last executing test programs: 19m58.968858283s ago: executing program 32 (id=21): sendto$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000001c0)={0x12, 0xa, 0x2, "b77a89e7a20c8e8d1638ff00d074a4510000120000000000d900000400d56800", 0x35303553}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r3}, &(0x7f00000000c0)=0x8) acct(&(0x7f0000000100)='./file0/bus\x00') 19m51.774473627s ago: executing program 33 (id=42): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0) 19m41.506357956s ago: executing program 34 (id=80): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) 18m47.360482098s ago: executing program 35 (id=155): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x20050800) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x1, 0x50001) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000240)) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) vmsplice(r0, 0x0, 0x0, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 18m39.99753763s ago: executing program 36 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x6, &(0x7f00000003c0)={0x8000003ffffff, 0x1}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1a1040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff22) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x1000, 0x100}, 0xc) shutdown(0xffffffffffffffff, 0x1) poll(0x0, 0x0, 0x11ff) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 18m7.350619473s ago: executing program 37 (id=211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000020, 0x0, 0x400}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES8=0x0, @ANYBLOB="1f46f06f2b552d4a12f50a06fc71cba6ea4ab7bb013585cbacba5593cafd2f73c18c202723d682832b872c38ad18d43338cd85c60f28da8560aa0ca66c53cebb52485bd16bee0effb15f61653b6910824d829c83"], 0x30}}, 0x4000054) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) 14m30.892503864s ago: executing program 38 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000001440)=""/126, 0x7e, 0x0) 14m15.307273962s ago: executing program 39 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0x3) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r5, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(0x0, 0x8) 12m13.562985398s ago: executing program 40 (id=1095): gettid() syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000400)='./file0\x00', 0x8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0], 0x1, 0x1c8, &(0x7f0000000600)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$kcm(0x2, 0x1, 0x84) syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xa8a, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x4007) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x8, 0x0, 0x0) open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) capset(0x0, 0x0) 11m17.1435283s ago: executing program 41 (id=1256): ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)={@any, 0x9, 0x5, 0x80, 0x9, 0x1, "69df790646a0e7c6c95842451a7a5805dcc6a08af55043573ae151d5b24b6fe29bd66e6fad171180ed198b44826f997434af54816b9c0073fdb48c9046a60b473086c788cd8e29fd470000b886e451753ed39a91d838897c79b8c7974a3d5524d6000000004447528fa3f4a08701abfaf74ec30411194d0011c1e3da00"}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 9m38.458199189s ago: executing program 42 (id=1470): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0x0, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r2, r2, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020}, 0x2020) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 9m14.747532259s ago: executing program 43 (id=1528): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 8m38.632830065s ago: executing program 44 (id=1590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40942, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0xc2, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f00000002c0)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffbffa003e458, 0x700000000000000) truncate(0x0, 0xc30) 7m47.03041501s ago: executing program 45 (id=1711): socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a010100000000000000000100000000010073797a30000000000900030073797a3200000000a0000000060a010400000000"], 0x114}}, 0x14000000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) close(0x3) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0), 0x0, &(0x7f0000000840)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0xb15, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) kexec_load(0xff0f, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x859f}, 0x48) socket(0x0, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}}, 0x0) 7m46.639240512s ago: executing program 46 (id=1683): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb7cf}}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6m55.549016345s ago: executing program 47 (id=1766): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000005000000fd0900009f0b000005010000", @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0, 0x800, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r2}, 0x38) 6m41.89109135s ago: executing program 48 (id=1814): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x207641a, 0x8000, 0x20}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="b0000000000000004800000000000000020000000000000000000000000000000100000001000000ea70ffffffffffff000100000700000003000000000000000700000000000000f7fffffffffffffff9ffbfffffffffff010000000000000000000000000000000700000000000000030000000020000003000000", @ANYRES32=r2, @ANYBLOB="0800000009000000000000000400000000000000000000000100000001000000ff0000002e00000000000000f8639199050f53d480771137eb395c94e8b5087d875464b193c66b480a3c325c7f837bd64fd3b2b70e4a9924da7ad36c8564f01d16c3d7f85d54337ddd2d053d50ac38e20cb590c4b021140a306e537f8a2c16b2bd1f"], 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000300)=""/142, 0x8e) getdents(r3, 0x0, 0x0) 5m54.764830376s ago: executing program 49 (id=1876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x80002, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014"], 0x54}, 0x1, 0x0, 0x0, 0x2408c004}, 0x0) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) ioctl$SNDCTL_SEQ_SYNC(0xffffffffffffffff, 0x5101) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a4fdd99a98e6dfb2d0000020000000900020073797a32000000000900010073797a"], 0x60}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x147182, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 5m42.58471522s ago: executing program 50 (id=1898): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m35.067875034s ago: executing program 51 (id=2013): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @none, 0xff}, 0xa) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102392, 0x18ff8) fadvise64(0xffffffffffffffff, 0x8dd, 0x0, 0x2) socket(0x23, 0x1, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000000c0)={0x1, 0xff, 0x5, 0xfffc, 0xe, "f682756c98cc948c"}) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0x271}], 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000200)={0x2, {0x2, 0xf, 0x7ff, 0x8, 0x0, 0x1}}) socket$netlink(0x10, 0x3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0xe000003, 0xf, &(0x7f0000000180)=[0x1, 0x9, 0xf909, 0x899d, 0x80, 0x98a, 0x7, 0x1010, 0xfffffe00, 0x1, 0x4, 0x2, 0x6, 0x4, 0x0], 0x1, 0x4000007}) 4m8.043191943s ago: executing program 52 (id=2075): socket$inet(0x2, 0x1, 0x100) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c006100ff010000000000758241d0e87b07bc00", @ANYRES32=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000000)={0x1, 0x10}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb02f, 0x7ff, 0x4, 0x4000002, 0x88d7, 0x8d, 0x1007, 0x0, 0x1002, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x10c, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0xff, 0x400002, 0x1]}) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d45844baa1a015454e0e42683ef64bfcf97c7409f30a35ea7ca84ae48f37a6e1ed5405ab1320184511303caea28753a4963006c60f8290702d5409"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_open_dev$radio(0x0, 0x3, 0x2) 3m43.296617786s ago: executing program 53 (id=2104): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f00000000c0)="510003000000", 0x6) 3m4.051394633s ago: executing program 6 (id=2195): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f00000041c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/103, 0x67}], 0x1}, 0x8f02}], 0x2, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48800) 3m3.35415916s ago: executing program 6 (id=2197): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) ftruncate(0xffffffffffffffff, 0x6000000) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) recvmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000280), &(0x7f0000000140)=r4}, 0x22) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) 2m58.833832292s ago: executing program 6 (id=2204): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r8, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', 0x0, 0x100080f, 0x0) 2m56.272507317s ago: executing program 6 (id=2208): socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x161200, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)=""/6, 0x6}], 0x1}}], 0x1, 0x600000a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000580)={0x0, @bt={0x13, 0x7c5, 0x1, 0x2800, 0xd59f82, 0x2, 0x5, 0xb, 0x8, 0x0, 0xbef, 0x1, 0x7, 0x9, 0x2b, 0x4, {0xffff945a, 0x1}, 0x9, 0xf1}}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000740)}], 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r5, 0x3b85, &(0x7f00000004c0)={0x28, 0x5, r6, 0x0, &(0x7f00000003c0)="cff372e4", 0x4, 0xf}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, 0x0) 2m55.111065456s ago: executing program 6 (id=2211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) 2m38.832069741s ago: executing program 54 (id=2211): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x14, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4) 2m31.881811794s ago: executing program 0 (id=2262): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x94d7, 0x0, 0x0, 0x97}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000280)={[{@grpquota}, {@nobarrier}, {@noload}]}, 0x1, 0x50a, &(0x7f0000001700)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x3, 0x1, 0x40000000000246, 0x7fffffffffffffff, 0xfffffffffffffffa, 0xfffffffffffffffc, 0xfffffffffffffff8, 0x7fff, 0x9b}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x2e) 2m28.942142211s ago: executing program 0 (id=2273): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r6, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', 0x0, 0x100080f, 0x0) 2m24.521643834s ago: executing program 0 (id=2276): r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x13}, 0x13}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, 0x0) 2m23.383074838s ago: executing program 0 (id=2280): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000001880)=""/236, 0xec}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/232, 0xe8}, {&(0x7f0000001700)=""/179, 0xb3}], 0x5}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 2m22.525909351s ago: executing program 0 (id=2285): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r8, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', 0x0, 0x100080f, 0x0) 2m21.509381064s ago: executing program 0 (id=2287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0x28, 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x9, @pix_mp={0xfffffffa, 0x4, 0x32315659, 0x9, 0x4, [{0x0, 0x6}, {0x8001, 0xc4e3}, {0x7fff, 0x20003ff}, {0x4, 0x1}, {0x9, 0x457}, {0x5, 0x1002}, {0x3, 0x4}, {0xe, 0x7}], 0x6, 0xfe, 0x3, 0x2, 0x6}}) r3 = socket(0x28, 0x5, 0x38d0619e) sendmmsg(r3, 0x0, 0x0, 0x4000890) 2m14.306674s ago: executing program 4 (id=2306): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r8, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', 0x0, 0x100080f, 0x0) 2m13.719835261s ago: executing program 4 (id=2308): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, 0x0, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 2m12.850706047s ago: executing program 4 (id=2311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000700), 0x6, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m11.910573294s ago: executing program 4 (id=2313): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r0, 0x5609, 0xfffffffffffffffe) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) eventfd2(0x8001, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000080)="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", 0x5c6}], 0x1) sendto$inet(r4, &(0x7f0000000380)="f85fca89711c2aba1bba0d98ec2b51092fbe44929376a390173c3b3e71105d7dcd9077d25d181daeacc8943bfa4b53464c95297aa3572d6d1689b575f79cbce275e7b3", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2m11.039619686s ago: executing program 4 (id=2315): r0 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc2}, &(0x7f00000001c0)={0x0, "9f72278027c1d28d4c03376c9ea125e7126c04d01d93ad3b87c89d5c0b0c4de6f93f4dbd6912ed5a27fae9675080ce819d29385c8508f326e65821cefa9aa70b", 0x31}, 0x48, 0xfffffffffffffffc) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='#%', r0) 2m10.226111419s ago: executing program 4 (id=2317): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r8, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', 0x0, 0x100080f, 0x0) 2m6.925748401s ago: executing program 3 (id=2324): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r0, 0x5609, 0xfffffffffffffffe) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) eventfd2(0x8001, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000080)="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", 0x5c6}], 0x1) sendto$inet(r4, &(0x7f0000000380)="f85fca89711c2aba1bba0d98ec2b51092fbe44929376a390173c3b3e71105d7dcd9077d25d181daeacc8943bfa4b53464c95297aa3572d6d1689b575f79cbce275e7b3", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2m5.958423505s ago: executing program 3 (id=2325): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}]}, 0x3c}}, 0x0) 2m5.669440124s ago: executing program 55 (id=2287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0x28, 0x5, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x9, @pix_mp={0xfffffffa, 0x4, 0x32315659, 0x9, 0x4, [{0x0, 0x6}, {0x8001, 0xc4e3}, {0x7fff, 0x20003ff}, {0x4, 0x1}, {0x9, 0x457}, {0x5, 0x1002}, {0x3, 0x4}, {0xe, 0x7}], 0x6, 0xfe, 0x3, 0x2, 0x6}}) r3 = socket(0x28, 0x5, 0x38d0619e) sendmmsg(r3, 0x0, 0x0, 0x4000890) 2m5.104553867s ago: executing program 3 (id=2328): r0 = socket$alg(0x26, 0x5, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m4.191767096s ago: executing program 3 (id=2329): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x3, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 2m2.646989653s ago: executing program 3 (id=2331): syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 2m1.581825248s ago: executing program 3 (id=2333): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='afs_protocol_error\x00', 0xffffffffffffffff, 0x0, 0x5593}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xa0100, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000140)) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000580)) fanotify_init(0x10, 0x40000) prlimit64(r0, 0xc, &(0x7f00000007c0)={0x8, 0x88}, 0x0) 1m54.623005679s ago: executing program 56 (id=2317): socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r8, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x141040, 0x42) mount(&(0x7f0000000000)=@sr0, &(0x7f0000004a00)='./file1\x00', 0x0, 0x100080f, 0x0) 1m46.031191691s ago: executing program 57 (id=2333): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='afs_protocol_error\x00', 0xffffffffffffffff, 0x0, 0x5593}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xa0100, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) mkdir(0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7ea}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffff800, 0x40, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000140)) lstat(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000580)) fanotify_init(0x10, 0x40000) prlimit64(r0, 0xc, &(0x7f00000007c0)={0x8, 0x88}, 0x0) 1m43.366727724s ago: executing program 5 (id=2355): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f0000000f40)='module_request\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x148, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x5a, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x70, 0x80, "316f74eeac053deb73fc018493cc"}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m41.61124151s ago: executing program 5 (id=2357): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 1m37.749648153s ago: executing program 5 (id=2362): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r0, 0x5609, 0xfffffffffffffffe) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = eventfd2(0x8001, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000080)="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", 0x5c6}], 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r5}) sendto$inet(r4, &(0x7f0000000380)="f85fca89711c2aba1bba0d98ec2b51092fbe44929376a390173c3b3e71105d7dcd9077d25d181daeacc8943bfa4b53464c95297aa3572d6d1689b575f79cbce275e7b3", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m36.710370963s ago: executing program 5 (id=2364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f0000000f40)='module_request\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x148, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x5a, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x70, 0x80, "316f74eeac053deb73fc018493cc"}}]}, 0x148}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m34.984254954s ago: executing program 5 (id=2366): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200), 0xfffffd9d) 1m34.158420391s ago: executing program 5 (id=2367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0xfffffffffffffffa, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=@known='security.apparmor\x00', &(0x7f0000000380)=""/126, 0x7e) syz_open_procfs(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_delete(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) 1m26.978417952s ago: executing program 9 (id=2371): socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_RESIZE(r0, 0x5609, 0xfffffffffffffffe) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) r5 = eventfd2(0x8001, 0x0) gettid() writev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000080)="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", 0x5c6}], 0x1) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r5}) sendto$inet(r4, &(0x7f0000000380)="f85fca89711c2aba1bba0d98ec2b51092fbe44929376a390173c3b3e71105d7dcd9077d25d181daeacc8943bfa4b53464c95297aa3572d6d1689b575f79cbce275e7b3", 