER_SET_CONTEXT_MGR already set [ 917.972056][T13549] binder: 13547:13549 ioctl 4018620d 200000000040 returned -16 [ 918.313418][T13549] binder: 13547:13549 ioctl c0306201 200000000240 returned -11 [ 918.384136][ T1481] device hsr_slave_0 left promiscuous mode [ 918.510025][ T1481] device hsr_slave_1 left promiscuous mode [ 919.137227][ T1481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 919.144749][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 919.549904][T13571] netlink: 'syz.8.1854': attribute type 2 has an invalid length. [ 919.557821][T13571] netlink: 'syz.8.1854': attribute type 1 has an invalid length. [ 919.565921][T13571] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1854'. [ 920.105845][ T1481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.113679][T13576] loop6: detected capacity change from 0 to 8 [ 920.139405][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.174015][T13579] qrtr: Invalid version 6 [ 920.207220][ T1481] device bridge_slave_1 left promiscuous mode [ 920.213628][ T1481] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.293894][T13576] squashfs: Unknown parameter '~yô÷Ì€ÍjîÐ' [ 921.099259][T13008] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 921.245840][ T1481] device bridge_slave_0 left promiscuous mode [ 921.329002][ T1481] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.446425][ T1481] device bridge0 left promiscuous mode [ 921.585593][ T1481] device veth1_macvtap left promiscuous mode [ 921.598636][ T1481] device veth0_macvtap left promiscuous mode [ 921.604784][ T1481] device veth1_vlan left promiscuous mode [ 921.634238][ T1481] device veth0_vlan left promiscuous mode [ 921.762558][T13008] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 921.781073][T13008] usb 9-1: config 0 has no interface number 0 [ 921.792570][T13008] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.252148][T13008] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.261984][T13008] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 922.271617][T13008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.304044][T13008] usb 9-1: config 0 descriptor?? [ 922.697640][ T1481] team0 (unregistering): Port device team_slave_1 removed [ 922.713035][ T1481] team0 (unregistering): Port device team_slave_0 removed [ 922.734313][ T1481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.761701][ T1481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.767669][ T1481] bond0 (unregistering): Released all slaves [ 924.005892][T13008] usbhid 9-1:0.1: can't add hid device: -71 [ 924.047589][T13008] usbhid: probe of 9-1:0.1 failed with error -71 [ 924.295172][T13008] usb 9-1: USB disconnect, device number 9 [ 927.559589][ T6748] Process accounting resumed [ 927.673969][T13638] Process accounting resumed [ 931.308814][T13669] loop6: detected capacity change from 0 to 8 [ 931.340097][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.754353][T13669] squashfs: Unknown parameter '~yô÷Ì€ÍjîÐ' [ 936.224646][ T21] Process accounting resumed [ 936.368509][T13678] Process accounting resumed [ 937.463221][T13702] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1889'. [ 937.481703][ T154] Bluetooth: hci1: Frame reassembly failed (-84) [ 939.112458][T13731] loop6: detected capacity change from 0 to 8 [ 939.125420][T13731] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 939.147948][T13731] cramfs: Error -3 while decompressing! [ 939.153682][T13731] cramfs: ffffffff961ca228(26)->ffff88805d7e2000(4096) [ 939.160795][T13731] cramfs: Error -5 while decompressing! [ 939.166978][T13731] cramfs: ffffffff961ca242(26)->ffff88807231c000(4096) [ 939.174317][T13731] cramfs: Error -3 while decompressing! [ 939.180016][T13731] cramfs: ffffffff961ca25c(16)->ffff88807231d000(4096) [ 939.187361][T13731] cramfs: Error -3 while decompressing! [ 939.193006][T13731] cramfs: ffffffff961ca228(26)->ffff88805d7e2000(4096) [ 939.506042][ T1111] Bluetooth: hci1: command 0x1003 tx timeout [ 940.103579][ T26] audit: type=1800 audit(1751343912.964:68): pid=13731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1895" name="file2" dev="loop6" ino=348 res=0 errno=0 [ 940.509003][ T146] Bluetooth: hci1: sending frame failed (-49) [ 940.546011][T12058] udevd[12058]: incorrect cramfs checksum on /dev/loop6 [ 942.370820][T13751] loop8: detected capacity change from 0 to 8 [ 942.457119][T13751] squashfs: Unknown parameter '~yô÷Ì€ÍjîÐ' [ 942.535797][ T1111] Bluetooth: hci1: command 0x1001 tx timeout [ 942.545474][ T146] Bluetooth: hci1: sending frame failed (-49) [ 943.662458][ T1111] Process accounting resumed [ 944.389556][T13764] Process accounting resumed [ 944.615795][ T4308] Bluetooth: hci1: command 0x1009 tx timeout [ 945.495197][T13768] netlink: 'syz.0.1902': attribute type 8 has an invalid length. [ 946.304637][T13800] overlayfs: failed to clone upperpath [ 946.847243][T13807] loop8: detected capacity change from 0 to 8 [ 947.946443][T13807] squashfs: Unknown parameter '~yô÷Ì€ÍjîÐ' [ 949.072896][T13837] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 949.569523][T13837] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 949.593103][T13837] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 949.602164][T13837] pit: kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 949.616141][T13837] pit: kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 950.492379][T13837] pit: kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 950.552244][T13837] pit: kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 950.562997][T13837] pit: kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 950.597381][T13837] pit: kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 950.640520][T13837] pit: kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 951.061337][T13862] kvm [13849]: vcpu2, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x2, nop [ 951.994379][T13875] loop8: detected capacity change from 0 to 8 [ 952.066416][T13875] squashfs: Unknown parameter '~yô÷Ì€ÍjîÐ' [ 953.121001][T13885] autofs4:pid:13885:autofs_fill_super: called with bogus options [ 954.125949][T13889] xt_CT: You must specify a L4 protocol and not use inversions on it [ 955.520912][T13901] binder_alloc: 13900: binder_alloc_buf, no vma [ 962.390265][T13987] netlink: 'syz.3.1946': attribute type 1 has an invalid length. [ 962.625889][T13987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 962.713248][T13997] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 963.451253][T13995] bond1: (slave erspan0): making interface the new active one [ 963.497793][T13995] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 963.703721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 966.756677][T14026] binder_alloc: 14025: binder_alloc_buf, no vma [ 967.900816][T13008] Process accounting resumed [ 967.953056][T14043] Process accounting resumed [ 969.255805][T13013] Bluetooth: hci0: command 0x0406 tx timeout [ 971.000263][T14073] xt_HMARK: proto mask must be zero with L3 mode [ 971.510789][T14087] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 974.184251][T14114] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1973'. [ 976.437851][ T26] audit: type=1400 audit(1751343949.294:69): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=14128 comm="syz.0.1976" [ 976.862096][T14133] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.871292][T14133] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.880036][T14133] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 976.888748][T14133] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 978.866561][ T21] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 980.375815][ T21] usb 7-1: device not accepting address 4, error -71 [ 981.620807][T14194] xt_HMARK: proto mask must be zero with L3 mode [ 982.591597][T14201] netlink: 'syz.5.1991': attribute type 2 has an invalid length. [ 982.599443][T14201] netlink: 'syz.5.1991': attribute type 1 has an invalid length. [ 982.607324][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1991'. [ 982.849802][T12694] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 982.936061][T12694] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 988.505812][ T4232] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 989.355914][ T4232] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.088446][ T4232] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 990.099846][ T4232] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 990.110949][ T4232] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 990.460591][ T4232] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 990.477181][T14290] qrtr: Invalid version 6 [ 990.493947][ T4232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.535286][ T4232] usb 9-1: Product: syz [ 990.566114][ T4232] usb 9-1: Manufacturer: syz [ 990.583632][ T4232] usb 9-1: SerialNumber: syz [ 990.615962][T14256] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 991.330422][T12694] kernel read not supported for file /vcs (pid: 12694 comm: kworker/0:2) [ 991.341075][T14307] netlink: 'syz.0.2011': attribute type 1 has an invalid length. [ 991.406735][T14307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 991.414399][T14308] netlink: 'syz.6.2010': attribute type 1 has an invalid length. [ 991.481352][T14308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 991.544138][T14310] bond1: (slave ip6gretap1): making interface the new active one [ 991.554319][T14310] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 991.564082][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 991.705929][ T4232] cdc_ncm 9-1:1.0: bind() failure [ 992.606930][ T23] usb 9-1: USB disconnect, device number 10 [ 992.846655][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.578300][T14357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 995.586405][T14357] IPv6: NLM_F_CREATE should be set when creating new route [ 996.046344][T14361] qrtr: Invalid version 6 [ 996.409785][T14379] QAT: failed to copy from user cfg_data. [ 998.055868][ T4308] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 998.114983][T14403] vivid-003: disconnect [ 998.139206][T14404] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 998.446812][ T4308] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 998.510774][ T4308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.709713][ T4308] usb 6-1: config 0 descriptor?? [ 998.906156][ T4308] gspca_main: spca508-2.14.0 probing 8086:0110 [ 999.277354][T14398] vivid-003: reconnect [ 999.375952][ T4308] gspca_spca508: reg_read err -71 [ 999.396075][ T4308] gspca_spca508: reg_read err -71 [ 999.415786][ T4308] gspca_spca508: reg_read err -71 [ 999.435731][ T4308] gspca_spca508: reg_read err -71 [ 999.455939][ T4308] gspca_spca508: reg write: error -71 [ 999.479701][ T4308] spca508: probe of 6-1:0.0 failed with error -71 [ 999.633389][ T4308] usb 6-1: USB disconnect, device number 7 [ 999.745967][T14417] netlink: 'syz.0.2035': attribute type 1 has an invalid length. [ 999.847257][T14422] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 999.873877][T14424] qrtr: Invalid version 6 [ 1002.374696][T13008] hid-generic 0006:0000:0005.0004: hidraw0: VIRTUAL HID v0.09 Device [syz0] on syz1 [ 1003.873188][T14498] overlayfs: failed to clone upperpath [ 1004.472846][T14508] qrtr: Invalid version 6 [ 1005.377803][T14512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2057'. [ 1005.796968][ T4232] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1006.236929][ T4232] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1006.334577][ T4232] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.463333][ T4232] usb 7-1: config 0 descriptor?? [ 1006.765870][ T4232] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00 [ 1006.784758][ T4232] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1007.030670][ T4232] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2 [ 1007.038251][ T4232] [drm] Initialized udl on minor 2 [ 1007.102882][ T4218] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1007.195845][ T4232] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err 0 [ 1007.218570][ T4232] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1007.454824][ T23] usb 7-1: USB disconnect, device number 6 [ 1007.465909][ T4232] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1007.498407][ T4232] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 1007.516028][ T4218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.527493][ T4232] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1007.557757][ T4218] usb 6-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1007.617721][ T4218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.687639][ T4218] usb 6-1: config 0 descriptor?? [ 1008.200100][ T4218] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 1008.219314][ T4218] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 1008.237126][ T4218] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 1008.257391][ T4218] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 1008.264475][ T4218] uclogic 0003:5543:0005.0005: unknown main item tag 0x0 [ 1008.305783][ T4218] uclogic 0003:5543:0005.0005: item fetching failed at offset 5/7 [ 1008.353402][ T4218] uclogic 0003:5543:0005.0005: parse failed [ 1008.372815][ T4218] uclogic: probe of 0003:5543:0005.0005 failed with error -22 [ 1008.446082][ T4218] usb 6-1: USB disconnect, device number 8 [ 1010.865837][ T21] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1011.266125][ T21] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1011.294090][ T21] usb 6-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 1011.314550][ T21] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1011.323846][ T21] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1011.487005][ T21] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1011.511160][ T21] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1011.525921][ T21] usb 6-1: Product: syz [ 1011.530128][ T21] usb 6-1: Manufacturer: syz [ 1011.613051][ T21] cdc_wdm 6-1:1.0: skipping garbage [ 1011.635816][ T21] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 1011.736588][ T4218] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1011.913179][ T21] usb 6-1: USB disconnect, device number 9 [ 1012.125823][ T4218] usb 7-1: config 0 has an invalid interface number: 175 but max is 0 [ 1012.138542][ T4218] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.165647][ T4218] usb 7-1: config 0 has no interface number 0 [ 1012.171873][ T4218] usb 7-1: config 0 interface 175 altsetting 0 has an invalid endpoint with address 0xBC, skipping [ 1012.217780][ T4232] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1012.236958][ T4232] Bluetooth: hci0: Injecting HCI hardware error event [ 1012.262738][ T4185] Bluetooth: hci0: hardware error 0x00 [ 1012.545761][ T4218] usb 7-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 1012.776076][ T4218] usb 7-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 1012.785170][ T4218] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.810141][T14649] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2083'. [ 1012.841634][ T4218] usb 7-1: Product: syz [ 1012.855664][ T4218] usb 7-1: Manufacturer: syz [ 1012.880734][ T4218] usb 7-1: SerialNumber: syz [ 1012.920825][ T4218] usb 7-1: config 0 descriptor?? [ 1013.039777][ T4218] symbolserial 7-1:0.175: required endpoints missing [ 1013.245700][T12976] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1013.251363][ T4218] usb 7-1: USB disconnect, device number 7 [ 1014.255395][T12976] usb 9-1: Using ep0 maxpacket: 16 [ 1014.745502][T14672] netlink: 'syz.5.2087': attribute type 2 has an invalid length. [ 1014.765898][T14672] netlink: 'syz.5.2087': attribute type 2 has an invalid length. [ 1014.785805][T12976] usb 9-1: config 0 has an invalid interface number: 160 but max is 0 [ 1014.820052][T12976] usb 9-1: config 0 has no interface number 0 [ 1015.015859][T12976] usb 9-1: New USB device found, idVendor=1164, idProduct=1e8c, bcdDevice=c9.10 [ 1016.166339][T12976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.175015][T12976] usb 9-1: Product: syz [ 1016.179746][T12976] usb 9-1: Manufacturer: syz [ 1016.184371][T12976] usb 9-1: SerialNumber: syz [ 1016.213877][T12976] usb 9-1: config 0 descriptor?? [ 1016.235756][T12976] usb 9-1: can't set config #0, error -71 [ 1016.245178][T12976] usb 9-1: USB disconnect, device number 11 [ 1017.882990][T14709] hfsplus: unable to find HFS+ superblock [ 1018.985692][ T4232] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 1019.594638][ T4232] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1019.645878][ T4232] usb 6-1: not running at top speed; connect to a high speed hub [ 1020.895841][ T4232] usb 6-1: config 92 has an invalid interface number: 235 but max is 1 [ 1020.914482][ T4232] usb 6-1: config 92 has an invalid interface number: 158 but max is 1 [ 1020.943479][ T4232] usb 6-1: config 92 has no interface number 0 [ 1020.951584][ T4232] usb 6-1: config 92 has no interface number 1 [ 1020.964405][ T4232] usb 6-1: config 92 interface 158 has no altsetting 0 [ 1021.205805][ T4232] usb 6-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=52.59 [ 1021.237369][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.260780][ T4232] usb 6-1: Product: syz [ 1021.265038][ T4232] usb 6-1: Manufacturer: syz [ 1021.315747][ T4232] usb 6-1: can't set config #92, error -71 [ 1021.330435][ T4232] usb 6-1: USB disconnect, device number 10 [ 1021.495767][ T23] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1024.017155][T14815] hfsplus: unable to find HFS+ superblock [ 1024.835795][ T23] usb 9-1: device descriptor read/all, error -71 [ 1031.735827][ T4232] Bluetooth: hci4: command 0x0406 tx timeout [ 1032.532014][T14866] lo speed is unknown, defaulting to 1000 [ 1032.539053][T14866] lo speed is unknown, defaulting to 1000 [ 1032.548079][T14866] lo speed is unknown, defaulting to 1000 [ 1032.559382][T14866] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1032.572643][T14866] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1032.613877][T14866] lo speed is unknown, defaulting to 1000 [ 1032.621348][T14866] lo speed is unknown, defaulting to 1000 [ 1032.628259][T14866] lo speed is unknown, defaulting to 1000 [ 1032.634913][T14866] lo speed is unknown, defaulting to 1000 [ 1032.642082][T14866] lo speed is unknown, defaulting to 1000 [ 1032.648714][T14866] lo speed is unknown, defaulting to 1000 [ 1032.976066][T14881] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1035.580687][T14905] tipc: Started in network mode [ 1035.580723][T14905] tipc: Node identity 8e07b1d86e71, cluster identity 4711 [ 1035.580987][T14905] tipc: Enabled bearer , priority 0 [ 1035.693096][T14905] device syzkaller0 entered promiscuous mode [ 1036.076005][T14904] tipc: Resetting bearer [ 1036.237489][T14904] tipc: Disabling bearer [ 1036.632750][T14922] lo speed is unknown, defaulting to 1000 [ 1037.253356][T14935] qrtr: Invalid version 6 [ 1038.126832][T14922] chnl_net:caif_netlink_parms(): no params data found [ 1038.535721][ T4232] Bluetooth: hci1: command 0x0409 tx timeout [ 1038.645774][T14922] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.654206][T14922] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.662562][T14922] device bridge_slave_0 entered promiscuous mode [ 1038.671429][T14922] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.678650][T14922] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.686862][T14922] device bridge_slave_1 entered promiscuous mode [ 1038.805291][T14922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.955262][T14922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.705733][ T5478] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1039.797501][T14922] team0: Port device team_slave_0 added [ 1039.843925][T14922] team0: Port device team_slave_1 added [ 1039.956366][ T5478] usb 6-1: Using ep0 maxpacket: 8 [ 1040.085751][ T5478] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1040.125167][ T5478] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1040.967372][ T5478] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1040.977720][ T5478] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1040.988072][ T5478] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1041.001537][ T5478] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1041.010903][ T5478] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.028369][ T1335] Bluetooth: hci1: command 0x041b tx timeout [ 1041.156138][T14922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.185733][T14922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.275786][ T5478] usb 6-1: usb_control_msg returned -32 [ 1041.281585][ T5478] usbtmc 6-1:16.0: can't read capabilities [ 1041.287848][T14922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.327724][T14922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.365390][T14922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1041.433158][T14922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1041.500321][T14922] device hsr_slave_0 entered promiscuous mode [ 1041.855846][T14982] usbtmc 6-1:16.0: control status returned 0 [ 1041.866926][T14922] device hsr_slave_1 entered promiscuous mode [ 1041.884991][T14922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1041.931845][T14922] Cannot create hsr debugfs directory [ 1042.058486][ T21] usb 6-1: USB disconnect, device number 11 [ 1042.944360][T14996] lo speed is unknown, defaulting to 1000 [ 1043.147562][T13008] Bluetooth: hci1: command 0x040f tx timeout [ 1044.907578][T15021] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1045.175714][ T4232] Bluetooth: hci1: command 0x0419 tx timeout [ 1045.541433][T15029] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1045.772179][T14922] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1045.820455][T14922] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1045.861213][T14922] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1045.906560][T14922] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1046.002897][ T1481] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.635754][ T4308] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1047.146193][ T1481] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.185672][ T4308] usb 7-1: Using ep0 maxpacket: 32 [ 1047.291535][ T1481] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.375758][ T4308] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1047.409586][ T4308] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.446573][ T4308] usb 7-1: config 0 descriptor?? [ 1047.563958][ T1481] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1047.815988][ T4308] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1047.990746][ T4308] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1048.119063][ T4308] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1048.359568][T14922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.396544][ T4308] usb 7-1: media controller created [ 1048.442805][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1048.457032][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1048.466491][ T4308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1048.504026][T14922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.543535][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1048.554307][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1048.595978][ T4308] az6027: usb out operation failed. (-71) [ 1048.616287][T14903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.620281][ T4308] az6027: usb out operation failed. (-71) [ 1048.623383][T14903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.484301][ T4308] stb0899_attach: Driver disabled by Kconfig [ 1049.493994][ T4308] az6027: no front-end attached [ 1049.493994][ T4308] [ 1049.503011][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1049.515759][ T4308] az6027: usb out operation failed. (-71) [ 1049.521504][ T4308] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1049.528126][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1049.539289][ T4308] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 1049.555963][ T4308] dvb-usb: schedule remote query interval to 400 msecs. [ 1049.562924][ T4308] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1049.575446][ T4308] usb 7-1: USB disconnect, device