0x43, 0x0, &(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m26.329742415s ago: executing program 9 (id=2372): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000318110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7}]}, 0x3c}}, 0x0) 1m25.76892782s ago: executing program 9 (id=2373): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f80)={&(0x7f0000000f40)='module_request\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x140, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@local, 0x4e23, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x84, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x8, 0x100000001, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffffffc}, {0xc}, 0x70bd28, 0x0, 0x2}, [@algo_aead={0x53, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x38, 0x80, "316f74eeac053d"}}]}, 0x140}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m24.387086146s ago: executing program 9 (id=2374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1m21.666918294s ago: executing program 9 (id=2375): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xbbb71000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48d}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m18.651108994s ago: executing program 58 (id=2367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x0, 0x0, 0x0, 0xa3e, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0x8, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0xfffffffffffffffa, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=@known='security.apparmor\x00', &(0x7f0000000380)=""/126, 0x7e) syz_open_procfs(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) timer_settime(r3, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000080)=0x0) timer_delete(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000), 0x20000010) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x4000000, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xebaea3d5279c9aee}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4, 0x2, 0xffffffff}}]}, 0x38}}, 0x0) 1m16.564687897s ago: executing program 9 (id=2377): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 1m0.706286602s ago: executing program 59 (id=2377): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 10.755693641s ago: executing program 7 (id=2490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 10.310028821s ago: executing program 8 (id=2492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000002080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002140)={0x18, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8}, 0x40000) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xa8e7a4ba405a77bf}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf253800000008000300", @ANYRES32=r2, @ANYBLOB='\f\x00X'], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 9.962968977s ago: executing program 7 (id=2493): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\n'], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 9.27175751s ago: executing program 8 (id=2494): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40050) r0 = openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ppoll(&(0x7f0000000580)=[{0xffffffffffffffff, 0x2}, {r0, 0x400}, {0xffffffffffffffff, 0x6}, {0xffffffffffffffff, 0x7331}, {0xffffffffffffffff, 0x1001}, {0xffffffffffffffff, 0x8000}, {}, {0xffffffffffffffff, 0x2000}, {}], 0x9, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640), 0x8) fchown(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x80) 8.061091439s ago: executing program 7 (id=2499): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/timer_list\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0xee00, 0x0) r2 = getuid() setreuid(0x0, r2) socket$packet(0x11, 0x2, 0x300) connect$netlink(r0, &(0x7f0000000100)=@unspec, 0xc) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80284511, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffffff7f0000000000000004740a0000fcffffff95"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x1e}, 0x94) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000640)=[{0x0}], 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x1c, 0x9, 0x7, 0x2}]}, 0x8) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000340)=""/162) 7.874174652s ago: executing program 8 (id=2500): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x80000001, 0x1000000, 0x7f, 0x14efdde2}}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1b0000001a005f3803000000000000008004000000000000000000", 0x1b) socket$netlink(0x10, 0x3, 0x9) syz_usb_connect(0x2, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x72, 0x46, 0x48, 0x40, 0x17cc, 0x1020, 0x4264, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x8, 0x20, 0xc0, [{{0x9, 0x4, 0xb2, 0x4b, 0x0, 0x93, 0xef, 0xdd, 0x28}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = getpid() unshare(0x6020400) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x2000000) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xda7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @timestamp, @window={0x3, 0x800, 0x5}, @window={0x3, 0x9, 0x7f6}], 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c00150000"], 0xc4}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@updpolicy={0x234, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private, 0x4000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x100000, 0x0, 0x0, 0x0, 0xcba9}, {0x8}, 0x20, 0x9, 0x1}, [@address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty, 0x2, 0x40, 0x4}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xf}, @algo_auth_trunc={0x52, 0x14, {{'sha224-generic\x00'}, 0x30, 0xa0, "56a2fd84ce7b"}}, @mark={0xc, 0x15, {0x35075d, 0x6}}, @sa={0xe0, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x4e21, 0x64bf, 0x4e22, 0x6, 0x2, 0xa0, 0x0, 0x3b}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x1, 0x5, 0x7fffffffffffffff, 0xfff, 0x5, 0x9, 0x3, 0x1}, {0x8, 0x3, 0x4000000000000, 0x8000000000000001}, {0x10, 0x9, 0x4c437a2a}, 0x70bd2b, 0x3504, 0xb, 0x3, 0x8, 0x90}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd28, 0x1}}]}, 0x234}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001e00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0x9}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x14}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x47}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7fff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x23, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x3, 0x9, 0x30, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_fd, @map_idx={0x18, 0x7}, @ldst={0x2, 0x2, 0x2, 0x9, 0x0, 0x8000000000000014, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x65, &(0x7f0000000380)=""/101, 0x40f00, 0x2, '\x00', r10, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, r11, r6, 0x3, &(0x7f0000000580)=[r6, r6, r6], &(0x7f00000005c0)=[{0x3, 0x2, 0x8, 0x5}, {0x1, 0x2, 0xa, 0x8}, {0x1, 0x3, 0xd, 0x8}], 0x10, 0x8}, 0x94) 6.723877746s ago: executing program 2 (id=2503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001040)="4aa9edad01cb8162ab0b7e9340fd74d6563efc026b493c1233363a64b5c74fe967f0676fa5adcd848ea355ff120e3ba38380be01f474a4c9b2aa99f8269e15d474a115f4e4eb7d75a89ee747199fafc1ec01e2afba077161d11b3156a6447d890059508f259d9b9c45c2c9c2dfd6de970b4724fa48b8ccb6db7c262dd94a0280110d5a8073c643f4fb3256d8661fcf11ddb93a6e1802c3ffec9bda933847e7b8f759e311f1cdab4339fc0f253190265ff454b8d6cbc24f51ccb324c85d8340659b", 0xc1}], 0x1) 6.662726971s ago: executing program 1 (id=2504): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xbf2d) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 6.468854947s ago: executing program 7 (id=2505): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000540), 0x400, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000580)={&(0x7f0000000e40)="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", 0x274, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRESDEC=r1], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r3, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000001240)=""/167, 0xa7}], 0x2, 0x1000, 0x3f2f0fde) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x2) r4 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = openat$drirender128(0xffffff9c, &(0x7f0000000380), 0x80040, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904", @ANYRES32], 0x0) syz_usb_control_io$uac1(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, &(0x7f00000007c0)={0xc, &(0x7f0000000680)={0x0, 0x8, 0xcb, {0xcb, 0x0, "665f8f8d71d80319037de5b5534fafadaa570e75b49904495040a7318473c1b9ed1670bff1d866a808580d9a46155a28a2076d1fc63676c2aba3092938ac3420026df382932eeaee818a5d93168e5d82261f71df028ae72dc8b3699801265b51517ca4417122f7d673075ece8707f04a64807b32fb7385991810d32d148b36c4a2adfdb0ff197ba9fffa801d432b4fa9a45911611e2b96919d34773e81c8f1417bdafea3c42360802ebeff74941a461879f3e2003db272d49708d12ad4a97044a5c350d5c173ab2c57"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000980)={0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4c}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xf9}}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r10, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000480)="8e81cff328de841b4e9a5aa1a90204cbc9ca0e8357a7eb5338678aff0d5506a1ad9276c3e5684d335a9b76ff71b8cd408acf6ecc93b0fc32f1503ad6d0099d1f28e8b1f2dc22d3082cfd21a97c857c1b9551b6ea978fb37fd8b3eb0a39b5f9809f2d57c13e47bd334d959fe6269c41de1c7dc181f850139ea4ee0fe9d42a6362ee7a552fd02f7518476ec850faa4ed5c6401c48ebd38064e5d651c779b33fdf49ec98a", 0xa3}) sendmmsg$inet6(r7, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r7, 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, 0x8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) 4.972495539s ago: executing program 1 (id=2506): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffe0, 0xa}, {0xf, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 4.532241031s ago: executing program 2 (id=2507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000fedbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="70005a806c000180040007"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.176950178s ago: executing program 1 (id=2508): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) close(0x3) 4.130030876s ago: executing program 8 (id=2509): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40050) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) ppoll(0x0, 0x0, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640), 0x8) fchown(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x80) 3.64000869s ago: executing program 2 (id=2510): r0 = socket(0x11, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x61a3, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 3.466160976s ago: executing program 1 (id=2511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_tracing={0x1a, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x1ff, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x697d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.83726959s ago: executing program 2 (id=2512): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00', 0x8, 0x98, &(0x7f0000000140)=""/152}, 0x94) 2.683015852s ago: executing program 1 (id=2513): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.682721995s ago: executing program 7 (id=2514): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/timer_list\x00', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setreuid(0xee00, 0x0) r2 = getuid() setreuid(0x0, r2) socket$packet(0x11, 0x2, 0x300) connect$netlink(r0, &(0x7f0000000100)=@unspec, 0xc) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCGLED(r3, 0x80284511, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000ffffff7f0000000000000004740a0000fcffffff95"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x1e}, 0x94) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000640)=[{0x0}], 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x1c, 0x9, 0x7, 0x2}]}, 0x8) recvmmsg(r5, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f0000000340)=""/162) 2.674489433s ago: executing program 8 (id=2515): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xbf2d) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 2.230652975s ago: executing program 2 (id=2516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001040)="4aa9edad01cb8162ab0b7e9340fd74d6563efc026b493c1233363a64b5c74fe967f0676fa5adcd848ea355ff120e3ba38380be01f474a4c9b2aa99f8269e15d474a115f4e4eb7d75a89ee747199fafc1ec01e2afba077161d11b3156a6447d890059508f259d9b9c45c2c9c2dfd6de970b4724fa48b8ccb6db7c262dd94a0280110d5a8073c643f4fb3256d8661fcf11ddb93a6e1802c3ffec9bda933847e7b8f759e311f1cdab4339fc0f253190265ff454b8d6cbc24f51ccb324c85d8340659b", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "0300", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "c1799d70", "bb0001000100"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 1.728906748s ago: executing program 6 (id=2385): syz_open_dev$sndmidi(0x0, 0x2, 0x141121) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x7, 0x8, 0x9, 0x0, 0xfffffffffffffffd, 0xf, 0x7, 0x2, 0xfffffffffffffffd, 0x0, 0x5}) ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x4) add_key(0x0, &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) 1.433668491s ago: executing program 1 (id=2517): lsm_get_self_attr(0x68, &(0x7f0000000580)={0x0, 0x0, 0xbf, 0x9f, ""/159}, &(0x7f0000000080)=0xbf, 0xab013f62bb62f02a) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.319828241s ago: executing program 8 (id=2518): r0 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x80000001, 0x1000000, 0x7f, 0x14efdde2}}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1b0000001a005f3803000000000000008004000000000000000000", 0x1b) socket$netlink(0x10, 0x3, 0x9) syz_usb_connect(0x2, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x250, 0x72, 0x46, 0x48, 0x40, 0x17cc, 0x1020, 0x4264, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x8, 0x20, 0xc0, [{{0x9, 0x4, 0xb2, 0x4b, 0x0, 0x93, 0xef, 0xdd, 0x28}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r2, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = getpid() unshare(0x6020400) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x2000000) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xda7}}, './file0\x00'}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f00000000c0)=[@sack_perm, @timestamp, @window={0x3, 0x800, 0x5}, @window={0x3, 0x9, 0x7f6}], 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d54900000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000c00150000"], 0xc4}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@updpolicy={0x234, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private, 0x4000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x100000, 0x0, 0x0, 0x0, 0xcba9}, {0x8}, 0x20, 0x9, 0x1}, [@address_filter={0x28, 0x1a, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@empty, 0x2, 0x40, 0x4}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xf}, @algo_auth_trunc={0x52, 0x14, {{'sha224-generic\x00'}, 0x30, 0xa0, "56a2fd84ce7b"}}, @mark={0xc, 0x15, {0x35075d, 0x6}}, @sa={0xe0, 0x6, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x4e21, 0x64bf, 0x4e22, 0x6, 0x2, 0xa0, 0x0, 0x3b}, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d4, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0x1, 0x5, 0x7fffffffffffffff, 0xfff, 0x5, 0x9, 0x3, 0x1}, {0x8, 0x3, 0x4000000000000, 0x8000000000000001}, {0x10, 0x9, 0x4c437a2a}, 0x70bd2b, 0x3504, 0xb, 0x3, 0x8, 0x90}}, @replay_val={0x10, 0xa, {0x70bd26, 0x70bd28, 0x1}}]}, 0x234}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001e00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xf, 0x9}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x14}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x47}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x7fff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1d, 0x23, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @alu={0x4, 0x1, 0x0, 0x3, 0x9, 0x30, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map_fd, @map_idx={0x18, 0x7}, @ldst={0x2, 0x2, 0x2, 0x9, 0x0, 0x8000000000000014, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @call={0x85, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x1, 0x65, &(0x7f0000000380)=""/101, 0x40f00, 0x2, '\x00', r10, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, r11, r6, 0x3, &(0x7f0000000580)=[r6, r6, r6], &(0x7f00000005c0)=[{0x3, 0x2, 0x8, 0x5}, {0x1, 0x2, 0xa, 0x8}, {0x1, 0x3, 0xd, 0x8}], 0x10, 0x8}, 0x94) 1.025402194s ago: executing program 7 (id=2519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="010000000000fedbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="70005a806c000180040007"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 2 (id=2520): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x52, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) kernel console output (not intermixed with test programs): etdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.465986][T10163] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.341636][T10163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.349766][T10163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.532487][T10180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.542624][T10180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.135448][T12171] loop8: detected capacity change from 0 to 512 [ 948.211824][T12171] EXT4-fs: Ignoring removed bh option [ 948.260496][T12171] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 948.406416][T12171] EXT4-fs (loop8): 1 truncate cleaned up [ 948.415279][T12171] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 952.065950][T11870] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.315665][T12243] loop8: detected capacity change from 0 to 4096 [ 957.675452][T12253] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 959.347468][ T4478] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.560925][ T4478] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.799692][ T4478] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.052313][ T4478] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.701316][ T4478] bridge_slave_1: left allmulticast mode [ 960.707302][ T4478] bridge_slave_1: left promiscuous mode [ 960.714269][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.925411][ T4478] bridge_slave_0: left allmulticast mode [ 960.931286][ T4478] bridge_slave_0: left promiscuous mode [ 960.938274][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.485630][ T4478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.522502][ T4478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.551674][ T4478] bond0 (unregistering): Released all slaves [ 961.880057][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.887558][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 962.155636][ T4478] hsr_slave_0: left promiscuous mode [ 962.166839][ T4478] hsr_slave_1: left promiscuous mode [ 962.175570][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 962.183695][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.195147][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 962.202840][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.236332][ T4478] veth1_macvtap: left promiscuous mode [ 962.242072][ T4478] veth0_macvtap: left promiscuous mode [ 962.248868][ T4478] veth1_vlan: left promiscuous mode [ 962.256604][ T4478] veth0_vlan: left promiscuous mode [ 963.825864][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 963.835530][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 963.848875][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 963.865563][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 963.929504][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 964.272517][ T4478] team0 (unregistering): Port device team_slave_1 removed [ 964.327209][ T4478] team0 (unregistering): Port device team_slave_0 removed [ 964.624925][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 964.634459][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 964.643849][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 964.658106][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 964.670843][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 965.913712][ T5828] Bluetooth: hci6: unexpected event for opcode 0x0000 [ 966.121012][ T5828] Bluetooth: hci1: command tx timeout [ 966.640464][T12310] chnl_net:caif_netlink_parms(): no params data found [ 966.821389][ T5828] Bluetooth: hci3: command tx timeout [ 967.345503][T12301] chnl_net:caif_netlink_parms(): no params data found [ 968.206110][ T5828] Bluetooth: hci1: command tx timeout [ 968.450587][T12310] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.459841][T12310] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.467886][T12310] bridge_slave_0: entered allmulticast mode [ 968.477753][T12310] bridge_slave_0: entered promiscuous mode [ 968.650291][T12310] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.659425][T12310] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.668792][T12310] bridge_slave_1: entered allmulticast mode [ 968.678546][T12310] bridge_slave_1: entered promiscuous mode [ 968.896941][ T5828] Bluetooth: hci3: command tx timeout [ 969.376242][T12310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.401638][T12301] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.409872][T12301] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.417792][T12301] bridge_slave_0: entered allmulticast mode [ 969.430475][T12301] bridge_slave_0: entered promiscuous mode [ 969.477942][T12310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.588131][T12301] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.596701][T12301] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.604716][T12301] bridge_slave_1: entered allmulticast mode [ 969.615460][T12301] bridge_slave_1: entered promiscuous mode [ 969.840820][T12310] team0: Port device team_slave_0 added [ 969.965999][ T5828] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 969.976693][ T5828] Bluetooth: hci6: Injecting HCI hardware error event [ 969.984811][ T5828] Bluetooth: hci6: hardware error 0x00 [ 970.056322][T12310] team0: Port device team_slave_1 added [ 970.100417][T12301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.254597][ T5818] Bluetooth: hci1: command tx timeout [ 970.299413][T12301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.501076][T12310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.508965][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.537657][T12310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.724461][T12310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.731531][T12310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 970.759589][T12310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.985590][T12301] team0: Port device team_slave_0 added [ 970.995644][ T5818] Bluetooth: hci3: command tx timeout [ 971.080366][T12301] team0: Port device team_slave_1 added [ 971.554294][T12310] hsr_slave_0: entered promiscuous mode [ 971.563779][T12310] hsr_slave_1: entered promiscuous mode [ 971.575719][T12310] debugfs: 'hsr0' already exists in 'hsr' [ 971.581808][T12310] Cannot create hsr debugfs directory [ 971.608727][T12301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.616454][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.644587][T12301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.840785][T12301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.848013][T12301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.874786][T12301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.095011][ T5828] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 972.336702][ T5828] Bluetooth: hci1: command tx timeout [ 972.581450][T12301] hsr_slave_0: entered promiscuous mode [ 972.590309][T12301] hsr_slave_1: entered promiscuous mode [ 972.600350][T12301] debugfs: 'hsr0' already exists in 'hsr' [ 972.606311][T12301] Cannot create hsr debugfs directory [ 973.054481][ T5828] Bluetooth: hci3: command tx timeout [ 974.777269][T12310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 974.938356][T12310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 975.123583][T12310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 975.314249][T12310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 976.581621][T12301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 976.761997][T12301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 976.939771][T12301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 977.096820][T12301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 977.704840][T12310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.106772][T12310] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.211447][T10170] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.335955][T10173] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.343602][T10173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.458831][T10170] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.619398][T10170] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.756224][T10163] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.763994][T10163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.861376][T10170] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.700063][T10170] bridge_slave_1: left allmulticast mode [ 979.706765][T10170] bridge_slave_1: left promiscuous mode [ 979.713012][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.834300][T10170] bridge_slave_0: left allmulticast mode [ 979.840178][T10170] bridge_slave_0: left promiscuous mode [ 979.846736][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.832382][T10170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.962663][T10170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.978548][T10170] bond0 (unregistering): Released all slaves [ 981.852689][T12301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.943022][T10170] hsr_slave_0: left promiscuous mode [ 981.986637][T10170] hsr_slave_1: left promiscuous mode [ 981.995385][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.002894][T10170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.082575][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.090640][T10170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.284105][T10170] veth1_macvtap: left promiscuous mode [ 982.289841][T10170] veth0_macvtap: left promiscuous mode [ 982.296249][T10170] veth1_vlan: left promiscuous mode [ 982.301767][T10170] veth0_vlan: left promiscuous mode [ 983.611078][T10170] team0 (unregistering): Port device team_slave_1 removed [ 983.684175][T10170] team0 (unregistering): Port device team_slave_0 removed [ 984.252259][T12301] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.386406][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.393861][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.514837][T12310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 984.552841][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.560553][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.350920][T12310] veth0_vlan: entered promiscuous mode [ 985.471404][T12310] veth1_vlan: entered promiscuous mode [ 985.918333][T12310] veth0_macvtap: entered promiscuous mode [ 986.057177][T12310] veth1_macvtap: entered promiscuous mode [ 986.311441][T12310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.460113][T12310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.595076][T10147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.662634][T10147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.686583][T10147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.714454][T10147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 987.327882][T12301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.266713][T12301] veth0_vlan: entered promiscuous mode [ 990.375135][T12301] veth1_vlan: entered promiscuous mode [ 990.722502][T12301] veth0_macvtap: entered promiscuous mode [ 990.808529][T12301] veth1_macvtap: entered promiscuous mode [ 990.972642][T12301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.078225][T12301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.185755][T10173] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.202681][T10173] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.285500][T10173] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.363715][ T4478] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.508859][T12538] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1759'. [ 994.732437][T10173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.740818][T10173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.099455][ T1899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.107661][ T1899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.593928][ T5828] Bluetooth: hci4: unexpected event for opcode 0x002d [ 1001.089309][T10180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.097783][T10180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.438998][ T1859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.447170][ T1859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.726567][T12638] loop4: detected capacity change from 0 to 128 [ 1005.738566][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1780'. [ 1009.084671][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.084671][ T1859] loop4: rw=1, sector=145, nr_sectors = 24 limit=128 [ 1009.100972][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.100972][ T1859] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 1009.117000][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.117000][ T1859] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 1009.131245][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.131245][ T1859] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 1009.145145][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.145145][ T1859] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 1009.159958][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.159958][ T1859] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 1009.175159][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.175159][ T1859] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 1009.189294][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.189294][ T1859] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 1009.203686][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.203686][ T1859] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 1009.222054][ T1859] kworker/u8:8: attempt to access beyond end of device [ 1009.222054][ T1859] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 1015.775210][ T5818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1015.788435][ T5818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1015.802400][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1015.851689][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1015.889472][ T5818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1016.862023][T12719] loop4: detected capacity change from 0 to 512 [ 1017.046674][T12719] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1017.060708][T12719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1017.384550][T12719] EXT4-fs (loop4): 1 orphan inode deleted [ 1017.390423][T12719] EXT4-fs (loop4): 1 truncate cleaned up [ 1017.398140][T12719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1017.535754][ T30] audit: type=1326 audit(2000000458.559:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1017.675896][ T30] audit: type=1326 audit(2000000458.589:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1017.699488][ T30] audit: type=1326 audit(2000000458.589:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1017.723041][ T30] audit: type=1326 audit(2000000458.589:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1017.745872][ T30] audit: type=1326 audit(2000000458.619:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1017.769702][ T30] audit: type=1326 audit(2000000458.619:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1017.787092][T12727] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1017.793689][ T30] audit: type=1326 audit(2000000458.619:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12713 comm="syz.4.1798" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb7539 code=0x7ffc0000 [ 1017.868908][T12727] EXT4-fs (loop4): Remounting filesystem read-only [ 1017.940728][ T5818] Bluetooth: hci0: command tx timeout [ 1017.978349][T12711] chnl_net:caif_netlink_parms(): no params data found [ 1018.189385][T12301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.936934][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.945429][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.953807][T12711] bridge_slave_0: entered allmulticast mode [ 1019.965609][T12711] bridge_slave_0: entered promiscuous mode [ 1020.016854][ T5818] Bluetooth: hci0: command tx timeout [ 1020.088187][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.097035][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.104848][T12711] bridge_slave_1: entered allmulticast mode [ 1020.115406][T12711] bridge_slave_1: entered promiscuous mode [ 1020.569583][T12711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.716862][T12711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1021.017083][T12750] loop4: detected capacity change from 0 to 4096 [ 1021.076264][T12711] team0: Port device team_slave_0 added [ 1021.196805][T12711] team0: Port device team_slave_1 added [ 1021.252264][T12759] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1021.630831][T12711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.638665][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.667370][T12711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.869052][T12711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.876291][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1021.903342][T12711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.114939][ T5818] Bluetooth: hci0: command tx timeout [ 1022.751508][T12711] hsr_slave_0: entered promiscuous mode [ 1022.762138][T12711] hsr_slave_1: entered promiscuous mode [ 1023.317534][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.324441][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1023.439390][T10163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.609737][T10163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.837840][T10163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.087625][T10163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.176767][ T5818] Bluetooth: hci0: command tx timeout [ 1024.691657][T10163] bridge_slave_1: left allmulticast mode [ 1024.697897][T10163] bridge_slave_1: left promiscuous mode [ 1024.704965][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.836464][T10163] bridge_slave_0: left allmulticast mode [ 1024.842726][T10163] bridge_slave_0: left promiscuous mode [ 1024.849610][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.735676][T10163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1025.829060][T10163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1025.892958][T10163] bond0 (unregistering): Released all slaves [ 1026.683397][T10163] hsr_slave_0: left promiscuous mode [ 1026.709701][T10163] hsr_slave_1: left promiscuous mode [ 1026.721887][T10163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.730497][T10163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.769688][T10163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.777694][T10163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.908399][T10163] veth1_macvtap: left promiscuous mode [ 1026.915074][T10163] veth0_macvtap: left promiscuous mode [ 1026.921040][T10163] veth1_vlan: left promiscuous mode [ 1026.929413][T10163] veth0_vlan: left promiscuous mode [ 1028.263332][T10163] team0 (unregistering): Port device team_slave_1 removed [ 1028.380742][T10163] team0 (unregistering): Port device team_slave_0 removed [ 1029.486180][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1029.527760][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1029.545087][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1029.564737][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1029.583903][T12711] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1029.617843][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1029.627786][T12711] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1029.658479][T12711] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1029.704423][T12711] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1030.112102][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1823'. [ 1031.445203][T12809] chnl_net:caif_netlink_parms(): no params data found [ 1031.630110][T12711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1031.777114][ T5828] Bluetooth: hci1: command tx timeout [ 1032.063838][T12711] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.164046][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.171655][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.362138][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.369757][T10147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.863881][ T5828] Bluetooth: hci1: command tx timeout [ 1034.340058][T12809] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.350510][T12809] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.358465][T12809] bridge_slave_0: entered allmulticast mode [ 1034.368341][T12809] bridge_slave_0: entered promiscuous mode [ 1034.680311][T10170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.764046][T12809] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.771606][T12809] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.779702][T12809] bridge_slave_1: entered allmulticast mode [ 1034.789369][T12809] bridge_slave_1: entered promiscuous mode [ 1034.919429][T10170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.223772][T10170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.442783][T12809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.576841][T10170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.720677][T12809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.935836][ T5828] Bluetooth: hci1: command tx timeout [ 1036.171289][T12809] team0: Port device team_slave_0 added [ 1036.508195][T12711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.574237][T12809] team0: Port device team_slave_1 added [ 1036.805087][T10170] bridge_slave_1: left allmulticast mode [ 1036.810954][T10170] bridge_slave_1: left promiscuous mode [ 1036.818988][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.925037][T10170] bridge_slave_0: left allmulticast mode [ 1036.931022][T10170] bridge_slave_0: left promiscuous mode [ 1036.937879][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.954797][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1834'. [ 1037.786554][T10170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1037.843413][T10170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1037.881731][T10170] bond0 (unregistering): Released all slaves [ 1038.014866][ T5828] Bluetooth: hci1: command tx timeout [ 1038.119450][T12809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.126842][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.155431][T12809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.374820][T12809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.382198][T12809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.408608][T12809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.857051][T10170] hsr_slave_0: left promiscuous mode [ 1038.884864][T10170] hsr_slave_1: left promiscuous mode [ 1038.893005][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.901612][T10170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.970511][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.979080][T10170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.105533][T10170] veth1_macvtap: left promiscuous mode [ 1039.111907][T10170] veth0_macvtap: left promiscuous mode [ 1039.118266][T10170] veth1_vlan: left promiscuous mode [ 1039.123975][T10170] veth0_vlan: left promiscuous mode [ 1040.388010][T10170] team0 (unregistering): Port device team_slave_1 removed [ 1040.492831][T10170] team0 (unregistering): Port device team_slave_0 removed [ 1041.267003][T12809] hsr_slave_0: entered promiscuous mode [ 1041.277547][T12809] hsr_slave_1: entered promiscuous mode [ 1041.286682][T12809] debugfs: 'hsr0' already exists in 'hsr' [ 1041.292605][T12809] Cannot create hsr debugfs directory [ 1041.971149][T12711] veth0_vlan: entered promiscuous mode [ 1042.087353][T12711] veth1_vlan: entered promiscuous mode [ 1042.581805][T12711] veth0_macvtap: entered promiscuous mode [ 1042.660350][T12711] veth1_macvtap: entered promiscuous mode [ 1042.992555][T12711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.245753][T12711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.463845][T10163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.478257][T10180] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.549064][T10180] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.644921][T10163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.760544][T12809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1043.868868][T12809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1043.975048][T12809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1044.060970][T12809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1045.022200][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1844'. [ 1045.516138][T12809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.848310][T12809] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.926566][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.934276][T10180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1046.050279][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.057981][T10180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.445642][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1851'. [ 1048.492463][T12809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.132009][T12809] veth0_vlan: entered promiscuous mode [ 1049.252108][T12809] veth1_vlan: entered promiscuous mode [ 1049.629421][T12809] veth0_macvtap: entered promiscuous mode [ 1049.654654][T12809] veth1_macvtap: entered promiscuous mode [ 1049.868439][T12809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.980595][T12809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1050.123681][T10180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.184915][T10147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.270146][T10147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.327121][T10147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1050.965428][T12999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1854'. [ 1051.666747][T10147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.675534][T10147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.037804][T10158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.046731][T10158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.346296][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 1057.732201][T10170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.741048][T10170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.146450][T10180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.157129][T10180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.423488][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 1059.452398][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1876'. [ 1061.279552][T13108] syz.5.1876 (13108): drop_caches: 2 [ 1061.725509][T13131] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1064.660743][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1890'. [ 1066.787581][ T30] audit: type=1800 audit(2000000763.822:48): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1896" name="nullb0" dev="tmpfs" ino=848 res=0 errno=0 [ 1071.844463][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1901'. [ 1076.897322][T13246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1076.937139][T13246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1076.970862][T13246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1076.993429][T13246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1077.007551][T13246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1079.105089][T13245] chnl_net:caif_netlink_parms(): no params data found [ 1079.144873][ T5828] Bluetooth: hci3: command tx timeout [ 1081.206172][ T5828] Bluetooth: hci3: command tx timeout [ 1081.565854][T13245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.574001][T13245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.581929][T13245] bridge_slave_0: entered allmulticast mode [ 1081.600470][T13245] bridge_slave_0: entered promiscuous mode [ 1081.746807][T13245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.754312][T13245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.761926][T13245] bridge_slave_1: entered allmulticast mode [ 1081.770696][T13245] bridge_slave_1: entered promiscuous mode [ 1082.154533][T13245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.267901][T13245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.588224][T13245] team0: Port device team_slave_0 added [ 1082.666907][T13245] team0: Port device team_slave_1 added [ 1082.686899][T13276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1913'. [ 1083.062395][T13245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.069822][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.100606][T13245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.305798][ T5828] Bluetooth: hci3: command tx timeout [ 1083.339993][T13245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.347313][T13245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.373785][T13245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.594910][T13245] hsr_slave_0: entered promiscuous mode [ 1083.605873][T13245] hsr_slave_1: entered promiscuous mode [ 1083.614160][T13245] debugfs: 'hsr0' already exists in 'hsr' [ 1083.620151][T13245] Cannot create hsr debugfs directory [ 1084.776979][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.783678][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1085.367179][ T5828] Bluetooth: hci3: command tx timeout [ 1086.157513][T13245] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1086.260760][T13245] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1086.343227][T13245] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1086.454419][T13245] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1088.668253][T13245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.032630][T13246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1089.050279][T13245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.067562][T13246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1089.078497][T13246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1089.103006][T13246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1089.129845][T13246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1089.417821][T10170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.425345][T10170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.588863][ T1859] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.597192][ T1859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.521194][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1927'. [ 1091.209637][T13246] Bluetooth: hci5: command tx timeout [ 1091.612073][T13313] chnl_net:caif_netlink_parms(): no params data found [ 1093.088996][T10158] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.278214][T13246] Bluetooth: hci5: command tx timeout [ 1093.318328][T10158] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.531098][T10158] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.825611][T10158] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.548735][T13245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.905713][T10158] bridge_slave_1: left allmulticast mode [ 1094.911932][T10158] bridge_slave_1: left promiscuous mode [ 1094.918970][T10158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.112111][T10158] bridge_slave_0: left allmulticast mode [ 1095.118195][T10158] bridge_slave_0: left promiscuous mode [ 1095.124418][T10158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.358790][T13246] Bluetooth: hci5: command tx timeout [ 1096.528326][T10158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.629462][T10158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.752159][T10158] bond0 (unregistering): Released all slaves [ 1097.082909][T13313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.090636][T13313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1097.100336][T13313] bridge_slave_0: entered allmulticast mode [ 1097.108806][T13313] bridge_slave_0: entered promiscuous mode [ 1097.435770][T13246] Bluetooth: hci5: command tx timeout [ 1097.461692][T13313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.469460][T13313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1097.477350][T13313] bridge_slave_1: entered allmulticast mode [ 1097.487463][T13313] bridge_slave_1: entered promiscuous mode [ 1098.623715][T10158] hsr_slave_0: left promiscuous mode [ 1098.652176][T10158] hsr_slave_1: left promiscuous mode [ 1098.660661][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1098.668518][T10158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.826218][T10158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1098.833726][T10158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.966378][T10158] veth1_macvtap: left promiscuous mode [ 1098.972146][T10158] veth0_macvtap: left promiscuous mode [ 1098.978447][T10158] veth1_vlan: left promiscuous mode [ 1098.983911][T10158] veth0_vlan: left promiscuous mode [ 1100.409928][T10158] team0 (unregistering): Port device team_slave_1 removed [ 1100.549883][T10158] team0 (unregistering): Port device team_slave_0 removed [ 1101.486584][T13313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.716566][T13313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.206726][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1937'. [ 1102.320868][T13313] team0: Port device team_slave_0 added [ 1102.409416][T13313] team0: Port device team_slave_1 added [ 1103.186071][T13313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1103.195141][T13313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.222043][T13313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1103.507200][T13313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1103.514685][T13313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1103.541116][T13313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.438145][T13313] hsr_slave_0: entered promiscuous mode [ 1104.447183][T13313] hsr_slave_1: entered promiscuous mode [ 1104.486972][T13245] veth0_vlan: entered promiscuous mode [ 1104.740074][T13245] veth1_vlan: entered promiscuous mode [ 1104.966995][T10147] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.194287][T10147] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.584407][T10147] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.833594][T10147] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.134430][T13245] veth0_macvtap: entered promiscuous mode [ 1106.324451][T13245] veth1_macvtap: entered promiscuous mode [ 1106.728190][T10147] bridge_slave_1: left allmulticast mode [ 1106.736535][T10147] bridge_slave_1: left promiscuous mode [ 1106.743648][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.804738][T10147] bridge_slave_0: left allmulticast mode [ 1106.810831][T10147] bridge_slave_0: left promiscuous mode [ 1106.817498][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1107.940209][T10147] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1108.061718][T10147] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1108.092628][T10147] bond0 (unregistering): Released all slaves [ 1108.316544][T13245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.442920][T13245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.896984][T10158] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.108392][ T4478] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.366518][T10147] hsr_slave_0: left promiscuous mode [ 1109.391244][T10147] hsr_slave_1: left promiscuous mode [ 1109.400558][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.408133][T10147] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.485126][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1948'. [ 1109.502747][T10147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.510468][T10147] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1109.581215][T10147] veth1_macvtap: left promiscuous mode [ 1109.590743][T10147] veth0_macvtap: left promiscuous mode [ 1109.596657][T10147] veth1_vlan: left promiscuous mode [ 1109.602319][T10147] veth0_vlan: left promiscuous mode [ 1111.070640][T10147] team0 (unregistering): Port device team_slave_1 removed [ 1111.163654][T10147] team0 (unregistering): Port device team_slave_0 removed [ 1111.470909][ T4478] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.783462][ T1859] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.455394][T13313] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1112.619375][T13313] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1112.718940][T13313] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1112.809963][T13313] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1113.244855][ T30] audit: type=1800 audit(2000000810.295:49): pid=13474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1950" name="nullb0" dev="tmpfs" ino=848 res=0 errno=0 [ 1114.047383][T13313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.192243][T13313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.325740][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.333464][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.435759][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.443372][T10147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1117.764915][T13313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1118.109508][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1961'. [ 1119.402649][ T1859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.412332][ T1859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.719324][T10170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.727711][T10170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1121.695129][T13566] loop7: detected capacity change from 0 to 4096 [ 1122.252605][T13575] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1122.397160][T13313] veth0_vlan: entered promiscuous mode [ 1122.646602][T13313] veth1_vlan: entered promiscuous mode [ 1123.008619][T13313] veth0_macvtap: entered promiscuous mode [ 1123.100777][T13313] veth1_macvtap: entered promiscuous mode [ 1123.107508][T13564] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1123.339200][T13313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.474962][T13313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.607521][ T1899] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.653148][ T1899] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.697683][ T1899] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.772296][ T1899] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.215472][T13583] loop7: detected capacity change from 0 to 4096 [ 1124.293982][T13583] ntfs3(loop7): Different NTFS sector size (1024) and media sector size (512). [ 1128.320467][ T5874] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1128.522030][ T5874] usb 8-1: Using ep0 maxpacket: 8 [ 1128.586224][ T5874] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1128.596690][ T5874] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.606197][ T5874] usb 8-1: Product: syz [ 1128.610728][ T5874] usb 8-1: Manufacturer: syz [ 1128.615528][ T5874] usb 8-1: SerialNumber: syz [ 1128.709927][ T5874] usb 8-1: config 0 descriptor?? [ 1128.814078][ T30] audit: type=1800 audit(2000000825.863:50): pid=13647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1986" name="nullb0" dev="tmpfs" ino=848 res=0 errno=0 [ 1128.941149][ T5874] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1130.762588][ T5874] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1130.793680][ T5874] usb 8-1: USB disconnect, device number 3 [ 1131.863216][ T1859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1131.871445][ T1859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.146300][T10173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.155906][T10173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.972654][T13703] loop7: detected capacity change from 0 to 16 [ 1134.058159][T13703] erofs (device loop7): mounted with root inode @ nid 36. [ 1139.505973][T13773] [U] ³•¯1WT`8ºÁÍÇÚH$Ô0©·ÑÃÝ9\ [ 1139.511702][T13773] [U] ;2}U‚˜GVÏÄ¥ËÚ#ÈO9ÏÔÕ¥>-ƒÊß´ÜS…Ý¢šÕP [ 1139.521679][T13773] [U] 4°×XZ^Yˆ±„™)ÛÀ´´ÈMÕC°¼.