number 8 [ 1049.681773][T14903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.688890][T14903] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.946918][T14922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1049.967966][T14922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1050.054116][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1050.317028][ T4308] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1050.346381][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1051.037164][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1051.056476][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1051.077470][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1051.092280][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1051.101772][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1051.117483][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1051.240604][T15089] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1051.261030][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1051.314930][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1051.352420][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1051.492392][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1051.522614][T14903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1052.889040][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1052.899466][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1052.972095][T14922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.255487][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.214470][ T21] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1057.415709][ T21] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1057.456720][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1057.465786][ T21] usb 9-1: can't read configurations, error -71 [ 1057.488809][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1057.622541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1057.808322][T15159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1057.891025][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1057.954156][T14922] device veth0_vlan entered promiscuous mode [ 1058.851607][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1058.861468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1058.881225][ T1481] bond1: (slave erspan0): Releasing active interface [ 1059.317148][T14922] device veth1_vlan entered promiscuous mode [ 1059.578162][ T21] Process accounting resumed [ 1059.623747][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1059.643223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1059.690214][T14922] device veth0_macvtap entered promiscuous mode [ 1059.712567][T14922] device veth1_macvtap entered promiscuous mode [ 1060.102588][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1060.504268][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1060.662353][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.720903][T15195] Process accounting resumed [ 1060.805064][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.956803][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.967736][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.977810][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.995982][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.758633][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1061.784027][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.079597][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.100890][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.114622][T14922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1062.131979][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.153153][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.234846][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.245435][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.255914][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.266638][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.276751][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.287450][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.393014][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1062.489623][T15230] binder: 15224:15230 ioctl c0306201 200000000240 returned -11 [ 1062.494952][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.529629][T14922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.573374][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1062.737821][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1062.814308][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1062.984575][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1064.845926][T15251] overlayfs: failed to resolve './file1': -2 [ 1065.466184][T14922] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.497570][T14922] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.581442][T14922] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.745052][T14922] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.909138][T15245] lo speed is unknown, defaulting to 1000 [ 1067.420537][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.483875][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.525084][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.553899][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1067.591826][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1067.661270][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1068.058222][ T1481] device hsr_slave_0 left promiscuous mode [ 1068.092498][ T1481] device hsr_slave_1 left promiscuous mode [ 1068.325147][ T1481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.343271][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1068.363996][ T1481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1068.404005][ T1481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1068.486690][ T1481] device bridge_slave_1 left promiscuous mode [ 1068.523435][ T1481] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.609503][ T1481] device bridge_slave_0 left promiscuous mode [ 1068.639050][ T1481] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.766812][ T1481] device veth1_macvtap left promiscuous mode [ 1068.830470][ T1481] device veth0_macvtap left promiscuous mode [ 1068.869961][ T1481] device veth1_vlan left promiscuous mode [ 1068.936767][ T1481] device veth0_vlan left promiscuous mode [ 1070.079535][T15318] overlayfs: failed to resolve './file1': -2 [ 1070.118557][ T1481] bond1 (unregistering): Released all slaves [ 1070.705919][ T1481] team0 (unregistering): Port device team_slave_1 removed [ 1070.720081][ T1481] team0 (unregistering): Port device team_slave_0 removed [ 1070.747301][ T1481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1070.765239][ T1481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1071.623710][ T1481] bond0 (unregistering): Released all slaves [ 1071.882194][T15347] binder: 15346:15347 ioctl c0306201 200000000240 returned -11 [ 1072.083283][T15355] tmpfs: Unknown parameter 'usrquota' [ 1072.294625][T15357] loop6: detected capacity change from 0 to 50 [ 1072.319595][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.330773][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.365708][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.376647][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.396571][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.407571][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.463093][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.474076][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.485350][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.496386][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.539302][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.550270][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.565215][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.576132][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.614086][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.625072][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.682195][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.693174][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.705653][T15357] ldm_validate_partition_table(): Disk read failed. [ 1072.755673][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1072.766617][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1072.808169][T15357] Dev loop6: unable to read RDB block 0 [ 1072.821401][T15357] loop6: unable to read partition table [ 1072.838797][T15357] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1073.087852][T15358] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1076.483230][T15412] binder: 15411:15412 ioctl c0306201 200000000240 returned -11 [ 1078.371812][T15451] hfsplus: unable to find HFS+ superblock [ 1083.105682][ T1335] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1083.625960][ T1335] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1083.642614][ T1335] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1084.460439][ T1335] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1084.630613][ T1335] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1084.644813][T15571] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2273'. [ 1084.668961][ T1335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.708203][ T1335] usb 9-1: Product: syz [ 1084.742192][ T1335] usb 9-1: Manufacturer: syz [ 1084.766076][ T1335] usb 9-1: SerialNumber: syz [ 1084.838317][ T1335] hub 9-1:1.0: bad descriptor, ignoring hub [ 1084.847530][ T1335] hub: probe of 9-1:1.0 failed with error -5 [ 1085.485994][ T1335] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1085.493879][T15590] tmpfs: Unknown parameter 'usrquota' [ 1086.303809][T15592] capability: warning: `syz.0.2277' uses 32-bit capabilities (legacy support in use) [ 1086.559259][T15587] overlayfs: unrecognized mount option "workdir" or missing value [ 1086.642214][T15604] qrtr: Invalid version 6 [ 1086.657358][ T1335] usb 9-1: USB disconnect, device number 16 [ 1086.771799][ T1335] usblp0: removed [ 1087.650462][ T13] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1088.628090][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 1088.633736][T12976] Bluetooth: hci1: command 0x0405 tx timeout [ 1088.765752][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1088.801368][ T13] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1088.831619][ T13] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1088.865156][ T13] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1088.886755][ T13] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.954344][ T13] usb 7-1: config 0 descriptor?? [ 1089.535803][ T13] hid (null): nested delimiters [ 1089.901103][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1089.965885][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1089.972629][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1090.041143][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1090.080838][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1090.099606][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1090.136959][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1090.143685][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1090.235134][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1090.316232][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1090.343745][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1090.352248][T15659] qrtr: Invalid version 6 [ 1091.225005][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.232484][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.239698][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.355010][T15664] netlink: 'syz.8.2295': attribute type 1 has an invalid length. [ 