Œ OÅÈžÛPšO¼­W [ 1139.530548][T13773] [U] ‚ä%Z [ 1139.534876][T13773] [U] ¾8`Ñ}—[TÃÚJ#ZÏ~»Ž3µݥI~ÇD‚%8@7J÷ÝÍ|{9Dœ¤C¤ÏÜE+ÇOÆK?%§6 [ 1139.601575][T13773] netlink: 'syz.8.2013': attribute type 10 has an invalid length. [ 1139.610508][T13773] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2013'. [ 1139.620774][T13773] dummy0: entered promiscuous mode [ 1139.633428][T13773] bridge0: port 3(dummy0) entered blocking state [ 1139.640610][T13773] bridge0: port 3(dummy0) entered disabled state [ 1139.647977][T13773] dummy0: entered allmulticast mode [ 1139.660200][T13773] bridge0: port 3(dummy0) entered blocking state [ 1139.667261][T13773] bridge0: port 3(dummy0) entered forwarding state [ 1140.229147][T13767] [U] ®ÛP>BÐÌ–ÖZ% [ 1140.895188][T13784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2017'. [ 1140.906909][T13784] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2017'. [ 1146.064867][T13842] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2034'. [ 1146.167937][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.176885][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1156.293938][ T5828] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1156.303681][ T5828] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1156.316598][ T5828] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1156.342929][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1156.353987][ T5828] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1158.452747][T13246] Bluetooth: hci0: command tx timeout [ 1158.543373][T13932] chnl_net:caif_netlink_parms(): no params data found [ 1159.044659][ T5874] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1159.265703][ T5874] usb 8-1: Using ep0 maxpacket: 8 [ 1159.317455][ T5874] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1159.328916][ T5874] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1159.339554][ T5874] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1159.349716][ T5874] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1159.361594][ T5874] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1159.376689][ T5874] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1159.389031][ T5874] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.921713][ T5874] usb 8-1: GET_CAPABILITIES returned 2f [ 1159.933348][ T5874] usbtmc 8-1:16.0: can't read capabilities [ 1160.163334][T13959] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1160.241615][ T24] usb 8-1: USB disconnect, device number 4 [ 1160.523760][T13246] Bluetooth: hci0: command tx timeout [ 1160.749095][T13932] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.760082][T13932] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.768198][T13932] bridge_slave_0: entered allmulticast mode [ 1160.778001][T13932] bridge_slave_0: entered promiscuous mode [ 1160.886463][T13932] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.894204][T13932] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.901938][T13932] bridge_slave_1: entered allmulticast mode [ 1160.911687][T13932] bridge_slave_1: entered promiscuous mode [ 1161.389370][T13932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.504300][T13932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.991896][T13932] team0: Port device team_slave_0 added [ 1162.082032][T13932] team0: Port device team_slave_1 added [ 1162.441427][T13932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.451717][T13932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.478622][T13932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.578180][T13932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.587129][T13932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1162.615658][T13932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.650293][T13246] Bluetooth: hci0: command tx timeout [ 1163.277391][T13932] hsr_slave_0: entered promiscuous mode [ 1163.288088][T13932] hsr_slave_1: entered promiscuous mode [ 1163.297359][T13932] debugfs: 'hsr0' already exists in 'hsr' [ 1163.303471][T13932] Cannot create hsr debugfs directory [ 1164.682005][T13246] Bluetooth: hci0: command tx timeout [ 1166.732586][T13932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1166.882529][T13932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1166.971934][T13932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1167.091604][T13932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1169.464347][T13932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.781706][T13932] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.986500][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.994195][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1170.254254][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1170.261858][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1172.953716][ T1859] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.184852][ T1859] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.414469][ T1859] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.656347][ T1859] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.934269][T13932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1174.552403][ T1859] dummy0: left allmulticast mode [ 1174.558691][ T1859] bridge0: port 3(dummy0) entered disabled state [ 1174.641965][ T1859] bridge_slave_1: left allmulticast mode [ 1174.648370][ T1859] bridge_slave_1: left promiscuous mode [ 1174.655037][ T1859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.719775][ T1859] bridge_slave_0: left allmulticast mode [ 1174.725637][ T1859] bridge_slave_0: left promiscuous mode [ 1174.735803][ T1859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.319361][T14069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2087'. [ 1175.454046][ T1859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1175.550900][ T1859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1175.605443][ T1859] bond0 (unregistering): Released all slaves [ 1176.560065][T13932] veth0_vlan: entered promiscuous mode [ 1176.644557][ T1859] hsr_slave_0: left promiscuous mode [ 1176.693165][ T1859] hsr_slave_1: left promiscuous mode [ 1176.701596][ T1859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.709489][ T1859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.759853][ T1859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.768184][ T1859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1176.896928][ T1859] veth1_macvtap: left promiscuous mode [ 1176.902691][ T1859] veth0_macvtap: left promiscuous mode [ 1176.908973][ T1859] veth1_vlan: left promiscuous mode [ 1176.914562][ T1859] veth0_vlan: left promiscuous mode [ 1178.219670][ T1859] team0 (unregistering): Port device team_slave_1 removed [ 1178.350509][ T1859] team0 (unregistering): Port device team_slave_0 removed [ 1178.756611][T13932] veth1_vlan: entered promiscuous mode [ 1179.320042][T13932] veth0_macvtap: entered promiscuous mode [ 1179.424046][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2092'. [ 1179.508744][T13932] veth1_macvtap: entered promiscuous mode [ 1179.756267][T13932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.842701][T13932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.960827][ T1859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.012943][ T1859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.070289][ T1859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.113010][ T1859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.669501][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1182.704970][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1182.725031][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1182.807550][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1182.836088][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1184.859596][T14124] chnl_net:caif_netlink_parms(): no params data found [ 1184.915375][ T5828] Bluetooth: hci1: command tx timeout [ 1186.992831][ T5828] Bluetooth: hci1: command tx timeout [ 1187.247012][T14124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.255702][T14124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.266666][T14124] bridge_slave_0: entered allmulticast mode [ 1187.277957][T14124] bridge_slave_0: entered promiscuous mode [ 1187.514387][T14124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.522092][T14124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.532698][T14124] bridge_slave_1: entered allmulticast mode [ 1187.542043][T14124] bridge_slave_1: entered promiscuous mode [ 1188.127404][T14124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.218274][T14124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.668308][T14124] team0: Port device team_slave_0 added [ 1188.780467][T14124] team0: Port device team_slave_1 added [ 1188.864303][T10158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.872916][T10158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.069955][ T5828] Bluetooth: hci1: command tx timeout [ 1189.351432][T14124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.358754][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.389537][T14124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.409044][T10158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1189.419312][T10158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.574208][T14124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.582125][T14124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.608412][T14124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1190.357882][T14124] hsr_slave_0: entered promiscuous mode [ 1190.372489][T14124] hsr_slave_1: entered promiscuous mode [ 1191.104250][T14186] Bluetooth: MGMT ver 1.23 [ 1191.148765][ T5828] Bluetooth: hci1: command tx timeout [ 1193.132035][T14124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1193.161155][T14124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1193.194587][T14124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1193.243515][T14124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1194.740521][T14209] fuse: Bad value for 'fd' [ 1195.706939][T14124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.312013][T14124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.641370][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.648813][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.920168][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.927616][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.386668][T13246] Bluetooth: hci3: command 0x0406 tx timeout [ 1199.743165][T14124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1200.454672][T14124] veth0_vlan: entered promiscuous mode [ 1200.631252][T14124] veth1_vlan: entered promiscuous mode [ 1201.036914][T14124] veth0_macvtap: entered promiscuous mode [ 1201.152102][T14124] veth1_macvtap: entered promiscuous mode [ 1201.524432][T14124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.601548][T14124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.825493][ T1899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1201.938137][T10163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.044112][T10163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.135964][T10163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.678031][ T1859] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.007445][ T1859] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.471263][ T1859] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.805549][ T1859] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.586993][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.595117][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.710801][ T1859] bridge_slave_1: left allmulticast mode [ 1207.717124][ T1859] bridge_slave_1: left promiscuous mode [ 1207.724434][ T1859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.806187][T13246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1207.855907][T13246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1207.866334][ T1859] bridge_slave_0: left allmulticast mode [ 1207.872433][ T1859] bridge_slave_0: left promiscuous mode [ 1207.879772][ T1859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.901052][T13246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1207.998518][T13246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1208.109235][T13246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1208.899889][ T1859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.062572][ T1859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.187430][ T1859] bond0 (unregistering): Released all slaves [ 1210.189657][ T5828] Bluetooth: hci3: command tx timeout [ 1210.429112][ T1859] hsr_slave_0: left promiscuous mode [ 1210.469882][ T1859] hsr_slave_1: left promiscuous mode [ 1210.477132][ T1859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1210.485769][ T1859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1210.650640][ T1859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1210.659508][ T1859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1210.861275][ T1859] veth1_macvtap: left promiscuous mode [ 1210.867030][ T1859] veth0_macvtap: left promiscuous mode [ 1210.873783][ T1859] veth1_vlan: left promiscuous mode [ 1210.879488][ T1859] veth0_vlan: left promiscuous mode [ 1212.335925][ T5828] Bluetooth: hci3: command tx timeout [ 1212.369475][ T1859] team0 (unregistering): Port device team_slave_1 removed [ 1212.841177][ T1859] team0 (unregistering): Port device team_slave_0 removed [ 1214.417012][ T5828] Bluetooth: hci3: command tx timeout [ 1214.759057][T14336] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2129'. [ 1215.328741][T14293] chnl_net:caif_netlink_parms(): no params data found [ 1216.498264][ T5828] Bluetooth: hci3: command tx timeout [ 1217.146132][T10170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.156082][T10170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.293825][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2135'. [ 1217.471844][ T1859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.480064][ T1859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.656633][T14293] bridge0: port 1(bridge_slave_0) entered blocking state [ 1217.666771][T14293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.674351][T14293] bridge_slave_0: entered allmulticast mode [ 1217.682950][T14293] bridge_slave_0: entered promiscuous mode [ 1217.829176][T14293] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.837017][T14293] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.844755][T14293] bridge_slave_1: entered allmulticast mode [ 1217.855754][T14293] bridge_slave_1: entered promiscuous mode [ 1218.383730][T14293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1218.502492][T14293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1219.041630][T14293] team0: Port device team_slave_0 added [ 1219.158281][T14293] team0: Port device team_slave_1 added [ 1219.693182][T14293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1219.701108][T14293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1219.729801][T14293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.057453][T14293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.064892][T14293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.092894][T14293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.997405][T14293] hsr_slave_0: entered promiscuous mode [ 1221.007669][T14293] hsr_slave_1: entered promiscuous mode [ 1221.016898][T14293] debugfs: 'hsr0' already exists in 'hsr' [ 1221.022822][T14293] Cannot create hsr debugfs directory [ 1222.210558][T14399] syz_tun: entered allmulticast mode [ 1222.266278][T14400] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2144'. [ 1222.333790][T14397] syz_tun: left allmulticast mode [ 1224.597138][T14293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1224.771351][ T1899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.912467][T14293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1225.044714][ T1899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.171630][T14293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1225.314229][ T1899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.397071][T14293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1225.522126][ T1899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.402327][ T1899] bridge_slave_1: left allmulticast mode [ 1227.408403][ T1899] bridge_slave_1: left promiscuous mode [ 1227.415276][ T1899] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.681029][ T1899] bridge_slave_0: left allmulticast mode [ 1227.687079][ T1899] bridge_slave_0: left promiscuous mode [ 1227.696399][ T1899] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.321536][T14445] loop0: detected capacity change from 0 to 512 [ 1229.086974][T14445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1229.100243][T14445] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1229.265560][T14445] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2156: bg 0: block 145: padding at end of block bitmap is not set [ 1229.323720][T14445] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.2156: iget: bad i_size value: 2533274857506816 [ 1229.346711][ T1899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1229.388513][ T1899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1229.460028][ T1899] bond0 (unregistering): Released all slaves [ 1229.634658][T14462] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2158'. [ 1230.355808][T14124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.380554][ T1899] hsr_slave_0: left promiscuous mode [ 1230.404248][ T1899] hsr_slave_1: left promiscuous mode [ 1230.415363][ T1899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1230.423191][ T1899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1230.544582][ T1899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1230.552777][ T1899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1230.627218][ T1899] veth1_macvtap: left promiscuous mode [ 1230.633811][ T1899] veth0_macvtap: left promiscuous mode [ 1230.639911][ T1899] veth1_vlan: left promiscuous mode [ 1230.645458][ T1899] veth0_vlan: left promiscuous mode [ 1232.323167][ T1899] team0 (unregistering): Port device team_slave_1 removed [ 1232.499794][ T1899] team0 (unregistering): Port device team_slave_0 removed [ 1232.981247][T14498] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1232.992006][T14498] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1233.002030][T14498] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1233.636002][T14293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1233.710578][T14509] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1233.942536][T14293] 8021q: adding VLAN 0 to HW filter on device team0 [ 1234.044916][ T7283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.052542][ T7283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1234.149568][ T7283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.157162][ T7283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.144279][T14293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1237.962140][T14533] overlayfs: failed to clone upperpath [ 1238.610807][T14293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1242.541447][T14293] veth0_vlan: entered promiscuous mode [ 1242.710683][T14293] veth1_vlan: entered promiscuous mode [ 1243.348891][T14293] veth0_macvtap: entered promiscuous mode [ 1243.506021][T14293] veth1_macvtap: entered promiscuous mode [ 1243.781513][T14293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1243.869877][T14293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1244.043742][T10180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.109679][T10180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.240745][T10180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1244.406686][T10180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.562251][ T5828] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1246.571201][ T5828] Bluetooth: hci1: Injecting HCI hardware error event [ 1246.579508][ T5828] Bluetooth: hci1: hardware error 0x00 [ 1247.050574][T13246] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 1248.294876][T14648] loop0: detected capacity change from 0 to 128 [ 1248.640217][ T5828] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1250.582639][T10147] bio_check_eod: 28 callbacks suppressed [ 1250.582722][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.582722][T10147] loop0: rw=1, sector=145, nr_sectors = 16 limit=128 [ 1250.606038][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.606038][T10147] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 1250.622415][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.622415][T10147] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 1250.636976][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.636976][T10147] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 1250.668965][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.668965][T10147] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 1250.684352][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.684352][T10147] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 1250.698436][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.698436][T10147] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 1250.712353][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.712353][T10147] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 1250.728027][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.728027][T10147] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 1250.744619][T10147] kworker/u8:6: attempt to access beyond end of device [ 1250.744619][T10147] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 1253.985066][T14684] tipc: Started in network mode [ 1253.991469][T14684] tipc: Node identity a2b14b4b6085, cluster identity 4711 [ 1254.002612][T14684] tipc: Enabled bearer , priority 0 [ 1254.073854][T14684] syzkaller0: entered promiscuous mode [ 1254.079738][T14684] syzkaller0: entered allmulticast mode [ 1254.238022][T14684] tipc: Resetting bearer [ 1254.310853][T14683] tipc: Resetting bearer [ 1254.403337][T14683] tipc: Disabling bearer [ 1254.526502][T14693] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 1255.543127][T14709] process 'syz.3.2213' launched './file2' with NULL argv: empty string added [ 1256.233550][T10158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.242603][T10158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.686438][T10163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.694464][T10163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.616560][ T5828] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 1261.224007][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 1263.351634][T14776] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2231'. [ 1263.454033][T14774] loop0: detected capacity change from 0 to 512 [ 1263.768428][T14774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1263.784501][T14774] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1264.262742][T14768] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.2229: iget: bad i_size value: 2533274857506816 [ 1264.631826][ T5828] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1264.642190][ T5828] Bluetooth: hci4: Injecting HCI hardware error event [ 1264.651508][ T5828] Bluetooth: hci4: hardware error 0x00 [ 1265.690184][T14781] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 145: padding at end of block bitmap is not set [ 1265.897953][T14124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.715960][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1267.321286][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 1268.694551][T14825] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2244'. [ 1268.981673][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.988503][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1269.161356][T14833] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 1271.950267][T14855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2254'. [ 1272.238950][ T5874] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1272.345280][T13246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1272.356864][T13246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1272.370751][T13246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1272.395427][T13246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1272.418325][T13246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1272.448066][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 1272.529282][ T5874] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1272.539005][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.547533][ T5874] usb 5-1: Product: syz [ 1272.551879][ T5874] usb 5-1: Manufacturer: syz [ 1272.556646][ T5874] usb 5-1: SerialNumber: syz [ 1272.630888][ T5874] usb 5-1: config 0 descriptor?? [ 1272.954381][ T5874] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1273.186443][T14866] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2258'. [ 1273.745875][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2268'. [ 1274.787057][T13246] Bluetooth: hci0: command tx timeout [ 1276.277121][T14862] chnl_net:caif_netlink_parms(): no params data found [ 1277.135388][T13246] Bluetooth: hci0: command tx timeout [ 1278.008360][T14894] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 1278.016909][ T5874] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1278.209687][ T7864] usb 5-1: USB disconnect, device number 4 [ 1278.999499][T14906] loop0: detected capacity change from 0 to 512 [ 1279.184661][ T5828] Bluetooth: hci0: command tx timeout [ 1279.347563][T14906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1279.360724][T14906] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1279.577419][T14897] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz.0.2262: iget: bad i_size value: 2533274857506816 [ 1280.289302][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2271'. [ 1280.586870][T14124] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1280.691769][T14862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.700176][T14862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.710959][T14862] bridge_slave_0: entered allmulticast mode [ 1280.721504][T14862] bridge_slave_0: entered promiscuous mode [ 1280.768432][T14862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.776554][T14862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.785177][T14862] bridge_slave_1: entered allmulticast mode [ 1280.795002][T14862] bridge_slave_1: entered promiscuous mode [ 1280.842255][T14927] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2270'. [ 1281.058162][T14862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.524227][T13246] Bluetooth: hci0: command tx timeout [ 1281.547805][T14862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.060415][T14862] team0: Port device team_slave_0 added [ 1285.028902][T14862] team0: Port device team_slave_1 added [ 1285.603604][T14862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.611376][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.639753][T14862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.916624][T14862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1285.923933][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1285.952651][T14862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.926905][T14862] hsr_slave_0: entered promiscuous mode [ 1286.937713][T14862] hsr_slave_1: entered promiscuous mode [ 1286.947003][T14862] debugfs: 'hsr0' already exists in 'hsr' [ 1286.955119][T14862] Cannot create hsr debugfs directory [ 1287.237367][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2283'. [ 1288.243720][T14971] tipc: Enabling of bearer rejected, failed to enable media [ 1290.123463][T14862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1290.252911][T14862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1290.379465][T14862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1290.475624][T14862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1291.973440][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'. [ 1292.464863][T14862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1292.756662][T14862] 8021q: adding VLAN 0 to HW filter on device team0 [ 1292.914133][ T1899] bridge0: port 1(bridge_slave_0) entered blocking state [ 1292.921744][ T1899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.163294][ T1899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.170954][ T1899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.503500][T14862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.827704][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2310'. [ 1299.681574][T15070] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 1300.563280][T14862] veth0_vlan: entered promiscuous mode [ 1300.777399][T14862] veth1_vlan: entered promiscuous mode [ 1301.339425][T14862] veth0_macvtap: entered promiscuous mode [ 1301.429923][T14862] veth1_macvtap: entered promiscuous mode [ 1301.694511][T14862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1301.853466][T14862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1301.927423][T10173] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.018471][T10173] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.064600][ T4478] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.136111][T10173] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.328671][T15094] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2323'. [ 1305.715729][T15118] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 1305.895188][T13246] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1305.928997][T13246] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1305.962867][T13246] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1306.010848][T13246] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1306.025422][T13246] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1308.130152][T13246] Bluetooth: hci5: command tx timeout [ 1308.662196][T15152] overlayfs: failed to resolve './file1': -2 [ 1308.795942][T15121] chnl_net:caif_netlink_parms(): no params data found [ 1309.476942][T15163] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2335'. [ 1310.210053][T13246] Bluetooth: hci5: command tx timeout [ 1311.548003][T15121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.555446][T15121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.563283][T15121] bridge_slave_0: entered allmulticast mode [ 1311.575310][T15121] bridge_slave_0: entered promiscuous mode [ 1311.761147][T15121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.768956][T15121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.779232][T15121] bridge_slave_1: entered allmulticast mode [ 1311.788097][T15121] bridge_slave_1: entered promiscuous mode [ 1312.294154][T13246] Bluetooth: hci5: command tx timeout [ 1312.445428][T15121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.511012][T15121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.931542][T15121] team0: Port device team_slave_0 added [ 1313.019720][T14882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.028838][T14882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.076534][T15121] team0: Port device team_slave_1 added [ 1313.506594][T10158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.514905][T10158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.542433][T15121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.550718][T15121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.580303][T15121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.856151][T15121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.864033][T15121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.895565][T15121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.371967][T13246] Bluetooth: hci5: command tx timeout [ 1314.859428][T15121] hsr_slave_0: entered promiscuous mode [ 1314.868686][T15121] hsr_slave_1: entered promiscuous mode [ 1314.876890][T15121] debugfs: 'hsr0' already exists in 'hsr' [ 1314.882963][T15121] Cannot create hsr debugfs directory [ 1317.320485][ T5828] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1317.331599][ T5828] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1317.346591][ T5828] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1317.368754][ T5828] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1317.396341][ T5828] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1319.070358][T15121] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1319.196317][T15121] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1319.314730][T15121] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1319.491851][T15121] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1319.614498][ T5828] Bluetooth: hci7: command tx timeout [ 1321.835265][ T5828] Bluetooth: hci7: command tx timeout [ 1323.120211][T15205] chnl_net:caif_netlink_parms(): no params data found [ 1323.191391][T15121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.635046][T15121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.882229][ T5828] Bluetooth: hci7: command tx timeout [ 1324.166689][T14882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.174388][T14882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.352256][T14882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.359785][T14882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.917719][T10170] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.217668][T10170] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.562711][T10170] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.855590][T10170] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.996419][T13246] Bluetooth: hci7: command tx timeout [ 1326.005945][T13246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1326.061665][T13246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1326.071714][T13246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1326.100304][T13246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1326.117764][T13246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1327.045679][T10170] bridge_slave_1: left allmulticast mode [ 1327.051693][T10170] bridge_slave_1: left promiscuous mode [ 1327.058360][T10170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1327.248634][T10170] bridge_slave_0: left allmulticast mode [ 1327.254694][T10170] bridge_slave_0: left promiscuous mode [ 1327.261612][T10170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.399328][T12548] IPVS: starting estimator thread 0... [ 1327.669997][T15274] IPVS: using max 336 ests per chain, 16800 per kthread [ 1328.205293][T13246] Bluetooth: hci3: command tx timeout [ 1328.824952][T10170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.850437][T10170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.987020][T10170] bond0 (unregistering): Released all slaves [ 1329.485877][T15205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.493680][T15205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.501683][T15205] bridge_slave_0: entered allmulticast mode [ 1329.511533][T15205] bridge_slave_0: entered promiscuous mode [ 1329.905872][T15205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.913552][T15205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1329.921654][T15205] bridge_slave_1: entered allmulticast mode [ 1329.931687][T15205] bridge_slave_1: entered promiscuous mode [ 1330.279507][T13246] Bluetooth: hci3: command tx timeout [ 1330.441471][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.448118][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1330.725388][T10170] hsr_slave_0: left promiscuous mode [ 1330.760732][T10170] hsr_slave_1: left promiscuous mode [ 