1091.376267][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.383039][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.433487][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.449859][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.458200][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.467182][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.474097][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.481638][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.488702][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.495907][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.502756][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.510199][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.545911][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.552731][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.559550][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.566360][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.573126][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.580063][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.586873][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.593804][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.642128][T15664] device bond1 entered promiscuous mode [ 1091.648687][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1091.663964][T15664] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1091.678239][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.493246][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.529937][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.555266][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.568149][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.585215][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.592184][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.609267][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.620647][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.706551][T15678] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1092.835688][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.852050][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.867873][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.874765][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.897959][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.905005][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.925933][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.946656][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1092.953617][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.442927][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.491061][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.520858][T15691] binder: 15690:15691 ioctl 4018620d 0 returned -22 [ 1093.535284][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.549404][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.561703][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.594512][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x1 [ 1093.631288][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.652592][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.661026][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.692438][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.709461][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x2 [ 1093.719002][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x1 [ 1093.729578][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.739236][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.749772][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1093.952276][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.352218][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.381666][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.405767][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.412709][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.425711][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.432548][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.445701][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.452782][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.472912][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.489279][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.498766][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.507665][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.514709][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.527662][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.534466][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.544778][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.554466][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.565169][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.574340][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.664798][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.693522][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.715489][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.723717][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.733377][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.741119][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.752567][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.761826][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.774972][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.783263][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.794721][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.802538][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x6 [ 1094.813688][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x3 [ 1094.824785][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.836918][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.848922][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.857129][ T13] kye 0003:0458:5011.0006: unknown main item tag 0x0 [ 1094.863936][ T13] kye 0003:0458:5011.0006: nested delimiters [ 1094.870298][ T13] kye 0003:0458:5011.0006: item 0 2 2 10 parsing failed [ 1094.877761][ T13] kye 0003:0458:5011.0006: parse failed [ 1094.883585][ T13] kye: probe of 0003:0458:5011.0006 failed with error -22 [ 1094.907046][ T13] usb 7-1: USB disconnect, device number 9 [ 1094.951649][T15667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1094.995157][T15667] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1095.073419][T15667] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1095.089900][T15714] qrtr: Invalid version 6 [ 1095.123131][T15667] bond1: (slave ip6gre1): making interface the new active one [ 1095.147186][T15667] device ip6gre1 entered promiscuous mode [ 1095.167652][T15667] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 1095.207248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1097.615763][T15743] binder: 15742:15743 ioctl 4018620d 0 returned -22 [ 1097.692145][T15744] binder: 15733:15744 ioctl c0306201 0 returned -14 [ 1098.057407][T15743] binder: 15742:15743 ioctl c0306201 200000000240 returned -11 [ 1099.350501][T15754] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1104.110355][T15804] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1104.474686][T15811] hfsplus: unable to find HFS+ superblock [ 1106.748206][T15851] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1106.950267][T15858] binder: BINDER_SET_CONTEXT_MGR already set [ 1106.977747][T15858] binder: 15856:15858 ioctl 4018620d 200000000040 returned -16 [ 1107.012604][T15858] binder: 15856:15858 ioctl c0306201 200000000240 returned -11 [ 1110.701110][T15884] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1115.658319][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1138.364310][T16225] overlayfs: failed to resolve './file1': -2 [ 1150.664485][T16378] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1150.687805][T16378] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1159.177451][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 1175.892604][T16644] lo speed is unknown, defaulting to 1000 [ 1177.101221][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.458215][T16716] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1183.495611][T16716] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1186.567534][T16746] xt_HMARK: proto mask must be zero with L3 mode [ 1186.862629][T16752] netlink: 'syz.9.2528': attribute type 2 has an invalid length. [ 1186.870928][T16752] netlink: 'syz.9.2528': attribute type 1 has an invalid length. [ 1186.879670][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2528'. [ 1187.608962][T16760] qrtr: Invalid version 6 [ 1193.262137][T16837] qrtr: Invalid version 6 [ 1195.400670][T16867] hfsplus: unable to find HFS+ superblock [ 1195.586387][ T13] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1195.720992][T16873] xt_HMARK: proto mask must be zero with L3 mode [ 1196.025022][T16879] netlink: 'syz.6.2551': attribute type 2 has an invalid length. [ 1196.033232][T16879] netlink: 'syz.6.2551': attribute type 1 has an invalid length. [ 1196.041459][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2551'. [ 1196.217176][ T13] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1196.339892][ T13] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1196.706633][ T13] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1196.728807][ T13] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.762831][ T13] usb 10-1: Product: syz [ 1196.774271][ T13] usb 10-1: Manufacturer: syz [ 1196.791098][ T13] usb 10-1: SerialNumber: syz [ 1196.896284][T16856] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1197.885892][ T13] cdc_ncm 10-1:1.0: bind() failure [ 1197.942345][ T13] usb 10-1: USB disconnect, device number 2 [ 1199.013886][T16906] qrtr: Invalid version 6 [ 1202.949363][T16948] binder_alloc: 16947: binder_alloc_buf, no vma [ 1203.817861][T16968] hfsplus: unable to find HFS+ superblock [ 1206.735953][T17007] binder_alloc: 16998: binder_alloc_buf, no vma [ 1212.318541][T17080] binder_alloc: 17075: binder_alloc_buf, no vma [ 1214.835659][ T4218] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1215.896394][ T4218] usb 10-1: Using ep0 maxpacket: 16 [ 1216.216904][ T4218] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.296464][ T4218] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.389835][ T4218] usb 10-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 1216.461011][ T4218] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.463113][T17148] binder_alloc: 17147: binder_alloc_buf, no vma [ 1217.508507][ T4218] usb 10-1: config 0 descriptor?? [ 1217.625707][ T4218] usb 10-1: can't set config #0, error -71 [ 1217.642182][ T4218] usb 10-1: USB disconnect, device number 3 [ 1222.799186][T17204] hfsplus: unable to find HFS+ superblock [ 1224.509378][T17210] binder_alloc: 17209: binder_alloc_buf, no vma [ 1229.934184][T17261] binder_alloc: 17260: binder_alloc_buf, no vma [ 1231.812259][T17276] loop6: detected capacity change from 0 to 524287999 [ 1231.837545][ C0] print_req_error: 13 callbacks suppressed [ 1231.837557][ C0] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 1231.872355][ C1] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1231.884010][ C1] buffer_io_error: 13 callbacks suppressed [ 1231.884023][ C1] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 1234.227701][T17295] fuse: Bad value for 'fd' [ 1234.394484][T17292] ipt_CLUSTERIP: Please specify destination IP [ 1237.016824][ C1] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.028496][ C1] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 1238.153756][T17316] hfsplus: unable to find HFS+ superblock [ 1238.548435][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.682908][T17342] APIC base relocation is unsupported by KVM [ 1241.588210][T17362] input: syz1 as /devices/virtual/input/input14 [ 1247.797715][T17431] ksmbd: Unknown IPC event: 6, ignore. [ 1251.560511][T17450] lo speed is unknown, defaulting to 1000 [ 1251.735602][ T1111] Bluetooth: hci5: command 0x0409 tx timeout [ 1253.975185][ T4308] Bluetooth: hci5: command 0x041b tx timeout [ 1254.408247][T17450] chnl_net:caif_netlink_parms(): no params data found [ 1255.752502][T17450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.765551][T17450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.815679][T17450] device bridge_slave_0 entered promiscuous mode [ 1256.248446][ T1111] Bluetooth: hci5: command 0x040f tx timeout [ 1256.548910][T17450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.556535][T17450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.590951][T17450] device bridge_slave_1 entered promiscuous mode [ 1256.805883][T17547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1257.493424][T17557] ALSA: mixer_oss: invalid index 40000 [ 1258.794710][ T4218] Bluetooth: hci5: command 0x0419 tx timeout [ 1258.876507][T17450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.928821][T17450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.132419][T17450] team0: Port device team_slave_0 added [ 1259.156818][T17450] team0: Port device team_slave_1 added [ 1260.805636][T17450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.067191][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.151118][T17450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.164567][T17450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.171697][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.174825][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2706'. [ 1261.198910][T17450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.375687][ T4218] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1261.660937][ T4218] usb 6-1: Using ep0 maxpacket: 16 [ 1261.696430][T17590] lo speed is unknown, defaulting to 1000 [ 1261.778613][T17450] device hsr_slave_0 entered promiscuous mode [ 1261.794853][T17450] device hsr_slave_1 entered promiscuous mode [ 1262.075734][ T4218] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1262.084830][ T4218] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.112795][ T4218] usb 6-1: Product: syz [ 1262.131424][ T4218] usb 6-1: Manufacturer: syz [ 1262.137748][ T4218] usb 6-1: SerialNumber: syz [ 1262.172542][ T4218] usb 6-1: config 0 descriptor?? [ 1262.247089][ T4218] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1262.416852][T17614] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1262.473473][T17614] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1263.291197][T17624] lo speed is unknown, defaulting to 1000 [ 1263.309888][ T4218] usb 6-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 1263.335080][ T4218] usb 6-1: USB disconnect, device number 12 [ 1263.354333][ T4218] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 1263.364771][ T4218] visor 6-1:0.0: device disconnected [ 1264.893358][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2716'. [ 1265.125796][ T4308] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1265.397473][ T4308] usb 6-1: Using ep0 maxpacket: 8 [ 1265.406047][T17450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1265.417099][T17450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1265.435926][T17450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1265.463019][T17450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1265.585642][ T4308] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1265.683354][ T4308] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1265.698638][ T4308] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1266.639852][ T4308] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1266.656553][ T4308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.671297][ T4308] usb 6-1: Product: syz [ 1266.678796][ T4308] usb 6-1: Manufacturer: syz [ 1266.683551][ T4308] usb 6-1: SerialNumber: syz [ 1266.763105][ T4308] usb 6-1: config 0 descriptor?? [ 1266.908500][ T4308] powermate: probe of 6-1:0.0 failed with error -22 [ 1268.582544][ T4308] usb 6-1: USB disconnect, device number 13 [ 1268.591958][T17450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.734405][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1268.761364][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1268.891321][T17450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.062208][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1269.072076][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1269.141679][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.148792][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1269.236491][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1269.448513][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1269.472448][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1269.490809][T10249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.497997][T10249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.456406][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1271.483651][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1271.542513][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1271.703578][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1272.835380][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1272.939454][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1273.116906][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1275.249625][T14524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1275.275878][T14524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1275.459533][T17450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1275.470880][T17450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1275.522030][T14524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1275.551540][T14524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1275.783294][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1275.799698][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1275.831750][T17450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.015826][T13008] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1276.849077][T17772] hub 9-0:1.0: USB hub found [ 1276.862450][T17772] hub 9-0:1.0: 1 port detected [ 1277.407851][T13008] usb 7-1: Using ep0 maxpacket: 16 [ 1278.245757][T13008] usb 7-1: config 0 has no interfaces? [ 1278.481541][T13008] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1278.507077][T13008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.294472][T13008] usb 7-1: Product: syz [ 1280.347779][T13008] usb 7-1: Manufacturer: syz [ 1280.405460][T13008] usb 7-1: SerialNumber: syz [ 1280.517414][T13008] usb 7-1: config 0 descriptor?? [ 1280.568697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1280.580286][T13008] usb 7-1: can't set config #0, error -71 [ 1280.598973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1280.685369][T13008] usb 7-1: USB disconnect, device number 10 [ 1280.721780][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1280.737512][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1280.761193][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1280.791044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1281.717088][T17450] device veth0_vlan entered promiscuous mode [ 1281.732861][T17450] device veth1_vlan entered promiscuous mode [ 1281.816900][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1281.835440][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1281.898025][T17450] device veth0_macvtap entered promiscuous mode [ 1281.910461][T17796] lo speed is unknown, defaulting to 1000 [ 1281.937910][T17450] device veth1_macvtap entered promiscuous mode [ 1282.029191][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.085355][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.095944][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.124795][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.153663][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.188283][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.211769][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.222657][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.233234][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.244032][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.259686][T17450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1282.271401][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1282.291476][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1282.329593][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1282.349742][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1282.372239][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.383637][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.394016][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.405435][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.416101][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.426704][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.445383][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.463427][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.479844][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.499939][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.515306][T17450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.539515][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1282.557042][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1283.118515][T17450] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.469901][T17450] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.478714][T17450] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.487896][T17450] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.565596][T17837] ALSA: mixer_oss: invalid index 40000 [ 1284.650803][ T4160] Bluetooth: hci1: command 0x0409 tx timeout [ 1285.795796][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.804208][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.910306][T10249] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.957327][T10249] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.998928][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1286.014798][T17796] chnl_net:caif_netlink_parms(): no params data found [ 1286.059585][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1286.222061][ T23] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1286.266806][T17796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.317486][T17796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.357112][T17796] device bridge_slave_0 entered promiscuous mode [ 1286.394699][T17796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.435079][T17796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.656446][T17796] device bridge_slave_1 entered promiscuous mode [ 1286.896955][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 1286.906195][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 1288.126477][T17796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.184216][T17796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1288.308154][T17796] team0: Port device team_slave_0 added [ 1288.537420][T17796] team0: Port device team_slave_1 added [ 1288.629905][T17796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1288.644287][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.678468][T17796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1288.856759][T17796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1288.918720][T17796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1288.948570][ T23] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1288.971226][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.979356][ T23] usb 7-1: Product: syz [ 1288.983643][T17796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1288.984609][T17917] netlink: 'syz.5.2763': attribute type 2 has an invalid length. [ 1289.033956][ T23] usb 7-1: Manufacturer: syz [ 1289.038609][ T23] usb 7-1: SerialNumber: syz [ 1289.058037][ T23] usb 7-1: config 0 descriptor?? [ 1289.120391][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 1289.215719][ T23] usb 7-1: can't set config #0, error -71 [ 1289.232395][ T23] usb 7-1: USB disconnect, device number 11 [ 1289.536117][ T4279] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 1289.889686][T17796] device hsr_slave_0 entered promiscuous mode [ 1289.928513][T17796] device hsr_slave_1 entered promiscuous mode [ 1290.001554][T17796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1290.007771][ T4279] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1290.045934][T17796] Cannot create hsr debugfs directory [ 1290.872406][ T4279] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 1290.883610][ T4279] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1291.087584][ T4279] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1291.097042][ T4279] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.120664][ T4279] usb 6-1: Product: syz [ 1291.131804][ T4279] usb 6-1: Manufacturer: syz [ 1291.143638][ T4279] usb 6-1: SerialNumber: syz [ 1291.166971][ T4279] usb 6-1: config 0 descriptor?? [ 1291.204115][T17917] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1291.345360][T17849] Bluetooth: hci1: command 0x0419 tx timeout [ 1291.516918][T17914] input: syz0 as /devices/virtual/input/input15 [ 1291.686284][T17796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1291.748052][T17796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1292.361956][T17796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1292.585241][T17796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1293.170592][T17796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1293.204207][T12976] usb 6-1: USB disconnect, device number 14 [ 1293.239607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1293.250793][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1293.271588][T17796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.305768][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1293.326268][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1293.346993][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.354171][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.478054][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1293.504164][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1293.529875][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1293.560484][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.567779][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.588258][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1293.603278][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1293.685482][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1293.696371][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1293.706780][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1293.747163][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1294.743496][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1294.829118][T17796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1294.902481][T17796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1294.922580][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1294.957468][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1295.227683][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1295.423195][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1295.606110][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1297.368478][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1297.385054][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1297.450994][T17796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.644250][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1297.657352][ T1481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1297.724804][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1297.765988][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1297.870714][T17796] device veth0_vlan entered promiscuous mode [ 1297.911510][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1297.939824][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1298.003674][T17796] device veth1_vlan entered promiscuous mode [ 1298.137195][T17796] device veth0_macvtap entered promiscuous mode [ 1298.218461][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1298.238944][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1298.471589][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1298.510624][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1298.551085][T17796] device veth1_macvtap entered promiscuous mode [ 1298.587635][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1298.599929][T10249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1298.656503][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.690636][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.729981][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.773885][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.815554][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.858309][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.883440][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.897382][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.914182][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.930576][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.943055][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1298.961579][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.983482][T17796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1298.994553][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1299.012252][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1299.031834][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.043994][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.054675][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.065778][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.075981][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.089844][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.099795][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.196360][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.211917][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.222851][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.232791][T17796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1299.243774][T17796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1299.352263][T17796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1299.393132][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1299.435739][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1299.471817][T17796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.500662][T17796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.541869][T17796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.575828][T17796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.575946][T17849] Bluetooth: hci1: command 0x0405 tx timeout [ 1300.834773][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.864704][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.882788][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.238698][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.253253][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.963517][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1301.983529][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1303.274960][T18088] qrtr: Invalid version 6 [ 1306.609114][ T7] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1308.376032][ T21] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 1308.458498][ T7] usb 9-1: Using ep0 maxpacket: 8 [ 1308.801249][ T21] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1308.855514][ T21] usb 6-1: config 0 has no interface number 0 [ 1309.014176][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1309.174829][ T21] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1309.240424][ T21] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1309.303527][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.331703][ T21] usb 6-1: config 0 descriptor?? [ 1309.346612][ T7] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1309.354943][ T7] usb 9-1: config 179 has no interface number 0 [ 1309.366582][T18128] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1309.378576][ T7] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1309.401965][ T7] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1309.405721][ T21] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1309.472344][ T7] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1309.522998][ T7] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1309.556753][ T7] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1309.591427][ T7] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1309.618459][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.429984][T18161] dlm: plock device version mismatch: kernel (1.2.0), user (1272176641.32704.0) [ 1311.001793][ T26] audit: type=1800 audit(1751344282.038:70): pid=18161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2810" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1311.002343][T18161] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 1311.002412][T18161] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 1311.002444][T18161] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1311.090973][T18161] syz.6.2810 (18161) used greatest stack depth: 18304 bytes left [ 1311.177043][T17849] usb 6-1: USB disconnect, device number 15 [ 1311.551041][ T7] usb 9-1: can't set config #179, error -71 [ 1311.592868][ T7] usb 9-1: USB disconnect, device number 17 [ 1317.171353][T17849] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1317.524256][T17849] usb 5-1: Using ep0 maxpacket: 8 [ 1318.144439][T17849] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1319.051674][T17849] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1319.063077][T17849] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1319.073297][T17849] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1319.093987][T17849] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1319.103337][T17849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.470380][T17849] usb 5-1: GET_CAPABILITIES returned 0 [ 1319.491690][T17849] usbtmc 5-1:16.0: can't read capabilities [ 1319.835302][T17849] usb 5-1: USB disconnect, device number 4 [ 1324.356306][T12694] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1325.073189][T18292] device syzkaller1 entered promiscuous mode [ 1325.328245][T12694] usb 7-1: Using ep0 maxpacket: 16 [ 1326.536333][T12694] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.547974][T12694] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.557873][T12694] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1326.564759][T12694] usb 7-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1326.573878][T12694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.597319][T12694] usb 7-1: config 0 descriptor?? [ 1327.528907][T12694] apple 0003:05AC:0247.0007: unexpected long global item [ 1327.805603][T12694] apple 0003:05AC:0247.0007: parse failed [ 1328.151093][T12694] apple: probe of 0003:05AC:0247.0007 failed with error -22 [ 1328.174657][T12694] usb 7-1: USB disconnect, device number 12 [ 1329.938706][T14524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.136406][T14524] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.419239][T14524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1330.822242][T14524] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.686679][T14524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1332.717478][T18377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1332.811740][T14524] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.865950][T18377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1333.070262][T18386] binder: 18375:18386 ioctl c0306201 0 returned -14 [ 1334.059637][T14524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1334.236139][T14524] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.335484][T18405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2862'. [ 1335.859269][T14524] bond1: (slave ip6gretap1): Releasing active interface [ 1336.875597][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2865'. [ 1337.557944][T18452] binder: 18446:18452 ioctl c0306201 0 returned -14 [ 1340.711896][T18481] xt_HMARK: proto mask must be zero with L3 mode [ 1342.162352][T18492] netlink: 'syz.4.2881': attribute type 2 has an invalid length. [ 1342.170282][T18492] netlink: 'syz.4.2881': attribute type 1 has an invalid length. [ 1342.178085][T18492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2881'. [ 1343.294178][T14524] device hsr_slave_0 left promiscuous mode [ 1343.399914][T14524] device hsr_slave_1 left promiscuous mode [ 1343.506800][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.554470][T14524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1343.565236][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1343.579435][T14524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1343.598829][T14524] device