1330.770046][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.777655][T10170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.881135][T10170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.889067][T10170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.049190][T10170] veth1_macvtap: left promiscuous mode [ 1331.054935][T10170] veth0_macvtap: left promiscuous mode [ 1331.061157][T10170] veth1_vlan: left promiscuous mode [ 1331.069060][T10170] veth0_vlan: left promiscuous mode [ 1332.086660][T10170] team0 (unregistering): Port device team_slave_1 removed [ 1332.281602][T10170] team0 (unregistering): Port device team_slave_0 removed [ 1332.358007][T13246] Bluetooth: hci3: command tx timeout [ 1332.960721][T15205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1333.014836][T15205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1333.387913][T15205] team0: Port device team_slave_0 added [ 1333.470993][T15205] team0: Port device team_slave_1 added [ 1333.848329][T15205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.855480][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.882269][T15205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.954887][T15121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1334.234375][T15205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.244716][T15205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1334.271833][T15205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.446539][T13246] Bluetooth: hci3: command tx timeout [ 1334.607815][T15260] chnl_net:caif_netlink_parms(): no params data found [ 1335.342749][T15205] hsr_slave_0: entered promiscuous mode [ 1335.353351][T15205] hsr_slave_1: entered promiscuous mode [ 1335.362624][T15205] debugfs: 'hsr0' already exists in 'hsr' [ 1335.370775][T15205] Cannot create hsr debugfs directory [ 1335.457328][T15121] veth0_vlan: entered promiscuous mode [ 1335.981237][T15121] veth1_vlan: entered promiscuous mode [ 1336.248740][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2367'. [ 1336.684665][T15121] veth0_macvtap: entered promiscuous mode [ 1337.047631][T15121] veth1_macvtap: entered promiscuous mode [ 1337.490246][T15121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.854871][T15121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1337.893486][T15260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.901235][T15260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.909375][T15260] bridge_slave_0: entered allmulticast mode [ 1337.919163][T15260] bridge_slave_0: entered promiscuous mode [ 1338.085027][T15260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.092566][T15260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.100547][T15260] bridge_slave_1: entered allmulticast mode [ 1338.110238][T15260] bridge_slave_1: entered promiscuous mode [ 1338.140585][ T3533] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.301117][ T3533] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.492957][T10173] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.733499][ T4478] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.761875][T15260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.027084][T15260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.688868][T15260] team0: Port device team_slave_0 added [ 1340.703580][T15205] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1341.461325][T15260] team0: Port device team_slave_1 added [ 1341.507674][T15205] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1341.880676][T15260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1341.888455][T15260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1341.916526][T15260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1341.993193][T15205] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1342.145195][T15205] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1342.248264][T15260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1342.255692][T15260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1342.283533][T15260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1342.986181][T15260] hsr_slave_0: entered promiscuous mode [ 1342.997635][T15260] hsr_slave_1: entered promiscuous mode [ 1343.005597][T15260] debugfs: 'hsr0' already exists in 'hsr' [ 1343.011585][T15260] Cannot create hsr debugfs directory [ 1344.628584][T15205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.902249][T15205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1346.498167][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1346.505934][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.753448][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.761209][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1347.265949][T15260] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1347.353529][T15260] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1347.515668][T15260] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1347.695368][T15260] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1349.576239][T15260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1349.875834][T15260] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.032624][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.040168][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.235365][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.243129][T10147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.430747][T15205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.158072][T10180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.166072][T10180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.675881][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.685346][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.962193][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1352.974879][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1352.988987][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1353.018785][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1353.034375][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1354.062061][T15260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1355.238709][ T5828] Bluetooth: hci1: command tx timeout [ 1355.609555][T15205] veth0_vlan: entered promiscuous mode [ 1355.770111][T15205] veth1_vlan: entered promiscuous mode [ 1356.310781][T15409] chnl_net:caif_netlink_parms(): no params data found [ 1356.397903][T15205] veth0_macvtap: entered promiscuous mode [ 1356.542532][T15205] veth1_macvtap: entered promiscuous mode [ 1357.048884][T15205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1357.177807][T15205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1357.334444][ T5828] Bluetooth: hci1: command tx timeout [ 1357.337751][ T7283] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.436753][ T7283] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.519257][ T7283] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.646635][T10180] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1359.220406][T15260] veth0_vlan: entered promiscuous mode [ 1359.235791][T15409] bridge0: port 1(bridge_slave_0) entered blocking state [ 1359.243406][T15409] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.251715][T15409] bridge_slave_0: entered allmulticast mode [ 1359.262820][T15409] bridge_slave_0: entered promiscuous mode [ 1359.385725][ T5828] Bluetooth: hci1: command tx timeout [ 1359.403002][T15260] veth1_vlan: entered promiscuous mode [ 1359.421414][T15409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1359.429126][T15409] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.436895][T15409] bridge_slave_1: entered allmulticast mode [ 1359.445687][T15409] bridge_slave_1: entered promiscuous mode [ 1360.071019][T15409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1360.216123][T15409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.831818][T15409] team0: Port device team_slave_0 added [ 1360.869939][T15260] veth0_macvtap: entered promiscuous mode [ 1360.960611][T15409] team0: Port device team_slave_1 added [ 1361.100901][T15260] veth1_macvtap: entered promiscuous mode [ 1361.485577][ T5828] Bluetooth: hci1: command tx timeout [ 1362.178053][T15409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.187446][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.214491][T15409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.325414][T15260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.466558][T15260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.479974][T15409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.489254][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.517468][T15409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1362.667185][ T4478] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.797373][T10158] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.922844][T10158] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.007224][T10158] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.580967][T15409] hsr_slave_0: entered promiscuous mode [ 1363.590165][T15409] hsr_slave_1: entered promiscuous mode [ 1363.598151][T15409] debugfs: 'hsr0' already exists in 'hsr' [ 1363.604191][T15409] Cannot create hsr debugfs directory [ 1367.385779][T15409] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1367.549080][T15409] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1367.677965][T15409] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1367.851776][T15409] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1368.300835][T15503] 9pnet_fd: Insufficient options for proto=fd [ 1370.227007][T15409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1370.257564][T14882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.267592][T14882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.596654][T15409] 8021q: adding VLAN 0 to HW filter on device team0 [ 1370.725775][ T1899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.738254][ T1899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.779261][T14882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.786896][T14882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.097227][T14882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.105093][T14882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.774259][T13246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1371.810352][T13246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1371.823787][T13246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1371.887866][T13246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1371.910950][T13246] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1372.213617][T15528] sch_tbf: burst 19869 is lower than device lo mtu (65550) ! [ 1374.097409][T13246] Bluetooth: hci4: command tx timeout [ 1375.660072][T15523] chnl_net:caif_netlink_parms(): no params data found [ 1376.177164][T13246] Bluetooth: hci4: command tx timeout [ 1376.491663][T15409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1376.538410][T15560] netlink: 'syz.2.2392': attribute type 7 has an invalid length. [ 1377.297165][T15548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.305320][T15548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.602183][T15409] veth0_vlan: entered promiscuous mode [ 1377.769745][ T1899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.778767][ T1899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.850983][T15409] veth1_vlan: entered promiscuous mode [ 1378.255824][T13246] Bluetooth: hci4: command tx timeout [ 1378.397384][T15409] veth0_macvtap: entered promiscuous mode [ 1378.550552][T15409] veth1_macvtap: entered promiscuous mode [ 1379.346876][T15523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.354609][T15523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.362422][T15523] bridge_slave_0: entered allmulticast mode [ 1379.372612][T15523] bridge_slave_0: entered promiscuous mode [ 1379.606128][T15409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1379.709930][T15523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.717753][T15523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.725674][T15523] bridge_slave_1: entered allmulticast mode [ 1379.734653][T15523] bridge_slave_1: entered promiscuous mode [ 1379.877508][T15409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1380.334204][T13246] Bluetooth: hci4: command tx timeout [ 1380.801684][T15523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1380.855451][T10147] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.043375][T10147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.052420][T10147] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.099988][T15523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.175469][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 1381.277627][T10173] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1381.443153][T10170] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1382.039603][T10173] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.395494][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'. [ 1382.534623][T15523] team0: Port device team_slave_0 added [ 1382.608688][ T1704] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1382.725259][T10173] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1382.847821][T15523] team0: Port device team_slave_1 added [ 1382.872497][ T1704] usb 8-1: Using ep0 maxpacket: 16 [ 1382.932411][ T1704] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1382.944943][ T1704] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1382.956373][ T1704] usb 8-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1382.967384][ T1704] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.088929][T10173] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1383.315425][ T1704] usb 8-1: config 0 descriptor?? [ 1383.894274][T15523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.901697][T15523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.928375][T15523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1384.525273][T15523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1384.532723][T15523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1384.565435][T15523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1384.615785][T15601] team0: Port device vxlan0 added [ 1384.763986][T10173] bridge_slave_1: left allmulticast mode [ 1384.769861][T10173] bridge_slave_1: left promiscuous mode [ 1384.777717][T10173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.992685][T10173] bridge_slave_0: left allmulticast mode [ 1384.998787][T10173] bridge_slave_0: left promiscuous mode [ 1385.008297][T10173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.101844][ T1704] usbhid 8-1:0.0: can't add hid device: -71 [ 1385.111782][ T1704] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1385.448675][ T1704] usb 8-1: USB disconnect, device number 5 [ 1386.372503][T10173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.442113][T10173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.483631][T10173] bond0 (unregistering): Released all slaves [ 1386.487208][T15621] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1386.580680][T10163] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1386.892836][T14882] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.348952][T14882] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.374782][T15523] hsr_slave_0: entered promiscuous mode [ 1387.385671][T15523] hsr_slave_1: entered promiscuous mode [ 1387.395173][T15523] debugfs: 'hsr0' already exists in 'hsr' [ 1387.401224][T15523] Cannot create hsr debugfs directory [ 1387.408234][T14882] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1387.691042][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2411'. [ 1388.375242][T15637] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2413'. [ 1388.502831][T10173] hsr_slave_0: left promiscuous mode [ 1388.546556][T10173] hsr_slave_1: left promiscuous mode [ 1388.555474][T10173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1388.563463][T10173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1388.663598][T10173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1388.671508][T10173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.792474][T10173] veth1_macvtap: left promiscuous mode [ 1388.798342][T10173] veth0_macvtap: left promiscuous mode [ 1388.804482][T10173] veth1_vlan: left promiscuous mode [ 1388.811242][T10173] veth0_vlan: left promiscuous mode [ 1389.558934][ T1704] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1389.762998][ T1704] usb 3-1: Using ep0 maxpacket: 16 [ 1389.879238][ T1704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.891061][ T1704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.901713][ T1704] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1389.911408][ T1704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.932809][T10173] team0 (unregistering): Port device team_slave_1 removed [ 1390.004066][ T1704] usb 3-1: config 0 descriptor?? [ 1390.105688][T10173] team0 (unregistering): Port device team_slave_0 removed [ 1390.350783][T15650] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2419'. [ 1391.025538][T15652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1391.045793][T15645] team0: Port device vxlan0 added [ 1391.055636][T15550] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.194935][T15550] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.218362][ T1704] usbhid 3-1:0.0: can't add hid device: -71 [ 1391.225028][ T1704] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1391.287571][T15550] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.329613][ T1704] usb 3-1: USB disconnect, device number 4 [ 1391.355798][T15550] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.806047][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.816172][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1392.274327][ T3533] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.589305][ T3533] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.903516][ T3533] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.222334][ T3533] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.695833][T15678] openvswitch: netlink: IP tunnel dst address not specified [ 1393.989198][T15523] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1394.185086][ T3533] bridge_slave_1: left allmulticast mode [ 1394.191319][ T3533] bridge_slave_1: left promiscuous mode [ 1394.198317][ T3533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.290508][ T3533] bridge_slave_0: left allmulticast mode [ 1394.297101][ T3533] bridge_slave_0: left promiscuous mode [ 1394.303845][ T3533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.076815][T15688] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2429'. [ 1395.376906][ T3533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.468406][ T3533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.538128][ T3533] bond0 (unregistering): Released all slaves [ 1395.649229][T12440] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1395.681360][T15523] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1395.800979][T15523] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1395.866278][T12440] usb 8-1: Using ep0 maxpacket: 16 [ 1395.921233][T12440] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.934018][T12440] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.944824][T12440] usb 8-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1395.955075][T12440] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1396.023078][T15523] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1396.099697][T12440] usb 8-1: config 0 descriptor?? [ 1396.869238][T12440] usbhid 8-1:0.0: can't add hid device: -71 [ 1396.877317][T12440] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1396.950130][T12440] usb 8-1: USB disconnect, device number 6 [ 1396.985819][ T3533] hsr_slave_0: left promiscuous mode [ 1397.020088][ T3533] hsr_slave_1: left promiscuous mode [ 1397.029381][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.040654][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.158790][ T3533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.169904][ T3533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.330256][ T3533] veth1_macvtap: left promiscuous mode [ 1397.336287][ T3533] veth0_macvtap: left promiscuous mode [ 1397.345750][ T3533] veth1_vlan: left promiscuous mode [ 1397.351308][ T3533] veth0_vlan: left promiscuous mode [ 1398.356244][T15723] openvswitch: netlink: IP tunnel dst address not specified [ 1398.981953][ T3533] team0 (unregistering): Port device team_slave_1 removed [ 1399.023451][ T3533] team0 (unregistering): Port device team_slave_0 removed [ 1399.944027][T15729] tipc: Started in network mode [ 1399.950649][T15729] tipc: Node identity 2605fb9405f1, cluster identity 4711 [ 1399.960302][T15729] tipc: Enabled bearer , priority 0 [ 1400.189936][T15727] tipc: Resetting bearer [ 1400.316759][T15726] tipc: Disabling bearer [ 1400.499485][T10170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.508103][T10170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.816125][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.826705][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.934005][T10163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.148807][T10163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.387542][T10163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.618296][T10163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.753066][T12548] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1401.870999][T15523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1402.058531][T12548] usb 9-1: Using ep0 maxpacket: 16 [ 1402.102180][T12548] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.113619][T12548] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.123734][T12548] usb 9-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1402.133107][T12548] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.283500][T15523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1402.360762][T12548] usb 9-1: config 0 descriptor?? [ 1402.468457][T15548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1402.476164][T15548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1402.704620][T10163] bridge_slave_1: left allmulticast mode [ 1402.712329][T10163] bridge_slave_1: left promiscuous mode [ 1402.719519][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1402.884805][T10163] bridge_slave_0: left allmulticast mode [ 1402.890951][T10163] bridge_slave_0: left promiscuous mode [ 1402.898645][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1403.080995][T15776] openvswitch: netlink: IP tunnel dst address not specified [ 1404.134153][T10163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1404.230957][T10163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1404.320327][T10163] bond0 (unregistering): Released all slaves [ 1404.524139][T15548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1404.531790][T15548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1404.719968][T15754] team0: Port device vxlan0 added [ 1404.773365][ T1899] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1404.889287][ T1899] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1404.944347][T10163] tipc: Left network mode [ 1405.003053][ T1899] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.300667][ T1899] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1405.573955][T12548] usbhid 9-1:0.0: can't add hid device: -71 [ 1405.581979][T12548] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1405.713608][T12548] usb 9-1: USB disconnect, device number 16 [ 1406.051749][T10163] hsr_slave_0: left promiscuous mode [ 1406.164461][T10163] hsr_slave_1: left promiscuous mode [ 1406.172851][T10163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1406.180780][T10163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1406.319416][T10163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1406.332107][T10163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1406.570009][T10163] veth1_macvtap: left promiscuous mode [ 1406.576843][T10163] veth0_macvtap: left promiscuous mode [ 1406.583101][T10163] veth1_vlan: left promiscuous mode [ 1406.588669][T10163] veth0_vlan: left promiscuous mode [ 1407.476738][T15804] netlink: 'syz.1.2459': attribute type 10 has an invalid length. [ 1407.485399][T15804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2459'. [ 1407.690907][T15810] openvswitch: netlink: IP tunnel dst address not specified [ 1408.478297][T10163] team0 (unregistering): Port device team_slave_1 removed [ 1408.538317][T10163] team0 (unregistering): Port device team_slave_0 removed [ 1409.401288][T15804] team0: Port device netdevsim1 added [ 1409.414009][T12548] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1409.608827][T12548] usb 3-1: Using ep0 maxpacket: 16 [ 1409.639382][T12548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.651007][T12548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1409.661291][T12548] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 1409.671554][T12548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.874857][T12548] usb 3-1: config 0 descriptor?? [ 1410.549003][T12548] usbhid 3-1:0.0: can't add hid device: -71 [ 1410.555592][T12548] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1410.712301][T12548] usb 3-1: USB disconnect, device number 5 [ 1410.954340][T15523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1412.237623][T15851] binder: 15850:15851 unknown command 0 [ 1412.243406][T15851] binder: 15850:15851 ioctl c0306201 80000080 returned -22 [ 1412.332134][T15856] openvswitch: netlink: IP tunnel dst address not specified [ 1412.346729][T15851] binder: 15850:15851 ioctl c0306201 80000300 returned -11 [ 1414.503541][T15523] veth0_vlan: entered promiscuous mode [ 1414.641495][T15523] veth1_vlan: entered promiscuous mode [ 1414.920515][T12548] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1415.123265][T15523] veth0_macvtap: entered promiscuous mode [ 1415.180490][T12548] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1415.242132][T12548] usb 2-1: not running at top speed; connect to a high speed hub [ 1415.258566][T15523] veth1_macvtap: entered promiscuous mode [ 1415.316988][T12548] usb 2-1: config 3 has an invalid interface number: 178 but max is 0 [ 1415.325534][T12548] usb 2-1: config 3 has no interface number 0 [ 1415.334283][T12548] usb 2-1: config 3 interface 178 has no altsetting 0 [ 1415.463078][T12548] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=42.64 [ 1415.473451][T12548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.481946][T12548] usb 2-1: Product: syz [ 1415.486382][T12548] usb 2-1: Manufacturer: syz [ 1415.491156][T12548] usb 2-1: SerialNumber: syz [ 1415.551719][T15523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1415.706469][T15523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1415.883305][ T3533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.036236][ T3533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.135161][ T3533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.146191][ T3533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1416.149729][T15880] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2481'. [ 1418.303388][T12548] snd-usb-audio 2-1:3.178: probe with driver snd-usb-audio failed with error -71 [ 1418.352877][T12548] usb 2-1: USB disconnect, device number 7 [ 1418.375300][T15773] udevd[15773]: setting mode of /dev/bus/usb/002/007 to 020664 failed: No such file or directory [ 1418.483938][T15773] udevd[15773]: setting owner of /dev/bus/usb/002/007 to uid=0, gid=0 failed: No such file or directory [ 1422.167701][ T9] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1422.434335][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1422.479047][ T9] usb 9-1: not running at top speed; connect to a high speed hub [ 1422.525119][ T9] usb 9-1: config 3 has an invalid interface number: 178 but max is 0 [ 1422.533843][ T9] usb 9-1: config 3 has no interface number 0 [ 1422.540244][ T9] usb 9-1: config 3 interface 178 has no altsetting 0 [ 1422.569758][ T9] usb 9-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=42.64 [ 1422.579725][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.588381][ T9] usb 9-1: Product: syz [ 1422.593012][ T9] usb 9-1: Manufacturer: syz [ 1422.597782][ T9] usb 9-1: SerialNumber: syz [ 1423.083627][T15961] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2500'. [ 1423.663641][T12495] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1423.834881][T12495] usb 8-1: device descriptor read/64, error -71 [ 1424.121749][T12495] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1424.368447][T12495] usb 8-1: device descriptor read/64, error -71 [ 1424.485601][T12495] usb usb8-port1: attempt power cycle [ 1424.891567][T12495] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1424.924886][ T9] snd-usb-audio 9-1:3.178: probe with driver snd-usb-audio failed with error -71 [ 1424.939011][ T9] usb 9-1: USB disconnect, device number 17 [ 1424.981755][T12495] usb 8-1: device descriptor read/8, error -71 [ 1425.072194][T15773] udevd[15773]: setting owner of /dev/bus/usb/009/017 to uid=0, gid=0 failed: No such file or directory [ 1425.289211][T12495] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1425.451445][T12495] usb 8-1: device descriptor read/8, error -71 [ 1425.582424][T12495] usb usb8-port1: unable to enumerate USB device [ 1426.932288][T10173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.940437][T10173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.288180][T10170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.296886][T10170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.121412][T16026] netlink: 'syz.1.2517': attribute type 10 has an invalid length. [ 1429.130924][T16026] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2517'. [ 1429.316226][ T9] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 1429.571039][T16020] ===================================================== [ 1429.582838][T16020] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xf0e/0x33f0 [ 1429.591811][T16020] _copy_to_iter+0xf0e/0x33f0 [ 1429.596924][T16020] __skb_datagram_iter+0x196/0x12c0 [ 1429.602682][T16020] skb_copy_datagram_iter+0x5b/0x1e0 [ 1429.604591][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1429.608327][T16020] netlink_recvmsg+0x4bb/0xfe0 [ 1429.621495][T16020] sock_recvmsg+0x2df/0x390 [ 1429.627449][T16020] __sys_recvfrom+0x282/0x550 [ 1429.632934][T16020] __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 1429.639496][T16020] ia32_sys_call+0x2942/0x4310 [ 1429.644655][T16020] __do_fast_syscall_32+0xb0/0x150 [ 1429.650232][T16020] do_fast_syscall_32+0x38/0x80 [ 1429.655444][T16020] do_SYSENTER_32+0x1f/0x30 [ 1429.660435][T16020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1429.667185][T16020] [ 1429.670091][T16020] Uninit was created at: [ 1429.674778][T16020] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 1429.685241][T16020] kmalloc_reserve+0x22f/0x4b0 [ 1429.691354][T16020] __alloc_skb+0x347/0x7d0 [ 1429.696176][T16020] netlink_dump+0x24f/0x17d0 [ 1429.701198][T16020] __netlink_dump_start+0x716/0xd60 [ 1429.706766][T16020] rtnetlink_rcv_msg+0x1262/0x14b0 [ 1429.712300][T16020] netlink_rcv_skb+0x54a/0x680 [ 1429.717422][T16020] rtnetlink_rcv+0x35/0x40 [ 1429.722303][T16020] netlink_unicast+0xf04/0x12b0 [ 1429.727504][T16020] netlink_sendmsg+0x10b3/0x1250 [ 1429.734691][T16020] __sock_sendmsg+0x333/0x3d0 [ 1429.740008][T16020] ____sys_sendmsg+0x7e0/0xd80 [ 1429.745093][T16020] ___sys_sendmsg+0x271/0x3b0 [ 1429.750267][T16020] __sys_sendmsg+0x1aa/0x300 [ 1429.755166][T16020] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1429.761295][T16020] ia32_sys_call+0x3f6c/0x4310 [ 1429.766519][T16020] __do_fast_syscall_32+0xb0/0x150 [ 1429.772065][T16020] do_fast_syscall_32+0x38/0x80 [ 1429.777244][T16020] do_SYSENTER_32+0x1f/0x30 [ 1429.782203][T16020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1429.791079][T16020] [ 1429.794081][T16020] Bytes 32-35 of 44 are uninitialized [ 1429.799914][T16020] Memory access of size 44 starts at ffff888062e75000 [ 1429.800885][ T5828] Bluetooth: hci5: command 0x0406 tx timeout [ 1429.807063][T16020] Data copied to user address 00000000f545d560 [ 1429.819912][T16020] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1429.822513][T16020] CPU: 1 UID: 0 PID: 16020 Comm: syz.6.2385 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(none) [ 1429.836533][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1429.847613][T16020] ===================================================== [ 1429.855128][T16020] Disabling lock debugging due to kernel taint [ 1429.861833][T16020] Kernel panic - not syncing: kmsan.panic set ... [ 1429.868408][T16020] CPU: 1 UID: 0 PID: 16020 Comm: syz.6.2385 Tainted: G B 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(none) [ 1429.882232][T16020] Tainted: [B]=BAD_PAGE [ 1429.886444][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1429.896623][T16020] Call Trace: [ 1429.900032][T16020] [ 1429.903055][T16020] __dump_stack+0x26/0x30 [ 1429.907500][T16020] dump_stack_lvl+0x53/0x270 [ 1429.912204][T16020] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1429.918190][T16020] dump_stack+0x1e/0x25 [ 1429.922533][T16020] vpanic+0x361/0xc50 [ 1429.926701][T16020] panic+0x15d/0x160 [ 1429.930728][T16020] kmsan_report+0x31c/0x320 [ 1429.935346][T16020] ? kmsan_internal_check_memory+0x16c/0x230 [ 1429.941422][T16020] ? kmsan_copy_to_user+0xf1/0x190 [ 1429.946766][T16020] ? _copy_to_iter+0xf0e/0x33f0 [ 1429.951833][T16020] ? __skb_datagram_iter+0x196/0x12c0 [ 1429.957398][T16020] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 1429.963068][T16020] ? netlink_recvmsg+0x4bb/0xfe0 [ 1429.968198][T16020] ? sock_recvmsg+0x2df/0x390 [ 1429.973079][T16020] ? __sys_recvfrom+0x282/0x550 [ 1429.978172][T16020] ? __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 1429.984590][T16020] ? ia32_sys_call+0x2942/0x4310 [ 1429.989667][T16020] ? __do_fast_syscall_32+0xb0/0x150 [ 1429.995142][T16020] ? do_fast_syscall_32+0x38/0x80 [ 1430.000355][T16020] ? do_SYSENTER_32+0x1f/0x30 [ 1430.005209][T16020] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1430.011884][T16020] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1430.017864][T16020] ? __do_fast_syscall_32+0x111/0x150 [ 1430.023415][T16020] ? filter_irq_stacks+0x49/0x190 [ 1430.028651][T16020] ? kmsan_get_metadata+0xfb/0x160 [ 1430.034008][T16020] ? __slab_free+0x6fb/0x9e0 [ 1430.038753][T16020] ? __msan_warning+0x1b/0x30 [ 1430.043576][T16020] ? filter_irq_stacks+0x13f/0x190 [ 1430.048908][T16020] ? kmsan_get_metadata+0xfb/0x160 [ 1430.054172][T16020] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1430.060155][T16020] kmsan_internal_check_memory+0x16c/0x230 [ 1430.066144][T16020] kmsan_copy_to_user+0xf1/0x190 [ 1430.071233][T16020] _copy_to_iter+0xf0e/0x33f0 [ 1430.076096][T16020] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1430.082587][T16020] ? kmsan_get_metadata+0xfb/0x160 [ 1430.087858][T16020] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1430.093840][T16020] ? kmsan_get_metadata+0xfb/0x160 [ 1430.099133][T16020] ? kmsan_save_stack_with_flags+0x51/0x60 [ 1430.105168][T16020] ? kmsan_get_metadata+0xfb/0x160 [ 1430.110452][T16020] __skb_datagram_iter+0x196/0x12c0 [ 1430.115821][T16020] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1430.121676][T16020] skb_copy_datagram_iter+0x5b/0x1e0 [ 1430.127117][T16020] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1430.133097][T16020] netlink_recvmsg+0x4bb/0xfe0 [ 1430.138020][T16020] ? aa_sock_msg_perm+0x29c/0x2f0 [ 1430.143229][T16020] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1430.148671][T16020] sock_recvmsg+0x2df/0x390 [ 1430.153382][T16020] __sys_recvfrom+0x282/0x550 [ 1430.158309][T16020] ? filter_irq_stacks+0x49/0x190 [ 1430.163594][T16020] ? stack_depot_save_flags+0x35/0x7b0 [ 1430.169302][T16020] __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 1430.175593][T16020] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1430.182487][T16020] ia32_sys_call+0x2942/0x4310 [ 1430.188111][T16020] __do_fast_syscall_32+0xb0/0x150 [ 1430.193419][T16020] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 1430.199331][T16020] do_fast_syscall_32+0x38/0x80 [ 1430.204361][T16020] do_SYSENTER_32+0x1f/0x30 [ 1430.209037][T16020] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1430.215586][T16020] RIP: 0023:0xf706e539 [ 1430.219759][T16020] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1430.239526][T16020] RSP: 002b:00000000f545d440 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 1430.248096][T16020] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f545d45c [ 1430.256227][T16020] RDX: 0000000000000000 RSI: 00000000f545d560 RDI: 00000000f73d4ff4 [ 1430.264312][T16020] RBP: 00000000f545d560 R08: 0000000000000000 R09: 0000000000000000 [ 1430.272388][T16020] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1430.280466][T16020] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1430.288581][T16020] [ 1430.292092][T16020] Kernel Offset: disabled [ 1430.296468][T16020] Rebooting in 86400 seconds..