bridge_slave_1 left promiscuous mode [ 1343.605239][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1343.613775][T14524] device bridge_slave_0 left promiscuous mode [ 1343.620113][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.658389][T14524] device veth1_macvtap left promiscuous mode [ 1343.665289][T14524] device veth0_macvtap left promiscuous mode [ 1343.671353][T14524] device veth1_vlan left promiscuous mode [ 1343.679026][T14524] device veth0_vlan left promiscuous mode [ 1343.868641][T18509] binder: 18505:18509 ioctl c0306201 0 returned -14 [ 1344.971709][T14524] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1345.077924][T14524] bond2 (unregistering): Released all slaves [ 1345.656240][T14524] bond1 (unregistering): Released all slaves [ 1347.854591][T18544] netlink: 'syz.1.2893': attribute type 2 has an invalid length. [ 1347.862453][T18544] netlink: 'syz.1.2893': attribute type 1 has an invalid length. [ 1347.870363][T18544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2893'. [ 1350.613897][T14524] team0 (unregistering): Port device team_slave_1 removed [ 1350.774609][T14524] team0 (unregistering): Port device team_slave_0 removed [ 1350.849928][T18557] binder: 18554:18557 ioctl c0306201 0 returned -14 [ 1351.675534][T14524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1351.691348][ T4279] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1351.880183][ T26] audit: type=1326 audit(1751344320.277:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18558 comm="syz.6.2897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc04df40929 code=0x0 [ 1351.992837][T14524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1352.823706][T14524] bond0 (unregistering): Released all slaves [ 1353.237922][T18526] lo speed is unknown, defaulting to 1000 [ 1353.505377][T18589] netlink: 'syz.6.2905': attribute type 2 has an invalid length. [ 1353.513197][T18589] netlink: 'syz.6.2905': attribute type 1 has an invalid length. [ 1353.521032][T18589] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2905'. [ 1353.613705][T17849] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1354.322662][T17849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1354.341955][T17849] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1354.612880][T18602] binder: 18597:18602 ioctl c0306201 0 returned -14 [ 1355.839494][T17849] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1355.849260][T17849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.871343][T17849] usb 2-1: Product: syz [ 1355.875862][T17849] usb 2-1: Manufacturer: syz [ 1355.880490][T17849] usb 2-1: SerialNumber: syz [ 1357.289682][T17849] usb 2-1: config 0 descriptor?? [ 1357.646080][T17849] usb 2-1: can't set config #0, error -71 [ 1357.678403][T17849] usb 2-1: USB disconnect, device number 3 [ 1359.358691][T18643] netlink: 'syz.1.2916': attribute type 2 has an invalid length. [ 1359.366537][T18643] netlink: 'syz.1.2916': attribute type 1 has an invalid length. [ 1359.374577][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2916'. [ 1361.817905][T18667] binder: 18659:18667 ioctl c0306201 0 returned -14 [ 1363.942976][T17849] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1364.220697][T17849] usb 7-1: Using ep0 maxpacket: 8 [ 1364.618642][T17849] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1364.648335][T17849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.648455][T17849] usb 7-1: Product: syz [ 1364.648546][T17849] usb 7-1: Manufacturer: syz [ 1364.648638][T17849] usb 7-1: SerialNumber: syz [ 1364.653367][T17849] usb 7-1: config 0 descriptor?? [ 1364.814132][T17849] gspca_main: se401-2.14.0 probing 047d:5003 [ 1365.919924][T17849] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1365.927809][T17849] se401: probe of 7-1:0.0 failed with error -71 [ 1365.937245][T17849] usb 7-1: USB disconnect, device number 13 [ 1366.855265][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1369.306394][T18772] binder: 18763:18772 unknown command 1074553619 [ 1369.313153][T18772] binder: 18763:18772 ioctl c0306201 200000000540 returned -22 [ 1372.913233][T14903] Bluetooth: hci4: Frame reassembly failed (-84) [ 1372.965704][ T4279] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 1374.366408][ T4279] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1374.437085][ T4279] usb 9-1: config 0 has no interface number 0 [ 1374.554881][ T4279] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1375.114382][ T4279] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1375.161813][ T4279] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1375.193130][ T4279] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.219878][ T4279] usb 9-1: config 0 descriptor?? [ 1375.245364][ T23] Bluetooth: hci4: command 0x1003 tx timeout [ 1375.251613][ T146] Bluetooth: hci4: sending frame failed (-49) [ 1375.319625][T18796] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1375.352306][ T4279] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1375.733243][T13008] usb 9-1: USB disconnect, device number 18 [ 1377.467103][ T4279] Bluetooth: hci4: command 0x1001 tx timeout [ 1377.477214][ T146] Bluetooth: hci4: sending frame failed (-49) [ 1378.455656][T14524] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.923075][ T23] Bluetooth: hci4: command 0x1009 tx timeout [ 1380.032515][ T6748] Bluetooth: hci5: command 0x0406 tx timeout [ 1380.523382][ T4175] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 1380.666695][T14524] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.199322][T18868] lo speed is unknown, defaulting to 1000 [ 1381.396213][T14524] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.660271][T14524] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.707215][T18907] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input16 [ 1384.130735][T18921] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1384.226299][T18921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1384.270970][T18921] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1384.419488][T18921] device bridge_slave_0 left promiscuous mode [ 1384.425830][T18921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.483792][T18921] device bridge_slave_1 left promiscuous mode [ 1384.490870][T18921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.522485][T18921] bond0: (slave bond_slave_0): Releasing backup interface [ 1384.556066][T18921] bond0: (slave bond_slave_1): Releasing backup interface [ 1384.754416][T18921] team0: Port device team_slave_0 removed [ 1385.381163][T18921] team0: Port device team_slave_1 removed [ 1385.387680][T18921] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1386.440402][T18921] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1386.476486][T18921] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1386.525572][T18921] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.957628][T18972] ALSA: mixer_oss: invalid index 40000 [ 1389.358038][T18974] lo speed is unknown, defaulting to 1000 [ 1389.554272][T18986] binder: 18981:18986 unknown command 0 [ 1389.610115][T18986] binder: 18981:18986 ioctl c0306201 2000000003c0 returned -22 [ 1392.275472][T14524] device hsr_slave_0 left promiscuous mode [ 1392.293972][T14524] device hsr_slave_1 left promiscuous mode [ 1392.348651][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.374896][T14524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.406476][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.426321][T14524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.451782][T14524] device bridge_slave_1 left promiscuous mode [ 1392.460665][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.484978][T14524] device bridge_slave_0 left promiscuous mode [ 1392.507000][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.565860][T14524] device veth1_macvtap left promiscuous mode [ 1392.589456][T14524] device veth0_macvtap left promiscuous mode [ 1392.607665][T14524] device veth1_vlan left promiscuous mode [ 1392.620622][T14524] device veth0_vlan left promiscuous mode [ 1393.409435][T14524] team0 (unregistering): Port device team_slave_1 removed [ 1393.462865][T14524] team0 (unregistering): Port device team_slave_0 removed [ 1393.486944][T14524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.506944][T14524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.671991][T14524] bond0 (unregistering): Released all slaves [ 1393.954666][T19067] xt_hashlimit: size too large, truncated to 1048576 [ 1393.967077][T19067] xt_hashlimit: overflow, try lower: 3/0 [ 1395.284506][T17849] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1395.321289][T17849] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1396.309976][T19080] hid-generic 0000:0000:0000.0008: pid 19080 passed too short report [ 1397.675106][T19118] lo speed is unknown, defaulting to 1000 [ 1399.423914][T19154] netlink: 'syz.8.3025': attribute type 2 has an invalid length. [ 1399.431859][T19154] netlink: 'syz.8.3025': attribute type 1 has an invalid length. [ 1399.439801][T19154] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3025'. [ 1399.637700][T19156] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1399.637763][T19156] CIFS mount error: No usable UNC path provided in device string! [ 1399.637763][T19156] [ 1399.638090][T19156] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1402.133379][T19192] device team_slave_0 entered promiscuous mode [ 1402.140189][T19192] device team_slave_1 entered promiscuous mode [ 1402.147387][T19192] device vlan2 entered promiscuous mode [ 1402.153673][T19192] device team0 entered promiscuous mode [ 1402.872650][T19208] device syzkaller0 entered promiscuous mode [ 1402.968522][T19214] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1403.012191][T19214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1403.090112][T19214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1403.188136][T19214] device bridge_slave_0 left promiscuous mode [ 1404.024940][T19214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1404.066726][ T4218] Bluetooth: hci1: command 0x0405 tx timeout [ 1404.083792][T19214] device bridge_slave_1 left promiscuous mode [ 1404.100751][T19214] bridge0: port 2(bridge_slave_1) entered disabled state [ 1404.154466][T19214] bond0: (slave bond_slave_0): Releasing backup interface [ 1404.217622][T19214] bond0: (slave bond_slave_1): Releasing backup interface [ 1404.299244][T19214] team0: Port device team_slave_0 removed [ 1404.329047][T19214] team0: Port device team_slave_1 removed [ 1404.364766][T19214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.382178][T19214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.391297][T19214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.400866][T19214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.647107][T19225] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3047'. [ 1406.063270][T19225] bond0 (unregistering): Released all slaves [ 1406.663144][T19244] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3052'. [ 1406.877310][T19268] syz.1.3055[19268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1406.877410][T19268] syz.1.3055[19268] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1408.626070][T19295] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3061'. [ 1408.711965][T19295] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1409.211705][T19303] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 1409.385762][T19303] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 1410.571982][T19324] ALSA: mixer_oss: invalid index 40000 [ 1411.188571][T19336] syz.1.3070 sent an empty control message without MSG_MORE. [ 1411.365299][T19344] device bond0 entered promiscuous mode [ 1411.395337][T19344] device macvlan1 entered promiscuous mode [ 1411.448479][T19344] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1411.473309][T19344] device hsr1 entered promiscuous mode [ 1411.522830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 1413.200050][T19378] netlink: 'syz.1.3080': attribute type 16 has an invalid length. [ 1413.261472][T19378] netlink: 'syz.1.3080': attribute type 17 has an invalid length. [ 1413.319771][T19378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1413.451869][T19391] ALSA: mixer_oss: invalid index 40000 [ 1414.154596][T19378] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1414.167844][T19378] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1414.245900][T19395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3085'. [ 1416.718978][T19455] ALSA: mixer_oss: invalid index 40000 [ 1417.503674][T19460] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3102'. [ 1417.595614][T19460] netlink: del zone limit has 8 unknown bytes [ 1418.802580][T19505] ALSA: mixer_oss: invalid index 40000 [ 1419.313440][T19520] lo speed is unknown, defaulting to 1000 [ 1419.574024][T19528] ALSA: mixer_oss: invalid index 40000 [ 1420.295941][T19527] hfsplus: unable to find HFS+ superblock [ 1422.903008][T19576] device batadv_slave_1 entered promiscuous mode [ 1423.191462][T19576] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3128'. [ 1423.225468][T19575] device batadv_slave_1 left promiscuous mode [ 1425.741766][T19638] lo speed is unknown, defaulting to 1000 [ 1428.134015][T19679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3157'. [ 1428.518783][T19699] lo speed is unknown, defaulting to 1000 [ 1429.084792][T19715] xt_ecn: cannot match TCP bits for non-tcp packets [ 1432.580743][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1434.520933][T19820] netlink: 'syz.8.3193': attribute type 10 has an invalid length. [ 1434.616543][T19820] device veth0_vlan left promiscuous mode [ 1434.649967][T19820] device veth0_vlan entered promiscuous mode [ 1434.829528][T19820] team0: Device veth0_vlan failed to register rx_handler [ 1435.046388][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3195'. [ 1435.125122][T19838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3196'. [ 1435.159223][T19835] device team_slave_0 left promiscuous mode [ 1435.271422][T19835] team0 (unregistering): Port device team_slave_0 removed [ 1435.297683][T19835] device team_slave_1 left promiscuous mode [ 1435.367246][T19835] team0 (unregistering): Port device team_slave_1 removed [ 1436.609537][T19856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 1437.343292][T19875] CIFS mount error: No usable UNC path provided in device string! [ 1437.343292][T19875] [ 1437.353379][T19875] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1438.588562][T19898] netlink: 'syz.5.3212': attribute type 10 has an invalid length. [ 1438.624108][T19898] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3212'. [ 1438.735225][T19898] team0: Port device geneve0 added [ 1444.166834][T20002] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3236'. [ 1446.481178][T20024] ALSA: mixer_oss: invalid index 40000 [ 1449.041906][T20040] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1449.069270][T20044] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3248'. [ 1449.454393][T20048] lo speed is unknown, defaulting to 1000 [ 1450.539534][T20048] chnl_net:caif_netlink_parms(): no params data found [ 1451.047831][T20103] hfsplus: unable to find HFS+ superblock [ 1451.434748][ T4232] Bluetooth: hci0: command 0x0409 tx timeout [ 1451.548403][T20048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1451.571959][T20048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1451.587670][T20048] device bridge_slave_0 entered promiscuous mode [ 1451.612017][T20048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1451.646820][T20048] bridge0: port 2(bridge_slave_1) entered disabled state [ 1451.704826][T20048] device bridge_slave_1 entered promiscuous mode [ 1451.847022][T20048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1451.916886][T20048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1451.972584][T20048] team0: Port device team_slave_0 added [ 1451.985110][T20048] team0: Port device team_slave_1 added [ 1452.051995][T20048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.064732][T20048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.093155][T20048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.105758][T20048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.112816][T20048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.139178][T20048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.220220][T14524] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.473646][T20128] batman_adv: batadv0: Adding interface: dummy0 [ 1452.481395][T20128] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1452.515066][T20128] batman_adv: batadv0: Interface activated: dummy0 [ 1452.536379][T14524] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.604875][T20048] device hsr_slave_0 entered promiscuous mode [ 1452.631278][T20048] device hsr_slave_1 entered promiscuous mode [ 1452.665008][T20048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1452.693695][T20048] Cannot create hsr debugfs directory [ 1452.742580][T14524] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.975753][T14524] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.701114][T12976] Bluetooth: hci0: command 0x041b tx timeout [ 1454.462790][T20155] binder: BINDER_SET_CONTEXT_MGR already set [ 1454.468835][T20155] binder: 20151:20155 ioctl 4018620d 200000000040 returned -16 [ 1454.663736][T20155] binder: 20151:20155 ioctl c0306201 200000000240 returned -11 [ 1455.882347][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 1456.182434][T14524] device hsr_slave_0 left promiscuous mode [ 1456.200798][T14524] device hsr_slave_1 left promiscuous mode [ 1456.223707][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.257678][T14524] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.280964][T14524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.329106][T14524] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.350932][T14524] device bridge_slave_1 left promiscuous mode [ 1456.372009][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.179465][T14524] device bridge_slave_0 left promiscuous mode [ 1457.185770][T14524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.322332][T14524] device veth1_macvtap left promiscuous mode [ 1457.345274][T14524] device veth0_macvtap left promiscuous mode [ 1457.358612][T14524] device veth1_vlan left promiscuous mode [ 1457.368449][T14524] device veth0_vlan left promiscuous mode [ 1457.649523][T14524] bond1 (unregistering): Released all slaves [ 1457.755235][T14524] team0 (unregistering): Port device team_slave_1 removed [ 1457.771303][T14524] team0 (unregistering): Port device team_slave_0 removed [ 1457.783457][T14524] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.802776][T14524] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.877355][T14524] bond0 (unregistering): Released all slaves [ 1457.930360][T20209] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3281'. [ 1458.105807][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 1458.111905][ T13] ------------[ cut here ]------------ [ 1458.117387][ T13] WARNING: CPU: 0 PID: 13 at kernel/workqueue.c:1453 __queue_work+0xc04/0xd50 [ 1458.126282][ T13] Modules linked in: [ 1458.130204][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted 5.15.186-syzkaller #0 [ 1458.138388][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1458.148461][ T13] Workqueue: events hci_cmd_timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1458.153719][ T13] RIP: 0010:__queue_work+0xc04/0xd50 [ 1458.159031][ T13] Code: fc ff ff 48 8b 4c 24 08 80 e1 07 80 c1 03 38 c1 0f 8c 13 fd ff ff 48 8b 7c 24 08 e8 26 39 70 00 e9 04 fd ff ff e8 2c c0 2a 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 16 c0 2a 00 [ 1458.178665][ T13] RSP: 0018:ffffc90000d27ad8 EFLAGS: 00010093 [ 1458.184756][ T13] RAX: ffffffff814d02e4 RBX: 0000000000010000 RCX: ffff88813fea0000 [ 1458.192751][ T13] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 1458.200740][ T13] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1005673167 [ 1458.208743][ T13] R10: ffffed1005673167 R11: 1ffff11005673166 R12: 0000000000000200 [ 1458.216734][ T13] R13: ffff88807cb5e1c0 R14: ffff88807cb5e000 R15: 0000000000000008 [ 1458.224742][ T13] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1458.233691][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1458.240301][ T13] CR2: 000056156f0ed660 CR3: 000000001edbb000 CR4: 00000000003506f0 [ 1458.248387][ T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1458.256378][ T13] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1458.264367][ T13] Call Trace: [ 1458.267660][ T13] [ 1458.270609][ T13] ? queue_work_on+0xc4/0x1d0 [ 1458.275311][ T13] ? lockdep_hardirqs_off+0x70/0x100 [ 1458.280634][ T13] queue_work_on+0x11d/0x1d0 [ 1458.285261][ T13] ? wq_worker_last_func+0x40/0x40 [ 1458.290406][ T13] ? hci_cmd_timeout+0x16f/0x220 [ 1458.295386][ T13] process_one_work+0x863/0x1000 [ 1458.300381][ T13] ? worker_detach_from_pool+0x240/0x240 [ 1458.306032][ T13] ? lockdep_hardirqs_off+0x70/0x100 [ 1458.311343][ T13] ? _raw_spin_lock_irq+0xab/0xe0 [ 1458.316405][ T13] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1458.321828][ T13] ? wq_worker_running+0x97/0x170 [ 1458.326873][ T13] worker_thread+0xaa8/0x12a0 [ 1458.331611][ T13] kthread+0x436/0x520 [ 1458.335706][ T13] ? rcu_lock_release+0x20/0x20 [ 1458.340584][ T13] ? kthread_blkcg+0xd0/0xd0 [ 1458.345203][ T13] ret_from_fork+0x1f/0x30 [ 1458.349684][ T13] [ 1458.352874][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1458.360165][ T13] CPU: 0 PID: 13 Comm: kworker/0:1 Not tainted 5.15.186-syzkaller #0 [ 1458.368249][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1458.378328][ T13] Workqueue: events hci_cmd_timeout [ 1458.383562][ T13] Call Trace: [ 1458.386860][ T13] [ 1458.389797][ T13] dump_stack_lvl+0x168/0x230 [ 1458.394487][ T13] ? show_regs_print_info+0x20/0x20 [ 1458.399694][ T13] ? load_image+0x3b0/0x3b0 [ 1458.404219][ T13] panic+0x2c9/0x7f0 [ 1458.408127][ T13] ? bpf_jit_dump+0xd0/0xd0 [ 1458.412643][ T13] ? ret_from_fork+0x1f/0x30 [ 1458.417242][ T13] ? __queue_work+0xc04/0xd50 [ 1458.421920][ T13] __warn+0x248/0x2b0 [ 1458.425909][ T13] ? __queue_work+0xc04/0xd50 [ 1458.430585][ T13] report_bug+0x1b7/0x2e0 [ 1458.434919][ T13] handle_bug+0x3a/0x70 [ 1458.439075][ T13] exc_invalid_op+0x16/0x40 [ 1458.443668][ T13] asm_exc_invalid_op+0x16/0x20 [ 1458.448517][ T13] RIP: 0010:__queue_work+0xc04/0xd50 [ 1458.453800][ T13] Code: fc ff ff 48 8b 4c 24 08 80 e1 07 80 c1 03 38 c1 0f 8c 13 fd ff ff 48 8b 7c 24 08 e8 26 39 70 00 e9 04 fd ff ff e8 2c c0 2a 00 <0f> 0b 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 16 c0 2a 00 [ 1458.473407][ T13] RSP: 0018:ffffc90000d27ad8 EFLAGS: 00010093 [ 1458.479485][ T13] RAX: ffffffff814d02e4 RBX: 0000000000010000 RCX: ffff88813fea0000 [ 1458.487458][ T13] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 1458.495431][ T13] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed1005673167 [ 1458.503403][ T13] R10: ffffed1005673167 R11: 1ffff11005673166 R12: 0000000000000200 [ 1458.511375][ T13] R13: ffff88807cb5e1c0 R14: ffff88807cb5e000 R15: 0000000000000008 [ 1458.519374][ T13] ? __queue_work+0xc04/0xd50 [ 1458.524088][ T13] ? __queue_work+0xc04/0xd50 [ 1458.528761][ T13] ? queue_work_on+0xc4/0x1d0 [ 1458.533441][ T13] ? lockdep_hardirqs_off+0x70/0x100 [ 1458.538734][ T13] queue_work_on+0x11d/0x1d0 [ 1458.543746][ T13] ? wq_worker_last_func+0x40/0x40 [ 1458.549286][ T13] ? hci_cmd_timeout+0x16f/0x220 [ 1458.554271][ T13] process_one_work+0x863/0x1000 [ 1458.559223][ T13] ? worker_detach_from_pool+0x240/0x240 [ 1458.564859][ T13] ? lockdep_hardirqs_off+0x70/0x100 [ 1458.570158][ T13] ? _raw_spin_lock_irq+0xab/0xe0 [ 1458.575190][ T13] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1458.580571][ T13] ? wq_worker_running+0x97/0x170 [ 1458.585596][ T13] worker_thread+0xaa8/0x12a0 [ 1458.590294][ T13] kthread+0x436/0x520 [ 1458.594365][ T13] ? rcu_lock_release+0x20/0x20 [ 1458.599390][ T13] ? kthread_blkcg+0xd0/0xd0 [ 1458.603986][ T13] ret_from_fork+0x1f/0x30 [ 1458.608408][ T13] [ 1458.611747][ T13] Kernel Offset: disabled [ 1458.616518][ T13] Rebooting in 86400 seconds..